SumITUp. A Complete Summary for Our Practice Test. TS: Windows 7, Configuring

Transcription

1 SumITUp A Complete Summary for Our Practice Test TS: Windows 7, Configuring SumITUp is a great summary recap of the objectives & material covered on the exam. Use it in addition to or in concert with your practice test as: A bulleted overview of the exam scope and objectives before you start your study to provide you with the big picture objective by objective. A checklist & review of topics covered within each objective to ensure you have studied all the critical areas. A tool you can print out for review on the go. A rapid review tool for the day before you take the exam. All Rights Reserved.

2 2 SumITUp A Complete Summary for Our Practice Test Installing, Upgrading, and Migrating to Windows 7 Perform a clean installation Current minimum installation requirements for Windows 7 are - 1 GHz (32-bit) or 2 GHz (64-bit) processor - 1 GB (32-bit) or 2 GB (64-bit) of system memory - 16 GB (32-bit) or 20 GB (64-bit) of available disk space - Support for DirectX 9 graphics with 128 MB memory (to enable the Aero theme) - In addition, a DVD drive is also needed if you are installing from the Windows 7 installation DVD o Microsoft recommends a DVD-R/W drive, but you do not need to write to DVD during a typical installation The BCDedit command lets you edit BCD files The Windows SIM utility is part of the Windows AIK and allows you to create answer files that can be used to limit the components installed and the features enabled during an automated installation To install Windows 7 from a USB flash drive, you should use diskpart to create an active primary partition on the USB flash drive and format it as FAT32 - After the partition is prepared, you can copy the installation files from the DVD to the USB flash drive The Boot.wim file defines the Windows PE environment used to boot the computer Upgrade to Windows 7 from previous versions of Windows You cannot upgrade directly from Windows XP to Windows 7 - You can migrate files and settings to Windows 7, but you must first use Migsetup to launch Windows Easy Transfer to transfer the files and settings to removable media or a network storage location - You would then install Windows 7 and run Windows Easy Transfer to migrate the settings o Applications are not migrated, so you will have to reinstall any applications after Windows 7 installation You can only directly upgrade from Windows Vista Ultimate to Windows 7 Ultimate You can upgrade a computer running Windows 7 Home Premium to either Windows 7 Professional or Windows 7 Ultimate You can directly upgrade Windows Vista Business and Windows Vista Enterprise computers to Windows 7 Enterprise edition You cannot upgrade a computer running Windows Vista Home Premium to Windows 7 Professional - You must perform a custom installation Migrate user profiles USMT is used to migrate user profiles, application settings, operating system settings, and so forth to a computer after a clean installation To preserve application and user settings when upgrading from Windows XP to Windows 7 - Run ScanState - Perform a custom install of Windows 7

3 3 SumITUp A Complete Summary for Our Practice Test - Install the applications - Perform LoadState Deploying Windows 7 Capture a system image Run Sysprep /generalize to remove unique computer information from an installation so that the image can be used for installation on one or more different computers The ImageX utility allows you to capture, mount, and apply images Prepare a system image for deployment DISM is used to service offline Windows images, such as to add drivers to an image - Available service options include adding language packs and international settings to an existing custom image The OCSetup command is used to add system components to an online Windows image Deploy a system image The Oobe.xml file is used to customize Windows Welcome, OEM First Run application, and ISP Signup for an installation image Windows SIM provides a GUI that lets you create unattended installation answer files based on the components available in a Windows image file Configure a VHD You must attach a VHD as a hard disk before you can boot from it - You can use either Diskpart or Disk Management to attach the VHD - After attaching the VHD, you can use Bcdedit to add the VHD to the boot menu and, if applicable, set it as the default boot option Configuring Hardware and Applications Configure devices For a user to be able to install a driver from a network share, the computer must be configured to search that share for the driver, you must configure a device setup class for the driver in the Allow limited users to install drivers for these device classes policy, and you must sign the driver with a trusted certificate Rolling back a driver will force the computer to revert to the previous version of the device driver The File Signature Verification tool scans the system and identifies any system files and drivers that do not have a valid digital signature Windows 7 allows you to stage device drivers to a driver store on a computer - You use the Pnputil command to add a driver to a staged location Configure application compatibility When adding a shim to a custom shim database, you should - Create a second custom shim database and add the shim you need to test

4 4 SumITUp A Complete Summary for Our Practice Test - Test the shim through customer acceptance testing - Open the master copy of the shim database - Copy and paste the shims from the secondary database into the master database Before you can create and distribute a custom compatibility mode, you must first create a custom compatibility database as a destination The Compatibility mode option on the Compatibility tab of an application's properties dialog box allows you to configure an application to run in an environment that emulates an earlier version of Windows Configure application restrictions You must create a default rules set before creating the rules to limit users to running signed applications only Configuring rule enforcement mode as Audit only lets you determine what the impact of the rules will be without directly affecting users' access to applications AppLocker rules provide more detailed control over applications, but currently apply to Windows Server 2008 and Windows 7 only - Older versions of Windows require Software Restriction Policies You can have both AppLocker rules and Software Restriction Policies, but if you define the AppLocker rules in the same GPO, only the AppLocker rules will apply An AppLocker Executable rule is used to limit the users who can launch.exe and.com files An AppLocker Windows Installer rule is used to limit which.msi and.msp files a user can execute Configure Internet Explorer Enabling InPrivate browsing prevents the computer from maintaining your browsing history InPrivate filtering warns you about third-party content that can view your browsing history and lets you block this access The SmartScreen filter helps block malware and indentify potentially hazardous Web sites Configuring Network Connectivity Configure IPv4 network settings A default gateway is used to communicate with other subnets Lack of a default gateway does not prevent computers from communicating with other local computers When an address is assigned by using APIPA, only an address and subnet mask are assigned - Default gateway values are not generated A DNS server can provide host name resolution for both IPv6 and IPv4 addresses Configure IPv6 network settings An IPv6 link-local address is used like an APIPA IPv4 address and is used for local communication only You can recognize a link local address by its FE80 prefix The Netsh interface ipv6 command can be used to view and modify the IPv6 routing table Configure networking settings MS-CHAP-v2 provides authentication based on user name and password

5 5 SumITUp A Complete Summary for Our Practice Test PEAP provides a secure TLS-encrypted channel between the client and the authenticating server The WPA2 Enterprise security type supports either TKIP or AES for an encryption protocol Configure Windows Firewall Windows 7 supports multiple active Windows Firewall location-aware configuration profiles Domain connections fall under the domain profile, and Internet connections are managed by the public profile An authenticated bypass rule lets you specify users, by user or group, or computers that can bypass inbound connection rules Windows Firewall allows you to configure whether notifications are displayed when an attempt to access the computer is blocked by Windows Firewall Configure remote management You can use PowerShell WMI scripts to perform most management tasks that might be automated PowerShell scripts can be configured to execute before other scripts The Invoke-Command PowerShell cmdlet allows you to list the computers on which to run a specific command - The command is then executed on the computers in a "fan-out" configuration Configuring Access to Resources Configure shared resources All Windows clients can access files shared using Public folder sharing When a computer belongs to a homegroup, users can access files in any Public folder by default When password protected file sharing is enabled, a user can only access shared resources on a computer if that user has a user account and password on that computer Configure file and folder access Setting Elliptic Curve Cryptography to Require requires ECC encryption for all new encryption, but files and folders encrypted under an earlier Windows version are still encrypted under RSA encryption Running the cipher command with the /r option creates an EFS Recovery Agent certificate Configure user account control (UAC) The SUA tool lets you monitor specific applications for problems relating to the UAC feature - The SUA tool collects detailed data for analysis to help you fix any detected problems - There is also a SUA Wizard that steps you through potential fixes for UAC problems You can disable UAC by setting the UAC Control Panel slider to Never notify Configure authentication and authorization The online ID is linked to a Windows user and is used to authenticate access to shared resources The vault stores credentials for Web sites, file servers, and other resources you access - You can add Windows credentials, certificates, and generic credentials to the vault Configure BranchCache BranchCache uses HTTP to transmit data in both Distributed Cache and Hosted Cache mode

6 6 SumITUp A Complete Summary for Our Practice Test - In Distributed Cache mode, content can be cached on any client on which BranchCache is enabled o A client uses the WS-Discovery protocol to locate cached content - With Hosted Cache mode, clients are configured with the address of the host, so there is no need to use the WS-Discovery protocol When using BranchCache in Hosted Cache mode, you need to install a server certificate that is trusted by the clients Configuring Mobile Computing Configure BitLocker and BitLocker To Go When using BitLocker on a computer that does not support TPM version 1.2 hardware, you must use it with a startup key stored on removable media, such as a USB flash drive BitLocker To Go is used to encrypt the contents of removable media, such as removable drives and USB flash drives The policies that govern BitLocker To Go are located in Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives Configure DirectAccess DirectAccess allows client computers running Windows 7 or Windows Server 2008 to connect to intranet resources DirectAccess clients connect to the network using IPSec through one or more DirectAccess servers Configure mobility options Implementing BitLocker drive encryption on laptop computers provides a high level of protection even if the computer is lost or stolen Configure remote connections IKEv2 is the only tunneling protocol that supports VPN reconnect VPN reconnect is a feature of Windows 7 and Windows Server 2008 that enables them to automatically reestablish a VPN connection Desktop composition, which provides a "like local" experience for remote client sessions using the Aero theme, requires either Windows 7 or Windows Server 2008 R2 Remote Desktop requires modification of the Remote Desktop Inbound rule of Windows Firewall Monitoring and Maintaining Systems that Run Windows 7 Configure updates to Windows 7 The Specify intranet Microsoft Update Service location policy in Group Policy allows you to identify a WSUS computer to use for downloading Windows updates - Updates on a WSUS computer can be selectively approved - You cannot identify a WSUS server through Windows Update

7 7 SumITUp A Complete Summary for Our Practice Test Manage disks The three supported VHD file types are fixed, dynamic, and differencing Deleting a volume results in data loss Shrinking a volume does not result in data loss A basic disk can only support primary partitions, extended partitions, and logical disks A striped volume offers excellent performance because data can be read and written to two disks simultaneously A spanned volume increases disk space on a logical volume by extending a volume onto a second physical disk A mirrored volume provides fault tolerance by storing a copy of the same data on two disks Monitor systems The primary purpose of the ACT is to determine if installed applications are compatible and, if not, how to make them compatible - The ACT also includes the ability to collect information about installed applications without having to do the analysis for compatibility o This gives you a quick way to generate an application inventory The Problem Steps Recorder takes a screen shot of each step a user takes when performing a task The Parental Controls Operational log stores setting changes related to Parental Controls You should use Event Viewer to create and export a custom view that contains events from one or more event logs - These events can be filtered by source, user, date, and event type The Windows Event Collector Utility (wecutil) configures a computer to perform WS-Management data collection when run with the qc option Configure performance settings ReadyBoost allows you to allocate space on a USB flash drive or flash memory card to use as RAM - Using ReadyBoost can speed performance because less paging will be required to the paging file Moving a paging file to a different physical disk than the one where the operating system is installed will improve performance The performance tool analyzes each component and identifies a Windows Experience Index subscore Configuring Backup and Recovery Options Configure backup In Windows 7, you can use Wbadmin or the Backup tool to back up directly to DVD as your backup destination Wbadmin is the Windows 7 command-line utility that can be used to start, stop, or view information about a backup. Configure system recovery options System Restore saves information about your system configuration before making a change, such as installing a device driver or application The Startup Repair option allows you to replace damaged or missing operating system files

8 8 SumITUp A Complete Summary for Our Practice Test A system image is an exact image of your computer at the time it is taken - It includes applications and data files - You can recover a computer to a system image using the Recovery Control Panel utility if the operating system can be booted - If the operating system cannot be booted, you can recover to a system image by choosing Repair your computer from Advanced Boot Options or by booting from the installation DVD or a system repair disc and choosing Repair your computer Configure file recovery options You must use the Wbadmin command to restore system state information for Windows 7 System Restore lets you restore a computer to an established restore point or to a complete PC backup that was created earlier When System Protection is on, shadow copies of files are created each time a restore point is saved - If a file is deleted, the previous version of the file is listed on the Previous Versions tab of the folder that contained the file - You can copy or restore the file from this tab Acronyms Acronym ACT AES AIK APIPA BCD DISM DVD EFS FAT32 GUI IP IPSec ISP PE PEAP-MS-CHAP v2 RSA SIM SUA TKIP TLS Definition Application Compatibility Toolkit Advanced Encryption Standard Windows Automated Installation Kit Automatic Private IP Addressing Boot Configuration Data Deployment Image Servicing and Management Digital Versatile Disk Encrypting File System 32-bit File Allocation Table Graphical user interface Internet Protocol Internet Protocol Security Internet Service Provider Preinstallation Environment Protected Extensible Authentication Protocol with Microsoft Challenge Handshake Authentication Protocol version 2 Rivest, Shamir, and Adleman System Image Manager Standard User Analyzer Temporal Key Integrity Protocol Transport Layer Security

9 9 SumITUp A Complete Summary for Our Practice Test Acronym TPM UAC USB USMT WMI WPA WSUS Definition Trusted Platform Module User Account Control Universal Serial Bus User State Migration Tool Windows Management Interface WiFi Protected Access Windows Server Update Services