Exam Prep Questions

Question 1	You are the domain administrator for your Windows Server 2003 mixed mode domain. Currently, 12 Windows Server 2003 systems are in use in your enterprise; 3 of the 12 are installed as domain controllers. Clients in your domain consist of 102 Windows 98 systems, 22 Windows Me systems, 322 Windows NT 4 Workstations, 1,052 Windows 2000 Professional systems, 120 Windows 2000 Server systems, and 885 Windows XP Professional systems. You have been asked to analyze the systems in your environment with Microsoft Baseline Security Analyzer (MBSA). You realize that MBSA won't be able to scan some systems, but you are required to scan as many systems as possible for your report at the next security staff meeting. You are performing all scans remotely from a single console. What is the total number of systems that can be scanned successfully across the network? A. 2,069 B. 2,091 C. 2,391 D. 2,493
A1:	The correct answer is C. MBSA version 1.1.1 can scan a local system running Windows Server 2003, Windows 2000, or Windows XP. The systems also need Internet Explorer 5.01 or later installed or MSXML version 3.0 SP2 or later installed. MBSA also performs remote scans of systems running Windows NT 4.0 SP4 and later, Windows 2000, Windows XP, or Windows Server 2003. To perform remote scans of Windows XP systems, simple file sharing needs to be disabled. For a client system to perform remote scans on other clients, it must be running Windows Server 2003, Windows 2000, or Windows XP. IE 5.01 or later or MSXML version 3.0 SP2 or later must be installed, and IIS Common Files are required if IIS systems are being scanned remotely. Also, the Workstation service and Client for Microsoft Networks need to be installed and running. MBSA scans systems running Windows NT 4.0, Windows 2000, Windows XP, Windows Server 2003, IIS 4.0 and 5.0, SQL Server 7.0 and 2000, IE 5.01 and later, and Office 2000 and 2002. MBSA also scans for missing security updates for Windows NT 4.0, Windows 2000, Windows XP, Windows Server 2003, IIS 4.0 and 5.0, SQL Server 7.0 and 2000, IE 5.01 and later, Exchange 5.5 and 2000, and Windows Media Player 6.4 and later. MBSA cannot be installed locally on Windows NT 4.0 systems, but remote scans of these systems can still be performed.
Question 2	You are the domain administrator for gunderville.com . Currently, 12 Windows Server 2003 systems installed as domain controllers are in use in your enterprise. Clients in your domain consist of 67 Windows 98 systems, 89 Windows NT 4 Workstations, 898 Windows 2000 Professional systems, 1,005 Windows XP Professional systems, 120 Windows 2000 Server systems, and 45 Window Server 2003 systems. For security reasons, File and Print Sharing is not enabled on any system. All systems connect to the Internet via an Internet Security and Acceleration (ISA) server at the company's headquarters. You have been asked to perform a security analysis of systems in your environment. Your primary objective is to run application vulnerability checks on Microsoft Office 2000 and XP for all systems in your enterprise. Your secondary objectives are to scan all systems remotely with the least amount of administrative effort and without altering the current network configuration or client setup. You install MBSA version 1.1.1, which supports local and remote scanning for Windows Server 2003, on a Windows Server 2003 server in your domain. From this system, you will attempt to remotely run checks for known application vulnerabilities in Microsoft Office 2000 and XP. What is the result of your actions? A. The primary objective and both secondary objectives have been met. B. The primary objective and one secondary objective have been met. C. The primary objective has not been met. However, both secondary objectives have been met. D. Only one secondary objective has been met. E. None of the objectives has been met.
A2:	The correct answer is E. Your primary objective cannot be met because MBSA cannot scan Windows 98 systems locally or remotely, and you can run only remote scans on Windows NT 4 systems. Your secondary objectives cannot be met because not all systems can be scanned remotely or locally, as the Windows 98 systems cannot be scanned. Also, there is an issue with the current network configuration/client setup. To scan any of the systems, the Server service, Remote Registry service, and File and Print Sharing services must be enabled and running on all systems; in this scenario, File and Print Sharing is turned off. MBSA version 1.1.1 can scan a local system running Windows Server 2003, Windows 2000, or Windows XP. The systems also need IE 5.01 or later or MSXML version 3.0 SP2 or later. For local scans to be successful, the Workstation service and Server service need to be installed and running locally. MBSA also performs remote scans of systems running Windows NT 4.0 SP4 and later, Windows 2000, Windows XP, or Windows Server 2003. To perform remote scans of Windows XP systems, simple file sharing needs to be disabled. For remote scans to be successful on these systems, the Server service, Remote Registry service, and File and Print Sharing services must be enabled and running. For a client system to perform remote scans on other clients, it must be running Windows Server 2003, Windows 2000, or Windows XP. IE 5.01 or later or MSXML version 3.0 SP2 or later must be installed, and IIS Common Files are required if IIS systems are being scanned remotely. Also, the Workstation service and Client for Microsoft Networks need to be installed and running. MBSA scans systems running Windows NT 4.0, Windows 2000, Windows XP, Windows Server 2003, IIS 4.0 and 5.0, SQL Server 7.0 and 2000, IE 5.01 and later, and Office 2000 and 2002. MBSA also scans for missing security updates for Windows NT 4.0, Windows 2000, Windows XP, Windows Server 2003, IIS 4.0 and 5.0, SQL Server 7.0 and 2000, IE 5.01 and later, Exchange 5.5 and 2000, and Windows Media Player 6.4 and later. MBSA cannot be installed locally on Windows NT 4.0 systems, but remote scans of these systems can still be performed.
Question 3	You are the domain administrator for gunderville.com . Currently, 64 Windows Server 2003 systems installed as domain controllers are in use in your enterprise. Clients in your domain consist of 67 Windows NT 4 Workstations, 989 Windows 2000 Professional systems, 5,001 Windows XP Professional systems, 145 Windows 2000 Server systems, and 415 Window Server 2003 systems. You are currently reviewing migration plans of the Windows NT 4 Workstations and Windows 2000 Professional systems, which are to be upgraded to Windows XP Professional. For security reasons, all systems connect to the Internet via an ISA server at the company's headquarters. To decide whether to perform an upgrade or clean installation on these systems, you have been asked to perform a security check on the systems' current state to determine their status before upgrading the operating system. Your primary objective is to perform a security analysis of these systems by checking whether accounts are using blank or simple passwords. Your secondary objectives are to carry out your task with the least amount of administrative effort and to report whether FTP and Telnet are present on the systems. You decide to install MBSA version 1.1.1 on one of the Windows 2000 systems and scan the necessary systems over the network. What is the result of your actions? A. The primary objective and both secondary objectives have been met. B. The primary objective and one secondary objective have been met. C. The primary objective has not been met. However, both secondary objectives have been met. D. Only one secondary objective has been met. E. None of the objectives has been met.
A3:	The correct answer is A. The primary objective can be met by using MBSA, which enables you to check all local user accounts for existing blank or simple passwords, such as having a password that's the same as the user account name or the local system's NetBIOS name . MBSA also checks for passwords of "password," "admin," or "administrator" and identifies any accounts that have been disabled or are currently locked out. The secondary objectives have been met because you install MBSA on a single machine and run it against other systems as needed. Windows NT 4 systems can be scanned remotely, but not locally, so you must install MBSA on another system anyway. MBSA also reports whether FTP and Telnet are present. When the Check for Unnecessary Services part of the scan runs, it determines whether any services listed in the services.txt file are installed and running on the systems. The services.txt file is a configurable list of services that by default include MSFTPSVC (FTP), TlntSvr (Telnet), W3SVC (WWW), and SMTPSVC (SMTP). You can add other services to the list simply by editing the file before the scan.
Question 4	You are the domain administrator for your Windows Server 2003 mixed mode domain. Currently, 12 Windows Server 2003 systems are in use in your enterprise; 3 of the 12 are installed as domain controllers. Clients in your domain consist of 75 Windows NT 4 Workstations running Service Pack 6a, 1,052 Windows 2000 Professional systems running SP2, 120 Windows 2000 Server systems running SP2, and 885 Windows XP Professional systems running SP1. You have been asked to configure a software update solution for your environment. Your primary objective is to devise a single software update solution for all systems in the enterprise for security updates. Your secondary objectives are to carry out your task with the least amount of administrative effort and to devise a solution that supports scheduling the installation of downloaded content. You decide to deploy automated updates using the Automatic Update client. Part of the reason for using automated updates is to get all systems on a single software update solution for security updates, so you decide to deploy the Automatic Update client as a single installation and an independent installation only when absolutely necessary. You install SP3 on the Windows 2000 Professional systems running SP2 and the Windows 2000 Server systems. You leave the Windows XP Professional clients, Windows NT 4 clients, and Server 2003 clients at their current revision levels. What is the result of your actions? A. The primary objective and both secondary objectives have been met. B. The primary objective and one secondary objective have been met. C. The primary objective has not been met. However, both secondary objectives have been met. D. Only one secondary objective has been met. E. None of the objectives has been met.
A4:	The correct answer is D. Your primary objective cannot be met when Windows NT 4 clients are in the mix. The Automatic Update client runs on Windows 2000 Professional, Windows 2000 Server, Windows 2000 Advanced Server (SP2 or higher), Windows XP Professional, Windows XP Home Edition, and all versions of Windows Server 2003. It cannot be installed on any other (legacy) versions of the Windows operating system. The Automatic Update client enables administrators to provide support to systems in the domain and across the forest for downloading approved content from an SUS server that gets its updates from the Windows Update site. It also allows scheduling the installation of downloaded content after administrator approval by configuring settings through the Group Policy window or by editing the local Registry. The Automatic Update client software is included by default in Windows 2000 SP3, Windows XP SP1, and all versions of Windows Server 2003. It is also available for individual installation as a downloadable MSI setup package. Your secondary objective of devising a solution that supports scheduling the installation of downloaded content has been met; however, the secondary objective of carrying out your task with the least amount of administrative effort has not been met because you cannot meet the primary objective.
Question 5	You are the domain administrator for your Windows Server 2003 mixed mode domain. Clients in your domain consist of 1,662 Windows 2000 Professional systems running SP3, 120 Windows 2000 Server systems running SP3, and 885 Windows XP Professional systems running SP1. You have been asked to configure a software update solution for your environment. Your primary objective is to devise a single software update solution for all systems in the enterprise for security updates. The solution must allow administrative approval of all updates before they are deployed to any systems. Your secondary objectives are to carry out your task with the least amount of administrative effort and to devise a solution that supports scheduling the installation of downloaded content You decide to deploy automated updates via the Windows Update site, using the Automatic Update client. Update scheduling will be configured via GPOs linked at the domain level and at the Domain Controllers OU. What is the result of your actions? A. The primary objective and both secondary objectives have been met. B. The primary objective and one secondary objective have been met. C. The primary objective has not been met. However, both secondary objectives have been met. D. Only one secondary objective has been met. E. None of the objectives has been met.
A5:	The correct answer is D. The Automatic Update client runs on Windows 2000 Professional, Windows 2000 Server, Windows 2000 Advanced Server (SP2 or higher), Windows XP Professional, Windows XP Home Edition, and all versions of Windows Server 2003. It cannot be installed on any other (legacy) versions of the Windows operating system. The Automatic Update client is included by default in Windows 2000 SP3, Windows XP SP1, and all versions of Windows Server 2003. It is also available for individual installation as a downloadable MSI setup package. The Automatic Update client enables administrators to provide support to systems in the domain and across the forest for downloading approved content from an SUS server that gets its updates from the Windows Update site. If clients use the Windows Update site directly, there is no way for administrators to approve security updates. It is for this reason that the primary objective has not been met. The solution for scheduling the installation of downloaded content does meet one of the secondary objectives; however, the secondary objective of carrying out your task with the least amount of administrative effort has not been met because you cannot meet the primary objective.
Question 6	You are the domain administrator for your Windows Server 2003 mixed mode domain. Currently, 18 Windows Server 2003 systems are in use in your enterprise; 8 of the 18 are installed as domain controllers. Clients in your domain consist of Windows 2000 Professional systems running SP3, Windows 2000 Server systems running SP3 and Windows XP Professional systems running SP1. Your primary objective is to devise a software update solution that provides security updates and fixes for all systems in your enterprise, provides downloads of the latest Windows operating system and IE service packs , and allows administrative approval of all updates before they are deployed to any systems. Your secondary objectives are to carry out your task with the least amount of administrative effort and to devise a solution that supports scheduling the installation of required downloaded content You decide to deploy automated updates via the Windows Update site, using the Automatic Update client. Update scheduling will be configured via GPOs linked at the domain level and at the Domain Controllers OU. What is the result of your actions? A. The primary objective and both secondary objectives have been met. B. The primary objective and one secondary objective have been met. C. The primary objective has not been met. However, both secondary objectives have been met. D. Only one secondary objective has been met. E. None of the objectives has been met.
A6:	The correct answer is E. The Automatic Update client runs on Windows 2000 Professional, Windows 2000 Server, Windows 2000 Advanced Server (SP2 or higher), Windows XP Professional, Windows XP Home Edition, and all versions of Windows Server 2003. It cannot be installed on any other (legacy) versions of the Windows operating system. The Automatic Update client enables administrators to provide support to systems in the domain and across the forest for downloading approved content from an SUS server that gets its updates from the Windows Update site. The following operating systems can go directly to the Windows Update site and download updates: Windows 98, Windows 98 SE, Windows 2000 Professional, Windows 2000 Server, Windows 2000 Advanced Server, Windows Me, Windows XP, and Windows Server 2003. The updates on the Windows Update site include fixes and updates for the following categories: critical updates, recommended downloads, Windows tools and utilities, and Internet and multimedia updates. Additional Windows downloads are available, such as deployment guides and other software- related documentation. Your primary objective has not been met because SUS doesn't support Windows NT or Windows 9x computers. The Windows Update site does allow Windows 98 clients to go to http://v4.windowsupdate.microsoft.com/en/default.asp and get updates, but the Automatic Update client cannot be used on local Windows 98 systems. SUS doesn't support Microsoft Office or Microsoft BackOffice products. SUS updates only the OS, IIS, and Internet Explorer and cannot be used to deploy service packs (so your objective of scheduling the installation of required downloaded content can't be met). The solution for scheduling the installation of downloaded content does meet one of the secondary objectives; however, the secondary objective of carrying out your task with the least amount of administrative effort has not been met because you cannot meet the primary objective.
Question 7	You are the domain administrator for gunderville.com . Currently, 12 Windows Server 2003 systems are in use in your enterprise; 3 of the 12 are installed as domain controllers. Clients in your domain consist of Windows 98 Second Edition systems, Windows Me, Windows 2000 Professional systems running SP3, Windows 2000 Server systems running SP3, and Windows XP Professional systems running SP1. Your primary objective is to devise an all-or-nothing software update solution that allows updating security updates and fixes for all systems in your enterprise and provides downloads of the latest Windows operating system and IE service packs. Your secondary objectives are to carry out your task with the least amount of administrative effort and to devise a solution that supports scheduling the installation of required downloaded content. You decide to deploy update services via the Windows Update site. Users will be asked to update their clients as required. What is the result of your actions? A. The primary objective and both secondary objectives have been met. B. The primary objective and one secondary objective have been met. C. The primary objective has not been met. However, both secondary objectives have been met. D. Only one secondary objective has been met. E. None of the objectives has been met.
A7:	The correct answer is A. The following operating systems can go directly to the Windows Update site and download updates: Windows 98, Windows 98 SE, Windows 2000 Professional, Windows 2000 Server, Windows 2000 Advanced Server, Windows Me, Windows XP, and Windows Server 2003. Having users update their clients via the Windows Update site is the only solution that meets the primary objective. The updates on the Windows Update site include fixes and updates for the following categories: critical updates, recommended downloads, Windows tools and utilities, and Internet and multimedia updates. Additional Windows downloads are available, such as deployment guides and other software-related documentation. SUS doesn't support Windows NT or Windows 9x computers. The Windows Update site does allow Windows 98 clients to go to http://v4.windowsupdate.microsoft.com/en/default.asp and get updates, but the Automatic Update client cannot be used on local Windows 98 systems. SUS doesn't support Microsoft Office or Microsoft BackOffice products. SUS updates only the OS, IIS, and Internet Explorer and cannot be used to deploy service packs. These facts also contribute to meeting the secondary objectives. Having users update their own clients isn't the most efficient or controlled method, nor does it seem like the least amount of administrative effort. However, considering that all clients need to be part of the solution, it does meet all the objectives.
Question 8	You are the network administrator for zandri.net , which is a Windows Server 2003 native mode domain. You have been tasked with setting up and updating all desktop client systems in the local domain. You have decided to deploy Software Update Services (SUS) and need to specify the minimum system requirements for the server. Which of the following requirements are necessary for an SUS server build? (Choose four.) A. Pentium 500MHz or better processor B. Pentium 700MHz or better processor C. 256MB of RAM D. 512MB of RAM E. 768MB of RAM F. Windows 2000 Server with SP1 or later G. Windows 2000 Server with SP2 or later H. Windows Server 2003 I. IE 5.0 or later J. IE 5.5 or later
A8:	The correct answers are B, D, G, and J. The SUS server component can be installed on Windows 2000 Server or Windows Server 2003 systems and should meet the following system requirements: Pentium 700MHz or better processor 512MB of RAM 6GB of available hard disk space formatted with NTFS Windows 2000 Server with SP2 or later or Windows Server 2003 IIS 5.0 or later IE 5.5 or later Although you might be able to install the SUS server component on other configurations, the preceding recommendations are the recognized minimum requirements.
Question 9	You are the network administrator for zandri.net , which is a Windows Server 2003 native mode domain. You have been tasked with setting up and updating all desktop client systems in the local domain. The current deployment of systems in your enterprise includes the following system configurations: 12 systems running Windows Server 2003 4 systems running Windows 2000 Server SP1 18 systems running Windows 2000 Server SP2 22 systems running Windows 2000 Server SP4 290 systems running Windows 2000 Professional SP1 638 systems running Windows 2000 Professional SP4 559 systems running Windows XP Professional SP1 You have decided to deploy SUS and need to identify which desktop client systems in the enterprise can use this software update solution. From the following selections, which desktop client systems can use SUS after being configured correctly? (Choose three.) A. 12 systems running Windows Server 2003 B. 4 systems running Windows 2000 Server SP1 C. 18 systems running Windows 2000 Server SP2 D. 22 systems running Windows 2000 Server SP4 E. 290 systems running Windows 2000 Professional SP1 F. 638 systems running Windows 2000 Professional SP4 G. 559 systems running Windows XP Professional SP1
A9:	The correct answers are E, F, and G. Although all these systems can be configured to use SUS, the question asked about desktop operating systems. Under that restriction, the only correct answers are systems running Windows 2000 Professional SP1, Windows 2000 Professional SP4, and Windows XP Professional SP1. Although the systems running Windows 2000 Professional SP4 and Windows XP Professional SP1 are able to use SUS automatically, the systems running Windows 2000 Professional SP1 need to have the Automatic Update client installed separately. Installing the client isn't necessary if you are running Windows 2000 with SP3 or later or Windows XP SP1 or later because the client is included with those service packs. The Automatic Update client is required on the following systems, however: Windows 2000 Professional with SP2 or earlier Windows 2000 Server with SP2 or earlier Windows 2000 Advanced Server with SP2 or earlier Windows XP Professional (no service pack installed)
Question 10	You are the network administrator for zandri.net , which is a Windows Server 2003 native mode domain. You have been tasked with setting up and updating all systems in the local domain. The current deployment of systems in your enterprise includes the following system configurations: 12 systems running Windows Server 2003 4 systems running Windows 2000 Server SP1 18 systems running Windows 2000 Server SP2 22 systems running Windows 2000 Server SP4 9 systems running Windows NT4 Server SP6a 17 systems running Windows NT4 Workstation SP6a 290 systems running Windows 2000 Professional SP1 638 systems running Windows 2000 Professional SP4 245 systems running Windows XP Professional You have decided to deploy SUS and need to identify which desktop client systems in the enterprise need special attention to use this software update solution. Of the following selections, which systems require special attention to use this software update solution? (Choose four.) A. 12 systems running Windows Server 2003 B. 4 systems running Windows 2000 Server SP1 C. 18 systems running Windows 2000 Server SP2 D. 22 systems running Windows 2000 Server SP4 E. 9 systems running Windows NT4 Server SP6a F. 17 systems running Windows NT4 Workstation SP6a G. 290 systems running Windows 2000 Professional SP1 H. 638 systems running Windows 2000 Professional SP4 I. 245 systems running Windows XP Professional
A10:	The correct answers are B, C, G, and I. Although all these systems can be configured to use SUS, with the exception of the Windows NT4 Server and Workstation systems (currently, nothing is available that allows these systems to be configured to use this solution), systems running Windows 2000 Server and Professional SP1, Windows 2000 Server SP2, and Windows XP Professional with no service pack installed need special attention because the Automatic Update client must be installed separately. Installing the client isn't necessary if you are running Windows 2000 with SP3 or later or Windows XP SP1 or later because the client is included with those service packs. The Automatic Update client is required on the following systems, however: Windows 2000 Professional with SP2 or earlier Windows 2000 Server with SP2 or earlier Windows 2000 Advanced Server with SP2 or earlier Windows XP Professional (no service pack installed)