Microsoft Pro: Windows 7, Enterprise Desktop Administrator - 070-686 Exam Practice Test

HotSpot (Hot Area)
You upgrade all of a company's client computers from Microsoft Internet Explorer 8 to Internet Explorer 9.
After the upgrade, users are unable to download attachments from Microsoft Outlook Web App (OWA) or
any other secure website. You verify the Group Policy settings for Internet Explorer 9.
You need to ensure that all users can download attachments from OWA and other secure websites.
Which setting should you select? (To answer, select the appropriate item in the work area.)
Hot Area:

Topic 1, Company One
This question is one in a series of questions that all present the same scenario. For your convenience, the
scenario is repeated in each question. (Click the Case Study button.)
Each question presents a different goal and answer choices, but the text of the scenario is exactly the same
in each question in this series.
You have deployed a ConfigMgr site server at each site. You are planning to use PXE boot to deploy a new
Windows 7 image. You need to deploy the image to all office locations. When you attempt to perform a PXE
boot, it fails at each office location.
You need to prepare the infrastructure.
What should you do? (Choose all that apply.)
Company, Inc. (Case Study): Background
You are the desktop architect for a company with 14,000 client computers. Some client computers are portable computers and some are desktop computers. All client computers currently run Windows XP.
You are in the evaluation phase for upgrading to Windows 7. Approximately half of the Carlsbad and Madrid offices are used by sales employees. Sales employees report to the office only once per quarter. Your company has users in offices as shown in the following table.

The address for the SharePoint site is https://intranet.company.com.
Each location has gigabit network connections to the desktop except Madrid, which has 100 megabit connections. Each office has a Dynamic Host Configuration Protocol (DHCP) server and uses multiple VLANs.
You use Group Policy objects (GPOs) to manage various settings. The following figure displays the Organizational Unit (OU) layout for the Active Directory Domain Services (AD DS) domain.

Each office has two connections, a data center WAN link and an Internet connection. Each office connects to a central data center facility with connection speeds as shown in the following table.

You currently use one of each client computer model to create and maintain a disk image for each model. The models supported by your company are listed in the following table.

You currently use a third-party disk imaging application to capture and deploy new Windows XP computers.
Desktop administrators use optical media to deploy the image to new or repurposed client computers. The current Windows XP image is about 11 GB in size, which includes 2 GB of applications and 9 GB of Windows XP files.
Business Requirements
The deployment of Windows 7 must meet the following business requirements:
Deployment requirements
The deployment must maximize the use of existing client computers. The deployment must reduce the amount of time spent updating client computers after deployment.
Technical Requirements
The application must meet the following technical requirements:
Infrastructure requirements
The amount of disk space required to store deployment images must be reduced. The number of images that need to be copied across WAN links must be reduced. You are based in the Los Angeles office and use the Microsoft Deployment Toolkit. You have a file server hosting a deployment share in Los Angeles.
Application compatibility
All current applications must be supported on Windows 7.
All offices are moving to a new finance application in the next six months. The new finance application
installs and runs correctly on Windows 7.
Migration requirements
The deployment cannot require users to store their files on a network or external drive for the migration. Only system administrators can be allowed to install applications. User data must be migrated during upgrades to Windows 7. There is a small budget for hardware upgrades when required.
Image maintenance
You need to minimize the re-arm passes.
Security
Each location has a security group made up of the desktop computer objects in that location. Users must
not be able to change their web browser or client computer security settings.
Your requirements are as follows:
A startup PIN and TPM are required for all BitLocker users.
Local regulations prohibit the use of BitLocker for all computers in the Munich office. This supersedes any other requirement.
All laptops within the company must have BitLocker enabled.
All Madrid desktops must have BitLocker enabled.
No other desktops besides Madrid should have Bitlocker enabled.
Computers in office lobbies are not permitted to join the domain.
You need to block the use of ActiveX controls for all external websites.

HotSpot (Hot Area)
A company has a server that runs Windows Server 2008 R2 in an Active Directory Domain Services (AD DS) environment. The domain controllers were recently upgraded from Windows Server 2003. You are using Group Policy to deploy applications to the client computers remotely. The computers reboot each night as part of routine maintenance.
You need to ensure that the application installs when the computer starts up.
Which Group Policy setting should you configure? (To answer, select the appropriate setting or settings in the work area.)
Hot Area:

HotSpot (Hot Area)
Explanation:
All portable computers on a company's wireless network run windows 7 Enterprise.
You need to ensure that users can connect only to the predefined SSID shown in the work area.
Which Group Policy object (GPO) settings should you select? (To answer, select the appropriate setting or
settings in the work area.)
Hot Area:

Your company has two network segments. The core network segment is where centralized management is performed. The high-security network segment is an isolated network. A firewall between the core network segment and the high-security network segment limits network communication between the segments.
These network segments are shown in the exhibit. (Click the Exhibit button.)
Your company plans to deploy Windows 7 to all client computers.
You need to manage activation for client computers that are located in the high-security network segment.
What should you do?
Exhibit:

You are planning a deployment of Windows 7 on multiple client computers.
You need to recommend a Windows 7 deployment solution that meets the following requirements:
Must support the deployment of WIM or VHD.
Must support deployment by using multicast. What should you include in the recommendations?

Topic 2, Company Two
You need to ensure that the company's remote computers receive Windows updates at the same time as the internal computers.
What should you do?
Company, Ltd. (Case Study): Background
You are the desktop architect for a company with 10,000 client computers. Client computers are either portable or desktop computers. All client computers run the 64-bit version of Windows 7 Enterprise. Your network consists of a main office and four regional offices.
Your network has an Active Directory Domain Services (AD DS) in a single-domain, single-forest model.
The forest and domain functional levels are set to Windows Server 2008 R2. There are four domain
controllers in the main office and two additional domain controllers in each regional office.
All servers run Windows Servers 2008 R2.
The regional offices are listed in the following table with users and WAN connection speeds.

Users in the New York office will have a Customer Relationship Management (CRM) application that is CPU-intensive and only runs on windows 2000 Professional. The Toronto office uses a network-intensive application. All users in the Toronto office use a legacy CRM application that runs on Windows XP only.
The existing client computers are managed with Microsoft System Center Configuration Manager (ConfigMgr) 2007 R3.
Business Requirements
The following business requirements must be maintained or exceeded:
Software Asset Management
The company Software Asset Management (SAM) team has a policy that mandates that after operating systems are deployed, the operating system environment (OSE) must be activated automatically before any additional updates or software are installed in the OSE. The Paris development group has a Key Management Server (KMS) in an isolated test network. All engineering applications are required to maintain compliance with the license agreements of the application vendors.
Technology Requirements
You need to ensure that users can always receive operating system and application updates on the internal network and when away from the main office or branch offices. The mobile staff uses portable computers. In the next remote update of the client computers, you need to deploy an Enterprise Resource Planning (ERP) add-on to Microsoft Internet Explorer. This add-on must support a partner application and integrate with the remote users. The ERP Internet Explorer add-on does not support the 64-bit version of Windows 7.
Virtualization infrastructure
You use Microsoft Application Virtualization (App-V) to deliver applications to computers. You use Microsoft Hyper-V Server 2008 R2 to deliver VDI desktops in a pool. All client operating systems deployed in the VDI pool must be automatically joined to the domain during the deployment process.
New Functionality
The fewest number of servers should be added to the environment to meet the technical goals. A new version of an existing engineering application must be deployed to the users. The new application requires a dedicated graphics processing unit (GPU) with 2 GB of memory.
Technical Requirements
The following technical requirements must be maintained or exceeded:
Infrastructure Requirements
All applications and updates are required to be deployed with the same central management tool. Detailed reporting for compliance audits are required to be available for all application and update deployments.
Application Compatibility
All current applications must be supported on Windows 7. You are licensed for the latest version of the Microsoft Desktop and Optimization Pack (MDOP).
Operating System Environment (OSE) Requirements
You need to ensure that Internet Explorer 9 is not automatically installed on any of the computers in the Toronto office. You need to ensure that the Internet Explorer Initial Wizard is not displayed on any Virtual Desktop Infrastructure (VDI) computers.
Security
All remote access must be logged and audit able. All VDI desktops computers must not send Customer Experience Improvement Program (CEIP) for Internet Explorer or windows Live Messenger.

Your company has an Active Directory Domain Services (AD DS) forest with a single domain. A server has the Windows Deployment Services (WDS) role installed. You create a Windows 7 image.
You plan to use the Lite Touch Installation deployment method to deploy the Windows 7 image.
You need to design a deployment strategy that will install an image on unknown client computers only if
administrative approval is granted.
What should you do?

Your network has a single domain with 1,000 client computers that run Windows Vista.
You are planning a deployment of Windows 7.
Your company has multiple departments. Only the sales department will use the existing target computers
to run Windows 7.
You have the following requirements:
Migrate the user state for each user.
Preserve the file system and existing applications for only the sales department computers. You need to recommend the deployment method that is appropriate for the environment. Which combination of deployment scenarios should you recommend?

Your network has 1,000 client computers that run Windows 7.
You need to install an application, in the Local System account context, on the client computers.
What are two possible ways to achieve this goal? (Each correct answer presents a complete solution.
Choose two.)