Microsoft Pro: Windows 7, Enterprise Desktop Administrator - 70-686 Exam Questions

QUESTION NO: 1
Topic 2, Company Two
You need to ensure that the company's remote computers receive Windows updates at the same time as the internal computers.
What should you do?
Company, Ltd. (Case Study): Background
You are the desktop architect for a company with 10,000 client computers. Client computers are either portable or desktop computers. All client computers run the 64-bit version of Windows 7 Enterprise. Your network consists of a main office and four regional offices.
Your network has an Active Directory Domain Services (AD DS) in a single-domain, single-forest model.
The forest and domain functional levels are set to Windows Server 2008 R2. There are four domain
controllers in the main office and two additional domain controllers in each regional office.
All servers run Windows Servers 2008 R2.
The regional offices are listed in the following table with users and WAN connection speeds.

Users in the New York office will have a Customer Relationship Management (CRM) application that is CPU-intensive and only runs on windows 2000 Professional. The Toronto office uses a network-intensive application. All users in the Toronto office use a legacy CRM application that runs on Windows XP only.
The existing client computers are managed with Microsoft System Center Configuration Manager (ConfigMgr) 2007 R3.
Business Requirements
The following business requirements must be maintained or exceeded:
Software Asset Management
The company Software Asset Management (SAM) team has a policy that mandates that after operating systems are deployed, the operating system environment (OSE) must be activated automatically before any additional updates or software are installed in the OSE. The Paris development group has a Key Management Server (KMS) in an isolated test network. All engineering applications are required to maintain compliance with the license agreements of the application vendors.
Technology Requirements
You need to ensure that users can always receive operating system and application updates on the internal network and when away from the main office or branch offices. The mobile staff uses portable computers. In the next remote update of the client computers, you need to deploy an Enterprise Resource Planning (ERP) add-on to Microsoft Internet Explorer. This add-on must support a partner application and integrate with the remote users. The ERP Internet Explorer add-on does not support the 64-bit version of Windows 7.
Virtualization infrastructure
You use Microsoft Application Virtualization (App-V) to deliver applications to computers. You use Microsoft Hyper-V Server 2008 R2 to deliver VDI desktops in a pool. All client operating systems deployed in the VDI pool must be automatically joined to the domain during the deployment process.
New Functionality
The fewest number of servers should be added to the environment to meet the technical goals. A new version of an existing engineering application must be deployed to the users. The new application requires a dedicated graphics processing unit (GPU) with 2 GB of memory.
Technical Requirements
The following technical requirements must be maintained or exceeded:
Infrastructure Requirements
All applications and updates are required to be deployed with the same central management tool. Detailed reporting for compliance audits are required to be available for all application and update deployments.
Application Compatibility
All current applications must be supported on Windows 7. You are licensed for the latest version of the Microsoft Desktop and Optimization Pack (MDOP).
Operating System Environment (OSE) Requirements
You need to ensure that Internet Explorer 9 is not automatically installed on any of the computers in the Toronto office. You need to ensure that the Internet Explorer Initial Wizard is not displayed on any Virtual Desktop Infrastructure (VDI) computers.
Security
All remote access must be logged and audit able. All VDI desktops computers must not send Customer Experience Improvement Program (CEIP) for Internet Explorer or windows Live Messenger.

QUESTION NO: 2
Topic 2, Company Two
You are replacing the desktop computers in the Chicago office.
You need to automate the migration of user profile data to the new computers.
What should you recommend? (Choose all that apply.)
Company, Ltd. (Case Study): Background
You are the desktop architect for a company with 10,000 client computers. Client computers are either portable or desktop computers. All client computers run the 64-bit version of Windows 7 Enterprise. Your network consists of a main office and four regional offices.
Your network has an Active Directory Domain Services (AD DS) in a single-domain, single-forest model. The forest and domain functional levels are set to Windows Server 2008 R2. There are four domain controllers in the main office and two additional domain controllers in each regional office.
All servers run Windows Servers 2008 R2.
The regional offices are listed in the following table with users and WAN connection speeds.

Users in the New York office will have a Customer Relationship Management (CRM) application that is CPU-intensive and only runs on windows 2000 Professional. The Toronto office uses a network-intensive application. All users in the Toronto office use a legacy CRM application that runs on Windows XP only.
The existing client computers are managed with Microsoft System Center Configuration Manager (ConfigMgr) 2007 R3.
Business Requirements
The following business requirements must be maintained or exceeded:
Software Asset Management
The company Software Asset Management (SAM) team has a policy that mandates that after operating systems are deployed, the operating system environment (OSE) must be activated automatically before any additional updates or software are installed in the OSE. The Paris development group has a Key Management Server (KMS) in an isolated test network. All engineering applications are required to maintain compliance with the license agreements of the application vendors.
Technology Requirements
You need to ensure that users can always receive operating system and application updates on the internal network and when away from the main office or branch offices. The mobile staff uses portable computers. In the next remote update of the client computers, you need to deploy an Enterprise Resource Planning (ERP) add-on to Microsoft Internet Explorer. This add-on must support a partner application and integrate with the remote users. The ERP Internet Explorer add-on does not support the 64-bit version of Windows 7.
Virtualization infrastructure
You use Microsoft Application Virtualization (App-V) to deliver applications to computers. You use Microsoft Hyper-V Server 2008 R2 to deliver VDI desktops in a pool. All client operating systems deployed in the VDI pool must be automatically joined to the domain during the deployment process.
New Functionality
The fewest number of servers should be added to the environment to meet the technical goals. A new version of an existing engineering application must be deployed to the users. The new application requires a dedicated graphics processing unit (GPU) with 2 GB of memory.
Technical Requirements
The following technical requirements must be maintained or exceeded:
Infrastructure Requirements
All applications and updates are required to be deployed with the same central management tool. Detailed reporting for compliance audits are required to be available for all application and update deployments.
Application Compatibility
All current applications must be supported on Windows 7. You are licensed for the latest version of the Microsoft Desktop and Optimization Pack (MDOP).
Operating System Environment (OSE) Requirements
You need to ensure that Internet Explorer 9 is not automatically installed on any of the computers in the
Toronto office.
You need to ensure that the Internet Explorer Initial Wizard is not displayed on any Virtual Desktop
Infrastructure (VDI) computers.
Security
All remote access must be logged and audit able. All VDI desktops computers must not send Customer Experience Improvement Program (CEIP) for Internet Explorer or windows Live Messenger.

QUESTION NO: 3
Your company has 1,000 client computers.
You are planning to deploy Windows 7 and a new line-of-business application.
You have the following requirements:
Install the application as part of the standard Windows 7 deployment.
Use a single Windows 7 image for the deployment.
The application must be available for use on client computers that are not connected to the network.
You need to ensure that the application is installed on all new client computers.
What should you do?

QUESTION NO: 4
HotSpot (Hot Area)
Active Directory Domain Services (AD OS) is running on windows Server 2008 R2.
All user objects are located in the Boston Users Organizational Unit (OU) or the San Diego Users OU.
All client computer objects are in the Boston Computers OU or in the San Diego Computers OU.
All domain controller computer objects are in their default location.
You decide to audit changes to AD DS.
Administrative users in San Diego add new users to the domain without approval. You configure the audit
policy settings in the San Diego Policy Group Policy object (GPO) and set up auditing in object System Access Control Lists, you verify that the GPO is being applied to the resources in the San Diego OUs, but auditing still does not work.
You need to select the GPO to ensure that users added by the San Diego administrative users are audited. Which GPO should you select? (To answer, select the appropriate setting or settings in the work area.)
Hot Area:

QUESTION NO: 5
Your company has client computers that run Windows XP Professional.
You are planning to install Windows 7 Enterprise on the existing client computers.
You have the following requirements:
Migrate user data and operating system components.
Encrypt and password-protect the migration store.
You need to design a user state migration strategy that supports the requirements.
What should you do?

QUESTION NO: 6
Your company has a custom Web application that uses a self-signed SSL certificate. The company has an
internal certification authority (CA) and uses auto enrollment.
When external users attempt to start the Web application, Internet Explorer displays an error message that
recommends closing the Web page rather than continuing to the application.
You need to ensure that Internet Explorer does not display the error message. What should you do?

QUESTION NO: 7
Topic 1, Company One
This question is one in a series of questions that all present the same scenario. For your convenience, the
scenario is repeated in each question. (Click the Case Study button.)
Each question presents a different goal and answer choices, but the text of the scenario is exactly the same
in each question in this series.
You have deployed a ConfigMgr site server at each site. You are planning to use PXE boot to deploy a new
Windows 7 image. You need to deploy the image to all office locations. When you attempt to perform a PXE
boot, it fails at each office location.
You need to prepare the infrastructure.
What should you do? (Choose all that apply.)
Company, Inc. (Case Study): Background
You are the desktop architect for a company with 14,000 client computers. Some client computers are portable computers and some are desktop computers. All client computers currently run Windows XP.
You are in the evaluation phase for upgrading to Windows 7. Approximately half of the Carlsbad and Madrid offices are used by sales employees. Sales employees report to the office only once per quarter. Your company has users in offices as shown in the following table.

The address for the SharePoint site is https://intranet.company.com.
Each location has gigabit network connections to the desktop except Madrid, which has 100 megabit connections. Each office has a Dynamic Host Configuration Protocol (DHCP) server and uses multiple VLANs.
You use Group Policy objects (GPOs) to manage various settings. The following figure displays the Organizational Unit (OU) layout for the Active Directory Domain Services (AD DS) domain.

Each office has two connections, a data center WAN link and an Internet connection. Each office connects to a central data center facility with connection speeds as shown in the following table.

You currently use one of each client computer model to create and maintain a disk image for each model. The models supported by your company are listed in the following table.

You currently use a third-party disk imaging application to capture and deploy new Windows XP computers.
Desktop administrators use optical media to deploy the image to new or repurposed client computers. The current Windows XP image is about 11 GB in size, which includes 2 GB of applications and 9 GB of Windows XP files.
Business Requirements
The deployment of Windows 7 must meet the following business requirements:
Deployment requirements
The deployment must maximize the use of existing client computers. The deployment must reduce the amount of time spent updating client computers after deployment.
Technical Requirements
The application must meet the following technical requirements:
Infrastructure requirements
The amount of disk space required to store deployment images must be reduced. The number of images that need to be copied across WAN links must be reduced. You are based in the Los Angeles office and use the Microsoft Deployment Toolkit. You have a file server hosting a deployment share in Los Angeles.
Application compatibility
All current applications must be supported on Windows 7.
All offices are moving to a new finance application in the next six months. The new finance application
installs and runs correctly on Windows 7.
Migration requirements
The deployment cannot require users to store their files on a network or external drive for the migration. Only system administrators can be allowed to install applications. User data must be migrated during upgrades to Windows 7. There is a small budget for hardware upgrades when required.
Image maintenance
You need to minimize the re-arm passes.
Security
Each location has a security group made up of the desktop computer objects in that location. Users must
not be able to change their web browser or client computer security settings.
Your requirements are as follows:
A startup PIN and TPM are required for all BitLocker users.
Local regulations prohibit the use of BitLocker for all computers in the Munich office. This supersedes any other requirement.
All laptops within the company must have BitLocker enabled.
All Madrid desktops must have BitLocker enabled.
No other desktops besides Madrid should have Bitlocker enabled.
Computers in office lobbies are not permitted to join the domain.
You need to block the use of ActiveX controls for all external websites.

QUESTION NO: 8
The client computers in your network run either Windows XP or Windows 7. All client computers are in a single Active Directory Domain Services (AD DS) organizational unit (OU) named MyClients.
You install Windows Software Update Services (WSUS). You create a Group Policy object (GPO) that enables automatic updates from the WSUS server, and you link the GPO to the MyClients OU.
You place all client computers in a targeting group named MyClients.
Testing reveals that a security update that is applicable to both Windows XP and Windows 7 causes a line-of-business application to fail on the Windows XP client computers.
You need to ensure that the application runs on the Windows XP client computers and that the Windows 7 client computers receive the security update.
What should you do?

QUESTION NO: 9
Your company infrastructure includes a Windows Server 2008 R2 file server and 1,000 Windows 7 Enterprise client computers.
The company wants to require a secure connection between client computers and the file server.
You need to create and deploy a Group Policy object (GPO) that includes a rule for Windows Firewall with Advanced Security.
What should you do?

QUESTION NO: 10
Your company plans to upgrade all client computers to Windows 7.
The company uses a custom line-of-business application. The application contains sensitive data. The
application will not run on Windows 7
You establish that Microsoft Enterprise Desktop Virtualization (MED-V) is the appropriate technology to
allow your organization to continue to use the application.
You need to ensure that the virtual machine (VM) images that contain sensitive data can be used only when
the user is connected to the MED-V server.
What should you do?

QUESTION NO: 11
A network consists of 1,000 laptop computers that run Windows XP. The computers do not have access to the corporate network.
You plan to migrate 200 of the computers immediately to Windows 7. The remainder will be migrated over the next several months.
You need to plan the most efficient method for activating all of the computers.
What should you do?