Microsoft System Center Configuration Manager 2007, Configuring Number: 70-401 Passing Score: 700 Time Limit: 120 min File Version: 1.3 This dump is based on previous released dumps, has (hopefully) all the correct answers with detailed explanations and all the duplicates removed. Good luck!
Disclaimer: This dump is provided as is. I do not take any resposibility on the correctness of these answers or whether you pass the test or not. You should study to understand what Microsoft System Center Configuration Manager 2007 is all about.
Exam A QUESTION 1 You have a System Center Configuration Manager 2007 environment. A new branch office needs boot images to install operating systems on client computers. You need to configure the Configuration Manager site system to respond to client requests for boot images. You create a new site system. Which role should you assign to the site system? A. B. C. D.
the Distribution Point role the PXE Service Point role the State Migration Point role the Software Update Point role
Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: the PXE Service Point role http://publib.boulder.ibm.com/infocenter/toolsctr/v1r0/index.jsp?topic=%2Fdpsccm% 2Fdpsccm_t_setting_up_pxe_serv_pt.html The PXE service point is a site system role that initiates operating system deployments from computers whose network interface card is configured to allow PXE boot requests. http://technet.microsoft.com/en-us/library/bb680668.aspx You can use the PXE protocol to initiate operating system deployments to Configuration Manager 2007 client computers. Configuration Manager 2007 uses the PXE service point site role to initiate the operating system deployment process. The PXE service point must be configured to respond to PXE boot requests made by Configuration Manager 2007 clients on the network and then interact with Configuration Manager 2007 infrastructure to determine the appropriate deployment actions to take. You must assign the PXE service point site role to a server supported by Configuration Manager 2007 operating system deployment. The service site can be a primary or secondary site server. Further explanations: http://technet.microsoft.com/en-us/library/bb680614.aspx About Distribution Points Microsoft System Center Configuration Manager 2007 uses distribution points to store files needed for packages to run on client computers. These distribution points function as distribution centers for the files that a package uses, allowing users to download and run these files, programs, and scripts when a package is advertised. http://technet.microsoft.com/en-us/library/bb693655.aspx How to Configure the State Migration Point The state migration point is a Configuration Manager 2007 site role that provides a location to store user state information before an operating system deployment. You can store the user state on the state migration point while the operating system deployment proceeds and then restore the user state to the new computer from the state migration point. Each state migration point site server can only be a member of one Configuration Manager 2007 site. http://blogs.technet.com/b/umeno/archive/2012/01/19/1159715.aspx Things to Know About the Software Update Point (explaining WSUS Integration) The job of the SUP is provide software update metadata to clients that are using the Windows Update Agent
(WUA) to scan for missing updates. QUESTION 2 You have a System Center Configuration Manager 2007 environment. You want to deploy new operating systems to all computers. Your boot image requires additional network drivers to be able to function in your environment. In the boot image properties, you select the Select a Driver option, and you attempt to add drivers. However, no drivers are displayed. You need to add the additional network drivers to the boot image. What should you do? A. Create a task sequence to automatically apply drivers. B. Create a task sequence to apply a driver package. C. Import the required drivers into the Drivers node of the Configuration Manager console, and then select the drivers to add in the boot image properties. D. Import the required drivers into the Driver Packages node of the Configuration Manager console, and then select the package to add in the boot image properties. Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Import the required drivers into the Drivers node of the Configuration Manager console, and then select the drivers to add in the boot image properties. http://technet.microsoft.com/en-us/library/bb694146.aspx How to Update Boot Images You can update a boot image by adding device drivers to it or editing its properties. Device drivers that you add to an existing boot image must be imported and enabled in the driver catalog. Updating the boot image does not change the associated package that the boot image references. To update a boot image .. 6. To add a network device driver or mass storage device driver to a Windows PE image, click the Windows PE tab, and then click the New icon to open the Select a Driver dialog box. 7. Select the device driver from the Drivers window, and then click OK. .. Further explanations: http://technet.microsoft.com/en-us/library/bb632511.aspx The driver catalog consists of the Drivers node and the Driver Packages node in the Configuration Manager 2007 administrator console. Drivers Node .. Add or Remove Drivers to Boot Images Select this action to add or remove a device driver from a boot image package. Add or Remove Drivers to Packages Allows you to add a new device driver to a driver package, or remove a device driver from an existing driver package. Use the Add or Remove Drivers to Packages dialog box to add or remove the content associated with a selected device driver to or from a driver package. .. Driver Packages Node
The driver packages that have been created are displayed in a list in the Driver Packages results pane. QUESTION 3 You have a System Center Configuration Manager 2007 environment. Network Access Protection (NAP) is configured for your environment. You need to ensure that options for remediation are available to users when remediation fails. You create a Web site in the restricted network. What should you do next? A. Configure the Troubleshooting URL setting on the network policy for non-compliant computers. B. Configure the Troubleshooting URL setting on the network policy for unknown computers. C. Create a collection of NAP-enabled systems, and create a collection variable named NAPURL Enter your Web sites URL as the variable value. D. Deploy a task sequence to all client computers that launches your Web sites URL Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: Configure the Troubleshooting URL setting on the network policy for non-compliant computers. http://technet.microsoft.com/en-us/library/bb680466.aspx Although remediation with Network Access Protection (NAP) in Configuration Manager 2007 is designed to happen automatically, you should plan the user experience so that you provide troubleshooting information specific to your users if remediation fails. This could include basic information about why there is a delay in accessing the network and a Help Desk number to call. Or it could include links to help diagnose and resolve the issue outside Configuration Manager. Providing user help is particularly important if your Network Policy Server restricts non-compliant computers and remediation fails. Remediation can fail for a number of reasons, including the following: The computer does not have the Configuration Manager client installed. The client cannot contact its management point (for example, there is a network problem). Content is not available (for example, the softare update package has been deleted or there are network problems between the client and distribution points). Each network policy that enforces compliance on the restricted network can specify a troubleshooting URL, which directs users to a local Web site that is accessible on the restricted network. If it contains links to resources, these must also be accessible from that restricted network. You must provide the local Web site and build your own customized page using basic HTML. To specify the Troubleshooting URL, follow this procedure: On the Network Policy Server, edit the network policy for non-compliant computers. Click the Settings tab, and then click NAP Enforcement under the section Network Access Protection. Click Configure in the section Remediation Server Groups and Troubleshooting URL. In the Troubleshooting URL section, type in the link to a Web page accessible from the restricted network you want users to see when they are in remediation. Click OK to closethe Remediation Servers and Troubleshooting URL dialog box, and then click OK to close the network policy properties. QUESTION 4 You have a System Center Configuration Manager 2007 environment. You need to add a custom attribute to hardware inventory data that specifies the office location of a computer. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. On each computer, add a NOIDMIF file that contains the office location data. B. On each computer, add an IDMIF file that contains the office location data. C. Configure Configuration Manager 2007 to collect NOIDMIF files from client computers.
D. Configure Configuration Manager 2007 to collect IDMIF files from client computers. Correct Answer: AC Section: (none) Explanation Explanation/Reference: Answer: On each computer, add a NOIDMIF file that contains the office location data. Configure Configuration Manager 2007 to collect NOIDMIF files from client computers. http://blogs.technet.com/b/configurationmgr/archive/2010/03/25/customizing-hardware-inventory-inconfiguration-manager-2007-using-noidmif-files.aspx The IDMIF and NOIDMIF collection can be used to extend Configuration Manager 2007 client inventory information reported by clients. NOIDMIF files extend the hardware inventory information for existing Configuration Manager 2007 clients. IDMIF files are used to add information to the site database for devices and objects that are not Configuration Manager 2007 clients. QUESTION 5 You have a System Center Configuration Manager 2007 environment. You need to be able to query Configuration Manager 2007 to display registry values for a custom application for each client computer. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. B. C. D.
Configure hardware inventory. Edit SMS_Def.MOF on each site to query for the registry values. Edit the sitectrl.ct0 file at the central site to query for the registry values. Configure and assign a desired configuration baseline at the central site.
Correct Answer: AB Section: (none) Explanation Explanation/Reference: Answer: Configure hardware inventory. Edit SMS_Def.MOF on each site to query for the registry values. http://technet.microsoft.com/en-us/library/bb632916.aspx About Collecting Hardware Inventory The hardware inventory feature collects data from client computers by querying several data stores on client computers, such as the registry and Windows Management Instrumentation (WMI) namespace classes. The hardware inventory client agent does not query for all possible WMI classes, but it does provide the ability to report on approximately 1,500 hardware properties from almost 100 different WMI classes by default. The initial client hardware inventory collected by the hardware inventory client agent is a full inventory collection based on the reporting requirements specified in the site's SMS_def.mof file stored on the primary site server. The initial full inventory establishes a baseline for future inventory collections. http://technet.microsoft.com/en-us/library/bb632896.aspx About MOF Files Used by Hardware Inventory The SMS_def.mof file defines the reporting classes used by the hardware inventory client agent to determine whether or not specific client data class information is reported. Reporting classes are based on the WMI repository data classes, and attributes of those classes, existing on clients by default or added to them by customizing the Configuration.mof file. Reporting class information in the SMS_def.mof file is converted into a reporting policy provided to clients during their normal computer policy polling interval. After the client compiles the new reporting policy, the reporting policy information is stored in the client system WMI repository in the InventoryDataItem class of the
Root\CCM\Policy\Machine WMI namespace. http://technet.microsoft.com/en-us/library/cc723575.aspx Appendix C - Hardware Inventory Classes The SMS_def.mof file controls the objects and properties that SMS includes in hardware inventory. You can customize the hardware inventory by editing the SMS_def.mof in the MOF Manager tool. The SMS_def.mof file controls which hardware inventory objects and properties SMS collects during hardware inventory. Table C.46 Registry Attribute Class (SMS_G_Group_REGISTRY) .. Name Key. Indicates the name of the Win32 Registry. Maximum length is 256 characters. Further explanations: http://msdn.microsoft.com/en-us/library/cc145677.aspx About the Configuration Manager Site Control File The site control file in Microsoft System Center Configuration Manager 2007 is an ASCII text file (Sitectrl.ct0) that contains the configuration of each site. http://technet.microsoft.com/en-us/library/bb693504.aspx Desired Configuration Management in Configuration Manager The Configuration Manager 2007 desired configuration management feature provides a set of tools and resources that can help assess and track configuration compliance of client computers in the enterprise. http://technet.microsoft.com/en-us/library/bb694096.aspx About Configuration Baselines in Desired Configuration Management Baselines are used to define the configuration of a product or system established at a specific point in time, capturing both structure and details. Configuration baselines in Configuration Manager 2007 contain a defined set of required configurations that are evaluated for compliance as a group. QUESTION 6 You have a System Center Configuration Manager 2007 environment. You need to monitor software usage of an application named App1 even in the event that a user renames the executable. What should you do?
A. B. C. D.
Create a software metering rule based on the File name setting for App1. Create a software metering rule based on the Original file name setting for App1. Create a Web report based on the software inventory history of all computers that have App1 installed. Create a Configuration Manager query based on the software inventory history of all computers that have App1 installed.
Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Create a software metering rule based on the Original file name setting for App1. http://technet.microsoft.com/en-us/library/bb694169.aspx Software Metering in Configuration Manager
The Configuration Manager 2007 software metering feature allows you to monitor and collect software usage data from Configuration Manager 2007 clients. http://technet.microsoft.com/en-us/library/bb633043.aspx How to Add a Software Metering Rule On the General page of the New Software Metering Rule Wizard, specify the following information: .. Original File Name: The name of the executable file you want to meter. This name is matched to information in the header of the file, not the filename itself so that it can be useful in cases where the executable file has been renamed but you want to meter it by the original name. QUESTION 7 You have a System Center Configuration Manager 2007 environment. The Software Inventory client agent is enabled. You need to consolidate the various inventoried names for an application named App1 so that the names can be viewed in Resource Explorer as a single display name. What should you do? A. B. C. D.
Modify the Software Inventory client agent properties to inventory additional file names. Modify the Software Inventory client agent properties to group multiple products into a single product name. Create a new SQL table to group multiple products into a single product name. Create a new SQL view to group multiple products into a single product name.
Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Modify the Software Inventory client agent properties to group multiple products into a single product name. http://technet.microsoft.com/en-us/library/bb632789.aspx About Display Names for Inventoried Products During software inventory, the Microsoft System Center Configuration Manager 2007 software inventory client agent retrieves information from files installed on clients. File information, including the names of the manufacturers that produced the files and the names of the files (or software products) themselves is inventoried. After file data is collected, you can view the software inventory for a client using Resource Explorer. Because manufacturer and product names are retrieved from file header information, any inconsistencies in the way these names are entered in the header information will also appear in Resource Explorer and in any query results based on inventoried file display names. Such inconsistencies can make it more difficult to read and query against software inventory information because the data appears under multiple manufacturer or product names rather than under a single name. To resolve this problem, you can set display names for inventoried products on the inventoried names tab of the software inventory client agent tab. For more information about the inventoried names tab of the software inventory client agent properties, see Software Inventory Client Agent Properties: Inventory Names Tab: http://technet.microsoft.com/en-us/library/ bb680517.aspx QUESTION 8 You have a System Center Configuration Manager 2007 environment running in mixed mode. You configure the site server in the central site as a device management point. You create a mandatory assignment for a software package for distribution to mobile devices. You discover that software distribution to mobile devices on the LAN is failing. You need to configure Configuration Manager 2007 to support software deployment to mobile devices. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Enable Background Intelligent Transfer Service (BITS) and Web Distributed Authoring and Versioning (WebDAV) extensions on the distribution point. B. Disable Web Distributed Authoring and Versioning (WebDAV) extensions on the distribution point. Add an Internet-based fully qualified domain name (FQDN) to the site system role. C. Grant the Read permission for the package to the Authenticated Users security group. D. Enable anonymous connections on the distribution point. Correct Answer: AD Section: (none) Explanation Explanation/Reference: Answer: Enable Background Intelligent Transfer Service (BITS) and Web Distributed Authoring and Versioning (WebDAV) extensions on the distribution point. Enable anonymous connections on the distribution point. http://technet.microsoft.com/en-us/library/bb633254.aspx How to Enable Distribution Points to Support Mobile Devices To support distribution points for mobile devices, the following are required on the Configuration Manager site system: The distribution point site role must be enabled on the Configuration Manager 2007 server. Internet Information Services (IIS) must be installed and enabled. Web Distributed Authoring and Versioning (WebDAV) extensions for IIS must be enabled. Background Intelligent Transfer Service (BITS) extensions must be enabled. To enable distribution points to support mobile devices 1. In the Configuration Manager administrator console, navigate to SystemCenterConfiguration Manager / Site Database / Site Management / <site code> - <site name> / Site Settings / Site System / <site name>. 2. In the details pane, right-click ConfigMgr distribution point, and click Properties. The ConfigMgr distribution point Properties dialog box is displayed. 3. On the General tab, select the Allow clients to transfer content from this distribution point using BITS, HTTP, and HTTPS check box. 4. For mixed mode only, on the General tab, select the Allow clients to connect anonymously (Required for mobile device clients) check box, and click OK.
QUESTION 9 You have a System Center Configuration Manager 2007 environment that has a Windows Server Update Services (WSUS) 3.0 server. All computers are configured to use the WSUS infrastructure. You need to configure software update point client installation. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. B. C. D.
In the Configuration Manager console, configure a proxy server for use by the WSUS server. Import, configure, and assign a Group Policy object (GPO) to specify command lines for the installation. On a public DNS server, specify the fully qualified domain name (FQDN) for the WSUS server. Configure the WSUS server to be a ConfigMgr software update point.
Correct Answer: BD Section: (none) Explanation Explanation/Reference: Answer: Import, configure, and assign a Group Policy object (GPO) to specify command lines for the installation. Configure the WSUS server to be a ConfigMgr software update point.
http://technet.microsoft.com/en-us/library/bb633194.aspx How to Install Configuration Manager Clients Using Software Update Point Based Installation Software update point based client installation publishes the Configuration Manager 2007 client to a software update point, as an additional software update. This method of client installation can be used to install the Configuration Manager 2007 client on computers that do not already have the client installed, or to upgrade existing Configuration Manager 2007 clients. If a computer is an existing Configuration Manager 2007 client, its Configuration Manager client policy provides the software update point server name and port from which to obtain software updates. If you have not extended the Active Directory schema, you can use Windows Group Policy to provision client installation settings to computers in your site. These settings will automatically be applied to any software update point based client installations. For more information, see How to Provision Configuration Manager Client Installation Properties using Group Polic: http://technet.microsoft.com/en-us/library/bb632469.aspx and How to Assign Configuration Manager Clients to a Site: http://technet.microsoft.com/en-us/library/bb680370.aspx
http://technet.microsoft.com/en-us/library/bb633236.aspx How to Create and Configure an Active Software Update Point The software update point in Microsoft System Center Configuration Manager 2007 is a required component of software updates and is installed as a site system role in the Configuration Manager console. The software update point site system role must be created on a site system server that has Microsoft Windows Server Update Services (WSUS) 3.0 installed. There can be multiple site system servers with the software update point site system role, but only one site system server can be configured as the active software update point.
QUESTION 10 You have a System Center Configuration Manager 2007 environment. You install the Configuration Manager client agent on all Microsoft Windows 2000 Professional and Microsoft Windows XP Professional computers in the environment. You need to ensure that you can remotely control user sessions on all computers. What should you do?
A. B. C. D.
Configure Remote Desktop settings by using a Group Policy object (GPO). Configure Remote Desktop settings in the Remote Tools client agent. Configure Remote Tools settings in the Remote Tools client agent. Configure Remote Assistance in the Remote Tools client agent.
Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Configure Remote Tools settings in the Remote Tools client agent. http://technet.microsoft.com/en-us/library/bb681039.aspx Remote Tools in Configuration Manager Configuration Manager 2007 remote tools allow you to remotely access and operate client computers in the Configuration Manager 2007 site which have the remote tools client agent components installed.
http://technet.microsoft.com/en-us/library/bb693702.aspx Overview of Remote Tools Remote control is a subfeature of the remote tools application. You can use remote control to view or operate a computer anywhere in the Configuration Manager 2007 site hierarchy. You can use remote control to troubleshoot hardware and software configuration problems on remote client computers and to provide remote help desk support when access to the user's computer is necessary. Configuration Manager 2007 supports remote control both of Workgroup computers and of computers joined to a domain. To use remote tools, the option Enable Remote Tools on clients must be selected in the Remote Tools Client Agent Properties dialog box. QUESTION 11 You have a System Center Configuration Manager 2007 environment. You need to create a collection that contains computers that have not reported hardware inventory within 30 days. You also need to ensure that the collection automatically updates its membership. What should you do? A. Create a query membership collection rule where LastHardwareScan is equal to specific date/time stamps. B. Create a Configuration Manager query where LastHardwareScan is equal to specific date/time stamps. C. Create a Configuration Manager query that uses the WBEM Query Language (WQL) commands DateDiff and GetDate. D. Create a query membership collection rule that uses the WBEM Query Language (WQL) commands DateDiff and GetDate. Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Create a query membership collection rule that uses the WBEM Query Language (WQL) commands DateDiff and GetDate. http://technet.microsoft.com/en-us/library/bb694209.aspx About Collection Membership When creating a collection, membership in that collection can either be direct or query based. Query-Based Membership Unlike the direct membership method, query-based membership is a dynamic method for creating your collection. This means that you do not define the resources that are to be members of the collections; rather, you define the rules by which those members are placed in the collections. These rules form a query, and Configuration Manager periodically reruns the query to keep the collection up to date. http://technet.microsoft.com/en-us/library/bb632722.aspx Query Statement Properties: Query Language Tab Use this tab to work in the Query Language view. You can work in the Query Language view to compose or edit a query manually by using WBEM Query Language (WQL) commands. QUESTION 12 You upgrade your Systems Management Server (SMS) 2003 site and all client computers to System Center Configuration Manager 2007. You need to enable software update management in Configuration Manager 2007. Which two components should you install?
A. B. C. D.
Windows Server Update Services and Inventory Tool for Microsoft Updates Inventory Tool for Microsoft Updates and a Configuration Manager distribution point Windows Server Update Services and a software update point Inventory Tool for Microsoft Updates and a software update point
Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Windows Server Update Services and a software update point http://technet.microsoft.com/en-us/library/bb680712.aspx Prerequisites for Software Updates Dependencies External to Configuration Manager 2007 Windows Server Update Services (WSUS) 3.0 Software updates requires WSUS 3.0 for software updates synchronization and for the software update compliance assessment scan on clients. The WSUS server must be installed before creating the software update point site role, which uses the WSUS server as a prerequisite component. The software update point component handles synchronization requests to WSUS, inserting synchronized software updates metadata into the site server database and sending state messages to indicate the current status. Clients connect to the WSUS server when performing compliance assessment scans for software updates. The Windows Update Agent (WUA) on the client computer connects to the WSUS server to retrieve the relevant software updates metadata to perform the scan. WSUS 3.0 is available for download on the Microsoft Download Center Web site. Further explanations: http://technet.microsoft.com/en-us/library/bb633261.aspx About the Inventory Tool for Microsoft Updates The Inventory Tool for Microsoft Updates in Configuration Manager 2007 provides backward compatibility for Systems Management Server (SMS) 2003 clients to scan for software updates compliance using the Microsoft Update catalog. During the SMS 2003 site upgrade to Configuration Manager 2007, Setup detects whether a previous version of the Inventory Tool for Microsoft Updates is installed on the site and verifies that another installation of the tool is not installed on a site higher in the hierarchy. If both are true, Setup initiates an upgrade for the inventory tool on the site server. QUESTION 13 You have a System Center Configuration Manager 2007 environment. You use DHCP to discover client computers in a separate domain from the site servers domain. You configure network discovery to use DHCP, and you execute a discovery cycle. No discovery information is returned from the DHCP server. You need to discover the computers that are assigned IP addresses by the DHCP server. What should you do? A. B. C. D.
Add a DHCP relay in the same domain as the site server. Add the Configuration Manager Administrator account to the DHCP Users local group on the DHCP server. Add the site server computer account to the DHCP Users local group on the DHCP server. Add the DHCP server computer account to the SMS_SiteToSiteConnection local group on the site server.
Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Add the site server computer account to the DHCP Users local group on the DHCP server.
http://technet.microsoft.com/en-us/library/bb680764.aspx About DHCP Servers and Network Discovery When configuring Network Discovery to discover a client, you can set it to use DHCP servers to discover DHCP clients. Although this functionality is useful, it does have some limitations. The primary limitation to using DHCP servers for the Network Discovery method is that the site server computer$ account must have user-level security access to the DHCP server specified on the DHCP tab of the Network Discovery Properties dialog box. This means that one of the following conditions must be true: The specified server is the DHCP server of the Configuration Manager site server. The computer running Network Discovery and the DHCP server are in the same domain. The computer running Network Discovery and the DHCP server trust each other. The site server computer$ account has the same user name and password as a local computer account on the DHCP server. The site server computer$ account has the same user name and password as an account in the DHCP server's domain. The site server is a member of the DHCP users group. Further explanations: http://en.wikipedia.org/wiki/Dynamic_Host_Configuration_Protocol Dynamic Host Configuration Protocol Because the DHCP protocol must work correctly even before DHCP clients have been configured, the DHCP server and DHCP client must be connected to the same network link. In larger networks, this is not practical. On such networks, each network link contains one or more DHCP relay agents. These DHCP relay agents receive messages from DHCP clients and forward them to DHCP servers. DHCP servers send responses back to the relay agent, and the relay agent then sends these responses to the DHCP client on the local network link. QUESTION 14 You have a System Center Configuration Manager 2007 environment. You plan to deploy two Microsoft security updates named Update1 and Update2. You want to deploy Update1 on Friday, and you want to deploy Update2 next Wednesday. You need to ensure that Update1 and Update2 are deployed according to your desired schedule. What should you do? A. Use the Distribute Software Updates Wizard (DSUW) to create a new update package that contains Update1 and Update2. Specify the authorization times for each update. Create a new mandatory advertisement for the DSUW package. B. Create two update lists, one for Update1 and one for Update2. Create two update deployments, with a deadline of Friday for Update1 and next Wednesday for Update2. C. Create one update list that contains Update1 and Update2. Create one update deployment, with an authorization time of Friday for Update1 and next Wednesday for Update2. D. Create one update list that contains Update1 and Update2. Create two update deployments, with a deadline of Friday for Update1 and next Wednesday for Update2. Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Create two update lists, one for Update1 and one for Update2. Create two update deployments, with a deadline of Friday for Update1 and next Wednesday for Update2. http://technet.microsoft.com/en-us/library/bb693997.aspx Deploy Software Updates Wizard: Deployment Schedule Page
Use the Deployment Schedule page in the Configuration Manager 2007 Deploy Software Updates Wizard to specify when a software update deployment will become active and whether software update installation will be enforced on clients. UI Element List: As soon as possible Date and time Do not set a deadline for software update installation Set deadline for software update installation Enable Wake On LAN Ignore maintenance windows and install immediately at deadline
QUESTION 15 You have a System Center Configuration Manager 2007 environment. You run weekly backups of your Configuration Manager server. Your primary site database and configuration files are corrupted by a hardware driver. You install an updated driver. However, the site database and configuration files are still corrupted. You need to repair your Configuration Manager site. What should you do? A. B. C. D.
Use the Site Repair Wizard to verify the consistency of the Configuration Manager configuration. Restore the Microsoft SQL Server database from the most recent backup. Use the Ntbackup.exe utility to restore the most recent backup. Use the Site Repair Wizard to restore the most recent backup.
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Use the Site Repair Wizard to restore the most recent backup. http://technet.microsoft.com/en-us/library/bb680393.aspx About the Site Repair Wizard The Configuration Manager 2007 Site Repair Wizard performs complex recovery tasks that are difficult or impossible to perform by administrators manually. Main Functions of the Site Repair Wizard The Site Repair Wizard is meant to make the task of recovering a Configuration Manager 2007 site as simple as possible, while minimizing the off-line time associated with recovering a site. The main functions of the Site Repair Wizard are: Shut down the site and site systems associated with the site Restore the site database, registry, and site server files from backups created using the Backup ConfigMgr Site Server maintenance task Synchronize and reset transaction serial numbers When possible, recover changes made since the site backup used for recovery was made Prompt the administrator for certain changes made since backup Restart the site QUESTION 16 You have a System Center Configuration Manager 2007 environment. You plan to deploy Microsoft Windows Vista. You want to deploy an application named App1 during the operating system deployment process. When you create a task sequence, you notice that App1 does not appear as an available package to deploy. You need to add App1 to the task sequence. What should you do?
A. B. C. D.
Enable the whether or not a user is logged on program setting for App1. Enable the MOM maintenance mode program setting for App1. Disable the Suppress program notifications program setting for App1. Disable the Disconnect users from distribution points program setting for App1
Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: Enable the whether or not a user is logged on program setting for App1. http://technet.microsoft.com/en-us/library/bb632474.aspx How to Install Software Packages as Part of a Task Sequence You can use a task sequence to install software as part of any operating system image deployment, or to install software on an existing Microsoft System Center Configuration Manager 2007 client. Using steps in a task sequence, Configuration Manager 2007 can install one or more Configuration Manager 2007 software packages on a target computer after the new operating system is installed, but before the user is first allowed to login. The installation of each software package in the task sequence completes in order before the next software package is installed. Desktop users cannot login to the computer until all software packages have been installed. Programs associated with each Configuration Manager 2007 package must run under the computer's system account and be configured to install automatically and silently without user interaction. When you use a task sequence to install an application Configuration Manager 2007 checks the following two conditions: 5. Whether or not a user must be logged in for the installation to proceed. 6. Whether or not user any user input is required. QUESTION 17 You have a System Center Configuration Manager 2007 environment. You create a package to deploy software updates to a collection of client computers. You need to ensure that these updates are deployed to all client computers as soon as possible. What should you do in the Deploy Software Updates Wizard? A. Set the date and time when software will be made available to client computers to the current time. Select the Do not set a deadline for software update installation option. B. Select the as soon as possible schedule option. C. Set a deadline for software update installation for the current date and time. D. Set the date and time when software will be made available to client computers to the current time. Configure an authorization time for the current date and time. Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Set a deadline for software update installation for the current date and time. http://technet.microsoft.com/en-us/library/bb693997.aspx Deploy Software Updates Wizard: Deployment Schedule Page Use the Deployment Schedule page in the Configuration Manager 2007 Deploy Software Updates Wizard to specify when a software update deployment will become active and whether software update installation will be enforced on clients. UI Element List:
Set deadline for software update installation Specifies that the software updates in the deployment are mandatory and require automatic installation by a specific date and time. If the deadline is reached and the software updates in the deployment are still required on the client, the update installation will automatically be initiated. Further explanations: As soon as possible Specifies that the software updates in the deployment are made available to clients as soon as possible. When the deployment is created, the machine policy is updated, clients are made aware of the deployment at their next machine policy evaluation cycle, and then the updates are available for installation. http://social.technet.microsoft.com/Forums/en-US/configmgrsum/thread/48534a4d-c4f7-4f9e-9926fb3f948f501d How soon is "as soon as possible"? As soon as possible means as soon as the client retrieves the policy to indicate there is something for the client to do. SCCM doesn't really "push" programs or updates to clients. It is always dependent upon the client "pulling" policies, and then activating the deployment. ASAP really just means that the deployment is available now, whenever the client polls policies - by default, that is hourly. You can change that (Computer Client Agent) but not normally a good idea to get too carried away with short intervals, as it generates network traffic, and affects all clients. QUESTION 18 You have a System Center Configuration Manager 2007 environment. You have 300 Configuration Manager site servers deployed globally. Each of these site servers has at least one distribution point. You have many new business applications that need to be available to specific locations throughout your company. You need to configure package distribution to select multiple distribution points. What should you do? A. Create collections for each business application, and assign appropriate collection variables. B. Increase the maximum number of concurrent packages on the software distribution component for each site. C. Configure the software distribution component for each site to send the package from the nearest site in the hierarchy. D. Create distribution point groups based on business application needs. Target each distribution point group as necessary. Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Create distribution point groups based on business application needs. Target each distribution point group as necessary. http://technet.microsoft.com/en-us/library/bb632891.aspx Distribution Point Group Properties: General Tab Use the General tab in the Configuration Manager 2007 Distribution Point Group Properties dialog box to create a new distribution point group or view the properties of an existing group. http://technet.microsoft.com/en-us/library/b2516212-e524-4031-9a1f7b768084304d#BKMK_PlanForDistributionPointGroups Plan for Distribution Point Groups Distribution point groups provide a logical grouping of distribution points for content distribution. When you
distribute content to a distribution point group, all distribution points that are members of the distribution point group receive the content. If you add a distribution point to the distribution point group after an initial content distribution, the content is automatically distributed to the new distribution point member. You can add one or more distribution points from any site in the Configuration Manager hierarchy to the distribution point group. You can also add the distribution point to more than one distribution point group, to manage and monitor content from a central location for distribution points that span multiple sites. You can also add a collection to distribution point groups, which creates an association, and then distribute content to the collection. When you distribute content to a collection, the content is assigned to all distribution point groups that are associated with the collection. The content is then distributed to all distribution points that are members of those distribution point groups. There are no restrictions on the number of distribution point groups that can be associated with a collection or the number of collections that can be associated with a distribution point group. If you add a collection to a distribution point group, the distribution point group does not automatically receive content previously distributed to the associated collection. However, the distribution point group receives all new content that is distributed to the collection. http://www.petervanderwoude.nl/post/distribution-point-groups-in-configmgr-2007/ Distribution Point Groups in ConfigMgr 2007 The most important thing to understand is that Distribution Point Groups are NOT meant to balance the load. Distribution Point Groups are meant to facilitate the processes of copying packages to Distribution Points (DP). Packages can then be sent to a Group of DPâ&#x20AC;&#x2122;s rather than to a single DP. http://msitpros.com/?p=75 Grouping Distribution Points in ConfigMgr 2007 When you have a lot of distribution points it is often time consuming to update them with update or software packages. Especially when they are located different time zones. Make this process easier by targeting the packages to a distribution point group instead of individual DPs. QUESTION 19 You have a System Center Configuration Manager 2007 environment. You need to view the advertisements that ran between 12:00 P.M. and the current time. What should you do? A. B. C. D.
View status on the Package Status Home Page. View top 10 advertisement activity on the Software Distribution Home Page. View advertisement activity on the Advertisement Status Home Page. Run an advertisement status report for all recently created advertisements.
Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: View advertisement activity on the Advertisement Status Home Page. http://technet.microsoft.com/en-us/library/bb680561.aspx Advertisement Status Home Page The Advertisement Status home page in Configuration Manager 2007 displays a snapshot of all advertisements currently running on the Configuration Manager 2007 site. Actions for the Advertisement Status Home Page The following actions are available on the advertisement status home page: Display Interval - Allows you to filter the displayed advertisements by date and time.
Further explanations: http://technet.microsoft.com/en-us/library/bb632617.aspx Package Status Home Page The Package Status home page in Configuration Manager 2007 displays a snapshot of all packages currently defined for the Configuration Manager 2007 site. http://technet.microsoft.com/en-us/library/bb681045.aspx Software Distribution Home Page The Software Distribution console tree node is the home page for the software distribution feature in Configuration Manager 2007. It displays a summary of recent software distribution advertisements and contains the Packages and Advertisements subnodes. The status of advertisements to destination computers is shown in the Software Distribution Status Summary results pane, which displays the 10 most active advertisements for the specified period of the last day, the last 7 days, or the last 30 days. http://technet.microsoft.com/en-us/library/bb693659.aspx About Software Distribution Reporting Microsoft System Center Configuration Manager 2007 reporting provides you with a number of predefined reports that you can use as is or that you can modify to view information about software distribution subjects, including advertisements, packages and distribution points. The following predefined reports are available for software distribution: All advertisements - Displays all advertisements at this site. QUESTION 20 You upgrade your environment from Systems Management Server (SMS) 2003 to System Center Configuration Manager 2007. The Software Inventory client agent is disabled. You need to identify the computers that need to be upgraded. Which query criteria should you use? A. B. C. D.
where the Software File Name Criteria setting is ccmexec.exe and the Version setting is less than 2.50 where the Software File Name Criteria setting is ccmexec.exe and the Version setting is less than 4.0 where the SMS Advanced Client State Version Criteria setting is less than 2.50 9 where the SMS Advanced Client State Version Criteria setting is less than 4.0
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: where the SMS Advanced Client State C Version setting is less than 4.0 http://technet.microsoft.com/en-us/library/bb633154.aspx About Reports for Configuration Manager Clients The following reports help you track and monitor client deployment for both Configuration Manager 2007 clients and SMS 2003 clients, and do not require that clients are assigned a fallback status point: Computers Assigned but not installed for a particular site Computers with a specific SMS client version Count clients assigned and installed for each site Count clients for each site Count SMS client versions
Further explanations: http://netsaber.wordpress.com/2006/06/29/sms-2003-advanced-client-versions/ SMS 2003 Advanced Client Versions Client Versions 2.50.3635.1009 – DMFP Client Client Versions 2.50.2625.0000 Client Versions 2.50.2726.0018 – SMS RTM Client Versions 2.50.2726.0104 – SMS 2003 RTM with Hotfixes Client Versions 2.50.3004.0000 Client Versions 2.50.3174.1009 – SMS 2003 SP1 Client Versions 2.50.3174.1018 – SMS 2003 SP1 Client Versions 2.50.3174.1152 – SMS 2003 SP1 with ITMU Hotfixes Client Versions 2.50.4253.3000 – SMS 2003 SP3 http://en.wikipedia.org/wiki/System_Center_Configuration_Manager System Center Configuration Manager 2007 & 2012 Version history ConfigMgr 2007 RTM Version/Build: 4.00.5931.0000 http://technet.microsoft.com/en-us/library/bb681072.aspx About the Software Inventory Client Agent Software inventory is the process of gathering software information from client computers in a Microsoft System Center Configuration Manager 2007 site. The information gathered can include data on the operating system, installed programs, and any files you want to inventory or collect. Configuration Manager 2007 stores this data in the site database, where you can use the information in queries to generate and view reports, or to build software-specific collections. QUESTION 21 You have a System Center Configuration Manager 2007 environment at a main office and a branch office. The two sites are connected with a dedicated network connection. You use Wake On LAN to power on computers after business hours. The computers in the branch office do not power on when you send them Wake On LAN packets. You need to ensure that the computers are powered on in the branch office. What should you do? A. B. C. D.
Change the boot order for the branch office computers so that network boot is the first option. Change the boot order for the branch office computers so that network boot is not the first option. Enable Wake On LAN in the BIOS of the branch office computers. Change the Wake On LAN packet to include the MAC address Configuration Manager software distribution point. E. Disable Pre-boot Execution Environment (PXE) in the BIOS of the branch office computers. Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Enable Wake On LAN in the BIOS of the branch office computers. http://en.wikipedia.org/wiki/Wake-on-LAN Wake-on-LAN Wake-on-LAN (WOL) is an Ethernet computer networking standard that allows a computer to be turned on or woken up by a network message. The message is usually sent by a program executed on another computer on the same local area network. It is also possible to initiate the message from another network by using Subnet directed broadcasts or a WOL
gateway service. Equivalent terms include wake on WAN, remote wake-up, power on by LAN, power up by LAN, resume by LAN, resume on LAN and wake up on LAN. Wake-on-LAN is implemented using a special network message called a magic packet. The magic packet contains the MAC address of the destination computer. The listening computer waits for a magic packet addressed to it and then initiates system wake-up. QUESTION 22 You are planning an upgrade of your Systems Management Server (SMS) 2003 central site to System Center Configuration Manager 2007. SQL Server replication is enabled on the SMS 2003 site database. You need to test the upgrade of the SMS 2003 site database to Configuration Manager 2007. You create a parallel test environment. Which two actions should you perform in the test environment? (Each correct answer presents part of the solution. Choose two.) A. Delete any existing local SQL Server replication subscriptions, and configure the SMS 2003 site database to publish for replication. B. Delete any existing local SQL Server replication subscriptions, and disable replication on the SMS 2003 site database. C. Run Configuration Manager 2007 Setup on the SMS 2003 site database with the /testdbupgrade switch. D. Run Configuration Manager 2007 Setup on the SMS 2003 site database with the /prereq switch. Correct Answer: BC Section: (none) Explanation Explanation/Reference: Answer: Delete any existing local SQL Server replication subscriptions, and disable replication on the SMS 2003 site database. Run Configuration Manager 2007 Setup on the SMS 2003 site database with the /testdbupgrade switch. http://technet.microsoft.com/en-us/library/bb693648.aspx How to Test the Site Database Upgrade Process Before beginning the site upgrade process, you should test the site database upgrade process on a copy of the Microsoft Systems Management Server (SMS) 2003 site database to be upgraded. To test the database for an upgrade, you use the /testdbupgrade setup command-line switch, as in the following example: Setup /testdbupgrade SMS_<sitecode> When this command is run, the setup Prerequisite Checker will launch and verify that the database to be tested meets the requirements for the test. The test must be run on a supported version of Microsoft SQL Server 2005, and SQL Server database replication must not have been configured for the database before it was copied or backed up in preparation for the test. Note The database upgrade test fails on SMS site databases that are copied or restored from an SMS 2003 site database with SQL Server database replication enabled. This is because when SQL Server database replication is enabled for the SMS 2003 site database, the computer running SQL Server modifies the SQL Server tables that are included in the publication. When the database is restored to another database, the setup /testdbupgrade fails on that restored SMS site database. QUESTION 23 You have a System Center Configuration Manager 2007 environment. You need to force deployment of critical Microsoft security updates to all Configuration Manager client computers on your corporate network. What should you do? A. Enable the system health validator point. B. Create a desired configuration management baseline.
C. Configure a package and advertisement by using the Inventory Tool for Microsoft Updates and the Distribute Software Updates Wizard. D. Create a deadline for a software update deployment to deploy updates to all client computers. Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Create a deadline for a software update deployment to deploy updates to all client computers. http://technet.microsoft.com/en-us/library/bb693997.aspx Deploy Software Updates Wizard: Deployment Schedule Page Use the Deployment Schedule page in the Configuration Manager 2007 Deploy Software Updates Wizard to specify when a software update deployment will become active and whether software update installation will be enforced on clients. UI Element List: Set deadline for software update installation Specifies that the software updates in the deployment are mandatory and require automatic installation by a specific date and time. If the deadline is reached and the software updates in the deployment are still required on the client, the update installation will automatically be initiated. Further explanations: http://technet.microsoft.com/en-us/library/bb693545.aspx About System Health Validator Points in Network Access Protection The System Health Validator point is the Configuration Manager 2007 site system role that runs on Windows Server 2008 with the Network Policy Server (NPS) role. When using Network Access Protection (NAP) in Configuration Manager 2007, the System Health Validator point is needed to validate the statement of health from NAP-capable Configuration Manager clients to produce a client health state of compliant or non-compliant, or an error condition that prevented the health state from being determined. http://technet.microsoft.com/en-us/library/bb633261.aspx About the Inventory Tool for Microsoft Updates The Inventory Tool for Microsoft Updates in Configuration Manager 2007 provides backward compatibility for Systems Management Server (SMS) 2003 clients to scan for software updates compliance using the Microsoft Update catalog. QUESTION 24 You have a System Center Configuration Manager 2007 environment. You need to configure all your computers to have a Temporary Program Download folder size of 3 GB. What should you do? A. Modify the Client Push Installation settings to configure SMSCACHESIZE=3072. Use the Client Push Installation Wizard, select the Always install (repair or upgrade existing client) check box, and target the All Systems collection. B. Modify the Client Push Installation settings to configure SMSCACHESIZE=3072. Use the Client Push Installation Wizard, select the Include subcollections check box, and target the All Systems collection. C. Create a Microsoft Visual Basic (VB) script to set the cache size to 3072. Create an advertisement with a mandatory assignment to deploy the VB script to all client computers.
D. Create a Microsoft Visual Basic (VB) script to set the cache size to 3072. Create a software advertisement to deploy the VB script to all client computers. Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Create a Microsoft Visual Basic (VB) script to set the cache size to 3072. Create an advertisement with a mandatory assignment to deploy the VB script to all client computers. http://depsharee.blogspot.de/2011/03/how-to-configure-configuration-manager.html How to configure Configuration Manager client cache size You can change Configuration Manager client cache with VB script or PowerShell. After changes are done then you have to restart CCMEXEC service that changes are applied. You need the advertisement to be mandatory so it will be installed on all client computers. Further explanations: http://technet.microsoft.com/en-us/library/cc179662.aspx Appendix I - Installing and Configuring SMS Clients You can also specify these installation properties on the Advanced Client tab in the Client Push Installation Properties dialog box in the SMS Administrator console: SMSCACHESIZE Specifies cache size in MB or as a percentage. If this property is not set, the cache defaults to a maximum size of 250 MB. If a new package that must be downloaded would cause the cache to exceed the maximum cache size, and the cache cannot be purged to make sufficient space available, then the package download fails and the advertised program does not run. Ccmsetup.exe SMSCACHESIZE=50 This option is not reapplied during site repair or reinstallation. QUESTION 25 You have a System Center Configuration Manager 2007 environment. You run Active Directory System Group discovery, but no client computers are discovered. You need to discover client computers. You also need to record the organizational unit (OU) to which the client computers belong in the Configuration Manager database. What should you do? A. In the Active Directory System Group Discovery properties, create a custom LDAP query to the OU where the computers are located. B. Enable and run Active Directory System Discovery, create a custom LDAP query to the OU where the computers are located. C. Enable and run Heartbeat Discovery. D. Configure Active Directory System Group Discovery to run on a schedule. E. In the Active Directory System Group Discovery properties, select the Recursive Search check box. Correct Answer: B Section: (none) Explanation
Explanation/Reference: Answer: Enable and run Active Directory System Discovery, create a custom LDAP query to the OU where the computers are located. http://technet.microsoft.com/en-us/library/bb694214.aspx About Active Directory System Discovery Configuration Manager 2007 Active Directory System Discovery searches the specified Active Directory location for computer resources that can be used to create collections and queries. You can then install the client to these discovered computers by using client push installation. To successfully create a discovery data record (DDR) for a computer, Active Directory System Discovery must be able to identify the computer account and then successfully resolve the computer name to an IP address. The system attributes returned by Active Directory System Discovery can be configured in Active Directory System Discovery Properties on the Active Directory Attribute tab. By default, the following attributes are collected: Computer name Operating system Object class DNS Host name Domain http://technet.microsoft.com/en-us/library/bb693618.aspx How to Configure Active Directory System Discovery To configure Active Directory System Discovery .. 5. In the New Active Directory Container dialog box, specify the container to search by location. Three options are available: Local domain: Searches for Active Directory containers in the domain in which the computer hosting the Configuration Manager console resides. Local forest: Searches for Active Directory containers in the forest in which the computer hosting the Configuration Manager console resides. Custom LDAP or GC Query: Searches for Active Directory containers using a Lightweight Directory Access Protocol (LDAP) or a General Catalog (GC) query. If this option is selected, you can either enter the path to an existing query to run the search or click Browse to navigate to a query. Further explanations: http://technet.microsoft.com/en-us/library/bb694071.aspx About Active Directory System Group Discovery Configuration Manager 2007 Active Directory System Group Discovery provides additional information about group memberships for resources previously discovered by Configuration Manager. This method does not discover new resources; it adds group information to previously discovered resources. Active Directory System Group Discovery provides the following group information about discovered computer accounts: Organizational unit Global groups Universal groups Nested groups Distribution groups QUESTION 26 You have a System Center Configuration Manager 2007 environment. A custom application named App1 is installed by using Windows Installer. Depending on the other applications installed on a computer, App1 might require a restart after installation. You need to ensure that Configuration Manager 2007 deploys App1 with accurate status messages. What should you configure in the program properties?
A. B. C. D.
Specify a command-line argument of /forcerestart, and select the Program restarts computer option. Specify a command-line argument of /forcerestart, and select the ConfigMgr restarts computer option. Specify a command-line argument of /passive, and select the ConfigMgr restarts computer option. Specify a command-line argument of /passive, and select the Program restarts computer option.
Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: Specify a command-line argument of /forcerestart, and select the Program restarts computer option. http://technet.microsoft.com/en-us/library/bb693891.aspx New Program Wizard - General Page Use the General page in the Microsoft System Center Configuration Manager 2007 New Program Wizard to specify general information about the specific program selected, including name, command line, comments, and behavior after running. UI Element List After running: Specifies the action that occurs after this program has completed successfully: No action required: No restart or log off is required. This is the default value. SMS restarts computer: The computer is restarted automatically by Configuration Manager 2007. Program restarts computer: The program requires a restart and performs this action automatically. SMS logs user off: The current user is logged off the computer after the program is completed. Use this option if the program requires that the user log off and then log on again before it can run. Important Both the Configuration Manager restarts computer and Configuration Manager logs user off actions are done forcefully after providing the user with a grace period. Applications that are running on clients when this occurs do not have an opportunity to save their states or data. Further explanations: http://msdn.microsoft.com/en-us/library/windows/desktop/aa372024%28v=vs.85%29.aspx Standard Installer Command-Line Options /forcerestart Always restart option. The installer always restarts the computer after every installation. /passive Passive display option. The installer displays a progress bar to the user that indicates that an installation is in progress but no prompts or error messages are displayed to the user. The user cannot cancel the installation. Use the /norestart or /forcerestart standard command-line options to control reboots. If no reboot option is specified, the installer restarts the computer whenever necessary without displaying any prompt or warning to the user. QUESTION 27 You have a System Center Configuration Manager 2007 environment running in mixed mode. Some users report that when they attempt to run an advertised program named App1 they lose connectivity. You need to ensure that users are able to install App1. What should you do? A. Configure the advertisement so that client agents run the program directly from the distribution point. B. Configure the advertisement so that client agents download the package content from the distribution point and run it locally. C. Configure the advertisement to use a remote distribution point when no distribution point is available locally.
D. Configure the App1 Program properties to allow users to interact with the program. Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Configure the advertisement so that client agents download the package content from the distribution point and run it locally. http://technet.microsoft.com/en-us/library/bb680566.aspx Advertisement Name Properties: Distribution Points Tab Use the Distribution Points tab in the Configuration Manager 2007 Software Distribution <Advertisement Name> Properties dialog box to specify how to deliver and run the content for the specific advertisement selected, depending on the type of boundary to which the client computer is connected. Download content from distribution point and run locally. Specifies whether an advertised program is downloaded to the client computer before Configuration Manager 2007 attempts to run the program. If the distribution point supports Background Intelligent Transfer Service (BITS), you can use this setting to ensure a fault tolerant download of the advertised program. In the event of interruption, BITS resumes the download the next time the computer connects to the network so this will not cause a problem. If you are not using a BITS-enabled distribution point and the computer disconnects from the network, the download fails. QUESTION 28 You have a System Center Configuration Manager 2007 environment. Your company identifies virtual machines by adding an additional attribute named isVirtual and setting it to TRUE for the computer objects in Active Directory. You need to create and populate collections for virtual machines. What should you do? A. B. C. D.
Create a collection for the virtual machines. Create a new collection variable for the isVirtual attribute. Initiate a discovery data collection cycle on the virtual machine clients. Configure Active Directory System Group Discovery, and select the option to include groups. Configure Active Directory System Discovery to include the isVirtual attribute.
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Configure Active Directory System Discovery to include the isVirtual attribute. http://technet.microsoft.com/en-us/library/bb694214.aspx About Active Directory System Discovery Configuration Manager 2007 Active Directory System Discovery searches the specified Active Directory location for computer resources that can be used to create collections and queries. You can then install the client to these discovered computers by using client push installation. To successfully create a discovery data record (DDR) for a computer, Active Directory System Discovery must be able to identify the computer account and then successfully resolve the computer name to an IP address. The system attributes returned by Active Directory System Discovery can be configured in Active Directory System Discovery Properties on the Active Directory Attribute tab. By default, the following attributes are collected: Computer name Operating system Object class
DNS Host name Domain http://technet.microsoft.com/en-us/library/bb693618.aspx How to Configure Active Directory System Discovery To configure Active Directory System Discovery .. 5. In the New Active Directory Container dialog box, specify the container to search by location. Three options are available: Local domain: Searches for Active Directory containers in the domain in which the computer hosting the Configuration Manager console resides. Local forest: Searches for Active Directory containers in the forest in which the computer hosting the Configuration Manager console resides. Custom LDAP or GC Query: Searches for Active Directory containers using a Lightweight Directory Access Protocol (LDAP) or a General Catalog (GC) query. If this option is selected, you can either enter the path to an existing query to run the search or click Browse to navigate to a query. Further explanations: http://technet.microsoft.com/en-us/library/bb694071.aspx About Active Directory System Group Discovery Configuration Manager 2007 Active Directory System Group Discovery provides additional information about group memberships for resources previously discovered by Configuration Manager. This method does not discover new resources; it adds group information to previously discovered resources. Active Directory System Group Discovery provides the following group information about discovered computer accounts: Organizational unit Global groups Universal groups Nested groups Distribution groups http://technet.microsoft.com/en-us/library/bb681078.aspx Collection Name Settings: Collection Variables Tab Use the Collection Variables tab of the Configuration Manager 2007 Collection Name Settings dialog box to define custom task sequence variables and their associated values to be used by the resources in this collection. http://technet.microsoft.com/en-us/library/bb693541.aspx About Task Sequence Variables The Configuration Manager 2007 task sequence environment variables are a set of name and value pairs that supply configuration and operating system deployment settings for computer, operating system, and user state configuration tasks on a Configuration Manager 2007 client computer. Task sequence variables provide a mechanism to configure and customize the steps in a task sequence. http://serverfault.com/questions/364555/what-do-each-of-the-actions-in-the-sccm-client-actually-do Discovery Data Collection Cycle causes the client to generate a new discovery data record (DDR). When the DDR is processed by the site server, Discovery Data Manager adds or updates resource information from the DDR in the site database. QUESTION 29 You have a System Center Configuration Manager 2007 environment. You have a parent site named P01 and a
child primary site named C01. You configure client push installation for both sites. You notice that the installation of the Configuration Manager client agent fails on some client computers in the C01 site. You need to identify computers in the C01 site that failed to install the Configuration Manager client agent. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.) A. B. C. D. E. F.
Review status messages from the SMS_CLIENT_CONFIG_MANAGER component for the C01 site. Review status messages from the SMS_CLIENT_CONFIG_MANAGER component for the P01 site. Review status messages from the SMS_CLIENT_INSTALL_DATA_MGR component for the C01 site. Review status messages from the SMS_CLIENT_INSTALL_DATA_MGR component for the P01 site. Review the ccm.log file for the C01 site. Review the ccm.log file for the P01 site.
Correct Answer: AE Section: (none) Explanation Explanation/Reference: Answer: Review status messages from the SMS_CLIENT_CONFIG_MANAGER component for the C01 site. Review the ccm. log file for the C01 site. http://technet.microsoft.com/en-us/library/bb892800.aspx List of Log Files in Configuration Manager 2007 All the client and site server components in Microsoft System Center Configuration Manager 2007 record process information in individual log files. You can use the information in the client and site server log files to help you troubleshoot issues that might occur in your Configuration Manager 2007 hierarchy. Site Server Log Files - Most Configuration Manager 2007 site server log files are located in the <InstallationPath>\LOGS folder. Ccm.log - Client Configuration Manager tasks. http://support.microsoft.com/kb/925282 How to troubleshoot Advanced Client Push Installation issues in Systems Management Server 2003 and System Center Configuration Manager 2007 The SMS Client Configuration Manager cannot connect to the client Admin$ share or to the Remote Registry Service (IPC$) When the Client Configuration Manager cannot connect to Admin$, errors that resemble the following are logged in the Ccm.log file: 7260 (0x1C5C)6/6/2006 7:06:31 AM Attempting to connect to administrative share '\\<computername>\Admin$' using account 'domain \account'SMS_CLIENT_CONFIG_MANAGER 7400 (0x1CE8)6/6/2006 7:06:34 AM WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account domain\account (000004b3)SMS_CLIENT_CONFIG_MANAGER 7400 (0x1CE8)6/6/2006 7:06:34 AM WNetAddConnection2 failed (LOGON32_LOGON_INTERACTIVE) using account domain\account (000004b3)SMS_CLIENT_CONFIG_MANAGER 660 (0x0294)6/6/2006 7:06:35 AM ERROR: Unable to connect to remote registry for machine name "computername", error 53.SMS_CLIENT_CONFIG_MANAGER 660 (0x0294)6/6/2006 7:06:35 AM ERROR: Unable to access target machine for request: "computername.KRC", machine name: "computername", error code: 53SMS_CLIENT_CONFIG_MANAGER 660 (0x0294)6/6/2006 7:06:36 AMStored request "computername.KRC", machine name "computername", in queue "Retry".SMS_CLIENT_CONFIG_MANAGER QUESTION 30 You have a System Center Configuration Manager 2007 environment. You configure a software update
deployment package for a collection of server computers. The collection has a deployment schedule that coincides with the nightly server maintenance window. You need to prevent users that are logged on to the servers from manually installing updates in this deployment package only. What should you do? A. B. C. D.
On the Advertised Programs client agent, disable the Display a notification message setting. On the Software Updates client agent, select the Enforce all mandatory deployments setting. On the Software Updates client agent, select the Hide all deployments from end-users setting. In the Deploy Software Updates Wizard, select the Suppress display notifications on client setting.
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: In the Deploy Software Updates Wizard, select the Suppress display notifications on client setting. http://technet.microsoft.com/en-us/library/bb693744.aspx Deploy Software Updates Wizard: Display/Time Settings Page Use the Display/Time Settings page in the Configuration Manager 2007 Deploy Software Updates Wizard to configure whether users are notified of pending software updates and see the update installation progress, whether a client evaluates the deployment schedule based on local time or UTC, and the duration setting that is used to set the default deadline time in a deployment. UI Element List: Suppress display notifications on clients Specifies that display notifications are not used on clients and progress indicators are not displayed during update installation. Software update notification icons will still display on clients and users can click this icon to see available updates. Further explanations: http://technet.microsoft.com/en-us/library/bb632549.aspx About the Advertised Programs Client Agent When you distribute software to a collection of clients in Configuration Manager 2007, the Advertised Programs Client Agent determines which advertised programs are appropriate to the client or the user at the client. When an advertisement is found and the program is ready to run, the agent connects to an available distribution point to transfer or run the program. If the program runs an existing file on the client computer, the agent executes the program appropriately. The Advertised Programs Client Agent controls how clients check for advertised programs and how they behave when an advertised program is available or scheduled to run. By configuring the Advertised Programs Client Agent, you can specify these client behaviors as well as other client settings and run options. http://technet.microsoft.com/en-us/library/bb694104.aspx About the Software Updates Client Agent The Software Updates Client Agent handles compliance assessment scan requests, software update evaluation requests, deployment policies for the client, and content download requests. The Software Updates Client Agent properties contain several sitewide client agent settings. QUESTION 31 You have a System Center Configuration Manager 2007 environment. You create custom reports for mobile devices. Your mobile device administrator wants to modify specific custom reports. You need to give the mobile device administrator the minimum permissions that are required to modify specific custom reports. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. B. C. D.
Add the mobile device administrator to the Local Administrators group on the site server. Add the mobile device administrator to the SMS Admins local group on the site server. Assign the mobile device administrator modify permissions on the Reports node. Assign the mobile device administrator modify permissions for the specific reports.
Correct Answer: BD Section: (none) Explanation Explanation/Reference: Answer: Add the mobile device administrator to the SMS Admins local group on the site server. Assign the mobile device administrator modify permissions for the specific reports. http://technet.microsoft.com/en-us/library/bb680576.aspx About the SMS Admins Group SMS Admins provides its members with access to the SMS Provider, through WMI. Access to the SMS Provider is required for viewing and modifying Microsoft System Center Configuration Manager 2007 security objects and data in the Configuration Manager 2007 console. Anyone who needs to access the Configuration Manager 2007 Administrator console should be added to this group. http://technet.microsoft.com/en-us/library/bb632942.aspx About Configuration Manager Reports Reporting in Configuration Manager 2007 is integrated into the Configuration Manager console. Reports are secured Configuration Manager objects that you can create and manage in the Configuration Manager console. Like other Configuration Manager objects, you must have the appropriate credentials to create, modify, delete, view, or run reports. http://technet.microsoft.com/en-us/library/bb680648.aspx How to Assign Rights for Objects to Users and Groups To assign a security right to an existing object 1. In the Configuration Manager console, navigate to System CenterConfiguration Manager / Site Database / Security Rights / Rights. 2. Right-click Rights, click New, and then click either Class Security Right or Instance Security Right. 3. In the New Class Security Right Wizard or the New Instance Security Right Wizard, specify a user or group name and then select the rights you want the user to have. 4. Verify that the user is a member of the SMS Admins group.
QUESTION 32 You have a System Center Configuration Manager 2007 environment. A custom application named App1 is available in several localized versions. You need to report the usage of all localized versions of App1. What should you do? A. Create a software metering rule where the file name is App1.exe and where the language setting is Any. B. Create a software metering rule where the file name is App1.exe and where the language setting is set to the default. C. Create a software inventory rule for App1.exe. Enable reporting for file and product detail. D. Create a file collection rule for App1.exe.
Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: http://technet.microsoft.com/en-us/library/bb694169.aspx Software Metering in Configuration Manager The Configuration Manager 2007 software metering feature allows you to monitor and collect software usage data from Configuration Manager 2007 clients. http://technet.microsoft.com/en-us/library/bb633043.aspx How to Add a Software Metering Rule To add a new software metering rule: .. 3. On the General page of the New Software Metering Rule Wizard, specify the following information: .. File Name: The name of the executable file you want to meter. You can click Browse to display the Open dialog box, in which you can select the executable file to use. .. Language: The language of the executable file to meter. The default value is English (United States). If you select an executable file to be metered by using the Browse button, this field is automatically filled if language information is present in the header of the file. To meter all language versions of a file, select Any - from the drop-down list. Further explanations: http://technet.microsoft.com/en-us/library/bb693889.aspx Overview of Inventory You can use Configuration Manager 2007 to collect hardware and software inventory from Configuration Manager 2007 clients by enabling the client agents on a site-by-site basis. When the software inventory client agent is enabled, you can inventory information such as inventoried file types and versions present on client computers. The software inventory client agent can also collect information about files inventoried on client systems. Configuration Manager 2007 software inventory can also collect files, not just details about the files, from client computers. With file collection, you specify a set of files to be copied from clients to the Configuration Manager 2007 site server that the clients are assigned to. QUESTION 33 You have a System Center Configuration Manager 2007 environment. You clone an existing report that filters by computer name. You need to ensure that the report filters by computer name and user name. What should you do? A. B. C. D.
Modify the SQL statement by adding report column values. Modify the SQL statement by adding report views values. Modify the SQL statement to include the Order by function. Modify the SQL statement for the report.
Correct Answer: D Section: (none) Explanation Explanation/Reference:
Answer: Modify the SQL statement for the report. http://technet.microsoft.com/en-us/library/cc512027.aspx How to Modify an Existing SQL Reporting Services Report To modify a report .. 4. On the Datasets tab of the Report Properties dialog box, you can view and edit the SQL code for the report. http://technet.microsoft.com/en-us/library/cc678414.aspx Report Properties: Datasets Tab Use the Datasets tab of the Configuration Manager 2007 R2 Report Properties dialog box to create and modify the datasets used by the report. This tab contains the following elements: .. SQL Statement Displays the SQL statement for the currently selected dataset. Click the edit button to modify the SQL statement.
Further explanations: http://www.w3schools.com/sql/sql_select.asp SQL SELECT Statement The SELECT statement is used to select data from a database. The result is stored in a result table, called the result-set. SQL SELECT Syntax: SELECT column_name(s) FROM table_name and SELECT * FROM table_name An SQL SELECT Example: The "Persons" table: P_Id 1 2 3
LastName Hansen Svendson Pettersen
FirstName Ola Tove Kari
Address Timoteivn 10 Borgvn 23 Storgt 20
City Sandnes Sandnes Stavanger
Now we want to select the content of the columns named "LastName" and "FirstName" from the table above. We use the following SELECT statement: SELECT LastName, FirstName FROM Persons The result-set will look like this: LastName Hansen Svendson
FirstName Ola Tove
Pettersen
Kari
QUESTION 34 You have a System Center Configuration Manager 2007 environment. You want to manage several computers over the Internet. You install the Configuration Manager client agent on these computers. You log on to one of the computers by using administrative rights. You discover that you are unable to specify the fully qualified domain name (FQDN) for the Internet-based management point. You need to ensure that you can configure the Internet-based management point FQDN from the Configuration Manager item in Control Panel. What should you do? A. Reinstall the client agent by running the ccmsetup.exe command with the CCMALWAYSINF=1 property on the command line. B. Reinstall the client agent by running the ccmsetup.exe command with the CCMALWAYSINF=0 property on the command line. C. Migrate the Configuration Manager site to native mode. D. Add entries for your site systems to a public DNS server. Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Migrate the Configuration Manager site to native mode. http://technet.microsoft.com/en-us/library/bb632431.aspx Choose between Native Mode and Mixed Mode Choose native mode if any of the following conditions apply: You require the highest security controls, using industry-standard protocols. You require Internet-based client management. Further explanations: http://technet.microsoft.com/en-us/library/bb680980.aspx About Configuration Manager Client Installation Properties The format of the CCMSetup.exe command line is as follows: CCMSetup.exe [Ccmsetup properties] [client.msi setup properties] Property: CCMALWAYSINF Set to 1 to specify that the client will always be Internet-based and will never connect to the intranet. The client's connection type will display Always Internet. This property should be used in conjunction with CCMHOSTNAME, which specifies the FQDN of the Internetbased management point. It should also be used in conjunction with the CCMSetup property for native mode and with the site code. Example: CCMSetup.exe /native CCMALWAYSINF=1 CCMHOSTNAME=SERVER3.CONTOSO.COM SMSSITECODE=ABC http://technet.microsoft.com/en-us/library/bb633122.aspx Prerequisites for Internet-Based Client Management Internet-based client management in Configuration Manager 2007 has the following external dependencies and dependencies within the product.
The Internet fully qualified domain name (FQDN) of site systems that support Internet-based client management must be registered as host entries on public DNS servers. http://technet.microsoft.com/en-us/library/bb632609.aspx How to Configure the Internet FQDN of Site Systems that Support Internet-Based Client Management Internet DNS servers must be registered with a fully qualified domain name (FQDN) for the site systems that will support Internet-based client management, so that clients on the Internet can resolve the FQDN of Internetbased site systems to the public IP address of the Internet-based servers. These same Internet FQDNs must also be configured in Configuration Manager 2007 with the same Internet FQDNs. The site system roles that can support Internet-based client management are the following: Management point Distribution points Fallback status point Software updates point To configure the Internet FQDN of site systems that will support Internet-based client management 1. In the Configuration Manager console, navigate to System CenterConfiguration Manager / Site Database / Site Management / <site code> - <site name> / Site Settings / Site Systems. 2. Select the first server that will support Internet-based client management to display the list of roles. 3. Right-click ConfigMgr Site System, and then select Properties. 4. On the General tab, select Specify an Internet fully qualified domain name for this site system. 5. In the Internet FQDN text box, enter the Internet FQDN that is registered on the public Internet DNS for the server. 6. Click OK. 7. Repeat steps 3 to 6 for any remaining servers that will support Internet-based client management. QUESTION 35 You have a System Center Configuration Manager 2007 environment. You need to view the installation progress of an advertisement from a client computer. Which log file should you view? A. B. C. D.
PolicyEvaluator.log CcmExec.log Execmgr.log Offermgr.log
Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: execmgr.log http://technet.microsoft.com/en-us/library/bb892800.aspx List of Log Files in Configuration Manager 2007 All the client and site server components in Microsoft System Center Configuration Manager 2007 record process information in individual log files. You can use the information in the client and site server log files to help you troubleshoot issues that might occur in your Configuration Manager 2007 hierarchy. Client Log Files The following table lists and describes the client log files: .. Execmgr.log: Records advertisements that run.
Further explanations: Client Log Files PolicyEvaluator.log: Records new policy settings. CcmExec.log: Records activities of the client and the SMS Agent Host service. Site Server Log Files Offermgr.log: Records advertisement updates. QUESTION 36 You have a System Center Configuration Manager 2007 environment. You have a central site named C01 and a primary child site named S01. You notice that computers in the Active Directory site named Site001 are assigned to C01 and S01. You need to ensure that computers in Site001 are assigned to S01. What should you do? A. B. C. D. E.
Remove the Active Directory Site Boundary Site001 from S01. Remove the Active Directory Site Boundary Site001 from C01. Enable client push installation on S01 by using a command-line argument of SMSSITECODE=S01. Enable client push installation on S01 by using a command-line argument of SMSSITECODE=AUTO. Configure the Site001 boundary on C01 as a Slow or unreliable network, and configure the Site001 boundary on S01 as a Fast (LAN) network.
Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Remove the Active Directory Site Boundary Site001 from C01. http://technet.microsoft.com/en-us/library/bb633084.aspx Choose Configuration Manager Boundaries Computers are assigned as clients to Configuration Manager 2007 sites according to the boundaries you configure in the Configuration Manager console. Boundaries are defined by IP subnets, Active Directory site names, IPv6 Prefix, or IP ranges. Further explanations: http://technet.microsoft.com/en-us/library/bb680370.aspx How to Assign Configuration Manager Clients to a Site You can assign a Configuration Manager 2007 client to a site by using one of the following methods: Assign or reassign the client during installation, by either providing the Configuration Manager 2007 site code or by setting the site code to AUTO, which automatically discovers a site. Manually assign or reassign the client after installation. Use Windows Group Policy to assign or reassign the client. If the Active Directory schema has been extended for Configuration Manager 2007 and the SMSSITECODE installation property is set to AUTO, the client will query a management point to determine its assigned site. http://technet.microsoft.com/en-us/library/bb632910.aspx Planning Configuration Manager Boundaries When creating Configuration Manager 2007 boundaries, you must also specify the type of network connection
that the boundary will operate on. You must decide if the boundary will be used for either a Slow or unreliable or Fast (LAN) network connection. An example of a slow boundary would be one defined by an IP subnet connected to the site over a WAN. Fast boundaries should be made up of faster, more reliable connections such as a corporate LAN. Boundaries are used to assign clients to a specific Configuration Manager 2007 site and should be unique to each site. When defining site boundaries for sites, ensure that you do not define the same boundary for more than one Configuration Manager 2007 site. Doing so leads to a situation called overlapping site boundaries. Overlapping site boundaries are not supported and can lead to undefined results in Configuration Manager client behavior. QUESTION 37 Your Company has two System Center Configuration Manager 2007 sites that are installed at a main office and a branch office. You export the task sequence for an operating system deployment from the main office. You import the task sequence into the Configuration Manager site at the branch office. The task sequence deploys the operating system, but an application installation fails. You need to deploy all applications in the task sequence. What should you do? A. Modify the extension of the task sequence file from .XML to .CFG before importing it into the branch office Configuration Manager site. B. Add a conditional statement to the task sequence to skip errors. C. Use the Configuration Manager console to copy the application package to the branch office Configuration Manager site. D. Repackage each application with unique task sequence variables. Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Use the Configuration Manager console to copy the application package to the branch office Configuration Manager site. http://technet.microsoft.com/en-us/library/bb632642.aspx How to Copy a Task Sequence from one Configuration Manager 2007 Site to Another Task sequences are automatically propagated from Configuration Manager 2007 parent sites to Configuration Manager 2007 child sites. However, they are not propagated from child sites to parent sites, or from a Configuration Manager 2007 site in one hierarchy to an Configuration Manager 2007 site in another hierarchy. A task sequence can be exported as an XML file from one Configuration Manager 2007 site, and imported to another Configuration Manager 2007 site. Only the task sequence itself is exported. No reference packages are exported. Consequently, you must review each imported task sequence using the Task Sequence Editor for any references to packages and ensure that the task sequence references packages that exist in the site you have imported the task sequence to. User passwords and software product keys are also not exported and you will need to create the necessary task sequence steps at the site where the task sequence was imported. QUESTION 38 You have a System Center Configuration Manager 2007 environment. You discover that the state migration point is not responding. You need to view the error message that is associated with the state migration point. What should you do? A. View the Distmgr.log file. B. View the Sitectrl.log file. C. View the properties of the ConfigMgr state migration point under the Site Management node of the Configuration Manager console. D. View the messages under the Site System Status node of the Configuration Manager console.
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: View the messages under the Site System Status node of the Configuration Manager console. http://technet.microsoft.com/en-us/library/bb632870.aspx Using Status Messages for Configuration Manager Troubleshooting Microsoft System Center Configuration Manager 2007 status messages report information about Configuration Manager 2007 component behavior and data flow. Configuration Manager 2007 status messages are categorized by severity and type. http://technet.microsoft.com/en-us/library/bb633070.aspx Site Status Home Page When you click the Site Status node of the Configuration Manager console, you can view the status of the current Configuration Manager 2007 site and any other sites in the Configuration Manager 2007 hierarchy in the display pane of the Configuration Manager console window. For each Configuration Manager 2007 site in the list, the following information is shown by default: .. Status Displays the status of the Configuration Manager 2007 site and any child sites. The status will be one of the following: * OK * Warning * Critical .. Site Displays the name of the Configuration Manager 2007 site. .. Errors Displays the total number of error status messages reported by all site components during the display interval. .. Further explanations: http://blogs.msdn.com/b/lxchen/archive/2009/04/03/a-list-of-sccm-log-files.aspx Server Log Files Distmgr.log - Records package creation, compression, delta replication, and information updates. Sitectrl.log - Records site setting changes to the Sitectrl.ct0 file. QUESTION 39 You have a System Center Configuration Manager 2007 environment. All your computers have Pre-boot Execution Environment (PXE) boot enabled in their BIOS settings. You create and advertise a task sequence for an operating system installation package to your computers. However, the PXE boot option is not available on the computers when they receive the task sequence. You need to install the operating system installation package by using PXE boot to start the installation. What should you do? A. B. C. D.
Change the advertisement to be mandatory. Install the PXE Boot Service on a DHCP server in your environment. Establish a PXE Service Point role within your site. On the DHCP server, open port 67 to handle the PXE boot requests.
Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Establish a PXE Service Point role within your site. http://technet.microsoft.com/en-us/library/bb680668.aspx How to Configure the PXE Service Point You can use the PXE protocol to initiate operating system deployments to Configuration Manager 2007 client computers. Configuration Manager 2007 uses the PXE service point site role to initiate the operating system deployment process. The PXE service point must be configured to respond to PXE boot requests made by Configuration Manager 2007 clients on the network and then interact with Configuration Manager 2007 infrastructure to determine the appropriate deployment actions to take. You must assign the PXE service point site role to a server supported by Configuration Manager 2007 operating system deployment. The service site can be a primary or secondary site server. Further explanations: http://technet.microsoft.com/en-us/library/ee941126%28v=ws.10%29.aspx DHCP: Port 67 (DHCP server port for IPv4) should not be in use by any other process DHCP uses UDP ports 67 and 68 to initiate communication between the client and server. If either of these ports is in use by another application, or the ports are otherwise reserved, DHCP will not function. You can use Windows Firewall with Advanced Security (WFAS) with the following procedure to reassign ports so that DHCP can use port 67. http://technet.microsoft.com/en-us/library/bb694016.aspx Advertisement Name Properties: Schedule Tab Mandatory assignments Specifies any mandatory assignment schedules, which indicate that Configuration Manager will automatically run the program at a specific time or according to a specific event (such as Logon/Logoff).
QUESTION 40 You have a System Center Configuration Manager 2007 environment. You create a new child site named S01 at a new branch office. You deploy the management point and the software update point. Computers in the S01 site are able to detect Microsoft security updates, but the computers are not able to install the updates successfully. You need to configure the S01 site so that client computers can install security updates. What should you do? A. B. C. D.
Configure the software update point to synchronize from an upstream update server. Configure a distribution point for S01. Send the update packages to the distribution point. Configure the system health validator point. Enable the Advertised Programs client agent. Enable software update point client installation. Configure the Network Access account for S01.
Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Configure a distribution point for S01. Send the update packages to the distribution point.
http://technet.microsoft.com/en-us/library/bb680614.aspx About Distribution Points Microsoft System Center Configuration Manager 2007 uses distribution points to store files needed for packages to run on client computers. These distribution points function as distribution centers for the files that a package uses, allowing users to download and run these files, programs, and scripts when a package is advertised. http://technet.microsoft.com/en-us/library/gg712304.aspx#BKMK_DownloadUpdates Operations and Maintenance for Software Updates in Configuration Manager Download Software Updates There are several methods for downloading software updates in Configuration Manager. When you create an automatic deployment rule or manually deploy software updates, the software updates are downloaded to the content library on the site server, and then to the content library on the distribution points associated with the configured deployment package. Microsoft IT Professional Book 6451B Planning, Deploying and Managing Microsoft System Center Configuration Manager 2007 Volume 1 Deploying And Managing Software Update Page 8-13 You instantiate software updates to client computers by creating software update deployments. You use deployment packages as the vehicle to download software updates to a network folder, and then copy the software update source file to distribution points that you define in the deployment. http://www.systemcentercentral.com/WIKI/WIKIDetails/tabid/146/IndexID/38949/Default.aspx Update Installation Process: When a bunch of updates get advertised onto a target collection, the updates are first scanned for compliance prior to downloading the patch. If the advertised update is detected as being applicable, it will be downloaded to the local cache and installed. In Detail: A new deployment is created in the Administrator console. The Site Server requests the software updates binaries from the source location defined in the deployment. This can be from Microsoft Updates or from a local source. Note: The software update binaries are stored temporarily in a folder on the site server. The Site Server copies the software update binaries to the package share on the Distribution Point. The Site Server also adds the new software update deployment to the machine policy and copies the policy to the Management Point. The client pulls the machine policy from the Management Point on the schedule and receives the new deployment information. The client then scans for each software update to verify that they are still required. If the software update is still required, the client requests the binaries from the Distribution Point for each mandatory update and stores them in the local cache. Note: Optional updates are downloaded at the time of install. Note: Selective download is used so only the binaries for the required updates are downloaded to the client. The client sends a state message to the Management Point reporting that the software update was downloaded and the Management Point forwards the state message to the Site Server, which then enters the message into the database. When the software update deadline arrives or the update installation is manually initiated, the client scans for each software update to verify that they are still required.
The client installs the software update, scans for the software update using local rules to verify that the update is no longer required, and reports to the Management Point a state message that indicates the state of the deployment at completion. For each software update that fails to install, an error status message is sent to the Management Point. The messages are then forwarded to the Site Server, which then inserts them into the database. Note: If the software update is no longer in the local cache, it is downloaded again from the Distribution Point. Further explanations: http://technet.microsoft.com/en-us/library/bb632796.aspx Software Update Point Component Properties: Sync Settings Tab Use the Sync Settings tab in the Configuration Manager 2007 Software Update Point Properties dialog box to configure the software update point synchronization settings and whether to create Windows Server Update Services (WSUS) reporting events. The software update point will synchronize from Microsoft Update, from the upstream update server, or is not configured to synchronize. The software update point that is highest in the Configuration Manager 2007 hierarchy (most often the central site) synchronizes with Microsoft Update and all other software updates points synchronize with the software update point configured at the parent site. http://technet.microsoft.com/en-us/library/bb693545.aspx About System Health Validator Points in Network Access Protection When using Network Access Protection (NAP) in Configuration Manager 2007, the System Health Validator point is needed to validate the statement of health from NAP-capable Configuration Manager clients to produce a client health state of compliant or non-compliant, or an error condition that prevented the health state from being determined. http://technet.microsoft.com/en-us/library/bb633194.aspx How to Install Configuration Manager Clients Using Software Update Point Based Installation Software update point based client installation publishes the Configuration Manager 2007 client to a software update point, as an additional software update. This method of client installation can be used to install the Configuration Manager 2007 client on computers that do not already have the client installed, or to upgrade existing Configuration Manager 2007 clients. http://technet.microsoft.com/en-us/library/bb680398.aspx About the Network Access Account Microsoft System Center Configuration Manager 2007 client computers use the Local System account to perform most Configuration Manager 2007 client operations on the computer, but Local System cannot access network resources. When the client computer accesses a distribution point to run a package, including operating system deployment packages, it uses the computername$ account to access resources in a trusted Active Directory domain. The Network Access account is provided for times when Configuration Manager 2007 clients from workgroups or non-trusted domains require access resources in the site server's domain. This account might also be needed during operating system deployment, because the computer receiving the operating system does not have a security context it can use to access content on the network. QUESTION 41 You have a System Center Configuration Manager 2007 environment. You install a new distribution point on a site named S01. You need to ensure that the new distribution point on site S01 contains the same content as the distribution point on a site named S02. Which wizard should you use? A. the Distribute Software Wizard B. the Deploy Software Updates Wizard
C. the Transfer Site Settings Wizard D. the Copy Packages Wizard Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: the Copy Packages Wizard http://technet.microsoft.com/en-us/library/bb693746.aspx How to Copy Multiple Packages to One Distribution Point Use the Copy Packages Wizard in Microsoft System Center Configuration Manager 2007 from the Configuration Manager console to help you copy existing packages to a new distribution point. The wizard can effectively create a copy of an existing distribution point by allowing you to select all the packages on that distribution point. Specifying a source distribution point is not required because by default Configuration Manager 2007 displays all available packages. Further explanations: http://technet.microsoft.com/en-us/library/bb632628.aspx Transfer Site Settings Wizard: Welcome Page This wizard copies the properties of packages and collections to other packages and collections, but does not transfer the actual packages or collections. http://technet.microsoft.com/en-us/library/bb693791.aspx Deploy Software Updates Wizard Use the Deploy Software Updates Wizard in Configuration Manager 2007 to create a software update deployment, which downloads the software updates and creates a deployment package if necessary, allows for the creation of deployment templates, and deploys the software updates defined in the deployment to members of the target collection. http://technet.microsoft.com/en-us/library/bb694237.aspx Distribute Software Wizard Use the Distribute Software Wizard in Configuration Manager 2007 to distribute an existing software distribution package or create a new package and then distribute it to clients. QUESTION 42 You have a System Center Configuration Manager 2007 environment. The Software Inventory client agent is disabled. A software update changes the version of an operating system file on some computers in your environment. You need to identify the computers that have the affected file. What should you do? A. Create a software metering rule. B. Create a configuration baseline, and apply it to the collection that includes all computers in your environment. C. Create a report for computers that have the affected file. D. Create a configuration baseline for users that have the affected file. Correct Answer: B Section: (none) Explanation Explanation/Reference:
Answer: Create a configuration baseline, and apply it to the collection that includes all computers in your environment. http://technet.microsoft.com/en-us/library/bb694096.aspx About Configuration Baselines in Desired Configuration Management Baselines are used to define the configuration of a product or system established at a specific point in time, capturing both structure and details. Configuration baselines in Configuration Manager 2007 contain a defined set of required configurations that are evaluated for compliance as a group. Configuration baselines contain one or more configuration items with associated rules, and they are assigned to computers through collections, together with a compliance evaluation schedule. You can create your own configuration baselines with the Configuration Manager console, and you can import configuration baselines. http://technet.microsoft.com/en-us/library/bb694136.aspx About Configuration Items in Desired Configuration Management Configuration items in Configuration Manager 2007 define a discrete unit of configuration to assess for compliance. They can contain one or more elements and their validation criteria, and they typically define a unit of configuration you want to monitor at the level of independent change. Configuration items are the building blocks for configuration baselines, and consequently the same configuration item can be used in multiple configuration baselines. Configuration Manager 2007 supports the following configuration item types: Operating system configuration item A configuration item to determine compliance for settings relating to the operating system version and configuration. Application configuration item A configuration item to determine compliance for an application. This can include whether the application is installed as well as details about its configuration. General configuration item A configuration item to determine compliance for general settings and objects, where their existence does not depend on the operating system, an application, or a software update. Software updates configuration item A configuration item to determine compliance of software updates using the software updates feature in Configuration Manager 2007. Further explanations: http://technet.microsoft.com/en-us/library/bb694169.aspx Software Metering in Configuration Manager The Configuration Manager 2007 software metering feature allows you to monitor and collect software usage data from Configuration Manager 2007 clients http://technet.microsoft.com/en-us/library/bb693889.aspx Overview of Inventory When the software inventory client agent is enabled, you can inventory information such as inventoried file types and versions present on client computers. The software inventory client agent can also collect information about files inventoried on client systems. When enabled, the inventory client inventory agents create an inventory report based on the client inventory information collected and send it to the client's management point. The management point then forwards the inventory information to the Configuration Manager site server, which stores the inventory information in the site database.
QUESTION 43 You have a System Center Configuration Manager 2007 environment. Identical custom reports are deployed at the main office site and at a branch office site. You unintentionally delete a custom report from the branch office site server. You need to re-create the deleted report on the branch office site server. You also need to replace branch office references in the report with main office references. What should you do? A. Export a Managed Object Format (MOF) file for the report from the Reports section of the Configuration Manager console. Import the MOF file. Replace the branch office names in the SQL statement with main office names. B. Export a Managed Object Format (MOF) file for the report from the Reports section of the Configuration Manager console. Import the MOF file. Change the permissions on the new report. C. Clone the report by using the Reports section of the Configuration Manager console. Replace the branch office names in the SQL statement with main office names. D. Modify the link type attribute in the report you need to re-create. Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: Export a Managed Object Format (MOF) file for the report from the Reports section of the Configuration Manager console. Import the MOF file. Replace the branch office names in the SOL statement with main office names. http://technet.microsoft.com/en-us/library/dd334600.aspx How to Modify a Configuration Manager Report Reports in Configuration Manager 2007 retrieve data using a SQL statement. They can request information using a report prompt, link to another report or resource, and so on. The properties for a report are modified in the report properties dialog box.
http://technet.microsoft.com/en-us/library/bb633414.aspx About Exporting and Importing Reports Reports in Configuration Manager 2007 can be exported by using the Export Object Wizard, which creates a Managed Object Format (MOF) file that can then be imported at another site. This can be useful when importing reports that have been downloaded from the Internet or created by someone else in the organization. To export a report, you must have Read permission for the Reports security object class or instance. To import a report, you must have Create permission for the Reports security object class or instance. Exporting Reports Use the Export Object Wizard to export one or more report objects. When you export report objects, Configuration Manager writes the object definitions to a MOF file. Only the definitions for the report object are exported, not any report data. For example, if you export a report that contains links to the Status Message page, you export only the status message IDs and not the actual data that is contained in the individual status messages. You can use the Export Object Wizard to export objects from only one object class (reports, collections, or queries) at a time. MOF files that are created by using the Export Object Wizard contain only one object class. For more information, see How to Export a Report. When you export reports that have links, links to URLs are maintained; however, links to other targets are not maintained. For example, if you export a report that links to another report, that link is not maintained and it must be manually reconfigured after the report object is imported.
The report ID is unique for each report. When you export a report, the report ID is not written to the MOF file. This prevents you from accidentally replacing an existing report by importing a MOF file in which a report ID for an imported report matches that of an existing report. When you import reports, Configuration Manager 2007 assigns each imported report a new report ID. More than one report can have the same name, as long as each report is in a different report category. When you export reports, the report categories are written to the MOF file; however, the report categories do not appear in the Export Object Wizard. The unique report ID for each report does appear in the Export Object Wizard. To ensure that you are exporting the reports that you want, verify that the report ID of each report in the Export Object Wizard matches the report ID of each report as it appears in the results pane of the Configuration Manager console. Importing Reports Use the Import Object Wizard to import the report objects contained in a MOF file. A MOF file is a text file that you can use to import report object instances into your Configuration Manager database. You can also use MOF files to import report object instances into another database. You can also use the Import Object Wizard to import user-created MOF files that contain objects from multiple object classes. The MOF file must be in Unicode format or Import Object Wizard will fail to import the MOF file. All MOF files that are exported by the Export Object Wizard are in Unicode file format. You must have Create permission for all object classes in a MOF file. Any objects for which you do not have permission are not imported. For example, if you import a MOF file that contains report and collection objects but you have Create permission only for the Reports object class, the collection objects are not imported. When you import and run a report that was created at another Configuration Manager site, the report runs against your site database, not the original site database. When you are importing reports, the properties of the existing report are overwritten without warning if you import a report with the same name and category as a report already in the database. To avoid this, open the MOF file by using a text editor, such as Notepad, and review the object names against the names of existing objects in the Configuration Manager site database before importing the file.
http://technet.microsoft.com/en-us/library/bb680499.aspx How to Import a Report To import a report: 1. In the Configuration Manager console, navigate to System CenterConfiguration Manager / Site Database / Computer Management / Reporting / Reports. 2. Right-click Reports, and then click Import Objects. 3. Click Next, and then specify the MOF path and file name. Click Browse to browse to the path and file location. Click Next. Caution If there are existing reports with the same name and configured for the same category, the existing report will be overwritten with the imported report. 4. Review the reports listed in the Objects pane, and then click Next. You must have Create security rights for the Report class for the reports to be imported. 5. Click Next and review the comment for the Managed Object Format (MOF) file, click Next to import the report objects, and then click Finish to exit the wizard. QUESTION 44 You have a System Center Configuration Manager 2007 environment. You create a task sequence to deploy Microsoft Windows Vista. You need to configure the task sequence to create the second partition during the deployment process. What should you do? A. Create a task sequence variable named CreatePartition2 and set it to True. B. Create a task sequence variable named CreatePartition1 and set it to True.
C. Create a task sequence step to format and partition the second volume. D. Create a package to create the second partition, and add this package to the task sequence. Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Create a task sequence step to format and partition the second volume. http://technet.microsoft.com/en-us/library/bb632831.aspx How to Create a Task Sequence to Install an Existing Operating System Image Package You can create a task sequence to deploy an existing operating system image to a target computer by using the New Task Sequence Wizard. After you have created the task sequence, you can edit the task sequence by selecting the Task Sequences node, right-clicking the task sequence you want to change, and then clicking Edit to open the Task Sequence Editor. Use the following procedure to create a new task sequence to install an existing operating system image: .. 5. On the Install the Windows Operating System page, specify the operating system image package that will be used to install the operating system image by clicking Browse button to open the Select an Operating System Image dialog box, and then selecting the operating system package. If there are multiple images in the image package, use the drop-down to specify the Image that should be associated with the image package. To partition and format the target computer's hard disk prior to installing the operating system image, select the Partition and format the target computer before installing the operating system check box. http://blogs.technet.com/b/birojitn/archive/2010/01/20/windows-7-deployment-using-sccm-2007-sp2.aspx Windows 7 Deployment Using SCCM 2007 SP2 To partition the hard drive select the partition disk tab in the task sequence. Select the highlighted section.
Give partition name and partition type. And press OK. Further explanations:
http://technet.microsoft.com/en-us/library/dd252734.aspx Format and Partition Disk Task Sequence Action Variables Action Variable Name : OSDPartitions Specifies an array of partition settings; see the SDK topic for accessing array variables in the task sequence environment. This task sequence variable is an array variable. Each element in the array represents the settings for a single partition on the hard disk. The settings defined for each partition can be accessed by combining the array variable name with the zero-based disk partition number and the property name. Note If multiple partitions will be defined with this task sequence action, the properties for the second partition can be defined by using their index in the variable name; for example, OSDPartitions1Type, OSDPartitions1FileSystem, OSDPartitions1Bootable, OSDPartitions1QuickFormat, OSDPartitions1VolumeName, and so on. QUESTION 45 You have a System Center Configuration Manager 2007 environment. You have a collection named SRV_All that contains all servers. You need to immediately deploy a software update named Update1 to all servers. You also need to ensure that other software updates and advertisements are installed only in your defined maintenance windows. What should you do? A. Target the collection SRV_All with Update1. Modify the deployment template to allow system restart outside of maintenance windows. B. Create a new collection of servers. Create a collection variable for the collection with a name equal to IgnoreMaintWindow and a value of True. Set this variable to the highest priority in precedence, and target the collection with Update1. C. Target the collection SRV_All with Update1. Configure Update1 to ignore maintenance windows. D. Create a new collection of servers. Configure the properties of this collection to enable collection-specific restart settings. Deploy Update1 to the new collection. Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Target the collection SRV_AII with Updated. Configure Update1 to ignore maintenance windows. http://technet.microsoft.com/en-us/library/bb693597.aspx How to Deploy Software Updates The Deploy Software Updates Wizard in Configuration Manager 2007 allows you to create or modify a software update deployment, which deploys software updates to clients in the target collection. The software updates can be selected from several different locations and the wizard can be initiated in different ways. When a software update deployment is created or modified, clients will receive the deployment policy on their next machine policy cycle and the updates will be available for installation anytime after the configured start time. http://technet.microsoft.com/en-us/library/bb693997.aspx Deploy Software Updates Wizard: Deployment Schedule Page Use the Deployment Schedule page in the Configuration Manager 2007 Deploy Software Updates Wizard to specify when a software update deployment will become active and whether software update installation will be enforced on clients. UI Element List
.. Ignore maintenance windows and install immediately at deadline Specifies whether the software updates in the deployment are installed at the deadline regardless of a configured maintenance window. By default, this setting is not enabled and available only when there is a deadline configured for the deployment. Further explanations: http://technet.microsoft.com/en-us/library/bb632940.aspx About Deployment Templates in Software Updates Deployment templates in Configuration Manager 2007 store many of the software update deployment properties, and they can be created for consistency and to save time when creating deployments. Templates are created prior to deploying software updates by running the Deployment Template Wizard. QUESTION 46 You have a System Center Configuration Manager 2007 environment. You discover that the Recently Used Executables Asset Intelligence reports are returning NULL data sets. You need to ensure that all Recently Used Executables reports are populated with usage data. What should you do? A. B. C. D.
Enable the Software Metering client agent. Enable the Software Inventory client agent. Enable the Summarize Software Metering Monthly Usage Data site maintenance task. Enable the Summarize Software Metering File Usage Data site maintenance task.
Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: Enable the Software Metering client agent. http://technet.microsoft.com/en-us/library/bb693940.aspx Software Reports Software Asset Intelligence reports provide information about software families, categories, and specific software titles installed on computers within your organization. In addition to hardware information, information is gathered about installed software, which can be identified and categorized by a software category and family. Reports The following table lists reports in the Software Asset Intelligence Reports category and provides a brief description of their purpose. Software 07A - Recently Used Executables by Number of Computers This report lists executables that have been used recently with a count of computers on which they have been used. http://technet.microsoft.com/en-us/library/bb694145.aspx Overview of Software Metering Software metering in Configuration Manager 2007 allows you to monitor and collect software usage data on Configuration Manager 2007 clients. The collection of this usage data is based on software metering rules that can be configured by the
administrator in the Configuration Manager console, or by the automatic generation of rules based on usage data collected by Configuration Manager 2007 inventory. These rules are evaluated by the software metering client agent on Configuration Manager 2007 client computers, which collects metering data and reports this back to the site database. The software metering client agent continues to collect usage data when there is no connection to the Configuration Manager 2007 site and will report this back when the connection is reestablished. Software metering data held on the site database is summarized on a specified schedule and propagated up through the site hierarchy to any parent site. The central Configuration Manager 2007 site database will therefore contain usage data from all client computers within the site hierarchy. After you collect usage data from Configuration Manager 2007 clients, you can use different features to view the data, including collections, queries, and reporting. Further explanations: http://technet.microsoft.com/en-us/library/bb693889.aspx Overview of Inventory When the software inventory client agent is enabled, you can inventory information such as inventoried file types and versions present on client computers. The software inventory client agent can also collect information about files inventoried on client systems. Configuration Manager 2007 software inventory can also collect files, not just details about the files, from client computers http://technet.microsoft.com/en-us/library/bb693773.aspx Summarize Software Metering Monthly Usage Data Task Overview If the Software Metering Client Agent is enabled at a site, or at any of its child sites, the Summarize Software Metering Monthly Usage Data task condenses detailed software metering usage data from multiple records into one general record. This record provides information about application start and stop times, user name, computer name, program name, version, and language. Data summarization helps compress the amount of data in the site database. Monthly software usage data is sent to the central site. This task can be used with the Summarize Software Metering File Usage Data task to summarize software metering data and to conserve space in the Configuration Manager 2007 site database. Defaults
Summarizes messages older than one month; runs daily, between midnight and 5:00 A.M.
http://technet.microsoft.com/en-us/library/bb693827.aspx Summarize Software Metering File Usage Data Task Overview If the Software Metering Client Agent is enabled at a site, or at any of its child sites, the Summarize Software Metering File Usage Data task summarizes software metering file usage data from multiple records into one general record. This record provides summarized information about the application name, version, language, number of concurrent users, and hourly usage over a specified length of time. Data summarization helps compress the amount of data stored in the Configuration Manager 2007 site database. This task can be used with the Summarize Software Metering Monthly Usage Data task to summarize software metering data, and to conserve space in the Configuration Manager 2007 site database. Defaults Runs daily, between midnight and 5:00 A.M. QUESTION 47 You have a System Center Configuration Manager 2007 environment. When users attempt to install a program by using the Run Advertise program, they receive a message that the desired software is not available. You need to view the status to find out why software is not available. What should you do? A. Connect to the client computers, and view the LocationServices.log file. B. Connect to the client computers, and view the DataTransferService.log file.
C. Connect to the distribution point, and view the LocationServices.log file. D. Connect to the distribution point, and view the PatchDownloader.log file. Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: Connect to the client computers, and view the LocationServices.log file. http://technet.microsoft.com/en-us/library/bb892800.aspx List of Log Files in Configuration Manager 2007 The following table lists and describes the client log files: .. LocationServices.log Finds management points and distribution points. Further explanations: Client Log Files: DataTransferService.log Records all BITS communication for policy or package access. Software Update Point Log Files: By default, the Configuration Manager 2007 site system log files are found in <ConfigMgrInstallationPath> \Logs. PatchDownloader.log Provides information about the process for downloading software updates from the update source specified in the software updates metadata to the download destination on the site server. QUESTION 48 You have a System Center Configuration Manager 2007 environment. You schedule a daily site backup to occur at 10:00 P.M. Your backup on Wednesday night fails and another scheduled backup occurs. You need to reschedule your Wednesday night backup to occur after midnight. What should you do? A. Cancel the existing Wednesday night site backup, and create a scheduled task to back up the system state of the site servers at 1:00 A.M. Thursday. B. Cancel the existing Wednesday night site backup, and create a scheduled task to back up all local site server disks at 1:00 A.M. Thursday. C. Modify the SQL maintenance plan to start after 12:01 A.M. Thursday. D. Modify the site backup task to a Start after time of 12:01 A.M. and a Latest start time of 1:30 A.M. Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Modify the site backup task to a Start after time of 12:01 A.M. and a Latest start time of 1:30 A.M. http://technet.microsoft.com/en-us/library/bb632545.aspx Overview of Backup and Recovery A Configuration Manager 2007 site contains a large amount of data, which is mostly stored in the site server computer's registry, system files, and the Microsoft SQL Server site database. A Configuration Manager 2007 site operates properly only when the data in all of these data stores is synchronized. Backing up only one data store, such as the Configuration Manager 2007 site database, is not sufficient as a backup strategy. You will
not be able to recover a site by using only a partial site backup because the siteâ&#x20AC;&#x2122;s data will be out of synchronization. To ensure that you are properly backing up your sites, you should schedule the Backup ConfigMgr Site Server maintenance task for each primary site in your hierarchy. The Backup ConfigMgr Site Server maintenance task creates a complete backup snapshot of your site containing all the data necessary to perform recovery operations using the Site Repair Wizard. http://technet.microsoft.com/en-us/library/bb681028.aspx How To Schedule a Site Maintenance Task To schedule a site maintenance task .. 3. In the task properties dialog box, enable and configure the task. To minimize interference with the site operation, set the time period to off-peak hours of the site. The time period is the time interval in which the task can run. It is defined by the Start after and Latest start time specified in the task properties dialog box. QUESTION 49 You have a System Center Configuration Manager 2007 environment. You have a Configuration Manager package named Package1 that is used to install an application named App1. You plan to deploy Microsoft Windows Vista. You need to deploy App1 during the Windows Vista operating system deployment process. What should you use? A. B. C. D.
a desired configuration baseline a task sequence a mandatory software advertisement a software update deployment
Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: a task sequence http://technet.microsoft.com/en-us/library/bb632831.aspx How to Create a Task Sequence to Install an Existing Operating System Image Package You can create a task sequence to deploy an existing operating system image to a target computer by using the New Task Sequence Wizard. Procedures To create the operating system deployment new task sequence: .. 11. On the Install Software Packages page, click New to open the Program Select dialog box. Click Browse to open the Select a Package dialog box. Select the Configuration Manager 2007 packages you want to include, and then click OK. Use the drop down to select the associated programs that should be used. QUESTION 50 You have a System Center Configuration Manager 2007 environment. You deploy a site server named Lab1 to use for Pre-boot Execution Environment (PXE) installations on client computers in your training room. Administrators from other departments report that they are being prompted for PXE installations that should be available to only the client computers in your training room. You need to ensure that only the client computers in your training room receive the PXE installations from Lab1. What should you do? A. Modify the Broadcast Address scope option on the DHCP server. B. Modify the Static Route option on the DHCP server.
C. Modify the Boot Server Host Name scope option on the DHCP server. D. Publish the PXE server by using a fully qualified domain name (FQDN). Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Modify the Boot Server Host Name scope option on the DHCP server. http://technet.microsoft.com/en-us/library/dd759218.aspx Configuring a DHCP Scope A scope is an administrative grouping of IP addresses for computers on a subnet that use the Dynamic Host Configuration Protocol (DHCP) service. The administrator first creates a scope for each physical subnet and then uses the scope to define the parameters used by clients. A scope has the following properties: A range of IP addresses from which to include or exclude addresses used for DHCP service lease offerings. A subnet mask, which determines the subnet for a specific IP address. A scope name. Lease duration values, which are assigned to DHCP clients that receive dynamically allocated IP addresses. Any DHCP scope options configured for assignment to DHCP clients, such as Domain Name System (DNS) server, router IP address, and Windows Internet Name Service (WINS) server address. Reservations, optionally used to ensure that a DHCP client always receives the same IP address. http://www.sqa.org.uk/e-learning/NetInf101CD/page_79.htm Scope Options After a scope has been created, you can configure several DHCP options. These can be configured at one of four levels: Server, Scope, Class or Client Scope options If you want to configure DHCP options to apply only to DHCP clients on a specific subnet, you should configure the options at the scope level, eg: the IP address of the default gateway for a subnet should be configured at the scope level. You can configure scope-level options by right-clicking the Scope Options container and choosing Configure Options from the menu. Scope options like default gateway, WINS servers or DNS servers are assigned by the DHCP server, along with the IP address, from the scope that the options are configured for. There are over 70 scope options that can be configured, including the following: 003 - Default router IP address for client to use 004 - Time server to assign to client 006 - DNS Name server to provide to client 015 - DNS Domain name 044 - WINS server to provide to client 046 - WINS Node type 066 - Boot Server Host Name http://www.windowsitpro.com/article/dhcp2/dhcp-scope-options-for-a-ris-server DHCP Scope Options for a RIS Server To enable a DHCP server to notify the client of a Remote Installation Services (RIS) server you need to set the following two scope options: Option 066 Boot Server Host Name, which is the DNS name of the RIS server Option 067 Bootfile Name, which is the value of the ROM (e.g., \OSChooser\i386\startrom.com) http://community.spiceworks.com/how_to/show/1573-intro-to-windows-deployment-services Intro to Windows Deployment Services 3. DHCP Post Configuration
Once the role is installed you have set up a DHCP scope you are ready to setup the Predefined Options. To do this you will right click on IPv4 or IPv6 depending on which you use and select Set Predefined Options. You will have to install three options for PXE to recognize this server. Option class: DHCP Standard Options Option name: 060 PXEClient Description: PXE Support String: PXEClient Option class: Same as above. Option name: 066 Boot Server Host Name Description: TFTP boot server host name String: Empty Option class: Same as above Option name: 067 Bootfile Name Description: Bootfile Name String: Empty QUESTION 51 You have a System Center Configuration Manager 2007 environment and a single Active Directory domain. Some of the computers that you manage by using Configuration Manager 2007 are not members of the domain. A new written corporate security policy prohibits client computers from having Remote Desktop enabled. You need to identify all computers in your environment that have Remote Desktop enabled. What should you do? A. B. C. D.
Use the Operations console to create a new report search. Create a software metering rule to discover computers that are running Terminal Services. Use a Group Policy object (GPO) to discover computers that have Remote Desktop enabled. Create a configuration baseline, and apply it to the collection that includes all computers in your environment.
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Create a configuration baseline, and apply it to the collection that includes all computers in your environment. http://technet.microsoft.com/en-us/library/bb632346.aspx Create General Configuration Item Wizard Use the Create General Configuration Item Wizard in Configuration Manager 2007 to create a general configuration item. After the general configuration item is created, it is displayed in the Configuration Items node of the Configuration Manager console and available for use when creating or modifying configuration baselines. Objects Page Specifies the options in the Configuration Item Properties: Objects Tab: http://technet.microsoft.com/en-us/library/bb680813.aspx Configuration Item Properties: Objects Tab Use the Objects tab of the Configuration Manager 2007 configuration item properties dialog box to view, add, edit, and delete objects that you want to include in this configuration item. Examples of configuration item objects are files, folders, and registry keys.
http://technet.microsoft.com/en-us/library/bb632663.aspx Object Properties The Configuration Manager 2007 object properties dialog box displays information about an object within a configuration item. To view and edit the object properties, select the object on the configuration item properties Objects tab, and click Edit. http://technet.microsoft.com/en-us/library/bb680428.aspx Registry Key Object Properties: General Tab Use the General tab of the Configuration Manager 2007 Registry Key Properties dialog box to specify the registry key that will be assessed for compliance. This tab contains the following elements: Hive Specifies the hive for the registry key. The default value is HKEY_LOCAL_MACHINE. Available hives: HKEY_LOCAL_MACHINE HKEY_CLASSES_ROOT HKEY_CURRENT_USER HKEY_USERS HKEY_CURRENT_CONFIG Key Specifies the registry key name as it appears in a registry editor, for example Software\Microsoft\Internet Explorer.
http://technet.microsoft.com/en-us/library/cc782195%28v=ws.10%29.aspx Enable Remote Desktop To enable Remote Desktop remotely by using the registry .. 6. In the computer node that appears in the Registry Editor, navigate to HKEY_LOCAL_MACHINE\SYSTEM \CurrentControlSet\Control\Terminal Server. 7. In the console tree, click Terminal Server and then, in the details pane, double-click fDenyTSConnections. 8. In the Edit DWORD Value box, in Value data, type 0, and then click OK. .. Further explanations: http://technet.microsoft.com/en-us/library/dd334642.aspx Configuration Manager Reports Many predefined reports are provided with Configuration Manager, including reports that provide information about hardware, software, software distribution, software updates, operating system deployment, mobile devices, status messages, and so forth. http://technet.microsoft.com/en-us/library/cc755399%28v=ws.10%29.aspx How Terminal Services Works Terminal Services consists of four components: the Windows Server 2003 multi-user kernel, the Remote Desktop client, the Terminal Services Licensing service, and Session Directory Services. http://technet.microsoft.com/en-us/library/bb694169.aspx Software Metering in Configuration Manager
The Configuration Manager 2007 software metering feature allows you to monitor and collect software usage data from Configuration Manager 2007 clients. Click the associated link in the following section for detailed information about planning, configuring, managing, monitoring, and troubleshooting software metering. http://en.wikipedia.org/wiki/Group_Policy Group Policy Group Policy in part controls what users can and cannot do on a computer system, for example: to enforce a password complexity policy that prevents users from choosing an overly simple password, to allow or prevent unidentified users from remote computers to connect to a network share, to block access to the Windows Task Manager or to restrict access to certain folders. A set of such configurations is called a Group Policy Object (GPO). Group Policy Objects are processed in the following order (from top to bottom): 1. Local - Any settings in the computer's local policy. Prior to Windows Vista, there was only one local group policy stored per computer. Windows Vista and later Windows versions allow individual group policies per user accounts. 2. Site - Any Group Policies associated with the Active Directory site in which the computer resides. (An Active Directory site is a logical grouping of computers that is meant to facilitate management of computers based on their physical proximity.) If multiple policies are linked to a site, they are processed in the order set by the administrator. 3. Domain - Any Group Policies associated with the Windows domain in which the computer resides. If multiple policies are linked to a domain, they are processed in the order set by the administrator. 4. Organizational Unit - Group policies assigned to the Active Directory organizational unit (OU) in which the computer or user are placed. (OUs are logical units that help organizing and managing a group of users, computers or other Active Directory objects.) If multiple policies are linked to an OU, they are processed in the order set by the administrator. 5. QUESTION 52 You have a System Center Configuration Manager 2007 environment. You need to stop the Windows service named SVC1 on the site server before the site backup process starts. What should you do? A. Create a new sccmbkup.bat file in the root directory of the backup folder, and include the command to stop SVC1. B. Create a new smsbkup.cmd file in the root directory of the backup folder, and include the command to stop SVC1. C. Edit the sitectrl.ct0 file by adding the command to stop SVC1. D. Edit the smsbkup.ctl file by adding the command to stop SVC1. Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Edit the smsbkup.ctl file by adding the command to stop SVC1. http://technet.microsoft.com/en-us/library/cc181720.aspx Appendix D: Customizing the SMSbkup.ctl Backup Control File Customizing SMSbkup.ctl The information in the backup control file is organized into four sections: [Tokens] — A list of tokens and their values that the backup task uses as variables when it runs. [Stop] — A list of processes that the backup task stops before it starts to back up data. [Tasks] — A list of backup commands targeted at different types of data at the site. [Start] — A list of processes that the backup task starts after the backup task has been completed.
[Stop] By default, the following basic services are stopped: %SITE_SERVER%\SMS_SITE_COMPONENT_MANAGER %SITE_SERVER%\SMS_EXECUTIVE %SITE_DB_SERVER%\SMS_SQL_MONITOR You cannot modify this default behavior. You can customize this section by appending the following commands: To stop a Windows service that is installed on the backed up site server, use service <service name> Where <service name> is a full service name without the path to the executable file. All running instances of <service name> are stopped. To stop a service on a remote computer, type the service name as follows: \\<machine name>\<service name> This command stops all instances of the <service name>. When you add a service to this section, consider the effect of this service being stopped during the backup operation. The backup task attempts to stop a service only if that service is installed and it is running on the backed-up site server at the time that the backup task starts. The backup task restarts these services after the backup operation has been completed. Further explanations: http://msdn.microsoft.com/en-us/library/cc145677.aspx About the Configuration Manager Site Control File The site control file in Microsoft System Center Configuration Manager 2007 is an ASCII text file (Sitectrl.ct0) that contains the configuration of each site. QUESTION 53 You have a System Center Configuration Manager 2007 environment. You create an advertisement to deploy an application named App1 to all desktop computers. The advertisement is configured with the Wake On LAN option. Some of the computers did not wake up for the advertisement. You find out that the IP addresses that were used by Configuration Manager 2007 to wake up the computers are not the current IP addresses. You need to improve the success rate for Wake On LAN enabled distributions. What should you do? A. B. C. D.
Configure the recurrence interval for Hardware Inventory to every three days. Configure the recurrence interval for Active Directory System Discovery to every three days. Configure the recurrence interval for Network Discovery inventory to every three days. Configure the recurrence interval for Heartbeat Discovery to every three days.
Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: Configure the recurrence interval for Hardware Inventory to every three days. http://msdn.microsoft.com/en-us/library/cc142983.aspx About Configuration Manager Inventory
When it is enabled, the Configuration Manager 2007 hardware inventory client agent automatically collects detailed information about the hardware characteristics of clients in a Configuration Manager site. By using this feature, you can collect a wide variety of information about client computers, such as memory, operating system, and peripherals for client computers. The hardware inventory feature collects data from client computers by querying several data stores on client computers, such as the registry and Windows Management Instrumentation (WMI) namespace classes. The hardware inventory client agent does not query for all possible WMI classes, but it does provide the ability to report on approximately 1,500 hardware properties from almost 100 different WMI classes, by default. Further explanations: http://technet.microsoft.com/en-us/library/bb633276.aspx About Configuration Manager Discovery The discovery methods that you can configure are as follows: Active Directory System Discovery â&#x20AC;&#x201C; Discovers computers from the specified locations in Active Directory Domain Services Network Discovery â&#x20AC;&#x201C; Searches your network infrastructure for network devices that have an IP address. This allows you to discover devices that might not be found by other discovery methods, including printers, routers, and bridges. Heartbeat Discovery â&#x20AC;&#x201C; Used by active Configuration Manager clients to update their discovery records in the database. Because it is initiated by an active client, Heartbeat Discovery does not discover new resources QUESTION 54 You have a System Center Configuration Manager 2007 environment. You use System Center Operations Manager 2007 to monitor your Configuration Manager 2007 servers. You need to generate an alert when a software distribution point fails. What should you monitor? A. B. C. D.
the ccmexec.log file component status of your distribution points site system status of your distribution points the smsprov.log file
Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: site system status of your distribution points http://technet.microsoft.com/en-us/library/gg712676.aspx#BKMK_MonitorSystemStatus Monitor Configuration Manager Sites and Hierarchy Monitor System Status for Configuration Manager System status in Configuration Manager provides an overview of the general operations of sites and site server operations of your hierarchy. It can reveal operational problems for site system servers or components, and you can use the system status to review specific details for different Configuration Manager operations. You monitor system status from the System Status node of the Monitoring workspace in the Configuration Manager console. Most Configuration Manager site system roles and components generate status messages. Status messages details are logged in each components operational log, but are also submitted to the site database where they are summarized and presented in a general rollup of each component or site systems health. These status message rollups provide information details for regular operations and warnings and error details. You can configure the thresholds at which warnings or errors are triggered and fine-tune the system to ensure rollup
information ignores known issues that are not relevant to you while calling attention to actual problems on servers or for component operations that you might want to investigate. Use the following table to identify the different system status views and when to use each one: Site Status Use this node to view a rollup of the status of each site system to review the health of each site system server. Site system health is determined by thresholds that you configure for each site in the Site System Status Summarizer. You can view status messages for each site system, set thresholds for status messages, and manage the operation of the components on site systems by using the Configuration Manager Service Manager. Component Status Use this node to view a rollup of the status of each Configuration Manager component to review the componentâ&#x20AC;&#x2122;s operational health. Component health is determined by thresholds that you configure for each site in the Component Status Summarizer. You can view status messages for each component, set thresholds for status messages, and manage the operation of components by using the Configuration Manager Service Manager. Further explanations: http://technet.microsoft.com/en-us/library/bb892800.aspx List of Log Files in Configuration Manager 2007 The following table lists and describes the client log files: .. CcmExec.log - Records activities of the client and the SMS Agent Host service. The following table lists and describes the site server log files: .. Smsprov.log - Records WMI provider access to the site database. QUESTION 55 You install System Center Configuration Manager 2007 in your Active Directory environment. You configure a single Configuration Manager site. You need to enable Network Access Protection in your environment. You extend the Active Directory schema. You create the System Management container in Active Directory. You set permissions on the System Management container for the site server. Which three actions should you perform next? (Each correct answer presents part of the solution. Choose three.) A. B. C. D. E. F.
Enable the Network Access Protection client agent. Enable the Software Updates client agent. Configure the Configuration Manager site to publish settings to Active Directory. Configure the Configuration Manager site for native mode. Enable the Desired Configuration Management client agent. Configure a server with the system health validator point and the Network Policy Server role.
Correct Answer: ACF Section: (none) Explanation Explanation/Reference: Answer: Enable the Network Access Protection client agent. Configure the Configuration Manager site to publish settings to Active Directory. Configure a server with the system health validator point and the Network Policy Server role. http://technet.microsoft.com/en-us/library/bb681008.aspx Prerequisites for Network Access Protection
Configuration Manager 2007 Dependencies The site must be running Configuration Manager 2007 and be enabled for Network Access Protection. To enable the site for Network Access Protection, you must enable the Network Access Protection client agent. This client agent is not enabled by default. Note You do not need to enable the software updates client agent to support Network Access Protection in Configuration Manager 2007. Clients must be Configuration Manager 2007. An Active Directory forest has the schema extended with the Configuration Manager schema extensions, and it is provisioned with a System Management container in at least one domain. The Configuration Manager sites enabled for Network Access Protection are configured to publish site information to Active Directory Domain Services. The installation of at least one System Health Validator point on Windows Server 2008, that has the server role of Network Policy Server. The software updates feature is configured and has software update deployment packages. Although the software updates client agent does not need to be enabled on the site, you must have in place the software updates infrastructure, such as a software update point and software update deployment packages hosted on distribution points. Reporting Point Site System The reporting point site system role must be installed before Network Access Protection reports can be displayed. Further explanations: http://technet.microsoft.com/en-us/library/bb632431.aspx Choose between Native Mode and Mixed Mode Choose native mode if any of the following conditions apply: You require the highest security controls, using industry-standard protocols. You require Internet-based client management. http://technet.microsoft.com/en-us/library/bb693504.aspx Desired Configuration Management in Configuration Manager The Configuration Manager 2007 desired configuration management feature provides a set of tools and resources that can help assess and track configuration compliance of client computers in the enterprise. QUESTION 56 You have a System Center Configuration Manager 2007 environment. The site named S01 is located on the intranet. S01 uses a server in the perimeter network to provide a management point to Internet-based client computers. You need to configure the server roles in the perimeter network to communicate to the S01 site. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. B. C. D.
Configure the Network Access account on S01. Configure S01 to use the site servers computer account to install site systems. Configure the S01 site system property to allow only site server initiated data transfers from the site system. Configure a Site System Installation account on S01.
Correct Answer: CD Section: (none) Explanation Explanation/Reference: Answer: Configure the S01 site system property to allow only site server initiated data transfers from the site system. Configure a Site System Installation account on S01. http://technet.microsoft.com/en-us/library/bb693576.aspx
How to Configure Internet-Based Site Systems to Allow Only Site Server Initiated Data Transfers The default behavior of site systems in Configuration Manager 2007 is to initiate a connection to the site server in order to send status information to the site. However, you can configure the site server to initiate the connection to site systems that support Internet-based site systems. This configuration might introduce some latency in sending status messages, with a decrease in performance on the site server. You should therefore configure this option if both of these two conditions apply: The Internet-based site systems are located in a perimeter network and the site server is located in the intranet. Your network security policy prohibits Server Message Block (SMB) traffic that is initiated from the perimeter network to the intranet, but it allows SMB traffic that is initiated from the intranet to the perimeter network. Important To use this option, you must also specify the Site System Installation Account on the site system server. To configure the Internet-based site system so that it allows only site server initiated data transfers: .. 4. On the General tab, select Allow only site server initiated data transfers from this site system. Important When you select this option, you must also have configured a Windows user account to install and configure the site system (the option Use another account for installing this site system on this same tab), even if there is a trust relationship between the site server's domain and the Internet-based site system's domain. http://technet.microsoft.com/en-us/library/bb632922.aspx About the Site System Installation Account The Site System Installation Accounts are used by the Microsoft System Center Configuration Manager 2007 Site Component Manager service to install, reinstall, uninstall, and configure site systems. If you configure the site system to Allow only site system initiated data transfers from this site system, Configuration Manager 2007 also uses this account to pull data from the site system. Further explanations: http://technet.microsoft.com/en-us/library/bb680398.aspx About the Network Access Account Microsoft System Center Configuration Manager 2007 client computers use the Local System account to perform most Configuration Manager 2007 client operations on the computer, but Local System cannot access network resources. When the client computer accesses a distribution point to run a package, including operating system deployment packages, it uses the computername$ account to access resources in a trusted Active Directory domain. The Network Access account is provided for times when Configuration Manager 2007 clients from workgroups or non-trusted domains require access resources in the site server's domain. This account might also be needed during operating system deployment, because the computer receiving the operating system does not have a security context it can use to access content on the network. Important The Network Access account is never used as the security context for running programs, installing software updates, or running task sequences, only for accessing resources on the network. http://technet.microsoft.com/en-us/library/bb680595.aspx About the Local System Account/Computer$ in Configuration Manager The Local System account is a powerful account that has full access to the computer. In Microsoft System Center Configuration Manager 2007 it is used to start services and provide security context for those services, and to perform many Configuration Manager 2007 operations on the site server, site systems, and client computers.
The actual name of the account is NT AUTHORITY\System. The Local System account does not have any rights to access the network. When network access is necessary, Local System uses the account Domain\computername$. QUESTION 57 You have a System Center Configuration Manager 2007 environment. You want to create a new package for an application. In the Configuration Manager console, you right-click the Packages node. You do not see the option to create a new package. You need to be able to create packages. What should you do? A. B. C. D.
Request Package Class Create rights for your user account. Request Package Instance Create rights for your user account. Request Package Instance Class Modify rights for your user account. Request that your user account be added to the SMS Admins local group on the site server.
Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: Request Package Class Create rights for your user account. http://technet.microsoft.com/en-us/library/bb632332.aspx Overview of Configuration Manager Object Security and WMI Configuration Manager Object Security Object access is granted through user or group accounts. Group membership is enumerated when the group member attempts to access the object. You can grant rights to an entire class of objects (all packages, all sites, all collections) or to an instance of an object (the "Office 2007 package," the "NYC" child site, the "Computers in Building 44" collection). QUESTION 58 You have a System Center Configuration Manager 2007 environment. You need to ensure that no software is installed on your Microsoft Office SharePoint Server computers from Sunday to Friday of each week. What should you do? A. Create a collection of the SharePoint servers. Create a maintenance window for each Saturday B. Create a collection of the SharePoint servers. Create a maintenance window for Sunday to Friday of each week C. Create a collection of the SharePoint servers. Create a custom schedule to update collection membership each Sunday D. Configure Active Directory System Group Discovery to run each Sunday E. Configure Active Directory Security Group Discovery to run each Sunday Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: Create a collection of the SharePoint servers. Create a maintenance window for each Saturday http://technet.microsoft.com/en-us/library/bb694295.aspx About Maintenance Windows
Within Microsoft System Center Configuration Manager 2007, maintenance windows (sometimes called "service windows") provide administrators with a way to define a period of time that limits when changes can be made on the systems that are members of a collection. These windows restrict the running of operating system advertisements, as well as software update deployments and software distribution advertisements. When a maintenance window is applied to the collection, configuration changes to collection member systems cannot normally be made outside of this timeframe through Configuration Manager. This provides a safety net for administrators to ensure that client configuration changes only occur during periods when little or no impact to the organization will occur. QUESTION 59 You have a System Center Configuration Manager 2007 environment. You have lab environments that are members of a workgroup. You need to be able to install Configuration Manager client agents to the workgroup computers by using the SMSSITECODE=AUTO command-line property. What should you do? A. Configure the server locator point. Run the ccmsetup.exe command with the SMSSLP property on the client computers. B. Configure the server locator point. Run the ccmsetup.exe command with the FSP property on the client computers. C. Run the ccmsetup.exe command with the CCMHOSTNAME property on the client computers. D. Configure the management point. Run the ccmsetup.exe command with the SMSMP property on the client computers. Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: Configure the server locator point. Run the ccmsetup.exe command with the SMSSLP property on the client computers. http://technet.microsoft.com/en-us/library/bb680980.aspx About Configuration Manager Client Installation Properties CCMSetup.exe provides several command-line properties to customize the installation behavior. Additionally, you can also specify properties to modify the behavior of client.msi in the CCMSetup.exe command line. SMSSITECODE Specifies the Configuration Manager 2007 site to assign the Configuration Manager Client to. This can either be a three-character Configuration Manager 2007 site code or the word AUTO. If AUTO is specified, or if this property is not specified, the Configuration Manager Client attempts to determine its Configuration Manager 2007 site assignment by using Active Directory Domain Services or a server locator point. SMSSLP Specifies the server locator point for site assignment and locating management points for clients that cannot locate this information from Active Directory Domain Services, DNS, or WINS. Further explanations: FSP Specifies the fallback status point that receives and processes state messages sent by Configuration Manager 2007 client computers. CCMHOSTNAME Specifies the FQDN of the Internet-based management point, if the client is managed over the Internet. Do not specify this option with the installation property of SMSSITECODE=AUTO. Internet-based clients must be directly assigned to their Internet-based site. SMSMP Assigns the Configuration Manager 2007 client to the specified management point. You can specify a fully qualified domain name as this property. QUESTION 60
You have a System Center Configuration Manager 2007 environment. You need to migrate a secondary site named S01 to a new parent site named P01. What should you do? A. B. C. D.
Run the New Site System Server Share Wizard on S01. Specify P01 as the parent site. Uninstall and reinstall S01. Specify P01 as the parent site. Create a new address for S01 on P01. Create a new address for P01 on S01.
Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Uninstall and reinstall S01. Specify P01 as the parent site. http://technet.microsoft.com/en-us/library/bb693570.aspx Choose Between Primary Sites, Secondary Sites, and Branch Distribution Points Parent sites for secondary sites cannot be changed without uninstalling them and installing a new secondary site. Further explanations: Secondary sites cannot be upgraded to primary sites. To replace a secondary site with a primary site, you must uninstall the secondary site and install a primary site. Because Configuration Manager clients are always assigned to primary sites, client agent settings cannot be configured differently from the secondary site's parent site for clients located within the boundaries of secondary sites. QUESTION 61 Your System Center Configuration Manager 2007 environment has a single site server. You attempt to perform a client push installation to Microsoft Windows computers. On some of the computers, the installation fails and generates an Access denied error message. You need to ensure that the client push installation is performed successfully. What should you do? A. On the site server, grant the Client Push Installation account local administrator permissions. B. On the affected Windows computers, grant the Client Push Installation account local administrator permissions. C. On the affected Windows computers, grant the Client Push Installation account the Access this computer from the network right. D. On the affected Windows computers, add the Client Push Installation account to the Power Users group. Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: On the affected Windows computers, grant the Client Push Installation account local administrator permissions. http://technet.microsoft.com/en-us/library/bb680908.aspx How to Configure the Configuration Manager Client Push Installation Account The client push installation account is used to connect to computers to install the Microsoft System Center Configuration Manager 2007 client software. This account is only used by the client push installation method. If
you do not configure an account, Configuration Manager 2007 will try to use the site system computer account. This account must have local administrator rights on every client to be installed. QUESTION 62 You have a Systems Management Server (SMS) 2003 environment. Your central site is in the United States, and you have a primary child site in Germany. The central site is running Microsoft Windows Server 2003 software for the English language. The primary child site is running Windows Server 2003 software for the German language. You are upgrading your environment to System Center Configuration Manager 2007. You need to enable the SMS Provider role for the primary child site. What should you do? A. B. C. D.
Install the SMS Provider on the central site on the German version of Windows Server 2003. Install the SMS Provider on the central site on the English version of Windows Server 2003. Install the SMS Provider on the primary child site on the German version of Windows Server 2003. Install the SMS Provider on the primary child site on the English version of Windows Server 2003.
Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Install the SMS Provider on the primary child site on the German version of Windows Server 2003. http://technet.microsoft.com/en-us/library/bb680663.aspx Planning and Deploying Your Multilingual Site Hierarchy Configuration Manager 2007 provides a broad range of supported languages and other capabilities that enable you to centrally manage a multilingual Configuration Manager 2007 site hierarchy. For example, Configuration Manager 2007 supports: Multiple language versions of the Configuration Manager 2007 console. Multiple language versions of the Configuration Manager 2007 client. Double-byte and single-byte character sets for both servers and clients.
QUESTION 63 You have a System Center Configuration Manager 2007 environment. A server named Server1 is located in a remote office. Server1 has a polling interval of 1440 minutes. You create a mandatory software advertisement to deploy an application to Server1. You need to install the application on Server1 prior to the next polling interval. What should you do? A. Create a PowerShell script that connects to Server1 and executes the TriggerSchedule method for the Software Updates Deployment Evaluation Cycle action. B. Create a PowerShell script that connects to Server1 and executes the TriggerSchedule method for the Machine Policy Retrieval & Evaluation Cycle action. C. Apply a desired configuration baseline to Server1 with a schedule interval of every five minutes. D. Create a custom polling interval for the collection that contains Server1. Set the interval to every five minutes. Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Create a PowerShell script that connects to Server1 and executes the TriggerSchedule method for the Machine Policy Retrieval & Evaluation Cycle action. http://technet.microsoft.com/en-us/library/bb633207.aspx
How to Initiate Policy Retrieval for a Configuration Manager Client A Configuration Manager 2007 client downloads its client policy on a schedule. By default, this value is configured to every 60 minutes and is configured with the option Policy polling interval (minutes). However, there might be occasions when you want to initiate ad-hoc policy retrieval from the clientâ&#x20AC;&#x201D;for example, in a troubleshooting scenario or when testing. Use the following procedures to initiate ad-hoc policy retrieval from the client outside its scheduled polling interval, either by using the Actions tab on the Configuration Manager client or by running a script on the computer. You must be logged onto the client computer with local administrative rights to perform these procedures. QUESTION 64 You have a System Center Configuration Manager 2007 environment. The Hardware Inventory client agent and the Software Inventory client agent are enabled. You need to query the battery information for mobile computers. Which file should you modify? A. B. C. D.
SMSClient.mof CollectionSettings.mof sitectrl.ct0 SMS_def.mof
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: SMS_def.mof http://technet.microsoft.com/en-us/library/cc723575.aspx Appendix C - Hardware Inventory Classes The SMS_def.mof file controls the objects and properties that SMS includes in hardware inventory. You can customize the hardware inventory by editing the SMS_def.mof in the MOF Manager tool. The SMS_def.mof file controls which hardware inventory objects and properties SMS collects during hardware inventory. Universal Power Supply Attribute Class This class, which stores information about a client computer's power supply or battery, is based on Win32_PowerSupply. This class is not included in a default hardware inventory operation. Table C.58 Universal Power Supply Attribute Class (SMS_G_System_POWER_SUPPLY) Availability Indicates the availability and status of the device. Values are: 1=Other 2=Unknown 3=Running/Full Power 4=Warning 5=In Test 6=Not Applicable 7=Power Off 8=Off Line 9=Off Duty 10=Degraded
11=Not Installed 12=Install Error 13=Power Save - Unknown 14=Power Save - Degraded 15=Power Save - Standby 16=Power Cycle .. QUESTION 65 You have a System Center Configuration Manager 2007 environment. You enable the Hardware Inventory client agent. Currently, client agents are not reporting DHCP lease expiration information. You need to collect the DHCP lease expiration information from client computers. You also need to ensure that client computers automatically update lease expiration information. What should you do? A. B. C. D.
Edit the configuration.mof file. Edit the SMS_def.mof file. Create a NOIDMIF file. Create an IDMIF file.
Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Edit the SMS_def.mof file. http://technet.microsoft.com/en-us/library/cc723575.aspx Appendix C - Hardware Inventory Classes The SMS_def.mof file controls the objects and properties that SMS includes in hardware inventory. You can customize the hardware inventory by editing the SMS_def.mof in the MOF Manager tool. The SMS_def.mof file controls which hardware inventory objects and properties SMS collects during hardware inventory. Table C.26 Network Adapter Configuration Attribute Class (SMS_G_System_NETWORK_ADAPTER_CONFIGURATION) DHCPLeaseExpires Indicates the date and time that the DHCP lease expires. QUESTION 66 You have a System Center Configuration Manager 2007 environment. You have several Internet-managed client computers in your environment. You need to ensure that the Internet-managed client computers can receive software from the distribution points on your Configuration Manager site. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. B. C. D.
Configure the distribution points to transfer content by using BITS, HTTP, and HTTPS. Register the fully qualified domain name (FQDN) of the site system on a public DNS server. Configure the DNS suffix for site assignment on the Internet-managed client computers. Move the distribution point to the forest where your site server is located.
Correct Answer: AB Section: (none) Explanation Explanation/Reference: Answer: Configure the distribution points to transfer content by using BITS, HTTP, and HTTPS.
Register the fully qualified domain name (FQDN) of the site system on a public DNS server. http://technet.microsoft.com/en-us/library/bb632535.aspx Administrator Checklist: Configuring a Site for Internet-Based Client Management The following checklist provides the steps required to configure a Configuration Manager 2007 site for Internetbased client management. Steps: Confirm the decision to configure the site for Internet-based client management. Decide on server placement. Make any necessary changes to your network infrastructure, such as firewall and proxy server configuration. Register on Internet Domain Name System (DNS) servers the Internet fully qualified domain name (FQDN) of the site systems and network load-balanced clusters that will support Internet-based client management. Install the site systems in Configuration Manager 2007, and configure them with the Internet FQDN. If you are using a network load balancing (NLB) cluster, specify the Internet FQDN for the NLB cluster in Configuration Manager 2007. If the Internet-based site systems are in a different forest than your site server, configure these site systems to accept data retrieval from the site server. If the server running the software update point that allows connections from the Internet needs to synchronize with an intranet software update point, configure as follows: * If the software update point that allows connections from the Internet is on the intranet, configure automatic synchronization. * If the software update point that allows connections from the Internet is in the perimeter network, use the manual export and import synchronization procedure to prevent connections from being initiated from the perimeter network into the intranet. Configure the site systems that will support Internet-based client management to accept connections from Internet clients. Configure distribution points to transfer content using BITS, HTTP, and HTTPS. If the Internet-based site systems are in a different forest than your site server, and you want the additional security of the SQL Server connection to be initiated from the intranet rather than from the perimeter network, configure a Microsoft SQL Server replica. QUESTION 67 You have a System Center Configuration Manager 2007 environment. You have two Active Directory forests that contain multiple domains. You have not established a trust relationship between the forests. You need to ensure that all the Configuration Manager clients are approved in a secure manner. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. For the sites default management point, specify a fully qualified domain name (FQDN) for this site system on the intranet. B. For the sites default management point, specify an Internet-based fully qualified domain name (FQDN). C. In the approval settings for the site, select the Automatically approve computers in trusted domains option. D. In the approval settings for the site, select the Automatically approve all computers option. Correct Answer: AC Section: (none) Explanation Explanation/Reference: Answer: For the sites default management point, specify a fully qualified domain name (FQDN) for this site system on the intranet. In the approval settings for the site, select the Automatically approve computers in trusted domains option. http://technet.microsoft.com/en-us/library/bb694003.aspx Configuration Manager in Multiple Active Directory Forests When deploying Configuration Manager 2007 across multiple Active Directory forests, plan for the following
considerations when designing your Configuration Manager 2007 hierarchy: Communications within a Configuration Manager 2007 site Communications between Configuration Manager 2007 sites Support for clients across forests * Configuring clients across Active Directory forests * Approving clients (mixed mode) across Active Directory forests * Roaming support across Active Directory forests Approving Clients (Mixed Mode) Across Active Directory Forests If the site is in mixed mode, and you are using the site configuration of Automatically approve computers in trusted domains, you must configure the management point with an intranet fully qualified domain name (FQDN). http://technet.microsoft.com/en-us/library/bb694193.aspx About Client Approval in Configuration Manager A Configuration Manager 2007 client cannot be approved until it has successfully installed and assigned to a site. Approval can be manual, automatic for computers in trusted domains, or automatic for all computers and is configured as a site property on the site mode tab for mixed mode sites. The most secure approval method is to automatically approve clients that are members of trusted domains. In this mode, clients that are not members of a trusted domain, including workgroup clients, must be manually approved. If you want to manually verify every client before it is allowed to receive policies containing sensitive data, set the approval mode to manual. Automatically approving all clients is not recommended unless you have other access controls to prevent untrustworthy computers from accessing your network. If a client is not approved by an automatic method, it still displays in the Configuration Manager 2007 console and can be manually approved by locating it in a collection and using Approve from the Action menu. QUESTION 68 You have a System Center Configuration Manager 2007 environment. During an operating system deployment to a specific computer, you need to ensure that all user state data is migrated to a new computer. What should you do? A. B. C. D.
Configure a user state restore task, and configure the task to transfer the data to the new computer. Configure a user state restore task, and select the Customize how user profiles are restored option. Create a computer association, and specify the details for the transfer. Edit the MigSys.xml file that is specified in the user state restore task.
Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Create a computer association, and specify the details for the transfer. http://technet.microsoft.com/en-us/library/bb680730.aspx How to Create a Computer Association for a Side-by-Side Migration A computer association creates a relationship between a source and destination computer for the side-by-side migration of user state data. The source computer is an existing computer that is managed by Configuration Manager 2007, and contains the user state data and settings that will be migrated to a specified destination computer.
To create a new computer association .. 5. To specify the user accounts that should be migrated from the source computer to the destination computer, click New to open the Add User Account dialog box, and then click the User Accounts tab. 6. Enter the user account that should be migrated to the destination computer in the space provided or click Browse to open the Select User dialog box. If no user accounts are specified, all user accounts on the source computer will be migrated. Further explanations: http://technet.microsoft.com/en-us/library/bb633286.aspx How to Capture and Restore the User State You can capture and restore the user state information by using a custom task sequence. This method is helpful with side-by-side migration and hardware upgrade deployment scenarios so that you can retain the user settings associated with the reference computer. The User State Migration Tool (USMT) version 3.0 is required to complete the necessary capture and restore steps. Before you create the task sequence you must do the following: Create a computer association between the reference computer and the target computer. Create a USMT package by using the Create Package and Program Wizard. When you run the wizard, use the following information: * On the Package page of the wizard, select This package contains source files and browse to the USMT folder in the WAIK folder. * Only one USMT package is required for x64 and x86 computers, so browse to the root USMT folder. Typically the path to the USMT folder is C:\Program Files\WAIK\tools\USMT. * On the Program Type page of the wizard, select Do not create a program. http://technet.microsoft.com/en-us/library/cc766203%28v=ws.10%29.aspx USMT .xml Files In order for ScanState and LoadState to use any of the migration .xml files, you need to specify the files on both command lines using the /i option. Unlike previous versions of USMT, the .xml files are not copied to the store. Because ScanState and LoadState need the .xml files to control the migration, you should specify the same set of .xml files on the ScanState and LoadState command lines. However, you do not have to specify Config.xml unless you want to exclude some of the files and settings that you migrated to the store. If you leave out an .xml file from LoadState, then all data that was migrated with the missing .xml files (that is in the store) will be migrated. However, the migration rules that were specified on the ScanState command line will not apply. Migration .xml files The following are the migration .xml files that are included with USMT. Each file contains migration rules that control which components are migrated and where they are migrated to the destination computer. You can use the asterisk (*) wildcard character in each of these files. However, you cannot use a question mark (?) as a wildcard. MigSys.xml. Specify this file on both command lines when the destination computer is running Windows XP to migrate operating system and browser settings.(in addition, you should specify /targetXP). You can modify MigSys.xml. MigApp.xml. Specify this file on both command lines to migrate application settings to computers running both Windows XP and Windows Vista. You can modify MigApp.xml. MigUser.xml. Specify this file on both command lines to migrate user folders, files, and file types to computers running both Windows XP and Windows Vista. You can modify MigUser.xml. This file does not contain rules that migrates specific user accounts. The only way to specify which user accounts to migrate is on the command line using the User Options.
QUESTION 69 You have a System Center Configuration Manager 2007 environment. The Software Inventory client agent is disabled on the Configuration Manager site. You need to create a collection that contains the computers that have an application named App1 installed. You also need to ensure that the collection automatically updates its membership. What should you do? A. Create a query membership rule collection where Software Products-Product Name is equal to App1. B. Create a query membership rule collection where Add/Remove Programs-Display Name is equal to App1 C. Create a Configuration Manager query where Add/Remove Programs History-Display Name is equal to App1. D. Create a Configuration Manager query where Add/Remove Programs-Display Name is equal to App1. Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Create a query membership rule collection where Add/Remove Programs-Display Name is equal to App1 http://technet.microsoft.com/en-us/library/bb694209.aspx About Collection Membership When creating a collection, membership in that collection can either be direct or query based. Query-Based Membership Unlike the direct membership method, query-based membership is a dynamic method for creating your collection. This means that you do not define the resources that are to be members of the collections; rather, you define the rules by which those members are placed in the collections. These rules form a query, and Configuration Manager periodically reruns the query to keep the collection up to date. http://technet.microsoft.com/en-us/library/cc180952.aspx Collecting Hardware and Software Inventory Distinguishing Between Hardware Inventory and Software Inventory Software inventory works by scanning the disks on each computer to find files and gather information about files. You can also configure software inventory to collect specific files when it finds them. Software inventory is useful when you require information about the files on the disks, not necessarily about the software that has been installed. In that sense, software inventory could be called "file inventory". Hardware inventory works by querying Windows Management Instrumentation (WMI) for all data from certain WMI classes. WMI includes classes for operating system configuration and entities (such as user accounts), installed software, software configuration, and other objects (such as for the logged on user). These classes are supplements to hardware classes. Hardware inventory collects information about many things besides hardware. For example, it can inventory software by collecting details about programs listed in Add or Remove Programs in Control Panel or programs that have been installed using Windows Installer. QUESTION 70 You have a System Center Configuration Manager 2007 environment. Some users want to access your corporate network by using dial-up connections. You need to configure Configuration Manager boundaries for dial-up users. What should you do? A. Replace the corporate site boundary with the subnet ID of the dial-up users. Select the Slow or unreliable option for the network connection. B. Replace the corporate site boundary with the subnet ID of the corporate location. Select the Slow or
unreliable option for the network connection. C. Create a new site boundary for dial-up users, and specify the subnet ID of the dial-up users. Select the Slow or unreliable option for the network connection. D. Create a new site boundary for the dial-up users, and specify the subnet ID of the corporate location. Select the Slow or unreliable option for the network connection. Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Create a new site boundary for dial-up users, and specify the subnet ID of the dial-up users. Select the Slow or unreliable option for the network connection. http://technet.microsoft.com/en-us/library/bb632910.aspx Planning Configuration Manager Boundaries Configuration Manager 2007 boundaries are defined in the Configuration Manager console and are defined by IP subnet, Active Directory site name, IPv6 Prefix, IP ranges, or any combination of these. When creating Configuration Manager 2007 boundaries, you must also specify the type of network connection that the boundary will operate on. You must decide if the boundary will be used for either a Slow or unreliable or Fast (LAN) network connection. An example of a slow boundary would be one defined by an IP subnet connected to the site over a WAN. Fast boundaries should be made up of faster, more reliable connections such as a corporate LAN. QUESTION 71 You have a System Center Configuration Manager 2007 environment. You install a secondary site at a branch office, and you configure the local IP subnet as the site boundary. The branch office site is connected to the primary site by a 192-Kbps (kilobits per second) WAN link. You need to minimize bandwidth utilization for all client agent policies from the branch office. What should you do? A. B. C. D.
Install a proxy management point at the secondary site. Install a branch distribution point at the secondary site. Configure all software package advertisements to Download content from distribution point and run locally. Configure all software package advertisements to Run program from distribution point.
Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: Install a proxy management point at the secondary site. http://technet.microsoft.com/en-us/library/bb693472.aspx Determine Whether a Proxy Management Point is Needed at a Secondary Site A proxy management point is a management point installed at a secondary site, which acts as a proxy for the default management point at the secondary site of the parent primary site. In general, proxy management points are used to avoid excessive bandwidth usage over slow network links between clients located in the boundaries of a secondary site and the default management point located at the parent primary site. When the number of clients located in the boundaries of the secondary site increases, the amount of network bandwidth used by clients to communicate with the default management point of the primary site increases also. Depending on the network links in place, the traffic might become too much for a slow link to handle without installing a proxy management point at the secondary site. When a proxy management point is installed at a secondary site, clients that are assigned to the primary site,
but located in the boundaries of the secondary site, send information such as inventory data, discovery data, and status messages to the proxy management point. The proxy management point forwards the client information to the secondary site server, and the client data is compressed and sent to the primary site during site-to-site communication. When a proxy management point is not installed at a secondary site, all client information is sent uncompressed to the default management point at the primary site. Proxy management points also respond to client policy requests and content location requests from clients that are assigned to the primary site and located in the boundaries of the secondary site. The proxy management point retrieves client policy from the site database in the primary site or from a site database replica, which is standard behavior for management points. However, when you use a proxy management point and the site database replica is located in the secondary site, network data associated with client policy is kept in the secondary site. Because all management points cache policy bodies, network traffic to the primary site is reduced by using a proxy management point, even when there is no site database replica in the secondary site. Proxy management points can also respond to content location requests from clients that are not assigned to the primary site but that have roamed into the boundaries of the secondary site. Further explanations: http://technet.microsoft.com/en-us/library/bb932184.aspx Choose Between a Standard and Branch Distribution Point Configure a distribution point as a branch distribution point if any of the following conditions apply: .. You have a remote location connected to the main Configuration Manager 2007 site location by a slow connection and want to optimize software distribution to clients in that location without creating a primary or secondary site for that location. .. QUESTION 72 You have a System Center Configuration Manager 2007 environment. You have packages that consist of large files. The files are updated on a regular basis. You need to reduce the time that is required for distribution points to receive the files when updates occur. What should you do? A. In the software distribution settings, increase the maximum number of threads per package to use when transferring data to the distribution points. B. In the package properties, select the Use a compressed copy of the source directory option. C. In the package properties, select a Sending priority of High. D. In the package properties, select the Enable binary differential replication option. Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: In the package properties, select the Enable binary differential replication option. http://technet.microsoft.com/en-us/library/bb693953.aspx About Binary Differential Replication Binary Differential Replication, sometimes known as "delta replication," is used by Configuration Manager 2007 to update package source files with a minimum of additional network traffic. When Configuration Manager 2007 updates the source files for a package, and the source files have already been distributed, it sends the parts of the package that have changed since the last time the package was sent (originally, as an update, or as a refresh). This minimizes the network traffic between sites, especially when the package is large and the changes are relatively small. A file is considered to be changed if it has been renamed, moved, or its contents have changed.
QUESTION 73 You have a System Center Configuration Manager 2007 environment. An application named App1.exe is installed on client computers in a collection named Coll1. The App1.exe application is not functioning on some of the client computers. You need to identify client computers in the Coll1 collection that have improper security permissions on the App1.exe application. What should you do? A. Configure the Software Inventory client agent to collect App1.exe. B. Create a desired configuration baseline to confirm security permissions. Apply the baseline to the Coll1 collection. C. Create a Microsoft Visual Basic (VB) script that confirms the Logon as a service rights on the client computers. D. Create a Microsoft Visual Basic (VB) script that confirms the Act as part of the operating system rights on the client computers. Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Create a desired configuration baseline to confirm security permissions. Apply the baseline to the Colli collection. http://technet.microsoft.com/en-us/library/bb694096.aspx About Configuration Baselines in Desired Configuration Management Baselines are used to define the configuration of a product or system established at a specific point in time, capturing both structure and details. Configuration baselines in Configuration Manager 2007 contain a defined set of required configurations that are evaluated for compliance as a group. Configuration baselines contain one or more configuration items with associated rules, and they are assigned to computers through collections, together with a compliance evaluation schedule. You can create your own configuration baselines with the Configuration Manager console, and you can import configuration baselines. http://technet.microsoft.com/en-us/library/bb694136.aspx About Configuration Items in Desired Configuration Management Configuration items in Configuration Manager 2007 define a discrete unit of configuration to assess for compliance. They can contain one or more elements and their validation criteria, and they typically define a unit of configuration you want to monitor at the level of independent change. Configuration items are the building blocks for configuration baselines, and consequently the same configuration item can be used in multiple configuration baselines. Configuration Manager 2007 supports the following configuration item types: Operating system configuration item A configuration item to determine compliance for settings relating to the operating system version and configuration. Application configuration item A configuration item to determine compliance for an application. This can include whether the application is installed as well as details about its configuration. General configuration item A configuration item to determine compliance for general settings and objects, where their existence does not depend on the operating system, an application, or a software update. Software updates configuration item A configuration item to determine compliance of software updates using the software updates feature in Configuration Manager 2007.
The following table lists the configurable properties of a configuration item in Configuration Manager, and it shows whether the configurable property is available for each configuration item type:
QUESTION 74 You have a System Center Configuration Manager 2007 environment. Network Access Protection (NAP) is enforced by using DHCP on a secured network. Your NAP policy requires all computers to have Microsoft Update enabled. Not all users have local Administrator privileges. You notice that some users are not able to connect to the secured network. You need to ensure that all users are able to access secured resources. What should you do? A. B. C. D.
Install a Windows Software Update Services (WSUS) server. Configure automatic updates by using a Group Policy object (GPO). Deploy updates by using login scripts. Deploy updates by using startup scripts.
Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Configure automatic updates by using a Group Policy object (GPO). http://support.microsoft.com/kb/328010 How to configure automatic updates by using Group Policy or registry settings Configure Automatic Updates by using local Group Policy .. 7. Under Computer Configuration, expand Administrative Templates, expand Windows Components, and then expand Windows Update. The Configure Automatic Updates policy appears. This policy specifies whether the computer receives security updates and other important downloads through the Windows Automatic Updates feature. By using the settings for this policy, you can specify whether automatic updates are enabled on the computer. If the service is enabled, you must select one of the three configuration options. QUESTION 75 You have a System Center Configuration Manager 2007 environment. Client push installation is enabled with the default settings. Mobile users do not frequently connect to the network. You need to upgrade the computers of all mobile users to the newest version of the Configuration Manager 2007 client agent when the users connect to the network. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.) A. Use the Client Push Installation Wizard to upgrade the client agent on all computers. B. Create a mandatory advertisement to upgrade to the Configuration Manager client agent on all computers. C. Create a mandatory advertisement to upgrade the Windows Server Update Services (WSUS) client agent on all computers. D. Publish the latest version of the Configuration Manager client agent to the Windows Server Update Services (WSUS) catalog for software update point client agent installation. Correct Answer: BD
Section: (none) Explanation Explanation/Reference: Answer: Create a mandatory advertisement to upgrade to the Configuration Manager client agent on all computers. Publish the latest version of the Configuration Manager client agent to the Windows Server Update Services (WSUS) catalog for software update point client agent installation. http://technet.microsoft.com/en-us/library/bb633063.aspx Overview of Configuration Manager Client Deployment Client deployment in Configuration Manager 2007 refers to the planning, installation, and management of the Configuration Manager 2007 client software in your enterprise. The following table lists the various methods that you can use to install the Configuration Manager 2007 client software:
http://technet.microsoft.com/en-us/library/bb632690.aspx How to Upgrade Clients Using Software Distribution in Configuration Manager You can use Configuration Manager 2007 software distribution to upgrade the client software on computers in your enterprise. A package definition file is supplied with Configuration Manager 2007 which populates the package properties with commonly used values. You can customize the behavior of the client installation by specifying additional command line properties. When you have created the package, you can use software distribution to advertise it to collections of computers on your Configuration Manager 2007 site. http://technet.microsoft.com/en-us/library/bb633194.aspx How to Install Configuration Manager Clients Using Software Update Point Based Installation Software update point based client installation publishes the Configuration Manager 2007 client to a software update point, as an additional software update. This method of client installation can be used to install the Configuration Manager 2007 client on computers that do not already have the client installed, or to upgrade existing Configuration Manager 2007 clients. If a computer is an existing Configuration Manager 2007 client, its Configuration Manager client policy provides the software update point server name and port from which to obtain software updates. Important To use software update point based installation, you must use the same WSUS server for both client installation and software updates. This server must be the active software update point in a primary site.
Further explanations: http://technet.microsoft.com/en-us/library/bb632380.aspx How to Install Configuration Manager Clients Using Client Push Client push installation is designed to push Configuration Manager 2007 client software to discovered computers or resources. You can configure client push installation for a site, and client installation will be automatically initiated on the computers discovered within the site's configured boundaries, or you can initiate a client push installation by targeting a specific collection or resource within a collection using the Client Push Installation Wizard. If the site server cannot contact the client computer or start the setup process, it automatically repeats the installation attempt every hour for up to 7 days until it succeeds. http://technet.microsoft.com/en-us/library/bb693914.aspx Client Push Installation Wizard Use the Client Push Installation Wizard in Configuration Manager 2007 to install the Configuration Manager client to a collection, a query or a computer. Installation Options Page Configures the following options for client push installation .. Include only clients in this site's boundaries: If this item is selected, then any targeted computers must be in this Configuration Manager 2007 site boundaries to install the client software. Always install (repair or upgrade existing client): If this item is selected then the Configuration Manager 2007 client will be installed on all applicable targeted computers, even if they already contain a Configuration Manager 2007 client. QUESTION 76 You have a System Center Configuration Manager 2007 environment. You deploy Microsoft Office 2007 to client computers in a collection named Coll1. You run the Configuration Manager Web report for Add or Remove Programs, and you query for Office 2007. No computers are found to have Office 2007 installed. You need to identify computers that have Office 2007 installed. What should you do? A. B. C. D.
Configure software inventory to run daily. Configure hardware inventory to run daily. Configure Coll1 to update membership daily. Configure Coll1 to have a collection-specific polling interval.
Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Configure hardware inventory to run daily. http://technet.microsoft.com/en-us/library/cc180952.aspx Collecting Hardware and Software Inventory Distinguishing Between Hardware Inventory and Software Inventory Software inventory works by scanning the disks on each computer to find files and gather information about files. You can also configure software inventory to collect specific files when it finds them. Software inventory is useful when you require information about the files on the disks, not necessarily about the software that has been installed. In that sense, software inventory could be called "file inventory". Hardware inventory works by querying Windows Management Instrumentation (WMI) for all data from certain
WMI classes. WMI includes classes for operating system configuration and entities (such as user accounts), installed software, software configuration, and other objects (such as for the logged on user). These classes are supplements to hardware classes. Hardware inventory collects information about many things besides hardware. For example, it can inventory software by collecting details about programs listed in Add or Remove Programs in Control Panel or programs that have been installed using Windows Installer. QUESTION 77 You have a System Center Configuration Manager 2007 environment. The primary site is configured to notify users when applications are available. You have a new application package to deploy. You need to ensure that users do not receive any messages from Configuration Manager during installation of the new application, and you need to ensure that future application installations are not affected. What should you do in the program settings? A. B. C. D.
Clear the Allow users to interact with this program check box. Select the Suppress program notifications check box. Configure a run mode of Hidden. Configure a run mode of Minimized.
Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Select the Suppress program notifications check box. http://technet.microsoft.com/en-us/library/bb693744.aspx Deploy Software Updates Wizard: Display/Time Settings Page Use the Display/Time Settings page in the Configuration Manager 2007 Deploy Software Updates Wizard to configure whether users are notified of pending software updates and see the update installation progress, whether a client evaluates the deployment schedule based on local time or UTC, and the duration setting that is used to set the default deadline time in a deployment. UI Element List: Suppress display notifications on clients Specifies that display notifications are not used on clients and progress indicators are not displayed during update installation. Software update notification icons will still display on clients and users can click this icon to see available updates. Further explanations: http://technet.microsoft.com/en-us/library/bb680462.aspx Program Properties Page Use the Program Properties page in the Configuration Manager 2007 Distribute Software Wizard to specify the conditions under which the program can run, as well as the action to take after it runs. UI Element List: Run with administrative rights Specifies whether the program runs with administrator credentials. If selected, this option forces the program to run under the local system account on the client computer. If this option is selected, the following option is available: Allow users to interact with this program: Specifies whether to allow users to interact with the program. This check box is available only when the Program can run option is configured for Only when a user is logged on or Whether or not a user is logged on. Select this option only for programs that must run in an administrative context and that require the user
to interact with the program. If you select this option, the user interface for the program is visible to the logged-on user, and that user can interact with the program. Leave this option clear for all programs that do not display any user interface or that display a user interface but do not require the user to interact with the program. QUESTION 78 You have a System Center Configuration Manager 2007 environment. You apply a desired configuration baseline named Baseline1 to all servers in a collection named Coll1. You need to view Baseline1 configuration results. What should you do? A. B. C. D.
Create a new Web report based on status message. Create a new Web report based on hardware inventory. Run an Asset Intelligence Web report for Coll1. Run a compliance summary Web report for Coll1.
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Run a compliance summary Web report for Coll1. http://technet.microsoft.com/en-us/library/bb632945.aspx How to View Compliance of a Collection When client computers in Configuration Manager 2007 download assigned configuration baselines and evaluate their compliance with them, they report their compliance results to their assigned site in state messages. Configuration baselines are assigned to collections, and a collection can have more than one configuration baseline assigned. To view the compliance information by collection, run the report Compliance by collection. You can run this report with two procedures: From the Desired Configuration Management home page. From the Reports node. Further explanations: http://technet.microsoft.com/en-us/library/bb632870.aspx Using Status Messages for Configuration Manager Troubleshooting Microsoft System Center Configuration Manager 2007 status messages report information about Configuration Manager 2007 component behavior and data flow. Configuration Manager 2007 status messages are categorized by severity and type. http://technet.microsoft.com/en-us/library/bb693889.aspx Overview of Inventory When the hardware inventory client agent is enabled for Configuration Manager 2007 sites, hardware inventory data gives you system information (such as available disk space, processor type, and operating system) about each computer. When enabled, the inventory client inventory agents create an inventory report based on the client inventory information collected . http://technet.microsoft.com/en-us/library/cc161988.aspx Asset Intelligence in Configuration Manager The Asset Intelligence Configuration Manager 2007 feature allows administrators to inventory and manage software in use throughout the Configuration Manager 2007 hierarchy. Asset Intelligence enhances the
inventory capabilities of Configuration Manager 2007 and Configuration Manager 2007 SP1 to help manage software in use and software license management in the enterprise. Many additional Asset Intelligence specific inventory classes improve the breadth of information gathered about hardware and software assets.
QUESTION 79 You have a System Center Configuration Manager 2007 environment. You have a child site server that is running Systems Management Server (SMS) 2003. You need to ensure that client computers in the SMS 2003 child site continue to receive Microsoft security updates. What should you do? A. Use the Inventory Tool for Microsoft Updates to manage security updates on the SMS 2003 client computers. B. Uninstall the Inventory Tool for Microsoft Updates from the SMS 2003 child site server. Configure Configuration Manager software update points. C. Configure Configuration Manager system health validator points on the central site. D. Use the System Center Updates Publisher to create a custom updates deployment for the SMS 2003 client computers. Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: Use the Inventory Tool for Microsoft Updates to manage security updates on the SMS 2003 client computers. http://technet.microsoft.com/en-us/library/bb633261.aspx About the Inventory Tool for Microsoft Updates The Inventory Tool for Microsoft Updates in Configuration Manager 2007 provides backward compatibility for Systems Management Server (SMS) 2003 clients to scan for software updates compliance using the Microsoft Update catalog. During the SMS 2003 site upgrade to Configuration Manager 2007, Setup detects whether a previous version of the Inventory Tool for Microsoft Updates is installed on the site and verifies that another installation of the tool is not installed on a site higher in the hierarchy. If both are true, Setup initiates an upgrade for the inventory tool on the site server. During the installation, you can specify whether to download the latest Microsoft Update catalog from the Internet or from a local location. After the Inventory Tool for Microsoft Updates is upgraded on the site, the catalog is synchronized with the Microsoft Updates catalog, the new scan package is updated, and client computers upgrade the scan tool following their next Machine Policy Retrieval & Evaluation Cycle. Software updates will be scanned for compliance using the Microsoft Update catalog and will continue to work on SMS 2003 and Configuration Manager 2007 client computers. QUESTION 80 You plan to install System Center Configuration Manager 2007 in your Active Directory environment. You need to extend the Active Directory schema. You log in with the schema Administrator privileges. What should you do next? A. Run the CCMSetup.exe utility on the Active Directory domain controller that has the infrastructure master FSMO role. B. Run the ExtADSch.exe utility on the Active Directory domain controller that has the schema master FSMO role. C. Add the installation account to the Enterprise Admins global security group. Run Setup and select the custom setup option. D. Add the installation account to the Schema Admins global security group. Run Setup and select the custom setup option.
Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Run the ExtADSch.exe utility on the Active Directory domain controller that has the schema master FSMO role. http://technet.microsoft.com/en-us/library/bb680608.aspx How to Extend the Active Directory Schema Using ExtADSch.exe You can extend the Active Directory schema by running the ExtADSch.exe file located in the SMSSETUP\BIN \I386 folder on the Configuration Manager 2007 installation media. QUESTION 81 You have a System Center Configuration Manager 2007 environment. You use Active Directory System Discovery to discover computers that are located in the Sales organizational unit (OU) and in all child OUs under the Sales OU. Discovering computers in all the child OUs is requiring a significant amount of time to complete. You need to configure discovery for only computers in the Sales OU. What should you do? A. Clear the Recursive check box for the Sales OU discovery. B. Clear the Include Groups check box for the Sales OU discovery. C. Create a custom LDAP query to LDAP://OU=Sales1 DC=SCCMDEM01 DC=COM. Select the Recursive check box. D. Select the option to browse to the Sales OU, and then select the Sales OU. Select the Recursive check box. Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: Clear the Recursive check box for the Sales OU discovery. http://technet.microsoft.com/en-us/library/bb693618.aspx How to Configure Active Directory System Discovery Active Directory System Discovery polling can generate significant network traffic, so you should schedule the discovery to occur at times when this network traffic will not adversely affect business uses of your network. To configure Active Directory System Discovery .. 6. Select any additional search options to use. Two options are available: Recursive: Specifies that the search includes child containers. This check box is selected by default. If it is cleared, child containers are not searched. Include groups: Specifies that objects within groups are discovered by this method. If it is selected, you can discover objects in other domains, but the likelihood of discovering the same object more than once is increased. If this check box is cleared, duplicate objects and objects in other domains are less likely to be found. This will result in the discovery process completing more quickly. This check box is cleared by default. .. QUESTION 82 You have a System Center Configuration Manager 2007 environment. A custom application named App1 is installed on some of your computers. You want to deploy App1 to all of your computers. You need to create a group that contains the computers that do not have App1 installed. You also need to ensure that the group automatically updates its membership. What should you do? A. Create a Configuration Manager query where Software Products-Product Name is not equal to App1.
B. Create a query membership rule collection where Software Products-Product Name is not equal to App1. C. Create a query membership rule collection of all computers that are part of a subquery of computers that have App1 installed. D. Create a query membership rule collection of all computers that are not part of a subquery of computers that have App1 installed. Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Create a query membership rule collection of all computers that are not part of a subquery of computers that have App1 installed. http://technet.microsoft.com/en-us/library/bb694209.aspx About Collection Membership When creating a collection, membership in that collection can either be direct or query based. Query-Based Membership Unlike the direct membership method, query-based membership is a dynamic method for creating your collection. This means that you do not define the resources that are to be members of the collections; rather, you define the rules by which those members are placed in the collections. These rules form a query, and Configuration Manager periodically reruns the query to keep the collection up to date. QUESTION 83 You have a Systems Management Server (SMS) 2003 environment. The Microsoft SQL Server 2005 database for your SMS 2003 server is replicated to a backup site. You are performing an in-place upgrade to System Center Configuration Manager 2007. The SQL Server configuration causes the upgrade to fail. You need to complete an in-place upgrade. What should you do? A. B. C. D.
Increase the replication interval of the SQL Server database. Decrease the replication interval of the SQL Server database. Detach the SMS database. Disable SQL replication of the SQL Server database.
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Disable SQL replication of the SQL Server database. http://technet.microsoft.com/en-us/library/bb693648.aspx How to Test the Site Database Upgrade Process Before beginning the site upgrade process, you should test the site database upgrade process on a copy of the Microsoft Systems Management Server (SMS) 2003 site database to be upgraded. To test the database for an upgrade, you use the /testdbupgrade setup command-line switch. When this command is run, the setup Prerequisite Checker will launch and verify that the database to be tested meets the requirements for the test. The test must be run on a supported version of Microsoft SQL Server 2005, and SQL Server database replication must not have been configured for the database before it was copied or backed up in preparation for the test. The results of the prerequisite check can be viewed in the ConfigMgrPrereq.log log file created in the root of the system drive. Note The database upgrade test fails on SMS site databases that are copied or restored from an SMS 2003 site
database with SQL Server database replication enabled. This is because when SQL Server database replication is enabled for the SMS 2003 site database, the computer running SQL Server modifies the SQL Server tables that are included in the publication. When the database is restored to another database, the setup /testdbupgrade fails on that restored SMS site database. QUESTION 84 You have a System Center Configuration Manager 2007 environment. You have a central site named CEN. Your company merges with another company named Northwind Traders. Northwind Traders uses Microsoft Systems Management Server (SMS) 2003. You configure the Northwind Traders central site named NWD as a child site to the CEN site. You need to ensure that client computers in Northwind Traders receive software updates from the CEN site. What should you do? A. On the CEN site, install the Inventory Tool for Microsoft Updates from the SMS 2003 media. B. On the CEN site, install the Inventory Tool for Microsoft Updates from the Configuration Manager 2007 media. C. On the NWD site, install the Inventory Tool for Microsoft Updates from the SMS 2003 media. D. On the NWD site, install the Inventory Tool for Microsoft Updates from the Configuration Manager 2007 media. Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: On the CEN site, install the Inventory Tool for Microsoft Updates from the Configuration Manager 2007 media. http://technet.microsoft.com/en-us/library/bb633261.aspx About the Inventory Tool for Microsoft Updates The Inventory Tool for Microsoft Updates in Configuration Manager 2007 provides backward compatibility for Systems Management Server (SMS) 2003 clients to scan for software updates compliance using the Microsoft Update catalog. During the SMS 2003 site upgrade to Configuration Manager 2007, Setup detects whether a previous version of the Inventory Tool for Microsoft Updates is installed on the site and verifies that another installation of the tool is not installed on a site higher in the hierarchy. If both are true, Setup initiates an upgrade for the inventory tool on the site server. During the installation, you can specify whether to download the latest Microsoft Update catalog from the Internet or from a local location. After the Inventory Tool for Microsoft Updates is upgraded on the site, the catalog is synchronized with the Microsoft Updates catalog, the new scan package is updated, and client computers upgrade the scan tool following their next Machine Policy Retrieval & Evaluation Cycle. Software updates will be scanned for compliance using the Microsoft Update catalog and will continue to work on SMS 2003 and Configuration Manager 2007 client computers. QUESTION 85 You have a System Center Configuration Manager 2007 environment. You discover that some client computers in your environment are infected with malicious software. You need to identify client computers that are infected. What should you do? A. B. C. D.
Create a package that removes the malicious software. Enable the system health validator point. Enable Network Access Protection. Create an operating system configuration item that detects the malicious software. Assign it to a configuration baseline, and associate it to a collection.
Correct Answer: D Section: (none) Explanation
Explanation/Reference: Answer: Create an operating system configuration item that detects the malicious software. Assign it to a configuration baseline, and associate it to a collection. http://technet.microsoft.com/en-us/library/bb693611.aspx Example Scenarios for Implementing Desired Configuration Management Remediating Non-Compliance with Software Distribution that Targets Computers with Software Packages or Scripts by Using a Collection that Is Automatically Populated with Computers Reporting Non-Compliance This scenario demonstrates how customers can remediate non-compliance of security settings using desired configuration management. .. Tommy assigns the configuration baseline to a collection that contains the laptop computers, and he configures the schedule to run more frequently than the other configuration baselines that do not check for security settings. .. The security team already has a custom script that checks for malicious software and then configures all the required security settings. If malicious software is detected, the script generates an e-mail notification to the security team. Ellen gives this script to Tommy, who creates a package for it in Configuration Manager and hosts it on Configuration Manager distribution points. .. Tommy then creates a collection with a query that will automatically be populated with computers that report out of compliance with the highest non-compliance severity level. .. Tommy monitors the compliance of the laptops using the desired configuration management home page. He also confirms that the collection is automatically populated with non-compliant computers, that the script is run on these computers, and that the computers are then removed from the collection. He can easily identify the laptops that report out of compliance with the security baseline by using the noncompliance severity level and the configuration baseline category of Security. .. Further explanations: http://technet.microsoft.com/en-us/library/bb693725.aspx Network Access Protection in Configuration Manager The Configuration Manager 2007 Network Access Protection (NAP) feature provides a set of tools and resources that can enforce compliance of software updates on client computers to help protect the integrity of your enterprise network. http://technet.microsoft.com/en-us/library/bb693545.aspx About System Health Validator Points in Network Access Protection The System Health Validator point is the Configuration Manager 2007 site system role that runs on Windows Server 2008 with the Network Policy Server (NPS) role. When using Network Access Protection (NAP) in Configuration Manager 2007, the System Health Validator point is needed to validate the statement of health from NAP-capable Configuration Manager clients to produce a client health state of compliant or non-compliant, or an error condition that prevented the health state from being determined. The statement of health with the client computer's health state or error condition is passed to the Network Policy Server, which then decides, based on how the connection request and network policies are configured,
whether the client will have full or limited network access. If the client is non-compliant, the Network Policy Server can also enforce compliance through remediation on a restricted network or on the full network for a limited time. QUESTION 86 You have a System Center Configuration Manager 2007 environment. Network Access Protection (NAP) is enforced by using DHCP on a secured network. Users are unable to connect to the secured network. Servers that run Network Policy Server and servers that run DHCP are functioning properly. You need to ensure that users are able to access secured resources. What should you do? A. B. C. D.
Configure the site boundaries to match the DHCP scopes for the secured network. Enable the device management point. Enable the reporting point. Enable the system health validator point.
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Enable the system health validator point. http://technet.microsoft.com/en-us/library/bb693545.aspx About System Health Validator Points in Network Access Protection How the System Health Validator Point Interacts with Configuration Manager Clients and the Windows NAP Infrastructure The System Health Validator point is the Configuration Manager 2007 site system role that runs on Windows Server 2008 with the Network Policy Server (NPS) role. When using Network Access Protection (NAP) in Configuration Manager 2007, the System Health Validator point is needed to validate the statement of health from NAP-capable Configuration Manager clients to produce a client health state of compliant or non-compliant, or an error condition that prevented the health state from being determined. The statement of health with the client computer's health state or error condition is passed to the Network Policy Server, which then decides, based on how the connection request and network policies are configured, whether the client will have full or limited network access. If the client is non-compliant, the Network Policy Server can also enforce compliance through remediation on a restricted network or on the full network for a limited time. Further explanations: http://technet.microsoft.com/en-us/library/bb681008.aspx Prerequisites for Network Access Protection Configuration Manager 2007 Dependencies Reporting Point Site System - The reporting point site system role must be installed before Network Access Protection reports can be displayed. http://technet.microsoft.com/en-us/library/bb680491.aspx How to Enable a Mobile Device Management Point The Configuration Manager device management point is an extension to the Configuration Manager 2007 management point or proxy management point. The device management point allows mobile devices to connect to Configuration Manager 2007 servers and receive policy and configuration settings. Mobile device
management also allows mobile devices to report asset management information and status to Configuration Manager. http://technet.microsoft.com/en-us/library/bb632910.aspx Planning Configuration Manager Boundaries Configuration Manager 2007 boundaries are defined in the Configuration Manager console and are defined by IP subnet, Active Directory site name, IPv6 Prefix, IP ranges, or any combination of these. Boundaries are used to assign clients to a specific Configuration Manager 2007 site. QUESTION 87 You have a System Center Configuration Manager 2007 environment. You plan to deploy Microsoft Windows Vista. You have a Configuration Manager package that installs an application named App1. App1 can be installed only by using the interactive logged-on users rights. When you create a task sequence, you notice that App1 does not appear as an available package to deploy. You need to be able to install App1. What should you do? A. B. C. D.
Create a software update deployment to deploy App1. Create a software advertisement to deploy App1. Configure the App1 program to run with administrative rights, and allow users to interact with the program. Add a custom task sequence step to connect to a network share, and run a command line to install App1.
Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Create a software advertisement to deploy App1. http://technet.microsoft.com/en-us/library/bb632474.aspx How to Install Software Packages as Part of a Task Sequence You can use a task sequence to install software as part of any operating system image deployment, or to install software on an existing Microsoft System Center Configuration Manager 2007 client. Using steps in a task sequence, Configuration Manager 2007 can install one or more Configuration Manager 2007 software packages on a target computer after the new operating system is installed, but before the user is first allowed to login. The installation of each software package in the task sequence completes in order before the next software package is installed. Desktop users cannot login to the computer until all software packages have been installed. Programs associated with each Configuration Manager 2007 package must run under the computer's system account and be configured to install automatically and silently without user interaction. When you use a task sequence to install an application Configuration Manager 2007 checks the following two conditions: 1. Whether or not a user must be logged in for the installation to proceed. 2. Whether or not user any user input is required. Further explanations: http://technet.microsoft.com/en-us/library/bb680462.aspx Program Properties Page Use the Program Properties page in the Configuration Manager 2007 Distribute Software Wizard to specify the conditions under which the program can run, as well as the action to take after it runs. UI Element List: ..
Run with administrative rights Specifies whether the program runs with administrator credentials. If selected, this option forces the program to run under the local system account on the client computer. If this option is selected, the following option is available: Allow users to interact with this program: Specifies whether to allow users to interact with the program. This check box is available only when the Program can run option is configured for Only when a user is logged on or Whether or not a user is logged on. Select this option only for programs that must run in an administrative context and that require the user to interact with the program. If you select this option, the user interface for the program is visible to the logged-on user, and that user can interact with the program. .. http://technet.microsoft.com/en-us/library/bb680431.aspx How to Create a Custom Task Sequence A task sequence consists of a combined series of steps to complete an action. Task sequences can operate across a computer restart, and task sequence steps can be put into groups for more control over run-time behavior. You can create a custom task sequence that will automate and perform tasks on a computer without user intervention. QUESTION 88 You install System Center Configuration Manager 2007 in your Active Directory environment. You need to ensure that client agent installation automatically retrieves client deployment parameters from Active Directory Domain Services. You extend the Active Directory schema. You create the System Management container. Which two actions should you perform next? (Each correct answer presents part of the solution. Choose two.) A. B. C. D.
Import the contents of the ConfigMgr_ad_schema.ldf file into Active Directory Domain Services. Set security permissions on the System Management container. Add the server account for the first installed site server to the Schema Admins global security group. Enable Active Directory publishing for the Configuration Manager site.
Correct Answer: BD Section: (none) Explanation Explanation/Reference: Answer: Set security permissions on the System Management container. Enable Active Directory publishing for the Configuration Manager site. http://technet.microsoft.com/en-us/library/bb633121.aspx How to Extend the Active Directory Schema for Configuration Manager Four actions are required to successfully enable Configuration Manager clients to query Active Directory Domain Services to locate site resources: Extend the Active Directory schema. Create the System Management container. Set security permissions on the System Management container. Enable Active Directory publishing for the Configuration Manager site. QUESTION 89 You have a System Center Configuration Manager 2007 environment. You want to deploy an application named App1 on only computers that run Microsoft Windows Vista Enterprise Edition. You need to create a target group that contains the Windows Vista Enterprise computers. You also need to ensure that the group automatically updates its membership. What should you do?
A. B. C. D.
Create a Configuration Manager query for all the Windows Vista Enterprise computers. Create a report to target all Windows Vista Enterprise computers. Create a direct membership rule collection for all the Windows Vista Enterprise computers. Create a query membership rule collection for all the Windows Vista Enterprise computers.
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Create a query membership rule collection for all the Windows Vista Enterprise computers. http://technet.microsoft.com/en-us/library/bb694209.aspx About Collection Membership When creating a collection, membership in that collection can either be direct or query based. Query-Based Membership Unlike the direct membership method, query-based membership is a dynamic method for creating your collection. This means that you do not define the resources that are to be members of the collections; rather, you define the rules by which those members are placed in the collections. These rules form a query, and Configuration Manager periodically reruns the query to keep the collection up to date. QUESTION 90 You have a System Center Configuration Manager 2007 environment. You need to view hardware inventory processing at your site. Which performance counter should you monitor? A. B. C. D.
SMS MP Relay Mgr - Number of Files Inventory Data Loader - MIFs Processed/minute SMS State System - Total Message Records Processed SMS State System - Total Message Files Processed
Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Inventory Data Loader - MIFs Processed/minute http://technet.microsoft.com/en-us/library/bb932169.aspx Monitoring Site Performance Many performance counters available when monitoring performance on Windows servers and Configuration Manager sites. The following table lists a set of counters that have been identified as useful in monitoring and diagnosing Configuration Manager-related performance issues. Configuration Manager Performance Counters ..
.. QUESTION 91 You have a System Center Configuration Manager 2007 environment running in native mode. You need to identify computers that are unable to communicate with their management point. Which site role should you
configure? A. B. C. D.
the Server Locator Point role the Fallback Status Point role the Software Update Point role the System Health Validator Point role
Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: the Fallback Status Point role http://technet.microsoft.com/en-us/library/bb694178.aspx About the Fallback Status Point in Configuration Manager A fallback status point in Configuration Manager 2007 is a site system role that is used to help administrators monitor client deployment and identify any problems encountered during installation or assignment. It is also used to help identify clients that are unmanaged because they have problems communicating with their management point, which is particularly relevant for when the site is operating in native mode. Further explanations: http://technet.microsoft.com/en-us/library/bb693467.aspx Determine If You Need a Server Locator Point for Configuration Manager Clients Server locator points are used in a Configuration Manager 2007 hierarchy to complete client site assignment on the intranet and help clients find management points when they cannot find that information through Active Directory Domain Services. Intranet clients use Active Directory Domain Services as their preferred method to complete site assignment and find management points. However, clients must use a server locator point if the Active Directory schema is not extended for Configuration Manager 2007 or the site is not published to Active Directory Domain Services, or if clients do not belong to the same Active Directory forest as the site server's forest. http://technet.microsoft.com/en-us/library/bb632674.aspx About the Software Update Point The software update point in Microsoft System Center Configuration Manager 2007 is a required component of software updates on primary sites, is an optional component of software updates on secondary sites, and is installed as a site system role in the Configuration Manager console. The software update point interacts with the WSUS services to configure update settings, to request synchronization to the upstream update source, and on the central site, to synchronize software updates from the WSUS database to the site server database. http://technet.microsoft.com/en-us/library/bb693545.aspx About System Health Validator Points in Network Access Protection When using Network Access Protection (NAP) in Configuration Manager 2007, the System Health Validator point is needed to validate the statement of health from NAP-capable Configuration Manager clients to produce a client health state of compliant or non-compliant, or an error condition that prevented the health state from being determined. QUESTION 92 Network Access Protection (NAP) is configured in your System Center Configuration Manager 2007 environment. You need to exclude only company executives from NAP policy enforcement. What should you do?
A. Create a new NAP policy. Add to the policy an Active Directory global security group that contains the client computers that should not be subject to NAP policies. B. Disable the Network Access Protection client agent for the site. C. Implement a desired configuration management baseline for the executives. D. Create a new NAP policy. Add to the policy an Active Directory global security group that contains the users that should not be subject to NAP policies. Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Create a new NAP policy. Add to the policy an Active Directory global security group that contains the users that should not be subject to NAP policies. http://technet.microsoft.com/en-us/library/bb693983.aspx Configuring Exemption Policies for Configuration Manager Network Access Protection When you are using Network Access Protection with Configuration Manager 2007, the first matching network policy on the Network Policy Server will be applied to connecting clients. This means that exceptions and exemptions require their own policies that match only them, with different settings than standard policy settings. Examples Specified people will never have limited network access. Further explanations: http://technet.microsoft.com/en-us/library/ bb693983.aspx#BKMK_Specified_people_will_never_have_restricted_network_access Specified people will never have limited network access 1. Create a new network policy that has the following configuration: On the Overview tab, select Policy enabled. On the Overview tab, select the access permission of Grant Access. Grant access if the connection request matches this policy. On the Conditions tab, add the condition of Windows Groups, click Add Groups, select the group that contains all the people who should always have full network access without remediation, as if compliant. Click the group you have just selected, click OK, and then click OK to close the Windows Groups dialog On the Conditions tab, add the condition of Health Policies, select the Compliant health policy created earlier, and then click OK. On the Constraints tab, for DHCP and IPsec enforcement only click Perform machine health check only. Note that this setting should not be selected if you are using VPN or 802.1X as your enforcement mechanism. On the Settings tab, click NAP Enforcement under the section Network Access Protection, click Allow full network access, and then click OK. 2. Order this policy before the Configuration Manager network policy that references the compliant health policy and does not have a Windows Groups condition. QUESTION 93 You have a System Center Configuration Manager 2007 environment. An existing software update deployment package contains the previous months updates. You need to add the latest Microsoft updates to the existing software update deployment. What should you do? A. Run security updates synchronization. Use the Distribute Software Updates Wizard to add updates to the existing package. B. Use the Run Synchronization action to update the Update Repository console tree node. Modify the
deadline setting in the Software Update Deployment template. C. Run security updates synchronization. Modify the deadline setting in the Software Updates Deployment template. D. Use the Run Synchronization action to update the Update Repository console tree node. Add the updates to an existing update list. Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Use the Run Synchronization action to update the Update Repository console tree node. Add the updates to an existing update list. http://technet.microsoft.com/en-us/library/bb632485.aspx About Software Updates Synchronization Software updates synchronization in Configuration Manager 2007 is the process of retrieving the software updates metadata that meets the configured criteria from Microsoft Update or Windows Server Update Services (WSUS) 3.0 running on the active software update point for the parent site. The highest site in the Configuration Manager hierarchy with an active software update point (most likely the central site, as it is referred to in this topic) synchronizes with Microsoft Update, which can be scheduled as part of the software update point properties or manually initiated by using the Run Synchronization action on the Update Repository console tree node. Child sites initiate synchronization only when a synchronization request is received from the parent site. When synchronization is initiated on a configured schedule, a full synchronization is performed and all changes to the software updates metadata since the last scheduled synchronization are inserted into the site database. This includes new software updates metadata or metadata that has been modified, has been removed, or has expired. When synchronization is initiated manually, only new software updates metadata since the last synchronization is inserted into the site database. Therefore, the manual synchronization completes faster than the scheduled synchronization. Child sites always perform a full synchronization. http://technet.microsoft.com/en-us/library/bb693591.aspx About Update Lists in Software Updates An update list in Configuration Manager 2007 contains a set of software updates. Using the update list provides several benefits when deploying and monitoring software updates and is, therefore, part of the recommended software updates workflow. Adding Software Updates to an Update List Software updates are added to an update list by using the Update List Wizard. Software updates are selected in the Configuration Manager console and the Update List action is used to open the wizard. You can add the software updates to an existing update list or create a new one. http://technet.microsoft.com/en-us/library/bb632806.aspx How to Add Software Updates to an Update List The Update List Wizard allows you to add software updates to a new or existing update list. The update list is used to initiate deployments for a set of updates without having to manually select the updates in the set each time a new deployment is created. Further explanations: http://technet.microsoft.com/en-us/library/bb632940.aspx About Deployment Templates in Software Updates
Deployment templates in Configuration Manager 2007 store many of the software update deployment properties, and they can be created for consistency and to save time when creating deployments. Templates are created prior to deploying software updates by running the Deployment Template Wizard. Deployment templates store many of the deployment properties that might not change from deployment to deployment, and they can save a lot of time for administrators when creating software update deployments. Templates can be created for different deployment scenarios in your environment. QUESTION 94 You have a System Center Configuration Manager 2007 environment. You need to ensure that you are able to use the Configuration Manager client push installation method to deploy client computers in your Active Directory domain. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. B. C. D. E.
Configure an exception to the firewall settings on the client computers to allow HTTP traffic. Configure client push installation in the Client Push Installation properties dialog box. Configure an exception to the firewall settings on the client computers to allow the BITS protocol. Enable and run Active Directory System Discovery for the Active Directory forest. Specify the Software Installation account to be used by Configuration Manager 2007.
Correct Answer: BD Section: (none) Explanation Explanation/Reference: Answer: Configure client push installation in the Client Push Installation properties dialog box. Enable and run Active Directory System Discovery for the Active Directory forest. http://technet.microsoft.com/en-us/library/bb632380.aspx How to Install Configuration Manager Clients Using Client Push Client push installation is designed to push Configuration Manager 2007 client software to discovered computers or resources. http://technet.microsoft.com/en-us/library/bb633276.aspx About Configuration Manager Discovery Microsoft System Center Configuration Manager 2007 Discovery identifies computer and user resources that can be managed by a Configuration Manager 2007 site. You can then use the discovery information to help you to install the Configuration Manager client, and create custom queries and collections that are used to logically group resources for related management tasks. You must run Discovery before you can install clients by using client push. To discover resources, you must run at least one discovery method that is suitable for the resource that you want to discover. Discovery Methods There are six configurable discovery methods: Active Directory System Discovery â&#x20AC;&#x201C; Discovers computers from the specified locations in Active Directory Domain Services. Active Directory User Discovery - Discovers user accounts from the specified locations in Active Directory Domain Services. Active Directory Security Group Discovery - Discovers security groups, including local, global, and universal groups from the specified locations in Active Directory Domain Services. Active Directory System Group Discovery â&#x20AC;&#x201C; Discovers additional information about previously discovered computers from the specified locations in Active Directory Domain Services. This information includes the
OU and group membership of the computer. Active Directory System Group Discovery does not discover information about new resources that did not previously exist in the Configuration Manager site database. Heartbeat Discovery â&#x20AC;&#x201C; Used by active Configuration Manager clients to update their discovery records in the database. Because it is initiated by an active client, Heartbeat Discovery does not discover new resources. Network Discovery â&#x20AC;&#x201C; Searches your network infrastructure for network devices that have an IP address. This allows you to discover devices that might not be found by other discovery methods, including printers, routers, and bridges. QUESTION 95 You have a System Center Configuration Manager 2007 environment. Currently, you collect software inventory data on a monthly basis. You need to ensure that all software inventory reports include data about software that was installed as recently as the past seven days. What should you do? A. Create a custom Configuration Manager Web report to display all software inventory changes that occurred within the past seven days. B. Configure the Software Updates client agent to run every seven days. C. Configure the Software Inventory client agent to run every seven days. D. Configure the software update point synchronization schedule to run every seven days. Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Configure the Software Inventory client agent to run every seven days. http://technet.microsoft.com/en-us/library/bb681072.aspx About the Software Inventory Client Agent Software inventory is the process of gathering software information from client computers in a Microsoft System Center Configuration Manager 2007 site. The information gathered can include data on the operating system, installed programs, and any files you want to inventory or collect. Configuration Manager 2007 stores this data in the site database, where you can use the information in queries to generate and view reports, or to build software-specific collections. http://technet.microsoft.com/en-us/library/bb693955.aspx Software Inventory Client Agent Properties: General Tab Use this tab to enable or disable software inventory for the site. If software inventory is enabled, you can schedule when software inventory is to be collected from clients. QUESTION 96 You are deploying System Center Configuration Manager 2007 in a new site. You need to ensure that client computers in the new site are able to receive client agent policies. Which role should you create and configure for the site system? A. B. C. D.
the Proxy Management Point role the Distribution Point role the Management Point role the Server Locator Point role
Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: the Management Point role
http://technet.microsoft.com/en-us/library/bb680471.aspx Configuration Manager Site System Planning Each Configuration Manager 2007 site contains a site server and one or more site systems. A site system is a server or server share that provides functionality to the Configuration Manager 2007 site. A site system role is a function that a site system performs within a Configuration Manager 2007 site. For example, the management point site system role provides a communication point between the Configuration Manager 2007 site server and Configuration Manager clients. Basic Site System Roles Management point The management point is the primary point of contact between Configuration Manager clients and the site server. Management points can provide clients with installation prerequisites, client installation files, configuration details, advertisements, and distribution point locations. Additionally, management points receive inventory data, software metering information, and status and state messages from clients. Further explanations: http://technet.microsoft.com/en-us/library/bb693472.aspx Determine Whether a Proxy Management Point is Needed at a Secondary Site A proxy management point is a management point installed at a secondary site, which acts as a proxy for the default management point at the secondary site of the parent primary site. In general, proxy management points are used to avoid excessive bandwidth usage over slow network links between clients located in the boundaries of a secondary site and the default management point located at the parent primary site. http://technet.microsoft.com/en-us/library/bb680471.aspx Configuration Manager Site System Planning Distribution point A site system that stores package source files received from a site server performs the distribution point role. Client computers contact distribution points to obtain programs and files after they have received software distribution advertisements. Server locator point The server locator point stores site information and locates management points for Configuration Manager clients. The primary purpose of the server locator point is to support client deployment. QUESTION 97 You have a System Center Configuration Manager 2007 environment running in native mode. You have a perimeter network for your Internet-based site systems. You block the SMB traffic from the perimeter network to your intranet. You configure the site systems properties to allow only site server initiated data transfers from the site systems. You need to configure site system communications between the perimeter network and the site server. What should you do? A. B. C. D.
Configure the fallback status points. Configure a server locator point. Configure a Client Connection account. Configure a Site System Installation account.
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Configure a Site System Installation account.
http://technet.microsoft.com/en-us/library/bb693576.aspx How to Configure Internet-Based Site Systems to Allow Only Site Server Initiated Data Transfers The default behavior of site systems in Configuration Manager 2007 is to initiate a connection to the site server in order to send status information to the site. However, you can configure the site server to initiate the connection to site systems that support Internet-based site systems. This configuration might introduce some latency in sending status messages, with a decrease in performance on the site server. You should therefore configure this option if both of these two conditions apply: The Internet-based site systems are located in a perimeter network and the site server is located in the intranet. Your network security policy prohibits Server Message Block (SMB) traffic that is initiated from the perimeter network to the intranet, but it allows SMB traffic that is initiated from the intranet to the perimeter network. Important To use this option, you must also specify the Site System Installation Account on the site system server. To configure the Internet-based site system so that it allows only site server initiated data transfers: .. 4. On the General tab, select Allow only site server initiated data transfers from this site system. Important When you select this option, you must also have configured a Windows user account to install and configure the site system (the option Use another account for installing this site system on this same tab), even if there is a trust relationship between the site server's domain and the Internet-based site system's domain. http://technet.microsoft.com/en-us/library/bb632922.aspx About the Site System Installation Account The Site System Installation Accounts are used by the Microsoft System Center Configuration Manager 2007 Site Component Manager service to install, reinstall, uninstall, and configure site systems. If you configure the site system to Allow only site system initiated data transfers from this site system, Configuration Manager 2007 also uses this account to pull data from the site system. Further explanations: http://technet.microsoft.com/en-us/library/bb694178.aspx About the Fallback Status Point in Configuration Manager A fallback status point in Configuration Manager 2007 is a site system role that is used to help administrators monitor client deployment and identify any problems encountered during installation or assignment. It is also used to help identify clients that are unmanaged because they have problems communicating with their management point, which is particularly relevant for when the site is operating in native mode.
http://technet.microsoft.com/en-us/library/bb680471.aspx Configuration Manager Site System Planning Server locator point The server locator point stores site information and locates management points for Configuration Manager clients. The primary purpose of the server locator point is to support client deployment. http://technet.microsoft.com/en-us/library/cc181332.aspx Planning for SMS Account Lifecycles Managing the Client Connection Account
SMS client components on clients that are running Microsoft Windows NT 4.0, Microsoft Windows 2000, Microsoft Windows XP, or Windows Server(tm) 2003 use Client Connection Accounts to connect to CAPs and distribution points, to transfer data and retrieve configuration settings. QUESTION 98 You have a System Center Configuration Manager 2007 environment. You install a secondary site at a branch office. You discover that communication is not occurring between the secondary site and its parent site. You need to ensure two-way communication between the secondary site and its parent site. What should you do? A. B. C. D.
On the secondary site, publish the Configuration Manager site information to Active Directory. On the parent site, create an Asynchronous RAS Sender to the secondary site. On the parent site, create a Standard Sender Address to the secondary site. On the secondary site, create an Asynchronous RAS sender to the parent site.
Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: On the parent site, create a standard sender address to the secondary site. http://technet.microsoft.com/en-us/library/bb693582.aspx Configuration Manager Senders Configuration Manager 2007 sites must have one or more senders to communicate and can only be installed on primary or secondary site server systems. The sender itself does not provide connectivity to sites. Instead, senders use existing network connectivity to manage the connection, ensure the integrity of transferred data, recover from errors, and close the connection when it is no longer needed. Types of Configuration Manager Senders Standard Sender The standard sender is installed and configured by default on all primary and secondary sites. If your site-to-site communications occur over a LAN that uses a supported protocol, you do not need to install another sender. Courier Sender Asynchronous RAS Sender Used for communication over an asynchronous line. X25 RAS Sender SNA RAS Sender http://technet.microsoft.com/en-us/library/bb633289.aspx How to Install a Secondary Site Using the Configuration Manager Console To install a secondary site from the primary site using the Secondary Site Creation Wizard from within the Configuration Manager console, complete the following procedure. .. 6. On the Site Server page, you must specify the server name for the new secondary site installation. Enter the computer name to install the secondary site on, and the installation directory on that computer to install the Configuration Manager program files. .. 8. On the Address to Secondary Site page, specify one or more existing addresses to the new secondary site or create a new address to the secondary site. By default, the account used for the address is the primary site server's computer account. Alternatively, you can set a Microsoft Windows domain user account in the form of <domain\user> by clicking Set. 9. On the New Address to Secondary Site page, specify a new standard or asynchronous RAS sender address for the primary site to use when contacting the new secondary site.
10. On the New Address to Parent Site page, specify a new standard or asynchronous RAS sender address for the secondary site to use when contacting the parent site. .. Further explanations: http://technet.microsoft.com/en-us/library/bb632823.aspx Choose Which Configuration Manager Sender to Use The choice of sender used for site to site communication depends on the existing network connectivity system between sites. If there are reliable, high-speed network connections between sites, plan to use the Standard Sender. If you have RAS connections between sites, select the appropriate type of RAS sender for your connection. If you want to send large amounts of package data for software distribution to sites using physical media instead of over the network, you can configure software distribution packages to use the Courier Sender. Choosing Configuration Manager Senders Use the following table to choose the appropriate sender to use when configuring site to site communications:
QUESTION 99 You have a System Center Configuration Manager 2007 environment. You advertise an application named App1 to the collection named Coll1. Coll1 has a configured maintenance window of 30 minutes. The program properties for App1 are configured as follows: Maximum allowed run time (minutes): Unknown After running: Program restarts computer. You need to ensure that App1 does not restart servers outside of the maintenance window. What should you do? A. B. C. D.
In the program properties, clear the Allow users to interact with this program option. In the advertisement properties, clear the Allow system restart outside maintenance windows option. Configure the maximum run time to an exact maximum run time. In the advertisement properties, select the Ignore maintenance windows when running program option.
Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Configure the maximum run time to an exact maximum run time. http://technet.microsoft.com/en-us/library/bb693579.aspx
New Program Wizard > Requirements Page Use the Requirements page in the Configuration Manager 2007 New Program Wizard to specify program requirements, including the client platforms on which the program will run, estimated disk space and run time for the program, and any additional requirements. UI Element List: .. Maximum allowed run time Specifies the maximum time (in minutes) that the program is expected to run on the client computer. This can be specified as Unknown (the default setting) or as a whole number greater than zero. By default, this value is set to 120 minutes. Important If you are using maintenance windows for the collection on which this program is run, a conflict may occur if the Maximum allowed run time is longer than the scheduled maintenance window. If the maximum run time is set to Unknown, it will start during the maintenance window, but will continue to run until it completes or fails after the maintenance window is closed. If the maximum run time is set by the user to a specific period (not set to Unknown) that exceeds the length of any available maintenance window, then that program will not be run. If the value is set as Unknown, Configuration Manager 2007 sets the maximum allowed run time as 12 hours (720 minutes). Note If the maximum run time (whether set by the user or as the default value) is exceeded, Configuration Manager 2007 will stop the program if it is set to run with administrative rights and the allow users to interact with this program setting is not selected. If the program itself is not stopped, Configuration Manager 2007 stops monitoring the program after the maximum allowed run time is exceeded. This allows Configuration Manager 2007 to continue with other software distribution functions, such as running other advertised programs. As a result, Configuration Manager does not: * Stop the program. * Free up any drives that have been mapped for the advertised program. * Free up any network connections made for the advertised program. * Remove security rights granted to the Client Token account, if any. * Free up operating system resources used by Configuration Manager when running advertised programs. On client computers, the specified value appears in Run Advertised Programs in Control Panel and helps the user decide if and when to run the advertised program. QUESTION 100 You have a System Center Configuration Manager 2007 environment. The company has a main office and multiple branch offices. You need to prevent computers in branch offices from installing packages from the distribution point in the main office. What should you do? A. B. C. D.
Configure the main office site system role with protected boundaries. Configure the branch office site system roles with protected boundaries. Configure the branch office distribution points as protected distribution points. Configure the main office site distribution point as a protected distribution point.
Correct Answer: A Section: (none) Explanation
Explanation/Reference: Answer: Configure the main office site system role with protected boundaries. http://technet.microsoft.com/en-us/library/bb932133.aspx How to Configure a Protected Distribution Point Protecting a Microsoft System Center Configuration Manager 2007 site system means that clients outside of the protected boundaries will be unable to access the distribution point or state migration point roles on that site system. Protection is applied to the entire site system, not just to the properties of the site role. However, protection has no effect on any site system roles except distribution points and state migration points. QUESTION 101 You have a System Center Configuration Manager 2007 environment. You successfully perform many software distributions to client computers by using the Download content from distribution point and run locally option. You notice that client computers that are configured with the Download content from distribution point and run locally option begin to fail to execute advertisements. You need to ensure that the client computers can successfully execute advertisements. What should you do? A. In the advertisement properties, select the Allow clients to fallback to unprotected distribution points when the content is not available on the protected distribution points option. B. Refresh all packages on the distribution points. C. In the package properties for all applications, clear the Persist content in the client cache check box. D. In the advertisement properties, select the Download content from distribution point and run locally option. Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: In the package properties for all applications, clear the Persist content in the client cache check box. http://technet.microsoft.com/en-us/library/bb680872.aspx Package Name Properties: Data Source Tab Use the Data Source tab of the Configuration Manager 2007 Software Distribution <Package Name> Properties dialog box to specify data source information, including whether the package contains source files, where those files are located, and whether associated distribution points are updated on a schedule. Package source files are any files that must be copied to a distribution point to support a package when one of its programs is advertised to clients. The Data Source tab contains the following elements: .. Persist content in client cache Specifies whether content should be retained in the cache on the client computer indefinitely even if it has already been run. Although this option can be useful with some recurring packages such as virus software, you should know that this will reduce the available cache space. Specifying this option might cause a large package to fail at a later point if there is insufficient space available in the cache. QUESTION 102 You have a System Center Configuration Manager 2007 environment. You create a deployment package to deploy software updates to a collection of client computers with a deployment schedule of As soon as possible. The Software Update Home Page indicates one installation failure for the package. You need to view information about the installation failure. Which log file should you view? A. B. C. D.
WindowsUpdate.log SmsWusHandler.log SrcUpdateMgr.log WUSSyncXML.log
Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: WindowsUpdate.log http://technet.microsoft.com/en-us/library/bb892800.aspx List of Log Files in Configuration Manager 2007 Windows Update Agent Log File By default, the Windows Update Agent log file is found on the Configuration Manager Client computer in % Windir%. The following table provides the log file name and description.
QUESTION 103 You have a System Center Configuration Manager 2007 environment with a BITS-enabled standard distribution point in the primary site. A branch office is connected by a 128-Kbps (kilobits per second) WAN link. You create a package for Microsoft Office 2007 Professional, and you distribute it to the distribution point. You need to be able to deploy Office 2007 to 50 client computers in the branch office, and you need to minimize bandwidth utilization and administrative effort. What should you do? A. Configure an advertisement for the package to Download content from distribution point and run locally. B. Configure a client computer that runs Windows XP Professional SP2 in the branch office as a branch distribution point (BDP) with BDP content settings for on-demand provisioning. C. Configure a client computer that runs Windows Vista in the branch office as a branch distribution point (BDP) with BDP content settings for manual provisioning. D. Create and configure a standard sender address at the primary site for the branch distribution point. Set the rate limit to 10 percent between 8:00 P.M and 6:00 A.M. Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Configure a client computer that runs Windows XP Professional SP2 in the branch office as a branch distribution point (BDP) with BDP content settings for on-demand provisioning. http://technet.microsoft.com/en-us/library/bb932184.aspx Choose Between a Standard and Branch Distribution Point Configure a distribution point as a branch distribution point if any of the following conditions apply: .. You have a remote location connected to the main Configuration Manager 2007 site location by a slow connection and want to optimize software distribution to clients in that location without creating a primary or secondary site for that location. .. http://technet.microsoft.com/en-us/library/bb632688.aspx What's New in Software Distribution for Configuration Manager
Branch Distribution Points A new Configuration Manager server role, the branch distribution point allows small office locations to host packages on workstation computers without requiring a secondary site to be hosted. This is particularly useful for offices with fewer than ten workstations, where maintaining a separate server for a secondary site might not be practical. Branch distribution points function in much the same fashion as standard distribution points, but have the advantage of providing greater control over network traffic, necessary for branch offices that may have limited network bandwidth availability. Branch distribution points allow not only allow for manual content provisioning, but also provide configurable settings for scheduling and throttling network traffic, BITS (Background Intelligent Transfer Service) enabling, to help minimize network impact. Additionally, on-demand package distribution are allowed, in which packages are only downloaded to the branch distribution point when specifically requested by a client computer. Note Branch distribution points cannot be installed on client computers running the Windows 2000 Professional operating system or the Windows 2000 Server operating system. Further explanations: http://technet.microsoft.com/en-us/library/bb632582.aspx About On-Demand Package Distribution In Microsoft System Center Configuration Manager 2007, by default, branch distribution points normally receive packages in the same way that standard distribution points do. When an administrator selects the distribution points to which a package will be copied, branch distribution points can also be selected at that point. When this is done, branch distribution points selected will download the package just as a standard distribution point would. However, the administrator can specify that the package should not be downloaded from the standard distribution point to the branch distribution point until it is requested by a client computer. This preserves bandwidth in the following ways: The package is not transferred to the branch office until at least one client requests the package. When the package is transferred to the branch distribution point, it uses Background Intelligent Transfer Service (BITS) instead of server message blocks (SMBs). This option is called on-demand package distribution. This functionality is set on a package-by-package basis, using either the New Package Wizard (when a package is first created) or the Package <Name> Properties dialog box (for existing packages). Important On-demand package distribution is available only for protected branch distribution points and only from clients within the protected boundaries. If a client is not within those protected boundaries or the branch distribution point is not protected, on-demand distribution will fail. QUESTION 104 You have a System Center Configuration Manager 2007 environment. The Hardware Inventory client agent is enabled. You need to initiate a full hardware inventory report on all computers. What should you do? A. Create and run a PowerShell script to remove hardware inventory history from the site database. B. Create and run a PowerShell script on each computer to delete the InventoryActionStatus information for hardware inventory and to trigger a hardware inventory action. C. Create a custom schedule for the Hardware Inventory client agent. D. Run a hardware inventory action from the Configuration Manager client agent. Correct Answer: B Section: (none)
Explanation Explanation/Reference: Answer: Create and run a PowerShell script on each computer to delete the InventoryActionStatus information for hardware inventory and to trigger a hardware inventory action. http://msdn.microsoft.com/en-us/library/cc144592.aspx How to Reset the Hardware Inventory Cache In Microsoft System Center Configuration Manager 2007, you reset the hardware inventory cache by connecting to the inventory agent namespace and deleting the inventory action status instance for hardware inventory. To reset the hardware inventory cache 1. Connect to the inventory agent namespace (root\ccm\invagt). 2. Delete the inventory action status instance for hardware inventory ({00000000-0000-0000-0000000000000001}). Example Visual Basic Script Sub ResetHardwareInventoryCache() ' Get a connection to the "root\ccm\invagt" namespace. Dim locator Set locator = CreateObject("WbemScripting.SWbemLocator") Dim services Set services = locator.ConnectServer( , "root\ccm\invagt") ' Delete the specified InventoryActionStatus instance. services.Delete "InventoryActionStatus.InventoryActionID='{00000000-00000000-0000-000000000001}'" ' Display message. wscript.echo "Reset Hardware Inventory cache." End Sub
http://technet.microsoft.com/en-us/library/bb633207.aspx How to Initiate Policy Retrieval for a Configuration Manager Client A Configuration Manager 2007 client downloads its client policy on a schedule. By default, this value is configured to every 60 minutes and is configured with the option Policy polling interval (minutes). However, there might be occasions when you want to initiate ad-hoc policy retrieval from the clientâ&#x20AC;&#x201D;for example, in a troubleshooting scenario or when testing. Use the following procedures to initiate ad-hoc policy retrieval from the client outside its scheduled polling interval, either by using the Actions tab on the Configuration Manager client or by running a script on the computer. You must be logged onto the client computer with local administrative rights to perform these procedures. To manually initiate client policy retrieval using a script 1. Open a text editor, such as Notepad. 2. Copy and insert the following into the file: on error resume next dim oCPAppletMgr 'Control Applet manager object. dim oClientAction 'Individual client action.
dim oClientActions 'A collection of client actions. 'Get the Control Panel manager object. set oCPAppletMgr=CreateObject("CPApplet.CPAppletMgr") if err.number <> 0 then Wscript.echo "Couldn't create control panel application manager" WScript.Quit end if 'Get a collection of actions. set oClientActions=oCPAppletMgr.GetClientActions if err.number<>0 then wscript.echo "Couldn't get the client actions" set oCPAppletMgr=nothing WScript.Quit end if 'Display each client action name and perform it. For Each oClientAction In oClientActions if oClientAction.Name = "Request & Evaluate Machine Policy" then wscript.echo "Performing action " + oClientAction.Name oClientAction.PerformAction end if next set oClientActions=nothing set oCPAppletMgr=nothing QUESTION 105 You have a System Center Configuration Manager 2007 environment. The environment includes a parent site named P01 and two child sites named C01 and C02. An application named App1 is installed on multiple computers in the environment. You need to report usage of App1 in only the C01 site, and you need to view the reports from the P01 site. What should you do? A. Create a software metering rule for App1 on site P01. Select the Site Code C01, and do not apply the rule to child sites. B. Create a software metering rule for App1 on site P01, and apply the rule to child sites. C. Create a software inventory rule for App1 on site P01. Enable reporting for file and product detail. D. Create a software inventory rule for App1 on site C01. Enable reporting for file and product detail. Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: Create a software metering rule for App1 on site P01. Select the Site Code C01, and do not apply the rule to child sites. http://technet.microsoft.com/en-us/library/bb694169.aspx Software Metering in Configuration Manager The Configuration Manager 2007 software metering feature allows you to monitor and collect software usage data from Configuration Manager 2007 clients. http://technet.microsoft.com/en-us/library/bb633043.aspx How to Add a Software Metering Rule The New Software Metering Rule Wizard leads you through the process of creating a new software metering
rule for your Configuration Manager 2007 site. To add a new software metering rule: .. 3. On the General page of the New Software Metering Rule Wizard, specify the following information: .. This rule applies to the specified site and all its child sites: Indicates whether the software metering rule will apply to all lower level Configuration Manager 2007 or Systems Management Server 2003 sites, in addition to the site code specified in Site code. .. Further explanations: http://technet.microsoft.com/en-us/library/bb681072.aspx About the Software Inventory Client Agent Software inventory is the process of gathering software information from client computers in a Microsoft System Center Configuration Manager 2007 site. The information gathered can include data on the operating system, installed programs, and any files you want to inventory or collect. QUESTION 106 You have a System Center Configuration Manager 2007 environment. The Hardware Inventory client agent and the Software Metering client agent are enabled. You need to ensure that the Client Access License (CAL) license management reports return CAL information. What should you do first? A. B. C. D.
Enable data collection for the SoftwareLicensingProduct class in the sms_def.mof file. Configure the Hardware Inventory client agent to collect IDMIF files. Configure the Hardware Inventory client agent to collect NOIDMIF files. Configure the CALCollectionType property in the configuration.mof file.
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Configure the CALCollectionType property in the configuration.mof file. http://technet.microsoft.com/en-us/library/cc431439.aspx Enabling Client Access License (CAL) Data Collection For Asset Intelligence Example Scenario for Enabling CAL Data Collection for Asset Intelligence .. By reviewing the prerequisites documentation for Asset Intelligence, Ed knows that he must open the Configuration.mof file stored on the primary site server for his site, find the CCM_CALTrackConfig WMI data class, and modify the following settings in accordance with his reporting requirements: CALCollectionType CALCollectionFrequencyDays CALCollectionFrequencyMinutes CALCollectionTimeWindow CALSupportedWindowsVersions QUESTION 107 You have a System Center Configuration Manager 2007 environment with sites at a main office and a branch office. The two sites are connected by a dedicated network connection. The computers in the branch office do not power on when you send them Wake On LAN packets. You need to ensure that the computers are powered on in the branch office. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. B. C. D. E.
Allow Port 9 TCP traffic through the firewalls of the branch office computers Change the boot order for the branch office computers so that network boot is the first option Enable Wake on LAN in the BIOS of the branch office computers Allow Port 9 UDP traffic through the firewalls of the branch office computers Change the Wake on LAN packet to include the MAC address Configuration Manager software distribution point F. Enable Wake on LAN in the site servers Correct Answer: CD Section: (none) Explanation Explanation/Reference: Answer: Enable Wake on LAN in the BIOS of the branch office computers Allow Port 9 UDP traffic through the firewalls of the branch office computers http://technet.microsoft.com/en-us/library/bb693569.aspx Administrator Checklist: Enabling Wake On LAN The following checklist provides the steps necessary to configure and use Wake On LAN in a Configuration Manager 2007 site: Check the prerequisites for using Wake On LAN with Configuration Manager 2007, and make any required changes to your network infrastructure and computers. http://technet.microsoft.com/en-us/library/bb680822.aspx Prerequisites for Wake On LAN Dependencies External to Configuration Manager 2007 * Network cards must support the standard Magic Packet format. * Computers must be configured for wake-up packets on the network card and in the computer BIOS. * If you are using Wake On LAN with subnet-directed broadcast, all routers between the site server and target computers must allow IP directed broadcasts, and support IPv4. Configure the port number to use for Wake On LAN. http://technet.microsoft.com/en-us/library/bb632665.aspx How to Configure the Ports Used for Wake On LAN When a site is enabled for Wake On LAN, wake-up packets can be transmitted using a transmission method of either unicast (the default) or subnet-directed broadcast. The default port for the wake-up transmission is UDP port 9. However, you can select an alternative UDP port number using the Ports tab on the site properties. .. QUESTION 108 You have a System Center Configuration Manager 2007 environment. You create a program named App1. You must update another program prior to installing App1. You need to update this program only on computers that install App1. You create a program named App2 that contains the update. What should you do next? A. B. C. D.
Create a program dependency on App1 to run App2. Advertise App1 to all client computers. Create a program dependency on App1 to run App2. Advertise App2 to all client computers. Create an advertisement for App2 and a second advertisement for App1. Create an advertisement assignment for App1 for all client computers. Create a second advertisement for App2.
Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: Create a program dependency on App1 to run App2. Advertise App1 to all client computers. http://technet.microsoft.com/en-us/library/bb680380.aspx Program Name Properties: Advanced Tab Use the Advanced tab of the Configuration Manager 2007 Software Distribution <Program Name> Properties dialog box to specify any special settings, such as program dependencies, that must be met for the program to install and run on the client computer. The Advanced tab contains the following elements: Run another program first Specifies that this program requires another program to run before it. By default, this check box is cleared. If a program is run first and fails on a client, the dependent program will not run. Important Dependent programs are not installed when a program is run in a task sequence. The Install Software action checks to see whether the dependent program is already installed. If so, the Install Software action will proceed with installing the main program. However, if the dependent program is not already installed, the installation of the main program will fail. You must explicitly install the dependent programs as part of your task sequence. If this option is selected, the following fields must be completed: Package: Specifies the package containing the program that must run before this program. Program: Specifies the program that must run first. In addition, the following option is available: * Always run this program first: Specifies whether the program that runs first should run every time the advertised program runs, regardless of previous run history. If the program that runs first has been run successfully, Configuration Manager 2007 does not automatically rerun it, even if the dependent program is on a recurring schedule. QUESTION 109 Your company has System Center Configuration Manager 2007 installed in the main office and in a branch office. You are using the Configuration Manager Pre-boot Execution Environment (PXE) to deploy client computer images to the training room computers in the branch office. Some users of non-training desktop computers report that upon startup their computers enter a Windows operating system deployment setup. You need to deploy client computer images to the training room computers by using PXE at the branch office without forcing non-training desktop computers into a Windows operating system deployment setup. What should you do? A. B. C. D.
Deploy from the PXE service point in the main office. Change the advertisement type setting to Optional. Disable the PXE service point in the main office. Change the deployment task sequence to prompt the user for input.
Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Change the advertisement type setting to Optional. http://technet.microsoft.com/en-us/library/bb680753.aspx
Planning for PXE Initiated Operating System Deployments When you use PXE to initiate an operating system image deployment to a target computer there are several configuration decisions that must be considered depending on your network environment. PXE Advertisements The following section describes general PXE advertisement configuration planning considerations:
QUESTION 110 You have a System Center Configuration Manager 2007 environment. You deploy a new operating system to your client computers. During the user state restore task, some files cannot be restored, and the task fails. You need to ensure that this task can continue even when some files fail to migrate. What should you do? A. Edit the Migapp.xml file by creating a CopyFiles section. In this section, add a configuration to continue on errors. B. Edit the MigSys.xml file by creating a CopyFiles section. In this section, add a configuration to continue on errors. C. In the Restore task sequence step, select the Continue on error check box. D. In the Restore task sequence step, select the Continue if some files cannot be restored check box. Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: In the Restore task sequence step, select the Continue if some files cannot be restored check box. http://technet.microsoft.com/en-us/library/bb632881.aspx Restore User State Task Sequence Step Use the Restore User State task sequence step to initiate the User State Migration Tool (USMT) to restore user state and settings to a target computer. This task sequence step is used in conjunction with the Capture User State task sequence step. You can configure the following settings: .. Continue if some files cannot be restored Continues restoring user state and settings even if some files are unable to be restored. This option is enabled by default. If you disable this option and errors are encountered while restoring files, the task sequence step will end immediately with a failure and not all files will be restored. QUESTION 111 You have a System Center Configuration Manager 2007 environment running in native mode. You deploy software updates to Internet-based client computers. You deploy an application to an Active Directory global group named Sales Team. Local computers used by members of the Sales Team group receive the deployed
application. Internet-based computers used by members of the Sales Team group do not receive the deployed application. You need to ensure that the application is deployed to all computers that are used by members of the Sales Team group. What should you do? A. B. C. D.
Connect the computers that are used by the members of the Sales Team group to the internal network. Publish the management point to a public DNS server. Publish the distribution points to a public DNS server. Configure the Internet-facing distribution point to allow client computers to transfer content by using BITS, HTTP and HTTPS.
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Configure the Internet-facing distribution point to allow client computers to transfer content by using BITS, HTTP and HTTPS. http://technet.microsoft.com/en-us/library/bb632573.aspx Benefits of Using Native Mode Native mode is the recommended site configuration for new Configuration Manager 2007 sites because it offers a higher level of security by integrating with a public key infrastructure (PKI) to help protect client-to-server communication. Native mode is also a requirement for Internet-based client management. In native mode, clients communicate over HTTPS to the following site systems: Management points: Default management point Network load balanced management points Proxy management point Internet-based management point Standard distribution points (not branch distribution points) Software update points State migration point Note There are some situations on the intranet where native mode clients can communicate with standard distribution points over server message blocks (SMB). These scenarios include if advertisements are configured for the option Run program from distribution point, if HTTPS fails, or if the distribution point is not configured with the option Allow clients to transfer content from this distribution point using BITS, HTTP, and HTTPS (required for device clients and Internet-based clients). Further explanations: http://technet.microsoft.com/en-us/library/bb632535.aspx Administrator Checklist: Configuring a Site for Internet-Based Client Management The following checklist provides the steps required to configure a Configuration Manager 2007 site for Internetbased client management. Steps: Confirm the decision to configure the site for Internet-based client management. Decide on server placement. Make any necessary changes to your network infrastructure, such as firewall and proxy server configuration. Register on Internet Domain Name System (DNS) servers the Internet fully qualified domain name (FQDN) of the site systems and network load-balanced clusters that will support Internet-based client management. Install the site systems in Configuration Manager 2007, and configure them with the Internet FQDN.
If you are using a network load balancing (NLB) cluster, specify the Internet FQDN for the NLB cluster in Configuration Manager 2007. If the Internet-based site systems are in a different forest than your site server, configure these site systems to accept data retrieval from the site server. If the server running the software update point that allows connections from the Internet needs to synchronize with an intranet software update point, configure as follows: * If the software update point that allows connections from the Internet is on the intranet, configure automatic synchronization. * If the software update point that allows connections from the Internet is in the perimeter network, use the manual export and import synchronization procedure to prevent connections from being initiated from the perimeter network into the intranet. Configure the site systems that will support Internet-based client management to accept connections from Internet clients. Configure distribution points to transfer content using BITS, HTTP, and HTTPS. If the Internet-based site systems are in a different forest than your site server, and you want the additional security of the SQL Server connection to be initiated from the intranet rather than from the perimeter network, configure a Microsoft SQL Server replica. QUESTION 112 You have a System Center Configuration Manager 2007 environment. You have a primary site named P01 in the main office. The Active Directory site named Site001 is assigned to P01 boundaries. You establish a new branch office that has an Active Directory site named Site002. You install a child site named S01 in the branch office. S01 is configured with a distribution point and a management point. You need to assign client computers in the branch office to site S01. What should you do? A. B. C. D.
Create a protected site system boundary on P01 that contains all IP subnets for the branch office. Modify Site001 to include subnets for the branch office. Create a site boundary for S01 that contains all IP subnets for the branch office. Create a protected site system boundary on P01 that contains all IP subnets for the main office.
Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Create a site boundary for S01 that contains all IP subnets for the branch office. http://technet.microsoft.com/en-us/library/bb632910.aspx Planning Configuration Manager Boundaries Configuration Manager 2007 boundaries are defined in the Configuration Manager console and are defined by IP subnet, Active Directory site name, IPv6 Prefix, IP ranges, or any combination of these. Boundaries are used to assign clients to a specific Configuration Manager 2007 site. QUESTION 113 You have a System Center Configuration Manager 2007 environment with multiple primary sites in the hierarchy. You need to prepare for image capture by deploying the Configuration Manager client agent to a reference computer that is running Windows XP Professional. What should you do first? A. B. C. D.
Run the CCMSetup.exe command with the SMSSITECODE= command-line property. Run the client.msi command with the SMSSITECODE=AUTO command-line property. Run the CCMSetup.exe command with the /logon command-line property. Run the CCMSetup.exe command with the SMSSITECODE=AUTO command-line property.
Correct Answer: D Section: (none) Explanation
Explanation/Reference: Answer: Run the CCMSetup.exe command with the SMSSITECODE=AUTO command-line property. http://technet.microsoft.com/en-us/library/bb680980.aspx About Configuration Manager Client Installation Properties Use the Microsoft System Center Configuration Manager 2007 CCMSetup.exe command to manually install the Configuration Manager 2007 client software on computers in your enterprise. http://technet.microsoft.com/en-us/library/bb693546.aspx CCMSetup.exe copies all necessary installation prerequisites to the client computer and calls client.msi to perform the client installation. http://technet.microsoft.com/en-us/library/bb680980.aspx About Configuration Manager Client Installation Properties Client.msi Properties SMSSITECODE Specifies the Configuration Manager 2007 site to assign the Configuration Manager Client to. This can either be a three-character Configuration Manager 2007 site code or the word AUTO. If AUTO is specified, or if this property is not specified, the Configuration Manager Client attempts to determine its Configuration Manager 2007 site assignment by using Active Directory Domain Services or a server locator point. Further explanations: CCMSetup.exe Command-Line Properties /logon Specifies that the client installation should stop if any version of the Configuration Manager 2007 or SMS client is already installed. QUESTION 114 You have a System Center Configuration Manager 2007 environment. Local client computers receive software updates from Configuration Manager. You need to ensure that remote client computers that connect to the virtual private network (VPN) are able to receive software updates. What should you do? A. B. C. D.
Create a new site system, and configure it with the Software Update Point role. Add the IP subnets that the VPN uses to the network discovery. Create a new site boundary, and add the IP subnets that the VPN uses to the site boundary. Create a new site system, and configure it with the SMS Provider role.
Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: Create a new site boundary, and add the IP subnets that the VPN uses to the site boundary. http://technet.microsoft.com/en-us/library/bb632910.aspx Planning Configuration Manager Boundaries Configuration Manager 2007 boundaries are defined in the Configuration Manager console and are defined by IP subnet, Active Directory site name, IPv6 Prefix, IP ranges, or any combination of these. Boundaries are used to assign clients to a specific Configuration Manager 2007 site. Note In order for clients located on IP subnets configured as VPN scopes to install software updates and software
distribution packages, the IP subnets defined as VPN scopes must be added as Configuration Manager 2007 boundaries and, if the VPN connection is fast and reliable enough, configured as fast boundaries. If VPN scopes are not added as boundaries, the VPN scope subnets will be treated as slow boundaries and clients located on VPN scope subnets will be unable to download software updates or software distribution packages without specifying slow boundary behavior in the software update or software distribution advertisement. QUESTION 115 Network Access Protection (NAP) is configured in your System Center Configuration Manager 2007 environment. You discover that NAP policies are not being applied to a group of computers that run Microsoft Windows 2000 Professional with Service Pack 3. You need to ensure that NAP policies are enforced on these computers. What should you do? A. Install Windows 2000 Service Pack 4 on the affected computers. Install the Network Access Protection client agent on the affected computers. B. Upgrade the affected computers to Windows XP Professional with Service Pack 3. Ensure that the Network Access Protection Agent service is started. C. Upgrade the affected computers to Windows XP Professional with Service Pack 2. Ensure that the Network Access Protection Agent service is started. D. Create a new NAP policy. Add to the policy an Active Directory global security group that contains the client computers that should apply this NAP policy. Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Upgrade the affected computers to Windows XP Professional with Service Pack 3. Ensure that the Network Access Protection Agent service is started. http://technet.microsoft.com/en-us/library/dd314175%28v=ws.10%29.aspx Network Access Protection Deployment Guide Network Access Protection (NAP) is one of the most anticipated features of the Windows Server® 2008 operating system. NAP is a new platform that allows network administrators to specify levels of network access based on a client’s identity, the groups to which the client belongs, and the degree to which the client complies with corporate governance policy. If a client is not compliant, NAP provides a mechanism for automatically bringing the client into compliance (a process known as remediation) and then dynamically increasing its level of network access. NAP is an extensible platform that provides infrastructure components and an application programming interface (API) for adding components that verify and remediate a computer’s health and enforce various types of network access or communication. NAP is supported by Windows Server 2008 R2, Windows 7, Windows Server 2008, Windows Vista®, and Windows® XP with Service Pack 3 (SP3). QUESTION 116 You have a System Center Configuration Manager 2007 environment. A collection of Web servers named Coll2 receives software updates from an update deployment named Deploy2. During the last update deployment cycle, the Web servers in the Coll2 collection restarted and caused your Web site to be unavailable. You need to ensure that servers in the Coll2 collection do not restart when you deploy the Deploy2 update. What should you do? A. Modify the Deploy2 deployment to suppress system restarts on servers. B. Create a collection variable for Coll2 with a name equal to NoRestart and a value of True. Set this variable to the highest priority in precedence. C. Modify the template that was used to create the Deploy2 deployment by configuring it to suppress system restarts on servers. D. Configure the properties for Coll2 to enable collection-specific restart settings.
Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: Modify the Deploy2 deployment to suppress system restarts on servers. http://technet.microsoft.com/en-us/library/bb632599.aspx Deploy Software Updates Wizard: Restart Settings Page Use the Restart Settings page in the Configuration Manager 2007 Deploy Software Updates Wizard to configure system restart behavior when a software update installs on a client and requires a restart to complete, and when maintenance windows are configured. Important Suppressing system restarts can be useful in server environments or in cases in which you do not want the computers that are installing the software updates to restart by default. However, forcing a system restart after software update installation ensures that updates fully complete, whereas suppressing post-installation restart requests can leave systems in an insecure state. UI Element List: Servers Specifies whether to suppress a system restart on servers, requested by a software update installation when a restart is required for the installation to complete. By default, this setting is not enabled, and servers will restart if required by the software update installation. Further explanations: http://technet.microsoft.com/en-us/library/bb681078.aspx Collection Name Settings: Collection Variables Tab Use the Collection Variables tab of the Configuration Manager 2007 Collection Name Settings dialog box to define custom task sequence variables and their associated values to be used by the resources in this collection. http://technet.microsoft.com/en-us/library/bb693541.aspx About Task Sequence Variables The Configuration Manager 2007 task sequence environment variables are a set of name and value pairs that supply configuration and operating system deployment settings for computer, operating system, and user state configuration tasks on a Configuration Manager 2007 client computer. Task sequence variables provide a mechanism to configure and customize the steps in a task sequence. http://technet.microsoft.com/en-us/library/bb632755.aspx Collection Name Settings: Advanced Tab Use the Collection Name Advanced tab of the Configuration Manager 2007 Collection Name Settings dialog box to specify restart notification and policy interval settings for resources within the selected collection. The Collection Name Advanced tab contains the following elements: Enable collection specific restart settings Specifies whether restart notification settings specific to this collection will be enabled. If this option is selected, these settings override any sitewide settings. If this option is selected, the following settings are available for customization: * Restart countdown (minutes): Specifies the length of the client restart notification (in minutes) for
the computers within this collection. The default setting is 5 minutes. * Restart final notification (minutes): Specifies the length of time before restart (in minutes) that a final client notification is displayed for computers within this collection. The default setting is 1 minute. QUESTION 117 You have a System Center Configuration Manager 2007 environment. You publish an accounting application to a distribution point. You need to restrict access to the files on the distribution point. What should you do? A. B. C. D.
Create a Client Push Installation account, and refresh the distribution point. Create a Software Update Point Connection account, and refresh the distribution point. Create a Software Update Point Proxy Server account, and refresh the distribution point. Create a Package Access account, and refresh the distribution point.
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Create a Package Access account, and refresh the distribution point. http://technet.microsoft.com/en-us/library/bb632968.aspx About the Package Access Account Package Access Accounts are not actually accounts; they enable you to set NTFS permissions to specify the users and user groups that can access a package folder. By default, Microsoft System Center Configuration Manager 2007 grants access only to the generic access accounts Users and Administrators, but the administrator can control access for client computers by using additional Windows accounts or groups. Further explanations: http://technet.microsoft.com/en-us/library/bb632779.aspx About the Client Push Installation Account This account is used to connect to computers and install the Microsoft System Center Configuration Manager 2007 client software if you deploy clients using Client Push Installation. http://technet.microsoft.com/en-us/library/bb694264.aspx About the Software Update Point Connection Account The Software Update Point Connection Account is used by two Microsoft System Center Configuration Manager 2007 services for software updates. The Configuration Manager 2007 Windows Server Update Services (WSUS) Configuration Manager service uses the account to configure settings such as product definitions, classifications, and upstream settings. This account is also used by the Configuration Manager 2007 WSUS Synchronization Manager service to request synchronization. http://technet.microsoft.com/en-us/library/bb633235.aspx How to Configure the Software Update Point Proxy Server Account This account is needed only when the Microsoft System Center Configuration Manager 2007 software update point must access the Internet via a proxy server or firewall that requires authenticated access. QUESTION 118 You have a System Center Configuration Manager 2007 environment. You have a secondary site at a branch office. The branch office is connected to the main office by a 512-Kbps (kilobits per second) WAN link. You need to eliminate all package distribution traffic on the WAN from the primary site between 3:00 P.M. and 5:00 P.M. Which two tasks should you do on the sender address? (Each correct answer presents part of the
solution. Choose two.) A. B. C. D.
Configure pulse mode for the secondary site. Configure pulse mode for the primary site. Configure rate limits for the primary site. Configure a schedule for the primary site.
Correct Answer: CD Section: (none) Explanation Explanation/Reference: Answer: Configure rate limits for the primary site. Configure a schedule for the primary site. http://technet.microsoft.com/en-us/library/bb694205.aspx Sender Address Properties: Rate Limits Tab The address rate limits properties are used to set maximum data transfer rates, by hour, from the current site to the destination site. Limited to specified maximum transfer rates by hour The hours of the day and the percentage of maximum transfer rate allowed for each hour. If no number appears beneath an hour, 100 percent of the maximum transfer rate is allowed for that hour. Click and drag to select multiple hours. When this option is selected, you can also specify the maximum transfer rate for the selected time period: * Time period: The time period selected in the day chart above. * Limit (% of connection bandwidth): The percentage of the maximum transfer rate allowed for the selected time period. You can choose a percentage or Unlimited. Further explanations: http://technet.microsoft.com/en-us/library/bb694205.aspx Sender Address Properties: Rate Limits Tab Unlimited when sending to this address Selecting this option will allow an unlimited data transfer rate when the current site sends data to this address. Pulse Mode When pulse mode is selected, you can limit the amount of data sent between sites, allowing you to specify the size of the data blocks sent in kilobytes that the data is subdivided into, and also to specify a time delay between the sending of each data block in seconds. * Size of data block (KB): Specify the size of the data block that Configuration Manager 2007 sends to the address. * Delay between data blocks (seconds): The amount of time after Configuration Manager 2007 sends data to the address before it sends the next data block. QUESTION 119 You have a System Center Configuration Manager 2007 environment. You are deploying operating systems and migrating user profiles. You configure the state migration point to immediately delete profile data. Migrations are failing for user profiles that are larger than 25 GB. You need to successfully migrate all user profiles. What should you do? A. Increase the hard disk space on the computers that are being migrated. B. Decrease the minimum free space size setting on the state migration point.
C. Increase the retention period on the state migration point deletion policy. D. Remove unnecessary applications from the computers that are being migrated. Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Decrease the minimum free space size setting on the state migration point. http://technet.microsoft.com/en-us/library/bb693655.aspx How to Configure the State Migration Point The state migration point is a Configuration Manager 2007 site role that provides a location to store user state information before an operating system deployment. You can store the user state on the state migration point while the operating system deployment proceeds and then restore the user state to the new computer from the state migration point. How to Configure the State Migration Point .. 7. On the State Migration Point page, specify the drives on the server that should be used to store migration data. Click the New button to: a. Specify the Storage drive letter to use for storing migration data on the site system. b. Enter the maximum number of clients whose data will be stored on the site system in the Maximum clients field. c. Enter the Minimum Free Space that is required on the selected drive, and the unit of measurement (i.e. MB). d. Or, select an existing drive from the Drives list and click the Edit button to modify that entry, or the Delete button to remove it. 8. On the State Migration Point page, specify how the state migration should manage migration data that is marked for deletion. Select the option Immediately to remove that data as soon as possible after it is marked for deletion. Select the option Delete after and enter the number of days to wait before deleting that data. To configure the state migration point to reject new request select the Enable restore-only mode. Important When the state migration point site role is deleted or retired all associated user storage paths are also deleted. http://www.opsvault.com/how-to-migrate-user-state-between-pcs-using-sccm-2007-task-sequences/ How To Migrate User State between PCs using SCCM 2007 Task Sequences .. Task Sequence Step 1: Request State Store The first step we’ll need to add is the Request State Store step and choose to “Capture State from the computer”. This step requests access to a State Migration Point for us to use when either creating user state data or restoring user state data. What exactly does this do? It will query the Management Point for a list of available State Migration Points available and then choose one of those SMPs based on whether it has the minimum amount of free space available and room to store additional user profiles. It then takes the UNC path for that SMP and uses this to populate the variable OSDStateStorePath. .. QUESTION 120 You have a System Center Configuration Manager 2007 environment. You are deploying a new operating system. The computers in your environment have various types of network adapters installed. You need to specify network drivers to be used by Windows Setup. What should you do?
A. Create a driver package that includes the required network drivers, and assign the package to a distribution point. Create a task sequence to deploy the operating system, and include a new task to Automatically Apply Drivers. B. In the Drivers node of the Operating System Deployment console, add all relevant drivers. Create a task sequence to deploy the operating system, and include a new task to Apply Driver Package. C. In the Drivers node of the Operating System Deployment console, add all relevant drivers. Create a task sequence to deploy the operating system, and include a new task to Automatically Apply Drivers. D. Create a driver package that includes the required network drivers, and assign the package to a distribution point. Create a task sequence to deploy the operating system, and include a new task to Apply Driver Package. Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Create a driver package that includes the required network drivers, and assign the package to a distribution point. Create a task sequence to deploy the operating system, and include a new task to Apply Driver Package. http://technet.microsoft.com/en-us/library/bb693899.aspx Task Sequence Editor - Drivers Steps The following drivers task sequence steps can be added to the task sequence list box: Auto Apply Drivers Apply Driver Package http://technet.microsoft.com/en-us/library/bb680403.aspx Apply Driver Package Task Sequence Step The Apply Driver Package task sequence step downloads all the drivers in the driver package and installs them on the Windows operating system. This step is necessary to install boot-critical drivers on pre-Vista operating systems. Further explanations: http://technet.microsoft.com/en-us/library/bb680403.aspx Apply Driver Package Task Sequence Step The Apply Driver Package task sequence step makes all device drivers in a driver package available for use by Windows. This step can be added to a task sequence between the Apply Operating System and the Setup Windows and ConfigMgr task sequence steps to make the device drivers in the driver package available to Windows. Typically, the Apply Driver Package task sequence step is placed after the Auto Apply Drivers task sequence step. The Apply Driver Package task sequence step is also useful with stand-alone media deployment scenarios. You should put similar device drivers into a driver package and distribute them to the appropriate distribution points so that Configuration Manager 2007 client computers can install them. .. This action can also be used to install boot critical mass storage device drivers for Windows 2000, Windows XP, and Windows 2003. This step is useful for stand-alone media and for administrators who want to install a specific set of drivers, including drivers for devices that would not be detected in a Plug-n-Play scan (for example, network printers). http://technet.microsoft.com/en-us/library/bb680990.aspx Auto Apply Drivers Task Sequence Step
The Auto Apply Drivers task sequence step allows you to match and install drivers as part of an operating system deployment. The Auto Apply Drivers task sequence action performs the following steps: 1. Scans the hardware and finds the Plug-n-Play IDs for all devices present on the system. 2. Sends the list of devices and their Plug-n-Play IDs to the management point. The management point returns a list of compatible drivers from the driver catalog for each device. The management point considers all drivers regardless of what driver package they might be in. Only drivers tagged with the specified driver category and drivers that are not marked as disabled are considered. 3. For each device, the client picks the best driver that is appropriate for the operating system on which it is being deployed and that is on an accessible distribution point. 4. The selected driver or drivers are downloaded from a distribution point and staged on the target operating system. * For image-based installations, the drivers are placed into the newly deployed operating system image and Windows is configured with where to find the drivers on any Plug-n-Play scan. On Vista and later, the drivers are placed into the operating system driver store. * For setup-based installations, Windows Setup is configured with where to find the drivers. 5. When the Setup Windows and ConfigMgr task sequence action runs and Windows initially boots, it will find the drivers staged by this action. Important The Auto Apply Drivers task sequence step cannot be used with stand-alone media because Windows Setup will have no connection to the Configuration Manager 2007 site. QUESTION 121 You have a System Center Configuration Manager 2007 environment. You plan to deploy Windows Vista to computers that are currently running Windows XP Professional. You want to migrate user state during the operating system deployment process. You need to prevent the User State Migration Tool (USMT) from migrating user-created currency information and date-and-time format information. What should you do? A. B. C. D.
Modify the MigSys.xml file to disable the migration of locale information. Modify the Config.xml file to disable the migration of locale information. Run the LoadState.exe/uae command from the command line. Run the LoadState.exe/l command from the command line.
Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Modify the Config.xml file to disable the migration of locale information. http://technet.microsoft.com/en-us/library/cc766203%28v=ws.10%29.aspx USMT .xml Files Config.xml This is an optional file that you can create using the /genconfig option on the ScanState command line. You should create and modify this file if you want to exclude certain components from the migration. In addition, you must create and modify this file if you want to exclude any of the operating system settings that are migrated to computers running Windows Vista (because MigSys.xml is not applicable in that scenario). This file has a different format than the migration .xml files because it does not contain any migration rules â&#x20AC;&#x201D; it only contains a list of the operating system components, applications, and the user documents that can be migrated. If you want to include all of the default components, you do not need to create this file. Alternatively, if you are satisfied with the default migration behavior defined in MigSys.xml, MigApp.xml, and MigUser.xml, and you only want to exclude some components, you can create and modify a Config.xml and leave the other .xml files as is.
Further explanations: http://technet.microsoft.com/en-us/library/cc722303%28v=ws.10%29.aspx How To Exclude Files and Settings Create a Config.xml file You can create and modify a Config.xml file if you want to exclude components from the migration. To exclude the settings for a default application: Specify migrate="no" for the application under the <Applications> section of this file. For example, USMT will not migrate Adobe Acrobat Reader 6.0 or Outlook 2003 in the Sample Config.xml file. To exclude an operating system setting: Specify migrate="no" for the setting under the <WindowsComponents> section. For example, USMT will not migrate the user's Favorites in the Sample Config.xml file. To exclude My Documents: Specify migrate="no" for My Documents under the <Documents> section. For example, see the Sample Config.xml file. Note that any <include> rules in the .xml files will still apply. For example, if you have a rule that includes all the .doc files in My Documents, then only the .doc files will be migrated, but the rest of the files will not. http://technet.microsoft.com/en-us/library/cc794693%28v=ws.10%29.aspx Sample Config.xml file <?xml version="1.0" encoding="UTF-8" ?> - <Configuration> .. - <WindowsComponents> .. - <component displayname="date_time_language_and_region" migrate="yes" ID="Container|date_time_language_and_region||||"> - <component displayname="date_time_language_and_region\date_and_time_properties" migrate="yes" ID="Container|date_time_language_and_region \date_and_time_properties||||"> <component displayname="Microsoft-Windows-International-TimeZones-DL" migrate="yes" ID="Settings|http://www.microsoft.com/migration/1.0/migxmlext/cmi/ Microsoft-Windows-International-TimeZones-DL_0.0.0.0_*_*/Microsoft-WindowsInternational-TimeZones-DL/settings|0.0.0.0|||" /> <component displayname="Microsoft-Windows-International-UserLocale-DL" migrate="yes" ID="Settings|http://www.microsoft.com/migration/1.0/migxmlext/cmi/ Microsoft-Windows-International-UserLocale-DL_0.0.0.0_*_*/Microsoft-WindowsInternational-UserLocale-DL/settings|0.0.0.0|||" /> <component displayname="Microsoft-Windows-Time-Service-DL" migrate="yes" ID="Settings|http://www.microsoft.com/migration/1.0/migxmlext/cmi/MicrosoftWindows-Time-Service-DL_0.0.0.0_*_neutral/Microsoft-Windows-Time-Service-DL/ settings|0.0.0.0|||" /> </component> - <component displayname="date_time_language_and_region \regional_language_options" migrate="yes" ID="Container| date_time_language_and_region\regional_language_options||||"> <component displayname="Microsoft-Windows-International-Core-DL" migrate="yes" ID="Settings|http://www.microsoft.com/migration/1.0/migxmlext/cmi/MicrosoftWindows-International-Core-DL_0.0.0.0_*_*/Microsoft-Windows-International-CoreDL/settings|0.0.0.0|||" /> <component displayname="Microsoft-Windows-International-SystemLocale-DL" migrate="yes" ID="Settings|http://www.microsoft.com/migration/1.0/migxmlext/cmi/
Microsoft-Windows-International-SystemLocale-DL_0.0.0.0_*_*/Microsoft-WindowsInternational-SystemLocale-DL/settings|0.0.0.0|||" /> </component> </component> .. </WindowsComponents> .. </Configuration>
http://technet.microsoft.com/en-us/library/cc766203%28v=ws.10%29.aspx USMT .xml Files Migration .xml files The following are the migration .xml files that are included with USMT. Each file contains migration rules that control which components are migrated and where they are migrated to the destination computer. You can use the asterisk (*) wildcard character in each of these files. However, you cannot use a question mark (?) as a wildcard. MigSys.xml. Specify this file on both command lines when the destination computer is running Windows XP to migrate operating system and browser settings.(in addition, you should specify /targetXP). You can modify MigSys.xml. When the source or destination computer is running Windows Vista, this file is not applicable because the operating system and browser settings are migrated using the manifests. Since you cannot modify the manifests, if you want to exclude certain operating system settings in this scenario, you will need to create and modify a Config.xml file. MigApp.xml. Specify this file on both command lines to migrate application settings to computers running both Windows XP and Windows Vista. You can modify MigApp.xml. MigUser.xml. Specify this file on both command lines to migrate user folders, files, and file types to computers running both Windows XP and Windows Vista. You can modify MigUser.xml. This file does not contain rules that migrates specific user accounts. The only way to specify which user accounts to migrate is on the command line using the User Options. http://technet.microsoft.com/en-us/library/dd560804%28v=ws.10%29.aspx LoadState Syntax This topic discusses the LoadState command syntax and options. USMT 4.0 provides several command-line options that you can use to analyze problems that occur during migration. /l:[Path\]FileName Specifies the location and name of the LoadState log. You cannot store any of the log files in StorePath. Path can be either a relative or full path. If you do not specify the Path variable, then the log will be created in the current directory. You can specify the /v option to adjust the amount of output. If you run the LoadState command from a shared network resource, you must specify this option or USMT will fail with the error: "USMT was unable to create the log file(s)". To fix this issue, use the / l:load.log option. QUESTION 122 You have a System Center Configuration Manager 2007 environment. The Wake On LAN setting is enabled for the site. You create a software package for a critical application. You need to deploy the package to all local client computers within the next 12 hours. The current time is 6:00 P.M. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. B. C. D. E.
Select the Enable Wake On LAN setting for the advertisement. Select the Allow system restart outside maintenance windows setting. Configure an advertisement to become available at the current time. Configure an advertisement with a start time of 6:00 P.M. and an expiration of 6:00 A.M. Configure an advertisement with an assignment schedule of As soon as possible.
Correct Answer: AE Section: (none) Explanation Explanation/Reference: Answer: Select the Enable Wake On LAN setting for the advertisement. Configure an advertisement with an assignment schedule of As soon as possible. http://technet.microsoft.com/en-us/library/bb694124.aspx How to Assign a Mandatory Advertisement Adding an assignment schedule to an advertisement makes the advertised program run at a specific time or upon a specific event. Making this advertisement mandatory can be done either when creating an advertisement or at a later time. To make an existing advertisement mandatory 1. In the Configuration Manager console, navigate to System CenterConfiguration Manager / Site Database / Computer Management / Software Distribution / Advertisements. 2. Right-click the desired advertisement, and then click Properties. 3. On the Schedule tab, click the New icon for Mandatory Assignments. 4. To assign the advertisement to a specific schedule, select the Assign to the following schedule option, and then click Schedule. This will open the Custom Schedule dialog box, where you can set a specific schedule for the assignment. For more information about this dialog box, see Custom Schedule Dialog Box. 5. To assign the advertisement so that it runs after a specific event, select the Assign immediately after this event option, and from the drop-down list, select one of the following events: * As soon as possible * Logon * Logoff. Further explanations: http://technet.microsoft.com/en-us/library/bb680997.aspx New Advertisement Wizard > Schedule Page Use the Schedule page in the Configuration Manager 2007 New Advertisement Wizard to specify when and how a program is made available to client computers. UI Element List Advertisement start time Specifies the date and time when the program is advertised and available to run on clients in their respective time zones. By default, the current date and time is specified. To select another date and time, click the adjacent arrows. If an advertisement start time is earlier than a mandatory assignment time, the client will download the package at the advertisement start time. Advertisement will expire Specifies whether the advertisement has a date and time after which the program advertisement is no longer available to run on clients in their respective time zones. By default, this check box is cleared and the advertisement will never expire. If selected, the cutoff date and time is set by default at 6 months from the current date and time. To specify another date and time, click the adjacent arrows.
Mandatory assignments Specifies any advertisements that are set as mandatory assignments. Enable Wake On LAN Specifies whether to have the advertised program wake up the client computer at the time indicated in the schedule to run the advertised program. Ignore maintenance windows when running program Specifies whether to have the advertised program ignore preset system maintenance windows while the program is running. Allow system restart outside maintenance windows Specifies whether to allow a restart of the client system if the restart would occur outside a preset maintenance window. Priority Specifies the advertisement's priority when sent to child sites. Available options are Low, Medium (default), and High priorities. Program rerun behavior Specifies whether the advertised program will be rerun on the client computer if it has previously been run before the scheduled mandatory time. QUESTION 123 You have a System Center Configuration Manager 2007 environment. You install Windows Internet Explorer on a collection of client computers by creating a software package and an advertisement. You need to identify the computers on which Internet Explorer has been installed by using the advertisement. What should you do? A. B. C. D.
From the Package Status Home Page, launch Status Message Viewer. Run the Computers with a specific software product report. From the Advertisement Status Home Page, launch Status Message Viewer. Run the Search for installed software report.
Correct Answer: C Section: (none) Explanation Explanation/Reference: Answer: From the Advertisement Status Home Page, launch Status Message Viewer. http://technet.microsoft.com/en-us/library/bb680420.aspx How to View the Status of a Single Advertisement To view the status of a single advertisement 1. In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database / System Status / Advertisement Status. 2. In the results pane, view the advertisement status information. Note To view more detailed information about any advertisement, select the advertisement under the Advertisement Status node. In the results pane, right-click the advertisement, click Show Messages, and then click All. http://technet.microsoft.com/en-us/library/bb633115.aspx Status Message Viewer Window Use the Configuration Manager 2007 Status Message Viewer window to view the status messages in a Configuration Manager 2007 database. You can control the amount of information you view by using queries and filters. You can also view status messages from child sites of the current Configuration Manager 2007 site as these are sent to the parent site. QUESTION 124 You have a System Center Configuration Manager 2007 environment. You create a silent install software
package. You need to deploy the package to all client computers without requiring user intervention. What should you do? A. Configure the package so that client agents download the package content from the distribution point and run it locally. B. Create an advertisement that has an assignment schedule of As soon as possible. C. Configure the package so that it can run only when no user is logged on. D. Create an advertisement, and configure it to never expire. Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Create an advertisement that has an assignment schedule of As soon as possible. http://technet.microsoft.com/en-us/library/bb694124.aspx How to Assign a Mandatory Advertisement Adding an assignment schedule to an advertisement makes the advertised program run at a specific time or upon a specific event. Making this advertisement mandatory can be done either when creating an advertisement or at a later time. To make an existing advertisement mandatory .. 5. To assign the advertisement so that it runs after a specific event, select the Assign immediately after this event option, and from the drop-down list, select one of the following events: * As soon as possible * Logon * Logoff QUESTION 125 You have a System Center Configuration Manager 2007 environment. You have an application named App1. You modify the Package Access account on the App1 software package to prevent read access for all users. Users are still able to access the package. You need to ensure that users cannot read the package, and minimize bandwidth utilization. What should you do? A. B. C. D.
Update all distribution points with a new package source version. Delete and re-create the software package. Copy the package to all distribution points. Refresh the package on all distribution points.
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Refresh the package on all distribution points. http://technet.microsoft.com/en-us/library/bb892806.aspx Choose Between Updating and Refreshing a Package Updating and refreshing Microsoft System Center Configuration Manager 2007 packages are two different operations. Use the following table to help decide when to update and when to refresh a package.
QUESTION 126 You have a System Center Configuration Manager 2007 environment. You create a software package for the Forefront antivirus client. You need to configure an advertisement to install the package on all existing and future client computers after 9:00 P.M. on any day of the week without user intervention. What should you do to schedule the new advertisement? A. Specify a start time of 9:00 P.M. today and an expiration of 11:59 P.M. today. Add an assignment with a daily recurring schedule, and specify a start time of 9:00 P.M. B. Specify a start time of 9:00 P.M. today and no expiration. Add an assignment with a daily recurring schedule, and specify a start time of 9:00 P.M. C. Specify a start time of 9:00 P.M. today and an expiration of 11:59 P.M. today. Add an assignment of After logoff. D. Specify a start time of 9:00 P.M. today and no expiration. Add an assignment of After logoff. Correct Answer: B Section: (none) Explanation Explanation/Reference: Answer: Specify a start time of 9:00 P.M. today and no expiration. Add an assignment with a daily recurring schedule, and specify a start time of 9:00 P.M. http://technet.microsoft.com/en-us/library/bb680997.aspx New Advertisement Wizard > Schedule Page Use the Schedule page in the Configuration Manager 2007 New Advertisement Wizard to specify when and how a program is made available to client computers. UI Element List Advertisement start time Specifies the date and time when the program is advertised and available to run on clients in their respective time zones. By default, the current date and time is specified. To select another date and time, click the adjacent arrows. If an advertisement start time is earlier than a mandatory assignment time, the client will download the package at the advertisement start time. Advertisement will expire Specifies whether the advertisement has a date and time after which the program advertisement is no longer available to run on clients in their respective time zones. By default, this check box is cleared and the advertisement will never expire. If selected, the cutoff date and time is set by default at 6 months from the current date and time. To specify another date and time, click the adjacent arrows. Mandatory assignments Specifies any advertisements that are set as mandatory assignments. ..
http://technet.microsoft.com/en-us/library/bb694124.aspx How to Assign a Mandatory Advertisement Adding an assignment schedule to an advertisement makes the advertised program run at a specific time or upon a specific event. Making this advertisement mandatory can be done either when creating an advertisement or at a later time. To make an existing advertisement mandatory .. 4. To assign the advertisement to a specific schedule, select the Assign to the following schedule option, and then click Schedule. This will open the Custom Schedule dialog box, where you can set a specific schedule for the assignment. For more information about this dialog box, see Custom Schedule Dialog Box. .. http://technet.microsoft.com/en-us/library/bb693981.aspx Custom Schedule Dialog Box Use the Custom Schedule dialog box in Configuration Manager 2007 to schedule the start, recurrence pattern, and duration of a Configuration Manager operation. UI Element List .. Recurrence Pattern Specifies how often this operation recurs. The following options are some of those that might be available for setting a recurrence pattern: * None: Specifies that the operation does not recur. * Weekly: Specifies that the operation recurs every N weeks. If this option is selected, you must specify the day of the week on which the operation will occur. * Monthly: Specifies that the operation recurs every N months. If this option is selected, you must specify the day of the month on which the operation will occur. * Custom interval (varies depending on the recurrence pattern selected): Specifies the frequency with which the operation will recur. You may set this in terms of minutes, hours, or days, with the following available values: * Minutes: Values from 1 to 59 minutes, inclusive. * Hours: Values from 1 to 23 hours, inclusive. * Days: Values from 1 to 31 days, inclusive. QUESTION 127 You have a System Center Configuration Manager 2007 environment. You create a deployment package that contains five updates targeting a collection of Microsoft Windows XP computers with a deployment schedule of As soon as possible. You need to identify computers that do not successfully install the complete deployment package. Which report should you run? A. B. C. D.
the Computers in a specific compliance state for an update list report the Status of a specific advertisement report the Overall Compliance report the Computers in a specific compliance state for an update report
Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: the Computers in a specific compliance state for an update list report http://technet.microsoft.com/en-us/library/bb693591.aspx
About Update Lists in Software Updates Using Update Lists to Track Deployment State Tracking the compliance state for the software updates in deployments is an important task for Configuration Manager administrators. When deployments are created without using update lists, it is very difficult to get the overall compliance state for the same set of software updates that have been deployed using multiple deployments. When update lists are used to create the deployments, you can run the Compliance 1 - Update list overall report to get the overall compliance for the set of software updates in the update list. You can also run the Compliance 3 - Update list (per update) report to get a list of the software updates in the update list and the overall compliance for each update. These reports provide another reason to use update lists as part of the normal software updates administrator workflow. Further explanations: http://technet.microsoft.com/en-us/library/bb633270.aspx How to Monitor Software Update Deployments Software update deployments in Configuration Manager 2007 can be best monitored by using the built-in software updates reports. These reports are in the Software Updates - C. Deployment States category in the Reports console tree node. There are two main phases for a deployment: the evaluation phase, when client computers determine whether the software updates in the deployment are required, and the enforcement phase, when client computers report the compliance state for the deployment. To monitor client evaluation for software update deployments, three main reports should be used. The States 2 - Evaluation states for a deployment report summarizes the evaluation state of client computers for a specified deployment. This report provides information about whether the client computer was able to successfully evaluate the deployment. Then, the States 4 - Computers in a specific state for a deployment <secondary> report can be drilled into to get more information about the client computer within a specified state. Finally, the States 7 - Error status messages for a computer can be drilled into to get all error messages for the deployment on the specific computer. To monitor client enforcement for software update deployments, three main reports should be used. The States 1 - Enforcement states for a deployment report summarizes the enforcement state of client computers for a specified deployment. This report provides information about the state for installing the updates in the deployment; for example, downloading the update, installing the update, successfully installed the update, and so on. Then, the States 4 - Computers in a specific state for a deployment <secondary> report can be drilled into to get more information about the client computer within a specified state. Finally, the States 7 - Error status messages for a computer can be drilled into to get all error messages for the deployment on the specific computer.
http://technet.microsoft.com/en-us/library/bb632839.aspx About Software Updates Reports There are six software updates report categories, each with available reports that retrieve data used to accomplish a variety of objectives. Software Updates - A. Compliance The reports in the Software Updates - A. Compliance category provide the scan results for software update compliance on client computers. More specifically, these reports provide information about what software updates are required, installed, or not required on clients. The following software updates reports are in this category: .. Compliance 3 - Update list (per update) This report returns the overall compliance data for software updates defined in an Update List. The Update List ID and Collection ID parameters are required. You can drill into report "Compliance 7 -
Specific software update states <secondary>" to view the count and percentage of computers in each state for the update. Compliance 4 - Deployment (per update) This report returns the overall compliance data for software updates defined in a deployment. The Deployment ID and Collection ID parameters are required. You can drill into report "Compliance 7 Specific software update states <secondary>" to view the count and percentage of computers in each state for the update. .. Software Updates - C. Deployment States The reports in the Software Updates - C. Deployment States category provide information about the evaluation and enforcement states on client computers for software update deployments. The following software updates reports are in this category: .. States 1 - Enforcement states for a deployment This report returns the enforcement states for a specific software update deployment, which is typically the second phase of a deployment assessment. .. States 4 - Computers in a specific state for a deployment <secondary> This report returns all computers in a specific state for a software update deployment. .. States 7 - Error status messages for a computer <secondary> This report returns all status messages for a given Update or Deployment on a specific computer for a given status message. .. http://technet.microsoft.com/en-us/library/bb693754.aspx About Software Update Deployment Packages The deployment package is the vehicle used to download software updates to a network shared folder and copy the software update source file to distribution points defined in the deployment. Software updates can be downloaded and added to deployment packages prior to deploying them by using the Download Updates Wizard. This wizard provides administrators with the ability to provision software updates on distribution points and verify that this part of the deployment process was successful. When downloaded software updates are deployed using the Deploy Software Updates Wizard, the deployment automatically uses the deployment package that contains each software update. When software updates that haven't been downloaded are deployed, a new or existing deployment package must be specified in the Deploy Software Updates Wizard and the updates are downloaded to the package when the wizard completes. Selective Download Configuration Manager 2007 client computers identify which targeted software updates are applicable and retrieve only the files for required updates from the deployment package contents that might contain both required and not required software updates. This allows administrators to have multiple software updates in a single deployment package and use the package in deployments that target client computers that need only a subset of the deployment package contents. As a best practice, we recommend that less than 500 software updates are added to a single deployment package or software update deployment. Checking for Deployment Package Status The Package Status console tree node in Configuration Manager 2007 displays summary information about each package for each site to which the package is targeted. The Package Status node displays under each deployment package and provides information about the specific package or under the System Status console tree node where is displays all packages and deployment packages together. This allows you to easily verify that a deployment package has been successfully provisioned on distribution points.
QUESTION 128 You have a System Center Configuration Manager 2007 environment. An update is issued that must be applied immediately. You create a mandatory advertisement for the update. You need to deploy the update immediately to all client computers running Windows Vista, even if they are not currently powered on. What should you do? A. B. C. D.
Configure client push installation. Configure the advertisement to use Wake On LAN. Upgrade the client computers to Windows Vista SP2. Enable the Wake On LAN option on the site servers.
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Enable the Wake On LAN option on the site servers. http://technet.microsoft.com/en-us/library/bb680723.aspx How to Enable or Disable Wake On LAN for a Site Enabling Wake On LAN in Configuration Manager 2007 allows the primary site server to send wake-up packets for the following Configuration Manager activities: Software update deployments Software distribution advertisements Task sequence advertisements Before you can enable these activities for Wake On LAN, you must enable the site for Wake On LAN. Further explanations: http://blogs.technet.com/b/configurationmgr/archive/2009/08/20/guide-to-software-updates-deployment-inconfiguration-manager-2007-part-2.aspx Guide to Software Updates Deployment in Configuration Manager 2007 â&#x20AC;&#x201C; Part 2 Deployments Configuration Manager 2007 no longer uses advertisements for delivering software updates. Software update deployments are now used as the vehicle that delivers software updates to client computers. The deployment properties contain the relevant information about the software updates in the deployment, the target collection, and the settings that impact client behavior when running the deployment, the deployment schedule settings, and so on. When a deployment is created, client computers receive it as part of the Configuration Manager policy. http://technet.microsoft.com/en-us/library/bb693597.aspx How to Deploy Software Updates The Deploy Software Updates Wizard in Configuration Manager 2007 allows you to create or modify a software update deployment, which deploys software updates to clients in the target collection. When a software update deployment is created or modified, clients will receive the deployment policy on their next machine policy cycle and the updates will be available for installation anytime after the configured start time. http://technet.microsoft.com/en-us/library/bb693569.aspx Administrator Checklist: Enabling Wake On LAN
The following checklist provides the steps necessary to configure and use Wake On LAN in a Configuration Manager 2007 site: Check the prerequisites for using Wake On LAN with Configuration Manager 2007, and make any required changes to your network infrastructure and computers. http://technet.microsoft.com/en-us/library/bb680822.aspx Prerequisites for Wake On LAN Dependencies External to Configuration Manager 2007 * Network cards must support the standard Magic Packet format. * Computers must be configured for wake-up packets on the network card and in the computer BIOS. * If you are using Wake On LAN with subnet-directed broadcast, all routers between the site server and target computers must allow IP directed broadcasts,and support IPv4. Configuration Manager 2007 Dependencies * Hardware inventory must be enabled, and completed an inventory schedule. * The Configuration Manager site must be a primary site. * Client computers must be running the Configuration Manager 2007 client. Configure the port number to use for Wake On LAN. Enable Wake On LAN for the site. Select either unicast (the default) or subnet-directed broadcast as the transmission method for Wake On LAN. Check whether you need to fine-tune the configuration for packet delivery, such as by changing the number of retries and the transmission offset. Enable Wake On LAN where required for the following: * Software update deployments * Software distribution mandatory advertisements * Task sequence mandatory advertisements QUESTION 129 You have a System Center Configuration Manager 2007 environment. You install the Configuration Manager client agent on all your computers. A software update deployment is not being successfully completed on a specific client computer. You need to view the detailed status of the software update deployment on the client computer. What should you do? A. B. C. D.
Connect to the software update point, and view the UpdatesDeployment.log and WindowsUpdate.log files. Connect to the client computer, and view the PatchInstall.log and WindowsUpdate.log files. Connect to the software update point, and view the PatchInstall.log and WindowsUpdate.log files. Connect to the client computer, and view the UpdatesDeployment.log and WindowsUpdate.log files.
Correct Answer: D Section: (none) Explanation Explanation/Reference: Answer: Connect to the client computer, and view the UpdatesDeployment.log and WindowsUpdate.log files. http://technet.microsoft.com/en-us/library/bb892800.aspx List of Log Files in Configuration Manager 2007 All the client and site server components in Microsoft System Center Configuration Manager 2007 record process information in individual log files. You can use the information in the client and site server log files to help you troubleshoot issues that might occur in your Configuration Manager 2007 hierarchy. Software Updates Client Computer Log Files UpdatesDeployment.log
Provides information about the deployment on the client, including software update activation, evaluation, and enforcement. Verbose logging shows additional information about the interaction with the client user interface. Windows Update Agent Log File By default, the Windows Update Agent log file is found on the Configuration Manager Client computer in % Windir%. The following table provides the log file name and description. WindowsUpdate.log Provides information about when the Windows Update Agent connects to the WSUS server and retrieves the software updates for compliance assessment and whether there are updates to the agent components. QUESTION 130 You have a System Center Configuration Manager 2007 environment. You need to install the Configuration Manager client software by using a logon script. What should you configure the logon script to run? A. B. C. D.
CCMSetup.exe CCMSetup.msi Capinst.exe Client.msi
Correct Answer: A Section: (none) Explanation Explanation/Reference: Answer: CCMSetup.exe http://technet.microsoft.com/en-us/library/bb633072.aspx How to Install Configuration Manager Clients Using Logon Scripts Configuration Manager 2007 supports the use of logon scripts to install the Configuration Manager 2007 client software. You can use the file CCMSetup.exe in a logon script to trigger the client installation. Logon script installation uses the same methods as manual client installation. You can specify the /logon installation property for ccmsetup.exe which prevents the client from installing if any version of the client already exists on the machine. This prevents reinstallation of the client from taking place each time the logon script runs. Further explanations: http://technet.microsoft.com/en-us/library/bb633010.aspx How to Install Configuration Manager Clients Using Group Policy The Windows Installer executable Ccmsetup.msi is used for Group Policy-based installations. http://technet.microsoft.com/en-us/library/bb680980.aspx About Configuration Manager Client Installation Properties CCMSetup downloads all the necessary files to complete the client installation from a specified management point or from a specified source location. These files can include the following: The executable client.msi that installs the Configuration Manager 2007 client software. Background Intelligent Transfer Service (BITS) installation files (if required). Windows Installer installation files (if required). Patches and fixes for the Configuration Manager 2007 client (if required).
http://technet.microsoft.com/en-us/library/bb693939.aspx What's New in Client Deployment for Configuration Manager CAPINST.EXE is No Longer Supported Capinst.exe is no longer used in Configuration Manager 2007 for logon script client installation.