6.0 Mobile Computing

You have a computer running windows 7. The computer is a member of a domain.

Your domain contains a DHCP server that runs Windows Server 2008 R2. The server is configured as a Network Access Protection (NAP) enforcement point.

You need to configure the computer as a NAP client.

What should you do? (Select two. Each answer is a required part of the solution.)

– On the client, start the Network Access Protection Agent service. Configure the service to auto-start.
– On the client, enable the enforcement client for DHCP.
You have several laptops running Windows 7. The laptops are members of a domain.

Several employees in your company use the laptop computers to connect to the company network. Because they often use these laptops while traveling or to help them do their jobs, you can’t prevent them from connecting to the network. However, you are concerned that many of these laptops don’t have the latest security patches installed.

You want to implement a solution so that laptops are checked for the latest security updates as they connect to the network. If the required updates are missing, you want to prevent these computers from having full access to the private network.

What should you do?

– Implement Network Access Protection (NAP) with a quarantine network.
You have several laptops running Windows 7 Enterprise. The laptops are members of a domain with a server running Windows Server 2008 R2.

You have been put in charge of providing a VPN solution for your company. you want the VPN connection to automatically reconnect if the VPN connection is lost or disconnected.

You decide to use VPN Reconnect, but you need to ensure each laptop will make the correct VPN connection to the server.

What should you do?

– Use Internet Key Exchange version 2 (IKEv2) as the VPN protocol.
You have several laptops running Windows 7. The laptops are members of a domain.

You have been put in charge of providing a VPN solution for all members of the Sales team.

Salesmen complain that with the previous VPN solution, there were many times that they were unable to establish the VPN solution because the hotel or airport firewalls blocked the necessary VPN ports.

You need to come up with a solution that will work in most instances.

What should you do?

– Use Secure Socket Tunneling Protocol (SSTP) as the VPN protocol.
You have a laptop running Windows 7 Ultimate.

You need to configure the laptop to use a VPN connection to the company VPN server.

Select the link you would use to begin setting up the VPN connection.

Set up a New connection or network
You have a computer running windows 7 Professional.

You use a VPN connection to access resources on a corporate intranet.

In addition to accessing the intranet resources, you need to access the Internet while the VPN connection is active; however, you do not want to send Internet traffic through the VPN connection.

What should you do?

– Configure the advanced TCP/IP settings of the VPN connection.
You have a laptop running windows 7 Enterprise. The laptop is a member of a domain with a server running Windows Server 2008 R2.

You need to use a VPN connection to access company resources from your home.

You configure a new VPN connection using the IKEv2 security protocol, and then test the connection while at work. The connection is successful.

When you test the VPN connection from your home, you find that the connection cannot be made.

What should you do?

– Open UDP ports 500 and 4500 and protocol 50 on your home router.
You have a computer that runs Windows 7. The computer is a member of a domain.

Your domain contains a VPN server that runs Windows Server 2008 R2.

You will use a smart card for authentication to the VPN server.

What should you do?

– Use EAP as the authentication protocol.
You have purchased a new laptop that runs Windows 7 Professional.

You want to use DirectAccess to connect the computer to your corporate intranet. You will use Group Policy to enforce DirectAccess settings on the client.

What should you do to configure the laptop for the DirectAccess connection? (Select two.)

– Join the computer to a domain.
– Upgrade the computer to Windows 7 Ultimate or Enterprise.
You have purchased a new laptop that runs Windows 7 Ultimate.

You want to use DirectAccess to connect the computer to your corporate intranet from home. Your home network is connected to the Internet with a single public IP address and NAT. Firewalls between your network and the intranet allow only HTTP and HTTPS traffic.

What should you do to configure the laptop for the DirectAccess connection.?

– Obtain a computer certificate for the laptop.
You have a laptop that runs Windows 7.

You want to use the laptop to connect to your corporate intranet while you are at home or traveling. Your solution should meet the following requirements:

* The computer should connect automatically to the intranet without user initiation.
* All communications between your laptop and the intranet should be encrypted.
* The connection should allow for remote management of the computer from corporate intranet.
* Internet traffic should be directed to Internet servers without going through servers at the corporate network.
* The solution should work through firewalls where only HTTP and HTTPS are permitted.

Which feature should you implement?

– DirectAccess
You have a laptop computer that runs Windows 7 Ultimate. The computer is a member of a domain.

You want to use DirectAccess to access application servers on your corporate intranet. Application servers run Windows Server 2003.

You need to implement a solution that does the following:
* All communications sent to the private network over the Internet are encrypted.
* Client computers authenticate with application servers on the intranet.
* Following authentication, traffic on the intranet is not encrypted.

What should you do? (Select two. Each choice is a required part of the solution.)

– Upgrade application servers to Windows Server 2008 R2
– Configure selected server access (modified end-to-edge).
You manage Windows 7 computers connected to the mydomain.com Active Directory domain.

You have decided to implement DirectAccess on your network. you run the setup for DirectAccess on the DA1 server with the following choices:

* End-to-end authentication with a smart card required for authentication
* Root certificate from ‘ca1.mydomain.com’
* Security group name of ‘DirectAccessGroup’
* The network Location service runs on the DirectAccess server

You need to configure the client computers for the DirectAccess connection.

What should you do?

– Add the computer account for each client computer to the ‘DirectAccessGroup’ security group.
You would like to implement Directaccess on your corporate network.

Which of the following is not an infrastructure requirement for using Directaccess?

– Network access for files server role
You have a laptop computer that runs windows 7. The computer is a member of a domain.

You want to use DirectAccess to access application servers on your corporate intranet. Application servers run Windows Server 2003 and Windows Server 2008. You want to configure a single access method for all servers and clients.

Which connection method should you use?

– Full enterprise network access (end-to-edge)
You have previously installed Windows 7 on two new computers and configured both computers with BitLocker. Both computers have a TPM installed.

Because of a hardware failure , one of the computers will not boot. You replace the failed hardware, but now BitLocker is preventing the system from starting because it has failed the startup system integrity checks.

Which of the following would you use to reconfigure BitLocker so the system will start?

– Recovery key
You have a computer running Windows 7.

The hard drive has been protected using BitLocker. You need to update the BIOS on the computer.

What should you do first?

– Run ‘manage-bde -pause’
You have a computer running windows 7.

You want to save some files on a USB thumb drive and protect the drive using BitLocker To Go. you want to be able to read these files on a computer that is running windows XP Professional. You need to implement a solution with the least amount of effort as possible.

What should you do? ( Select two. Each choice is a required part of the solution.)

– Include the BitLockerToGo.exe file on the USB drive.
– Format the drive using FAT32
You have a laptop that runs Windows 7.

The hard drive has been encrypted using BitLocker. BitLocker uses a TPM with a PIN and startup key.

You have lost the USB device containing the startup key. You also find that you are unable to locate the recovery key. You need to be able to boot the computer.

What should you do?

– Reformat the hard drive and reinstall Windows.
You have a laptop that runs Windows 7 Professional.

You want to protect the hard drive using BitLocker and a startup key saved to a USB device.

What should you do first?

– Upgrade the computer to Windows 7 Ultimate or Enterprise.
You have a laptop that runs Windows 7 Ultimate.

You want to protect all of the files on the hard drie to prevent unauthorized access. you want to prevent access to any file on the hard drive, even if the hard drive is moved to another computer.

Which feature should you implement.?

– BitLocker
You have a computer running windows 7.

You have configured a USB thumb drive with BitLocker To Go that has been formatted with FAT32. You use a password to protect the drive.

You want to be able to read and write files to the drive from a computer that is running windows XP Professional. You need to implement a solution with the least amount of effort as possible.

What should you do?

– Upgrade the Windows XP computer to Windows 7 Ultimate or Enterprise.
You have a laptop that runs Windows 7. The computer is a member of a domain.

You want to use BitLocker on the laptop.

Your implementation should meet the following requirements:

*The computer should start up automatically without user intervention.
* To meet security requirements, USB support must be disabled on the laptop.
* You want to automatically generate recovery keys and store those keys in a central location.

You need to implement a solution to meet the stated requirements. What should you do? (Select two. Each choice is a required part of the solution.)

– Configure Group Policy to store recovery keys in Active Directory.
– Implement BitLocker with a TPM
You have two computers that run Windows 7: Computer 1 and Computer 2. Both computers are configured with BitLocker. Both computers have TPM installed.

Because of a hardware failure, Computer 1 will not boot. You need to access the data on the drive where BitLocker was enabled as quickly as possible.

What should you do?

– Move the hard disk from Computer 1 to Computer 2. Use the recovery key from the Computer 1 to gain access to the encrypted volume.
You have a new laptop that you want to configure with Windows 7.

You would like to use BitLocker on the laptop to protect the volume used for the operating system and all user data. Your laptop does not have a Trusted Platform Module (TPM).

You need to configure the computer to use BitLocker. What should you do? (Select two. each choice is a required part of the solution.)

– Install windows 7 Ultimate on the laptop.
– Configure BitLocker to use a startup key on a USB drive.
You have a computer that runs Windows 7 Ultimate.

You want to configure the computer so that write access to removable storage devices is only allowed on drives protected with BitLocker To Go.

What should you do?

– Configure the local security policy.
You have a laptop that runs Windows 7. The computer is a member of a domain.

You would like to protect the data on your laptop to meet the following requirements.

* All operating system and user data should be encrypted.
* All user data should be inaccessible (unreadable) if the hard disk is removed and connected to a different computer.
* The computer should not boot unless a special key is found on a USB drive.
* The computer should not boot if a change ids detected in the boot files.

You need to implement a solution to meet the stated requirements. What should you do?

– Implement BitLocker with a TPM
You are getting ready to install windows 7 Ultimate on a new laptop.

You would like to configure the laptop to use BitLocker. The laptop should start up without requiring a PIN or a USB device during startup.

What should you do? (Select two. Each choice is a required part of the solution.)

– Create two partitions on the hard disk. Put boot files on the first partition, and operating system files and data on the second partition.
– Enable the TPM.
You have a laptop running Windows 7 Ultimate.

You want to be able to stop work on your laptop, save battery power, and resume as quickly as possible. You also want to protect yourself from data loss should the battery fail.

What should you do?

– Enable Hybrid Sleep
You have a laptop running Windows 7 Ultimate.

You need to configure your laptop to save as much battery power as possible.

What should you do?

-Use the Power Saver power plan
You have a laptop running Windows 7 Ultimate.

You keep the laptop plugged in most of the time and would like to use the full CPU power for a video project you are working on.

Select the power plan you would use to provide full CPU power?

– High Performance
You manage several laptops running Windows 7 Ultimate. The computers are members of a domain.

Laptop computers are located at a branch office and access files across a WAN link stored on a serer in the main office. all files are in a network shared named ‘Data’ on the server.

You want to reduce the amount of traffic across the WAN link for file reads from the ‘Data’ share. you want the laptops to save copies of the files locally, and use their local copies if the files on the server have not been modified. Files should not be available ont he client computers when the WAN link is down.

What should you do?

– Enable transparent caching.
You have a computer named comp1 that runs Windows 7. The computer is located in a branch office.

A server running windows Server 2008 R2 named Srv1 is located in the main office. You share a folder named ‘Data’ using the default caching settings.

You use Offline Files in the branch office to make the files in the ‘Data’ share available when the WAN link is down.

On Comp1, you want to see your synchronization partners, see the results of the latest synchronization, and view and resolve any conflicts.

What should you do?

– Open the Sync Center in the Control Panel.
You have a laptop running Windows 7 Ultimate.

You are on an airplane and are being instructed to turn off your laptop completely and immediately. You have several open windows with critical data that you cannot lose.

What should you do?

– Enable hibernation.
you use a laptop named M400 which runs windows 7 Ultimate. m400 is a member of a domain and id located in a branch office.

A Windows 2008 R2 server named Server1 contains a shared folder named Data. The server is located in the main office.

You need to configure M400 to cache the files from the ‘Data’ share so they can be used when M400 is not connected to the network. You want the files in the ‘Data’ share to automatically synchronize each time M400 connects to the network. The files must be protected by encryption; other files on M400 do not need encryption.

What should you do?

– On M400, make the ‘Data’ share available offline and enable encryption of offline files.
You have a computer named comp1 that runs Windows 7. The computer is located in a branch office.

A server running windows Server 2008 R2 named Srv1 is located in the main office. You share a folder named ‘Data’ using the default caching settings.

You use Offline Files in the branch office to make the files in the ‘Data’ share available when the WAN link is down.

You want to prevent all files with the .iso and .mp3 extensions from being cached.

What should you do?

– On Srv1, edit the local security policy
You have ten reginal sales people who travel extensively and use laptops to access company resources.

a Windows 2008 R2 server named Server1 contains a shared folder named ‘Data’. The server is located in the main office.

You want the files in the ‘Data’ share to be cached automatically when opened by one of the laptops. You also want the laptop to cache any executable files that it uses from the ‘Data’ share.

Select the setting(s) you would choose to meet these requirements.

– All files and programs that users open from the shared folder are automatically available offline.
– Optimize performance
You have a laptop running Windows 7 Enterprise.

You would like the laptop to Sleep when the battery level becomes critically low.

Select the area you would use to configure this setting.

– Battery
You have a laptop running Windows 7 Professional.

You configured a power plan which is optimized for this laptop, and then you set it as the active plan.

You need to migrate the settings to other laptops running windows 7. Before you migrate the plan, you need to validate the power plan.

What should you do? (Select two. Each answer is a required part of the solution.)

– At a command prompt, run ‘powercfg /energy’
– At a command prompt, run ‘powercfg /export’
You have a Windows 7 laptop that has offline files enabled.

You regularly access a file in a share called ‘Data’ on the company server where manual caching is configure.

Select the option you should choose to make a cached version of the ‘Info.txt’ file available when you are disconnect from the office network.

– Always available offline
You have a laptop running Windows 7 Ultimate.

You are about to give a presentation. You connect your laptop to an external display device.

You want to make sure that your desktop icons and the Start Menu does not show up on the external display while you are presenting.

What should you do? (Choose two. Each answer is a complete solution.)

– Use the Mobility Center to extend your desktop on the external display.
– In Display properties, select Extend these displays.
You have a computer named comp1 that runs Windows 7. The computer is located in a branch office.

A server running Windows Server 2008 R2 named Srv1 is located in the main office. The server has multiple shared folders.

You use Offline Files in the branch office to make the files on the server available when the WAN link is down.

You want to prevent all files in the ‘Data’ share from being cached. Files in other shared folders should still be available.

What should you do?

– On Srv1, edit the properties for the ‘Data’ folder.
You have a laptop running Windows 7 Ultimate.

You are about to give a presentation and would like to minimize interruptions to your presentation.

Select the option you should choose.

– Presentation Settings (Turn on)