21-17 C. Correct: Public key encryption can greatly enhance security, especially for mobile users. Although user certificates can be stored on the computer’s hard disk and can be password-protected, storing certificates on a smart card is more secure because it requires a thief to have access to both the smart card and the user’s password. D. Correct: By encrypting the user’s data files, you ensure that if the replacement laptop computer is stolen and the hard disk is moved to another computer, the thief cannot view confidential information. S/MIME further enhances security by allowing the account executive to digitally sign sent e-mail and receive encrypted e-mail messages. E. Incorrect: The Recovery Console can be a useful tool for diagnosing and repair- ing serious computer failures such as corrupted system files and unsupportable configuration changes. Configuring the Recovery Console for automatic logging on significantly decreases security on a system. This is especially true for mobile users whose laptop computers are at risk of theft. This configuration setting is appropriate only on computers that are physically secure or contain no sensitive data and cannot access any other important computers over the network. Use this setting with caution. 4. Correct Answers: C A. Incorrect: The Setup Wizard is part of the attended installation process; it does not include any features for migrating user settings from another computer to the system where Windows XP Professional is being installed. B. Incorrect: You use SysPrep to prepare a computer running Windows XP Profes- sional for imaging so that the disk image can be used to automate the deployment of similarly configured systems. It does not include any features for migrating user settings from one computer to another. C. Correct: The File And Settings Transfer Wizard is a tool to help transfer a user’s files and settings to a new installation of Windows XP Professional. It can copy many different types of files and settings for such things as the Desktop and Dis- play, and for some applications (such as Microsoft Outlook). It is the ideal tool in this scenario. D. Incorrect: You use RIS for automating the deployment of computers across the network. It leverages technologies such as Windows 2000 Server, Active Directory, GPOs, and Windows XP Professional. It does not include any features for migrat- ing user settings between computers. Objective 1.1 Perform and Troubleshoot an Attended Installation of Windows XP Professional 21-18 Chapter 21 Installing Windows XP Professional (1.0) 5. Correct Answers: D A. Incorrect: This procedure does not minimize the risk of being successfully attacked because Windows XP has several vulnerabilities that are removed only after updates have been applied. Therefore, the computer might be exploited while Automatic Updates is downloading and installing the updates. B. Incorrect: This procedure does not minimize the risk of being successfully attacked because Windows XP has several vulnerabilities that are removed only after updates have been applied. Therefore, the computer might be exploited after it is connected to the Internet, but before the latest service packs and updates have been applied. Even if you might apply these updates as quickly as possible, your computer can be compromised within a few minutes of being connected to the Internet. C. Incorrect: This procedure does not minimize the risk of being successfully attacked because Windows XP has several vulnerabilities that are removed only after updates have been applied. Therefore, the computer might be exploited after it is connected to the Internet, but before the latest service packs and updates have been applied. Even if you might apply these updates as quickly as possible, your computer can be compromised within a few minutes of being connected to the Internet. D. Correct: This procedure reduces the risk of a successful network attack against the system by remaining disconnected from the network during the installation of Windows XP. Windows XP has many known vulnerabilities that are removed when the latest service pack and critical updates are applied. Even performing the installation behind a firewall is risky because the computer might be attacked by computers on the local network infected with worms or viruses. You should con- sider connecting to the Internet only after all updates have been applied. 6. Correct Answers: A A. Correct: To add computers to a domain, the user must have the Add Worksta- tions To Domain user right. B. Incorrect: Although it would solve the problem by allowing Nicole to add com- puters to the domain, it would also grant Nicole many unnecessary privileges, such as the ability to create a user account for herself that she could use to connect to network resources after she has finished her job. The security risks associated with this option are too great. C. Incorrect: This domain policy setting will not allow Nicole’s account to add com- puters to the domain. D. Incorrect: The Power Users group exists only in the local user database, and being a member of the Power Users group grants no additional domain-level rights. 21-19 Objective 1.2 Perform and Troubleshoot an Unattended Installation of Windows XP Professional Automation of the installation of Windows XP Professional, called unattended instal- lation, is much more efficient and less prone to error when deploying large numbers of computers. To effectively automate the deployment of Windows XP Professional, you must know how to plan for deployment, build and configure the installation envi- ronment, create customized answer files, and distribute the operating system and applications to the target computers. A number of methods for automating operating systems have been developed over time; consequently, there are several alternatives for preparing installation routines and deploying the installation packages. Preparation methods include ■ Installation scripts that partially or completely automate setup. ■ The SysPrep utility and disk imaging. ■ The /syspart switch available with Winnt32.exe. Distribution methods include ■ Bootable CD-ROM. ■ RIS. ■ Batch file and a network distribution folder. ■ Systems Management Server (SMS). To successfully answer questions in this objective, you must know how to use the Setup Manager Wizard to prepare for a Windows XP Professional installation and to create answer files and UDF files. You must also know how to create and edit these installation scripts manually by using a text editor. You need to be familiar with all the preparation and distribution methods and understand which ones are appropriate for different circumstances. Objective 1.2 Perform and Troubleshoot an Unattended Installation of Windows XP Professional 21-20 Chapter 21 Installing Windows XP Professional (1.0) Objective 1.2 Questions 1. You were recently hired as part of a systems administration team at a medium-sized company. Your manager has asked you to install Windows XP Professional on 25 iden- tical new desktop computers for the Accounts Receivable department in your firm. To date, your colleagues have been manually installing Windows XP Professional and the suite of applications on each computer as they arrive, carefully following written step- by-step instructions. The process has been tedious and slow, and users have had prob- lems with new computers because of configuration errors caused by human error dur- ing the installation process. You want to deploy the computers as efficiently as possible with all the desktop applications that are required by the staff in Accounts Receivable installed and configured. You also want to ensure that all 25 computers are configured consistently. You propose to do the following: ■ Manually install and configure Windows XP Professional and the required appli- cations on one of the new computers, meticulously following the existing step-by- step instructions. ■ Use Setup Manager to fully automate the installation routine by creating an answer file called Sysprep.inf. ■ Use a non-Microsoft imaging tool to create an image of the reference computer. ■ Use the imaging tool to copy the image from the reference computer to the remaining computers. What critical step is missing from your proposal? Choose the correct answer. A. Use Setup Manager to create a UDF file with unique settings for each of the 25 computers. B. Create RIS boot disks so that the computers can connect to the RIS server to down- load the disk image. C. Use the SysPrep utility to prepare the reference computer for imaging. D. Install PXE-compliant network cards into each computer so that they can connect to the RIS server to download the disk image. 2. You are creating an automated installation of Windows XP Professional for 30 comput- ers. You want to accomplish the following. ■ Assign a unique computer name to each computer ■ Ensure that all computers have the same display settings, time zone configured, default user name, and organization name entered 21-21 ■ Install Microsoft Office Professional Edition 2003 on all the computers ■ Configure the local Administrator account with a unique password on each system ■ Modify the user interface so that the desktop icons are no longer visible You plan to use Setup Manager to create a fully automated installation, combining an answer file and a UDF file with the preceding settings. Which goals does your approach achieve? Choose three correct answers. A. You can assign a unique computer name to each computer. B. You can ensure that all computers have the same display settings, time zone con- figured, default user name, and organization name entered. C. You can install Office Professional Edition 2003 on all the computers. D. You can configure the local Administrator account with a unique password on each system. E. You can modify the user interface so that the desktop icons are no longer visible. F. Your solution does not achieve any of the desired goals. 3. You want to perform an unattended installation of Windows XP Professional onto a computer with a bootable CD-ROM drive. You have already verified that the computer meets the minimum hardware requirements for Windows XP Professional and that all the hardware is in the Windows Catalog. You also have a bootable version of the Win- dows XP Professional installation CD-ROM. Which of the following is correct? Choose the correct answer. A. Ensure that the answer file has a section called [Winnt32] that contains the required keys and values. Save the answer file as Sysprep.inf and copy it to a floppy disk. Configure the target computer’s BIOS so that it will boot from the CD- ROM drive, and then insert the Windows XP Professional installation CD-ROM and reboot the computer. Insert the floppy disk as soon as the computer boots from the CD-ROM. B. Ensure that the answer file has a section called [Winnt32] that contains the required keys and values. Save the answer file as Winnt.sif and copy it to a floppy disk. Configure the target computer’s BIOS so that it boots from the CD-ROM drive, and then insert the Windows XP Professional installation CD-ROM and reboot the computer. Insert the floppy disk as soon as the computer boots from the CD-ROM. C. Ensure that the answer file has a section called [Data] that contains the required keys and values. Save the answer file as Sysprep.inf and copy it to a floppy disk. Configure the target computer’s BIOS so that it boots from the CD-ROM drive, and then insert the Windows XP Professional installation CD-ROM and reboot the computer. Insert the floppy disk as soon as the computer boots from the CD-ROM. Objective 1.2 Perform and Troubleshoot an Unattended Installation of Windows XP Professional 21-22 Chapter 21 Installing Windows XP Professional (1.0) D. Ensure that the answer file has a section called [Data] that contains the required keys and values. Save the answer file as Winnt.sif and copy it to a floppy disk. Insert the floppy disk into the target computer. Configure the target computer’s BIOS so that it boots from the CD-ROM drive, and then insert the Windows XP Professional installation CD-ROM and reboot the computer. 4. During an unattended installation of Windows XP Professional, keys might have values set in the answer file, the UDF file, in both files, or in neither file. How does Setup han- dle the following scenarios? Choose four correct answers. A. If a section or key is present in the UDF file, but there is no section or key of the same name in the answer file, Setup creates and uses the UDF section. B. If a key is specified in the answer file and referenced by the unique ID in the UDF file, the value specified in the answer file is used. C. If a key is specified in the answer file and referenced by the unique ID in the UDF file, the value specified in the answer file is used. D. If a key is specified in the UDF file but not in the answer file, the value specified in the UDF file is used. E. If a key is not specified in the answer file, and it is in the UDF file but the value is left blank, the default value is supplied automatically by Setup. F. If a key is not specified in the answer file, and it is in the UDF file but the value is left blank, no value is set. G. If a key is specified in the answer file but not in the UDF file, the value specified in the answer file is used. 5. You will be performing an automated deployment of Windows XP Professional to 40 desktop computers. During testing, you discovered that the video driver causes Setup to fail unless the driver is updated by using Dynamic Update during the setup proce- dure. You want to use Dynamic Update, but you are using only a low-bandwidth dial- up connection while you wait for your Internet service provider (ISP) to provision your permanent Internet connection. What steps would you take to use Dynamic Update with an automated deployment of Windows XP? Choose the correct answer. A. Download the latest Windows XP Dynamic Update package from Microsoft. Extract the files to a folder, and share that folder on your local area network. From your Win- dows XP CD-ROM, run the command winnt32 /duprepare:path_to_shared_folder. In the [Unattended] section of your Unattend.txt file, add the entry Dushare: path_to_shared_folder. B. From your Windows XP CD-ROM, run the command winnt32 /dupre- pare:path_to_shared_folder to download the Dynamic Update files from Microsoft and store them in the specified shared folder. In the [Unattended] section of your Unattend.txt file, add the entry Dushare:path_to_shared_folder. 21-23 C. Download the latest Windows XP Dynamic Update package from Microsoft. Copy the file to a folder and share that folder on your local area network. In the [Unattended] section of your Unattend.txt file, add the entry Dushare:path_to_shared_folder. D. Download the latest Windows XP Dynamic Update package from Microsoft. Extract the files to a folder, and share that folder on your local area network. From your Win- dows XP CD-ROM, run the command winnt32 /duprepare:path_to_shared_folder. In the [Unattended] section of your Unattend.txt file, add the entries Dushare:local and Dupath:path_to_shared_folder. 6. You need to perform an unattended installation from a Windows XP Professional CD- ROM on a computer that does not currently have an operating system. You want to provide the computer name and Administrator password on a floppy disk. What do you name the answer file? Choose the correct answer. A. Answer.txt B. Winnt.sif C. Winnt32.sif D. Unattend.txt 7. Which of the following components are required to install Windows XP Professional by using Remote Installation Services (RIS)? Choose three correct answers. A. DNS server B. WINS server C. DHCP server D. Web server E. Active Directory F. FTP server Objective 1.2 Perform and Troubleshoot an Unattended Installation of Windows XP Professional 21-24 Chapter 21 Installing Windows XP Professional (1.0) Objective 1.2 Answers 1. Correct Answers: C A. Incorrect: When using disk imaging to deploy Windows XP Professional, you do not need to create UDF files. B. Incorrect: RIS is another possible approach to deploying multiple computers, but you have already proposed using disk images. Copying the images to the disk drives of the new computers does not require RIS. In this scenario, non-Microsoft tools are used for distribution. C. Correct: Before you create an image of the reference computer, you must use SysPrep to remove security and user information unique to the system. SysPrep erases the computer’s name, its globally unique identifier (GUID), and all other settings that might cause problems if they appear on multiple computers on the same network. D. Incorrect: RIS is another possible approach to deploying multiple computers, but you have already proposed using disk images. Copying the images to the disk drives of the new computers does not require RIS or PXE-enabled network cards. Additionally, the entire computer needs to be PXE-compliant, not just the network cards. Merely installing PXE-enabled network cards into a computer does not guarantee that it will be able to boot directly from the network. In this scenario, non-Microsoft tools are used for distribution. 2. Correct Answers: A, B, and D A. Correct: With Setup Manager, you can create UDF files that can be used in con- junction with answer files. The settings in a UDF file take precedence over those in an answer file. You can specify unique values for many settings such as com- puter names so that each computer deployed has a distinct name. B. Correct: Setup Manager can create or modify answer files that can contain all the settings listed. An answer file is a customized script used to run an unattended installation of Windows XP Professional. C. Incorrect: Setup Manager cannot automate the installation of any version of Microsoft Office Professional Edition 2003 on its own. You can use Setup Manager to launch other programs and scripts, but you have to create an automated instal- lation for Office Professional Edition 2003 by following the instructions included in the Office 2003 Editions Resource Kit. D. Correct: With Setup Manager, you can create UDF files that can be used in con- junction with answer files. The settings in a UDF file take precedence over those in an answer file. You can specify unique values for many settings, such as the password for the Local Administrator account. 21-25 E. Incorrect: Setup Manager does not include tools to modify user interface prop- erties such as the appearance of desktop icons. Instead, you should configure the computers as Active Directory domain members, and use Group Policy settings to control the desktop environment. F. Incorrect: Your solution does not achieve any of the desired goals. 3. Correct Answers: D A. Incorrect: The answer file must be named Winnt.sif, not Sysprep.inf. Sysprep.inf is the name given to the answer file when using SysPrep to deploy Windows XP Professional via disk imaging. The section with the required keys for automating installation from the bootable installation CD-ROM must be called [Data]. B. Incorrect: The section with the required keys for automating installation from the bootable installation CD-ROM must be called [Data]. C. Incorrect: The answer file must be named Winnt.sif, not Sysprep.inf. Sysprep.inf is the name given to the answer file when using SysPrep to deploy Windows XP Professional via disk imaging. D. Correct: The [Data] section is an optional section needed only when installing Windows XP Professional in an unattended fashion directly from the product CD- ROM. If you use the Setup Manager Wizard to create the answer file and specify that the answer file will be used to install from a CD-ROM, it creates the [Data] sec- tion with the required keys and values: AutoPartition=1, MsDosInitiated="0", and UnattendedInstall="Yes". The answer file must be named Winnt.sif; by default, Setup Manager offers to name the file Unattend.txt. Be sure to name the file Winnt.sif before booting from the installation CD-ROM. Remember to insert the diskette into the floppy drive right after the computer boots from the CD-ROM. 4. Correct Answers: A, D, F, and G A. Correct: Setup automatically uses values within the UDF file when the corre- sponding values are not specified in the answer file. B. Incorrect: The values specified in the UDF file take precedence over those in the answer file whenever they are in conflict. C. Incorrect: The values specified in the UDF file take precedence over those in the answer file whenever they are in conflict. D. Correct: Setup automatically uses values within the UDF file when the corre- sponding values are not specified in the answer file. E. Incorrect: Setup does not automatically supply default values for any keys left blank. In this situation, it is possible that the user will be prompted for the missing information. Objective 1.2 Perform and Troubleshoot an Unattended Installation of Windows XP Professional 21-26 Chapter 21 Installing Windows XP Professional (1.0) F. Correct: If a key has a blank value in the UDF file and the answer file has no value specified for that key, no value is set and it is possible that the user will be prompted for the missing information. G. Correct: Any keys specified in the answer file that are not superseded by those in the UDF file are used. 5. Correct Answers: A A. Correct: To use Dynamic Update, download the latest package, extract the files, and share them on a network. For unattended installations, you must add the Dushare: line to the Unattend.txt file to tell Setup where to retrieve the package. For attended installations, add the /dushare:path_to_shared_folder option to the winnt32.exe command-line. For more information, refer to Microsoft Knowledge Base article 312110. B. Incorrect: Although winnt32.exe is capable of downloading the Dynamic Update files during installation, it is not capable of storing those files for later use. You must manually download and extract the files. C. Incorrect: Before Setup can use the Dynamic Update files, you must extract them, and then prepare them by running winnt32.exe with the /duprepare com- mand-line parameter. D. Incorrect: You need to add the Dushare entry only to the [Unattended] section of your Unattend.txt file. You should set the value to the path of the shared folder containing your Dynamic Update files. 6. Correct Answers: B A. Incorrect: The correct filename is Winnt.sif. B. Correct: Winnt.sif has the same sections as an Unattend.txt file, and should be used when performing unattended installations on computers that do not cur- rently have an operating system. Generally, you would place this file on a floppy disk and insert the floppy disk into the computer immediately after the computer begins to boot from the CD-ROM. C. Incorrect: The correct filename is Winnt.sif. D. Incorrect: The correct filename is Winnt.sif. Although Unattend.txt is often used for unattended installations where the computer currently has an operating sys- tem, you can specify any file name in this scenario. [...]... www .microsoft. com/resources/documentation/Windows/XP/all/reskit/en-us/ prdl_pif_frpc.asp) “Troubleshooting File and Printer Sharing in Microsoft Windows XP” by Microsoft Corporation (available online at http://www .microsoft. com/downloads/details aspx?familyid=fd7fd48d-6b4a-448e-a63 2-0 76f98a351a2) “File and Printer Sharing with Microsoft Windows” by Microsoft Corporation (available online at http://www .microsoft. com/downloads/details.aspx?FamilyID= 87C0A6DB-AEF 8-4 BEF -9 2 5E-7AC9BE 791 028)... http://www .microsoft. com/downloads/details.aspx?FamilyID= 87C0A6DB-AEF 8-4 BEF -9 2 5E-7AC9BE 791 028) Objective 2.3 Microsoft Corporation Microsoft Windows XP Professional Resource Kit Documentation Redmond, WA: Microsoft Press, 2001 Read Chapter 11, “Enabling Printing and Faxing.” This chapter provides detailed information about managing printers both locally and across a network (available online at http:// www .microsoft. com/resources/documentation/Windows/XP/all/reskit/en-us/... taking exam 7 0- 270 Objective 2.1 Microsoft Corporation Microsoft Windows XP Professional Resource Kit Documentation Redmond, WA: Microsoft Press, 2001 Read Chapter 16, “Authorization and Access Control.” This chapter provides an overview of file security concepts such as discretionary access control lists (available online at http://www .microsoft. com/resources/documentation/Windows/XP/all/reskit/en-us/... 2 2-4 Chapter 22 Implementing and Conducting Administration of Resources Objective 2.2 “Troubleshooting File and Printer Sharing in Microsoft Windows XP” by Microsoft Corporation (available online at http://www .microsoft. com/downloads/ details.aspx?familyid=fd7fd48d-6b4a-448e-a63 2-0 76f98a351a2) “File and Printer Sharing with Microsoft Windows” by Microsoft Corporation (available online at http://www .microsoft. com/downloads/details.aspx?FamilyID=... http://www .microsoft. com/downloads/details.aspx?FamilyID= 87C0A6DB-AEF 8-4 BEF -9 2 5E-7AC9BE 791 028) “Printing, Imaging, Fax, and All-in-One Frequently Asked Questions” by Bruce Sanderson (available online at http://members.shaw.ca/bsanders/PrintingFAQ.HTM) Objective 2.4 “Choosing between NTFS, FAT, and FAT32” in Windows XP Help and Support Center (available online at http://www .microsoft. com/windowsxp/home/ using/productdoc/en/choosing_between_NTFS_FAT_and_FAT32.asp)... 7: Move files between compressed and uncompressed folders on an NTFS volume, and notice whether the compression status is inherited from the source or destination folder ❑ Practice 8: Move files between compressed and uncompressed folders on different NTFS volumes, and notice whether the compression status is inherited from the source or destination folder ❑ Practice 9: Compress different types of... written as uncompressed, regardless of the compression state of the source file or the destination folder B Files copied between volumes are first written to the disk uncompressed NTFS then compresses the file only if the destination folder is compressed C Files copied between volumes inherit the compression state of the base volume, not the destination folder Because the volume itself is not compressed,... The \OLD folder is compressed using NTFS compression, but the \NEW folder is not What will the compression status of the files be after the copy has completed? A The files are uncompressed B The files will be compressed C An error is returned because the files cannot be copied until their compression status matches that of the destination folder D The destination files are not compressed because Windows... \OLD folder is compressed using Windows XP NTFS compression, but the \NEW folder is not What will the compression status of the files be after the move has completed? A The files are uncompressed B The files are compressed C An error is returned because the files cannot be moved until their compression status matches that of the destination folder D The destination files are not compressed because Windows... any user can compress a folder using Windows Explorer, only the system administrators can explain exactly how compressed folders affect system performance and available disk space Although Windows Explorer provides the most user-friendly interface into the details of compression, the Compact.exe utility is useful to administrators who need to compress multiple folders on a system or compress folders . com- puters to the domain. D. Incorrect: The Power Users group exists only in the local user database, and being a member of the Power Users group grants no additional domain-level rights. 2 1-1 9 Objective. written step- by-step instructions. The process has been tedious and slow, and users have had prob- lems with new computers because of configuration errors caused by human error dur- ing the installation. reinstall all appli- cations, and restore the user’s data and settings. Alternatively, the system can be upgraded to Windows 95 , and then Windows 98 , and then Windows XP Profes- sional. In practice,