Configure File and Print Services Flashcards

1
Q

What does the following command do?

Manage-bde: status

A

Provides information about all drives on the computer, whether or not they are BitLocker-protected.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does the following command do?

Manage-bde: on

A

Encrypts the drive and turns on BitLocker.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What does the following command do?

Manage-bde: off

A

Decrypts the drive and turns off BitLocker. All key protectors are removed when decryption is complete.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What does the following command do?

Manage-bde: pause

A

Pauses encryption or decryption.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What does the following command do?

Manage-bde: resume

A

Resumes encryption or decryption.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does the following command do?

Manage-bde: lock

A

Prevents access to BitLocker-protected data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What does the following command do?

Manage-bde: unlock

A

Allows access to BitLocker-protected data with a recovery password or a recovery key.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What does the following command do?

Manage-bde: autounlock

A

Manages automatic unlocking of data drives.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What does the following command do?

Manage-bde: protectors

A

Manages protection methods for the encryption key.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does the following command do?

Manage-bde: tpm

A

Configures the computer’s Trusted Platform Module (TPM). This command is not supported on computers running Windows 8 or win8_server_2. To manage the TPM on these computers, use either the TPM Management MMC snap-in or the TPM Management cmdlets for Windows PowerShell.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What does the following command do?

Manage-bde: setidentifier

A

Sets the drive identifier field on the drive to the value specified in the Provide the unique identifiers for your organization Group Policy setting.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does the following command do?

Manage-bde: ForceRecovery

A

Forces a BitLocker-protected drive into recovery mode on restart. This command deletes all TPM-related key protectors from the drive. When the computer restarts, only a recovery password or recovery key can be used to unlock the drive.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What does the following command do?

Manage-bde: changepassword

A

Modifies the password for a data drive.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does the following command do?

Manage-bde: changepin

A

Modifies the PIN for an operating system drive.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What does the following command do?

Manage-bde: changekey

A

Modifies the startup key for an operating system drive.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What does the following command do?

Manage-bde: KeyPackage

A

Generates a key package for a drive.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What does the following command do?

Manage-bde: upgrade

A

Upgrades the BitLocker version.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What does the following command do?

Manage-bde: WipeFreeSpace

A

Wipes the free space on a drive.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What does the following command do?

Manage-bde:-? or /?

A

Displays brief Help at the command prompt.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What does the following command do?

Manage-bde: -help or -h

A

Displays complete Help at the command prompt.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does the PowerShell CmdLet Do?

Add-BitLockerKeyProtector

A

Adds a key protector for a BitLocker volume.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What does the PowerShell CmdLet Do?

Backup-BitLockerKeyProtector

A

Saves a key protector for a BitLocker volume in AD DS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What does the PowerShell CmdLet Do?

Clear-BitLockerAutoUnlock

A

Removes BitLocker automatic unlocking keys.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What does the PowerShell CmdLet Do?

Disable-BitLocker

A

Disables BitLocker Drive Encryption for a volume.

Note: This removes all key protectors and beings decrypting the content of the volume

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What does the PowerShell CmdLet Do?

Disable-BitLockerAutoUnlock

A

Disables automatic unlocking for a BitLocker volume.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What does the PowerShell CmdLet Do?

Enable-BitLocker

A

Enables BitLocker Drive Encryption for a volume.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What does the PowerShell CmdLet Do?

Enable-BitLockerAutoUnlock

A

Enables automatic unlocking for a BitLocker volume.

Only supported on data volumes not the system drive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What does the PowerShell CmdLet Do?

Get-BitLockerVolume

A

Gets information about volumes that BitLocker can protect.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What does the PowerShell CmdLet Do?

Lock-BitLocker

A

Prevents access to encrypted data on a BitLocker volume.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What does the PowerShell CmdLet Do?

Remove-BitLockerKeyProtector

A

Removes a key protector for a BitLocker volume.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What does the PowerShell CmdLet Do?

Resume-BitLocker

A

Restores Bitlocker encryption for the specified volume.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What does the PowerShell CmdLet Do?

Suspend-BitLocker

A

Suspends Bitlocker encryption for the specified volume.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What does the PowerShell CmdLet Do?

Unlock-BitLocker

A

Restores access to data on a BitLocker volume.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

How would you change the TPM owner password (owner authorization) on a computer running Windows Server 2012 R2? The data and computer system are proctected by BitLocker.

Via PowerShell and GUI

A

PS: Set-TpmOwnerAuth

or

GUI: Use the TPM Management MMC snap-in to change the password

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

How would you completely decrypt a drive protected by BitLocker?

A

Run either:

PS: Disable-BitLocker

or CMD: Manage-bde -off

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

How do you enable Network Unlock via GPO?

A
  • WDS and Network Unlock must be installed
  • WDS must have the Bitlocker Network Unlock Certificate Installed
  • Configure the Group Policies
    • Allow network unlock at startup
    • BitLocker Drive Encryption Network Unlock Certificate - The certificate that you used for network unlock on WDS
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Can you only have one Certificate for the Group Policy BitLocker Drive Encryption Network Unlock Certificate?

A

No you can add many certificates

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What does the GPO Audit File Share do?

A

Auditing for attempts to access any Shared Folders

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What does the GPO Audit detailed File Share do?

A

Audits all attemps to access files or folders on a shared folder. It logs an event every time a file or folder is accessed. Detailed File Share audit events include detailed information about the permissions or other criteria used to grant or deny access.

Note: There are no system access control lists (SACLs) for shared folders. If this policy setting is enabled, access to all shared files and folders on the system is audited.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What does the GPO Audit File System Global Object Access do?

A

This policy setting allows you to monitor a specific user or group and the files they access.

Note: You must also enable the Audit File System setting under Advanced Audit Policy Configuration\System Audit Policies\Object Access.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What does the GPO Audit File System do?

A

This policy setting allows you to audit user attempts to access file system objects. A security audit event is generated only for objects that have system access control lists (SACL) specified, and only if the type of access requested, such as Write, Read, or Modify and the account making the request match the settings in the SACL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

DFS

What is the calculation used for determining how large your staging quota should be?

A
  • Hub and Spoke
    • IF Read/Write Members = 32 * (Average of 32 Largest files)
    • IF Spoke are Read-Only = 16 * (Average of 16 largest files)
      *
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What does Dfsdiag SyncNow do?

A

Forces replication between DFS servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What does the following PowerShell CmdLet Do?

Add-DfsrConnection

A

Creates a connection between members of a replication group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What does the following PowerShell CmdLet Do?

Add-DfsrMember

A

Adds computers to a replication group.

46
Q

What does the following PowerShell CmdLet Do?

ConvertFrom-DfsrGuid

A

Translates GUIDs to friendly names within a given replication group.

47
Q

What does the following PowerShell CmdLet Do?

Export-DfsrClone

A

Exports the cloned DFS Replication database and volume configuration settings.

48
Q

What does the following PowerShell CmdLet Do?

Get-DfsReplicatedFolder

A

Gets a replicated folder from a replication group.

49
Q

What does the following PowerShell CmdLet Do?

Get-DfsReplicationGroup

A

Retrieves a replication group.

50
Q

What does the following PowerShell CmdLet Do?

Get-DfsrBacklog

A

Retrieves the list of pending file updates between two DFS Replication partners.

51
Q

What does the following PowerShell CmdLet Do?

Get-DfsrCloneState

A

Gets the status of a database cloning operation.

52
Q

What does the following PowerShell CmdLet Do?

Get-DfsrConnection

A

Gets a connection between DFS Replication partners.

53
Q

What does the following PowerShell CmdLet Do?

Get-DfsrConnectionSchedule

A

Gets a connection schedule between members of a replication group.

54
Q

What does the following PowerShell CmdLet Do?

Get-DfsrFileHash

A

Gets a file hash.

55
Q

What does the following PowerShell CmdLet Do?

Get-DfsrGroupSchedule

A

Retrieves a replication group schedule.

56
Q

What does the following PowerShell CmdLet Do?

Get-DfsrIdRecord

A

Gets ID records for replicated files or folders from the DFS Replication database.

57
Q

What does the following PowerShell CmdLet Do?

Get-DfsrMember

A

Gets member computers in a replication group.

58
Q

What does the following PowerShell CmdLet Do?

Get-DfsrMembership

A

Gets membership settings for members of replication groups.

59
Q

What does the following PowerShell CmdLet Do?

Get-DfsrPreservedFiles

A

Gets a list of files and folders that DFS Replication previously preserved.

60
Q

What does the following PowerShell CmdLet Do?

Get-DfsrServiceConfiguration

A

Gets settings for the DFS Replication service on group members.

61
Q

What does the following PowerShell CmdLet Do?

Get-DfsrState

A

Gets the DFS Replication state for a member.

62
Q

What does the following PowerShell CmdLet Do?

Import-DfsrClone

A

Imports a cloned DFS Replication database and volume configuration settings.

63
Q

What does the following PowerShell CmdLet Do?

New-DfsReplicatedFolder

A

Creates a replicated folder in a replication group.

64
Q

What does the following PowerShell CmdLet Do?

New-DfsReplicationGroup

A

Creates a replication group.

65
Q

What does the following PowerShell CmdLet Do?

Remove-DfsReplicatedFolder

A

Removes a replicated folder from a replication group.

66
Q

What does the following PowerShell CmdLet Do?

Remove-DfsReplicationGroup

A

Removes a replication group.

67
Q

What does the following PowerShell CmdLet Do?

Remove-DfsrConnection

A

Removes a connection between members of a replication group.

68
Q

What does the following PowerShell CmdLet Do?

Remove-DfsrMember

A

Removes computers from a replication group.

69
Q

What does the following PowerShell CmdLet Do?

Remove-DfsrPropagationTestFile

A

Removes DFS Replication propagation test files.

70
Q

What does the following PowerShell CmdLet Do?

Reset-DfsrCloneState

A

Cancels a cloning operation.

71
Q

What does the following PowerShell CmdLet Do?

Restore-DfsrPreservedFiles

A

Restores files and folders that DFS Replication previously preserved.

72
Q

What does the following PowerShell CmdLet Do?

Set-DfsReplicatedFolder

A

Changes settings of a replicated folder.

73
Q

What does the following PowerShell CmdLet Do?

Set-DfsReplicationGroup

A

Modifies a replication group.

74
Q

What does the following PowerShell CmdLet Do?

Set-DfsrConnection

A

Changes the settings of a connection between members of a replication group.

75
Q

What does the following PowerShell CmdLet Do?

Set-DfsrConnectionSchedule

A

Changes the settings of a connection schedule between members of a replication group.

76
Q

What does the following PowerShell CmdLet Do?

Set-DfsrGroupSchedule

A

Modifies a replication group schedule.

77
Q

What does the following PowerShell CmdLet Do?

Set-DfsrMember

A

Modifies member computer information in a replication group.

78
Q

What does the following PowerShell CmdLet Do?

Set-DfsrMembership

A

Configures membership settings for replication group members.

79
Q

What does the following PowerShell CmdLet Do?

Set-DfsrServiceConfiguration

A

Modifies settings for the DFS Replication service.

80
Q

What does the following PowerShell CmdLet Do?

Start-DfsrPropagationTest

A

Creates a propagation test file in a replicated folder.

81
Q

What does the following PowerShell CmdLet Do?

Suspend-DfsReplicationGroup

A

Suspends replication between computers regardless of schedule.

82
Q

What does the following PowerShell CmdLet Do?

Sync-DfsReplicationGroup

A

Synchronizes replication between computers regardless of schedule.

83
Q

What does the following PowerShell CmdLet Do?

Update-DfsrConfigurationFromAD

A

Initiates an update of the DFS Replication service.

84
Q

What does the following PowerShell CmdLet Do?

Write-DfsrHealthReport

A

Generates a DFS Replication health report.

85
Q

What does the following PowerShell CmdLet Do?

Write-DfsrPropagationReport

A

Generates reports for propagation test files in a replication group.

86
Q

What does the following PowerShell CmdLet Do?

Get-DfsnAccess

A

Gets permissions for a DFS namespace folder.

87
Q

What does the following PowerShell CmdLet Do?

Get-DfsnFolder

A

Gets settings for a DFS namespace folder.

88
Q

What does the following PowerShell CmdLet Do?

Get-DfsnFolderTarget

A

Gets settings for targets of a DFS namespace folder.

89
Q

What does the following PowerShell CmdLet Do?

Get-DfsnRoot

A

Gets settings for DFS namespaces.

90
Q

What does the following PowerShell CmdLet Do?

Get-DfsnRootTarget

A

Gets settings for root targets of a DFS namespace.

91
Q

What does the following PowerShell CmdLet Do?

Get-DfsnServerConfiguration

A

Gets DFS namespace settings for a DFSN root server.

92
Q

What does the following PowerShell CmdLet Do?

Grant-DfsnAccess

A

Grants permissions to users and groups to access a DFS namespace folder.

93
Q

What does the following PowerShell CmdLet Do?

Move-DfsnFolder

A

Moves or renames a DFS namespace folder.

94
Q

What does the following PowerShell CmdLet Do?

New-DfsnFolder

A

Creates a folder in a DFS namespace.

95
Q

What does the following PowerShell CmdLet Do?

New-DfsnFolderTarget

A

Adds a target to a DFS namespace folder.

96
Q

What does the following PowerShell CmdLet Do?

New-DfsnRoot

A

Creates a DFS namespace.

97
Q

What does the following PowerShell CmdLet Do?

New-DfsnRootTarget

A

Adds a root target to a DFS namespace.

98
Q

What does the following PowerShell CmdLet Do?

Remove-DfsnAccess

A

Removes users and groups from the ACL for a folder in a DFS namespace.

99
Q

What does the following PowerShell CmdLet Do?

Remove-DfsnFolder

A

Removes a DFS namespace folder.

100
Q

What does the following PowerShell CmdLet Do?

Remove-DfsnFolderTarget

A

Removes a target for a DFS namespace folder.

101
Q

What does the following PowerShell CmdLet Do?

Remove-DfsnRoot

A

Removes a DFS namespace.

102
Q

What does the following PowerShell CmdLet Do?

Remove-DfsnRootTarget

A

Removes a target for a DFS namespace root.

103
Q

What does the following PowerShell CmdLet Do?

Revoke-DfsnAccess

A

Revokes permissions for users to access and enumerate the contents of a DFS namespace folder.

104
Q

What does the following PowerShell CmdLet Do?

Set-DfsnFolder

A

Changes settings for a DFS namespace folder.

105
Q

What does the following PowerShell CmdLet Do?

Set-DfsnFolderTarget

A

Changes settings for a target of a DFS namespace folder.

106
Q

What does the following PowerShell CmdLet Do?

Set-DfsnRoot

A

Changes settings for a DFS namespace.

107
Q

What does the following PowerShell CmdLet Do?

Set-DfsnRootTarget

A

Changes settings for a root target of a DFS namespace.

108
Q

What does the following PowerShell CmdLet Do?

Set-DfsnServerConfiguration

A

Changes settings for a DFS namespace root server.

109
Q

You have an Active File Screen set up to block all scripting files. You need to allow PowerShell Files to be saved only a sub folder “Scripts” in “C:\Applicaitons\Custom”. How would you accomplish this task?

A
  1. Create a File Screen exclusion for “C:\Applications\Custom\Scripts”.
  2. You will need to add *.ps1 to the include list
110
Q

If you need to install and update and ensure that the data on the system hard drive is secure. What should you do?

A

Use Suspend-Bitlocker

111
Q

You have EFS enabled for the Domain. You have been assigned the right of EFS Recovery Agent. There is a problem with an EFS File on a client computer. You need to remove encryption. When you try you get an error, what do you need to do?

A

Add your EFS Certificate to the Computer