70-296 updated on 8th April 2008

hi friends,
make sure u have the latestdumps before exams

Do help your buddies who are going to take exams
and let us know about ur success at
“? I passed this Exam? ” board

70-296
http://www.badongo.com/file/873807

VISUAL CERT EXAM SUITE & PATCH?
http://www.badongo.com/file/8737273

U NEED VISUAL CERT EXAM SUITE TO OPEN .VCD files

ALL D BEST

QUESTION 1
You work as the network administrator at Certkiller .com. The Certkiller .com
network consists of a single Active Directory domain named Certkiller .com. All
servers on the Certkiller .com network run Windows Server 2003 and all client
computers run Windows XP Professional.
Certkiller .com consists of a Marketing department. Certkiller .com has its
headquarters in Chicago and a branch office in Dallas and Miami. In each of the
offices there is an OU where the computer accounts are kept:
1. The Chicago office computer accounts are located in an OU named ChicagoOU.
2. The Dallas office computer accounts are located in an OU named DallasOU.
3. The Miami office computer accounts are located in an OU named MiamiOU.
Certkiller .com also contains a domain controller named Certkiller -DC02 that is
located in a default container. In each office there is an OU for the servers named
Server OU as illustrated in the Exhibit:
Exhibit:

Actualtests.org – The Power of Knowing
You need to ensure that the client computers of the three offices have the latest
patches and hotfixes.
What should you do?
A. Create a domain-base policy that specifies the client computers to use the Automatic
Update features and the servers to use the Software Update Services.
B. Create a Group Policy object on one of the OUs that contain the client computers.
Then configure the computers to use the Automatic Update features to download and
install Windows updates.
Link this GPO to the other two OUs that contains the other client computers.
C. Create a domain-base Group Policy object that configures the computers to use the
Automatic Update features to download and install Windows updates.
Deny apply Group Policy to the domain controllers and Servers OUs.
D. Configure each of the client computers to use the Automatic Update features to
download and install Windows updates.
Answer: B
Explanation: If the Automatic Update is enabled, the computer will automatically
connect to the Windows Update site and download any security updates. You should
create a GPO and configure the computers to download and to use the Automatic
Update feature.
Incorrect answers:
A: You only have permission at the OU level as stated in the scenario. That way you
cannot create a domain-based GPO.
C: You only have permission at the OU level as stated in the scenario. That way you
cannot create a domain-based GPO.
D: You can do it this way, but it will be time consuming.
QUESTION 2
You work as the network administrator at Certkiller .com. The Certkiller .com
network consists of a single Active Directory domain named Certkiller .com. All
servers on the Certkiller .com network run Windows Server 2003 and all client

Actualtests.org – The Power of Knowing
computers run Windows XP Professional.
Certkiller .com consists of a Research department. Certkiller .com contains a few
servers that are used for downloading updates and patches. You have received
instruction from the CIO to ensure that the servers are kept up to date with the
latest service packs and hotfixes. You need to specify the servers to automatically
receive updates and the client computers in the Research department to receive the
updates on a regular basis.
What tool should you use?
A. Use the Auto update.
B. Use the Dynamic Update.
C. Use the Software Update Services.
D. Use the Intellimirror.
Answer: C
Explanation The Software Update Services synchronize updates with the Windows
Update Web site. The updates are also tested in the Quality Assurance before it is
installed to the servers.
Incorrect answers:
A: You can use the Auto update, but it will not be tested.
B: Dynamic Update is used for emergency fixes to address setup problems. It is also used
to provide update drivers.
D: The Intellimirror manages information, settings and software. If is not used to manage
the updates through service packs and hotfixes.
QUESTION 3
You work as the network administrator at Certkiller .com. The Certkiller .com
network consists of a single Active Directory domain named Certkiller .com. All
servers on the Certkiller .com network run Windows Server 2003 and all client
computers run Windows XP Professional. The domain operates at a Windows
Server 2003 functional level. The Certkiller .com head quarters are located in Chicago
and the branch offices are located in Dallas, Miami, and Los Angeles. Each office is
configured as a site and is connected to the Chicago office via a T1 connection. The
sites are interconnected by means of 256-Kbps leased lines.
Your duties include the deployment of patches and hotfixes for the Certkiller .com
network. You are currently planning the patch deployment to the clients in the
branch offices. The plan is to make use of the main Software Update Service (SUS)
server in the Chicago office to deploy the updates to the secondary SUS servers that
are located in the branch offices. All standard updates are to be deployed across all
sites while minimizing the bandwidth usage to do so.
To this end you download and approve a number of updates in the main SUS server
in the Chicago office. Then you synchronize the main SUS server to the secondary
SUS servers that are located in the branch offices. However, later when you attempt
to connect to the Miami site and approve only selected updates, you find that you
are unable to do so. On the Approve Updates page, you notice that the Approve

Actualtests.org – The Power of Knowing
button is disabled. Thus you are unable to approve updates on any of the secondary
SUS servers.
What should you do?
A. Modify the secondary SUS servers’ configuration to download and approve updates
from the official Microsoft Windows Update Web site in their respective sites.
B. Do not modify the secondary SUS server configuration.
Deploy all main SUS server approved updates to the secondary SUS servers.
C. Manually copy the selected updates to the secondary SUS servers from the Main SUS
server in the Chicago office.
D. Configure the secondary SUS servers with a new aproveditems.txt file.
Answer: B
Explanation: All updates should be deployed from the main SUS server. All approved
items on the secondary SUS servers will be identical to those on the main SUS server.
You cannot make changes to the approved items; it can only be accepted by the
secondary SUS servers. Both the main and secondary SUS servers will keep the same set
of approved items. When the secondary SUS servers accept the approved items, the
Approve button will become disabled on the Approved Updates page on the secondary
SUS server. Thus you do not need to modify the secondary SUS server configuration.
Incorrect answers:
A: According to the scenario in the question, you must deploy the standard set of updates
across all branch offices. If the SUS servers across the offices are configured to download
directly from the official Microsoft Updates Web site, then there would not be any
consistency in update deployment across all sites.
C: You cannot manually copy the selected updates from the main SUS server to the
secondary US servers.
D: The approveditems.txt file represents the list of administrator-approved update files,
the secondary SUS servers should not be configured with a new approveditems.txt file
because this file should be the same for all the SUS servers.