nerdexam
Microsoft

70-243 · Question #103

Your company uses System Center 2012 Configuration Manager to monitor compliance. The company has a configuration baseline for each server that has the Web Server (IIS) server rote installed. A new…

The correct answer is A. Add a new configuration item that has a registry value setting type to the configuration baseline. Introduction to Compliance Settings in Configuration Manager Compliance settings in System Center 2012 Configuration Manager provides a unified interface and user experience that lets you manage the configuration and compliance of servers, laptops, desktop computers, and mobile…

Implementing Compliance Settings and Endpoint Protection

Question

Your company uses System Center 2012 Configuration Manager to monitor compliance. The company has a configuration baseline for each server that has the Web Server (IIS) server rote installed. A new corporate policy specifies that the maximum TCP window size for all of the Web servers must be 131,072 bytes. You discover that the TCP window size is set in the following registry entry:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HTTP\Parameters\ MaxBytesPerSecond You need to generate an error message for all of the Web servers that do NOT comply with the corporate policy. What should you do?

Options

  • AAdd a new configuration item that has a registry value setting type to the configuration baseline.
  • BCreate a query-based collection that contains all of the Web servers, and then initiate an inventory
  • CCreate a query that returns a list of all the Web servers, and then search the query results for the
  • DAdd a new configuration item that has an Internet Information Services (IIS) metabase setting type

How the community answered

(30 responses)
  • A
    80% (24)
  • B
    3% (1)
  • C
    13% (4)
  • D
    3% (1)

Explanation

Introduction to Compliance Settings in Configuration Manager Compliance settings in System Center 2012 Configuration Manager provides a unified interface and user experience that lets you manage the configuration and compliance of servers, laptops, desktop computers, and mobile devices in your organization. Compliance settings contains tools to help you assess the compliance of users and client devices for many configurations, such as whether the correct Windows operating system versions are installed and configured appropriately, whether all required applications are installed and configured correctly, whether optional applications are configured appropriately, and whether prohibited applications are installed. Additionally, you can check for compliance with software updates, security settings, and mobile devices. Configuration item settings of the type Windows Management Instrumentation (WMI), registry, script, and all mobile device settings in Configuration Manager let you automatically remediate noncompliant settings when they are found. Compliance is evaluated by defining a configuration baseline that contains the configuration items that you want to evaluate and settings and rules that describe the level of compliance you must have. You can import this configuration data from the web in Microsoft System Center Configuration Manager Configuration Packs as best practices that are defined by Microsoft and other vendors, in Configuration Manager, and that you then import into Configuration Manager. Or, an administrative user can create new configuration items and configuration baselines. How to Create Windows Configuration Items for Compliance Settings in Configuration Manager Create configuration items in System Center 2012 Configuration Manager to define configurations that you want to manage and assess for compliance on devices. There are different types of configuration items: Application configuration item Used to determine compliance for an application. This can include whether the application is installed and details about its configuration. Operating system configuration item Used to determine compliance for settings that relate to the operating system and its Software updates configuration item Automatically created when you download software updates with Configuration Manager. You do not create or see these configuration items in the Compliance Settings node, but you can select them when you define configuration baselines. General configuration item Used to determine compliance for mobile devices. Steps to Create a New Configuration Item for Client Computers Use the following required steps to create a configuration item by using the Create Configuration Step 1: Start the Create Configuration Item Wizard. Step 2: Provide general information about the configuration item. Step 3: Provide detection method information for the configuration item. Step 4: Configure settings for the configuration item. Step 5: Configure compliance rules for the configuration item. Step 6: Specify supported platforms for the configuration item. Step 7: Complete the wizard.

Topics

#configuration item#registry value#compliance baseline#TCP window size

Community Discussion

No community discussion yet for this question.

Full 70-243 Practice