HotSpot (Hot Area)
Explanation:
All portable computers on a company's wireless network run windows 7 Enterprise.
You need to ensure that users can connect only to the predefined SSID shown in the work area.
Which Group Policy object (GPO) settings should you select? (To answer, select the appropriate setting or
settings in the work area.)
Hot Area:

Topic 1, Company One
This question is one in a series of questions that all present the same scenario. For your convenience, the
scenario is repeated in each question. (Click the Case Study button.)
Each question presents a different goal and answer choices, but the text of the scenario is exactly the same
in each question in this series.
You need to prevent users from accessing USB flash drives on portable computers.
What should you do? (Choose all that apply)
Company, Inc. (Case Study): Background
You are the desktop architect for a company with 14,000 client computers. Some client computers are portable computers and some are desktop computers. All client computers currently run Windows XP.
You are in the evaluation phase for upgrading to Windows 7. Approximately half of the Carlsbad and Madrid offices are used by sales employees. Sales employees report to the office only once per quarter. Your company has users in offices as shown in the following table.

The address for the SharePoint site is https://intranet.company.com.
Each location has gigabit network connections to the desktop except Madrid, which has 100 megabit connections. Each office has a Dynamic Host Configuration Protocol (DHCP) server and uses multiple VLANs.
You use Group Policy objects (GPOs) to manage various settings. The following figure displays the Organizational Unit (OU) layout for the Active Directory Domain Services (AD DS) domain.

Each office has two connections, a data center WAN link and an Internet connection. Each office connects to a central data center facility with connection speeds as shown in the following table.

You currently use one of each client computer model to create and maintain a disk image for each model. The models supported by your company are listed in the following table.

You currently use a third-party disk imaging application to capture and deploy new Windows XP computers.
Desktop administrators use optical media to deploy the image to new or repurposed client computers. The current Windows XP image is about 11 GB in size, which includes 2 GB of applications and 9 GB of Windows XP files.
Business Requirements
The deployment of Windows 7 must meet the following business requirements:
Deployment requirements
The deployment must maximize the use of existing client computers. The deployment must reduce the amount of time spent updating client computers after deployment.
Technical Requirements
The application must meet the following technical requirements:
Infrastructure requirements
The amount of disk space required to store deployment images must be reduced. The number of images that need to be copied across WAN links must be reduced. You are based in the Los Angeles office and use the Microsoft Deployment Toolkit. You have a file server hosting a deployment share in Los Angeles.
Application compatibility
All current applications must be supported on Windows 7.
All offices are moving to a new finance application in the next six months. The new finance application
installs and runs correctly on Windows 7.
Migration requirements
The deployment cannot require users to store their files on a network or external drive for the migration. Only system administrators can be allowed to install applications. User data must be migrated during upgrades to Windows 7. There is a small budget for hardware upgrades when required.
Image maintenance
You need to minimize the re-arm passes.
Security
Each location has a security group made up of the desktop computer objects in that location. Users must
not be able to change their web browser or client computer security settings.
Your requirements are as follows:
A startup PIN and TPM are required for all BitLocker users.
Local regulations prohibit the use of BitLocker for all computers in the Munich office. This supersedes any other requirement.
All laptops within the company must have BitLocker enabled.
All Madrid desktops must have BitLocker enabled.
No other desktops besides Madrid should have Bitlocker enabled.
Computers in office lobbies are not permitted to join the domain.
You need to block the use of ActiveX controls for all external websites.

Your company has two Active Directory Domain Services (AD DS) domains, Domain1 and Domain2. A two-way trust relationship exists between the domains.
Users in both domains can log on to client computers in only their own domains. System logs on the domain controllers display the error message:
"Clock skew too great."
when users in Domain1 attempt to log on to client computers in Domain2. You need to ensure that users can log on to client computers in both domains. What should you do?

Your company has a single Active Directory Domain Services (AD DS) forest with a single domain named contoso.com. All client computers run Windows 7. All client computer accounts are located in the Computers container in the contoso.com domain.
You discover that multiple client computers were automatically shut down because the security log was full.
You need to ensure that client computers are not shut down when the security log becomes full. What should you do?

You plan to deploy an image of Windows 7 Enterprise to 1,000 client computers.
You need to design a custom image that will enable users to connect to a Telnet server.
What should you do?

You are designing a Windows 7 Enterprise image creation strategy.
The strategy must meet the following requirements:
Support 32-bit and 64-bit hardware.
Support 64-bit applications.
Minimize the total number of images.
Reduce the bandwidth required to deploy an image.
Use System Center Configuration Manager (ConfigMgr) for application deployment.
You need to recommend the images that meet the requirements.
Which images should you recommend? (Choose all that apply.)

Your company has a single Active Directory Domain Services (AD DS) domain named contoso.com that
uses Active Directory integrated DNS.
You deploy the Key Management Service (KMS) on a Windows 7 computer.
You need to ensure that Windows 7 client computers can locate the KMS host and perform activation.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Your company has an Active Directory Domain Services (AD DS) forest with a single domain.
The domain, organizational unit (OU), and Group Policy object (GPO) design is shown in the exhibit. (Click the Exhibit button.)
The NY Computers OU contains client computers that run either Windows Vista Enterprise or Windows 7 Enterprise. The New York Computers GPO defines software restriction policies (SRPs). You have the following requirements:
SRPs must be used for only Windows Vista Enterprise client computers.
AppLocker policies must be used for only Windows 7 Enterprise client computers.
AppLocker policies must be defined by using Group Policy.
You need to design an AppLocker deployment that meets these requirements.
What should you do?
Exhibit:

Drag and Drop (Select and Place)
You create a shim database and distribute it to each of a company's client computers through a script.
You name the database Shim_Database and give it a filename of shimdatabase.sdb.
The database GUID is 18315260-2ecb-43af-945a-56810da33fb4.
The database must be registered on all client computers. The registration process must be invisible to the
user.
You need to construct a command to register the shim database.
Which command should you use? To answer, drag the appropriate component from the list of command
components to the correct location or locations in the answer area.)
Select and Place:

Your company has an internal Web application that uses a self-signed SSL certificate. The company has an
internal certification authority (CA) with auto enrollment.
When users attempt to start the Web application, Internet Explorer displays an error message that
recommends closing the Web page rather than continuing to the application.
You need to ensure that Internet Explorer does not display the error message. What should you do?

Your company is planning to deploy Windows 7.
You have an image that is used to deploy Windows 7 on client computers.
You need to add a volume image to the existing Windows image.
What should you do?

Your company is planning to deploy Windows 7 to all client computers. You have the following requirements:
Test an application to detect potential compatibility issues caused by User Account Control (UAC).
Monitor an applications operating system use.
You need to select the appropriate method to detect application compatibility issues.
What should you do?

Topic 2, Company Two
You have an AD DS security group named Toronto Users and another named Toronto Computers.
You are planning the deployment of a new browser by using Group Policy.
You need to ensure that the computers in each office comply with company requirements.
What should you recommend? (Choose all that apply.)
Company, Ltd. (Case Study): Background
You are the desktop architect for a company with 10,000 client computers. Client computers are either portable or desktop computers. All client computers run the 64-bit version of Windows 7 Enterprise. Your network consists of a main office and four regional offices.
Your network has an Active Directory Domain Services (AD DS) in a single-domain, single-forest model. The forest and domain functional levels are set to Windows Server 2008 R2. There are four domain controllers in the main office and two additional domain controllers in each regional office.
All servers run Windows Servers 2008 R2.
The regional offices are listed in the following table with users and WAN connection speeds.

Users in the New York office will have a Customer Relationship Management (CRM) application that is CPU-intensive and only runs on windows 2000 Professional. The Toronto office uses a network-intensive application. All users in the Toronto office use a legacy CRM application that runs on Windows XP only.
The existing client computers are managed with Microsoft System Center Configuration Manager (ConfigMgr) 2007 R3.
Business Requirements
The following business requirements must be maintained or exceeded:
Software Asset Management
The company Software Asset Management (SAM) team has a policy that mandates that after operating systems are deployed, the operating system environment (OSE) must be activated automatically before any additional updates or software are installed in the OSE. The Paris development group has a Key Management Server (KMS) in an isolated test network. All engineering applications are required to maintain compliance with the license agreements of the application vendors.
Technology Requirements
You need to ensure that users can always receive operating system and application updates on the internal network and when away from the main office or branch offices. The mobile staff uses portable computers. In the next remote update of the client computers, you need to deploy an Enterprise Resource Planning (ERP) add-on to Microsoft Internet Explorer. This add-on must support a partner application and integrate with the remote users. The ERP Internet Explorer add-on does not support the 64-bit version of Windows 7.
Virtualization infrastructure
You use Microsoft Application Virtualization (App-V) to deliver applications to computers. You use Microsoft Hyper-V Server 2008 R2 to deliver VDI desktops in a pool. All client operating systems deployed in the VDI pool must be automatically joined to the domain during the deployment process.
New Functionality
The fewest number of servers should be added to the environment to meet the technical goals. A new version of an existing engineering application must be deployed to the users. The new application requires a dedicated graphics processing unit (GPU) with 2 GB of memory.
Technical Requirements
The following technical requirements must be maintained or exceeded:
Infrastructure Requirements
All applications and updates are required to be deployed with the same central management tool. Detailed reporting for compliance audits are required to be available for all application and update deployments.
Application Compatibility
All current applications must be supported on Windows 7. You are licensed for the latest version of the Microsoft Desktop and Optimization Pack (MDOP).
Operating System Environment (OSE) Requirements
You need to ensure that Internet Explorer 9 is not automatically installed on any of the computers in the
Toronto office.
You need to ensure that the Internet Explorer Initial Wizard is not displayed on any Virtual Desktop
Infrastructure (VDI) computers.
Security
All remote access must be logged and audit able. All VDI desktops computers must not send Customer Experience Improvement Program (CEIP) for Internet Explorer or windows Live Messenger.