the following 10 questions test your knowledge of internet-based client management in configuration...

The following 10 questions test your knowledge of Internet-based client management in Configuration Manager 2007.

Configuration Manager 2007 Internet-Based Client Management QuizConfiguration Manager 2007 Internet-Based Client Management Quiz

Question 1 2 3 4 5 6 7 8 9 10

Is it true that not all Configuration Manager features are supported when clients are managed on the Internet?


Question 1 2 3 4 5 6 7 8 9 10



Correct! Not all Configuration Manager 2007 features are appropriate for the Internet, so they are not supported when clients are managed on the Internet. The features that are not supported for Internet management typically rely on Active Directory Domain Services (which is not accessible from the Internet) or are not appropriate for a public network (such as network discovery and Wake On LAN).Features that are supported include software updates, software installation, collecting inventory and software metering data, and compliance information for desired configuration management.

For More Information:Overview of Internet-Based Client Management

http://go.microsoft.com/fwlink/?LinkId=103545

Question 1 2 3 4 5 6 7 8 9 10



Incorrect. Not all Configuration Manager 2007 features are appropriate for the Internet, so they are not supported when clients are managed on the Internet. The features that are not supported for Internet management typically rely on Active Directory Domain Services (which is not accessible from the Internet) or are not appropriate for a public network (such as network discovery and Wake On LAN).Features that are supported include software updates, software installation, collecting inventory and software metering data, and compliance information for desired configuration management.



Do you have to choose between managing a Configuration Manager 2007 client computer on the Internet or on the intranet?

Question 1 2 3 4 5 6 7 8 9 10


Question 1 2 3 4 5 6 7 8 9 10



Incorrect. A Configuration Manager client can be managed on both the Internet and on the intranet, which is ideal for laptop computers that connect to both types of networks. These computers detect which network they are on and change their behavior accordingly. However, you can install Configuration Manager 2007 clients for Internet-only client management if you are sure that you do not need to manage them on your intranet.


Example Scenarios for Implementing Internet-Based Client Management in Configuration Manager




Question 1 2 3 4 5 6 7 8 9 10



Correct! A Configuration Manager client can be managed on both the Internet and on the intranet, which is ideal for laptop computers that connect to both types of networks. These computers detect which network they are on and change their behavior accordingly. However, you can install Configuration Manager 2007 clients for Internet-only client management if you are sure that you do not need to manage them on your intranet.


Example Scenarios for Implementing Internet-Based Client Management in Configuration Manager




Is it true that all site systems in Configuration Manager 2007 can support connections from the Internet?

Question 1 2 3 4 5 6 7 8 9 10


Question 1 2 3 4 5 6 7 8 9 10



Incorrect. The management point, standard distribution point, software update point, and fallback status point support connections from the Internet. Only these site systems are used for the features that are supported over the Internet.

For More Information:Site System Roles that Support Internet-Based Client Management


Question 1 2 3 4 5 6 7 8 9 10



Correct! The management point, standard distribution point, software update point, and fallback status point support connections from the Internet. Only these site systems are used for the features that are supported over the Internet.

For More Information:Site System Roles that Support Internet-Based Client Management


Do you have to configure the Internet-based site systems in Configuration Manager with an Internet fully qualified domain name (FQDN)?

Question 1 2 3 4 5 6 7 8 9 10


Question 1 2 3 4 5 6 7 8 9 10



Correct! When Internet-based, the management point, distribution points, software update point, and fallback status point must all be configured with an Internet FQDN, and they must be configured to accept client connections over the Internet.

For More Information:Prerequisites for Internet-Based Client Management


Question 1 2 3 4 5 6 7 8 9 10



Incorrect. When Internet-based, the management point, distribution points, software update point, and fallback status point must all be configured with an Internet FQDN, and they must be configured to accept client connections over the Internet.



Is it a requirement of Internet-based client management in Configuration Manager that the Internet-based site systems are located in a perimeter network?

Question 1 2 3 4 5 6 7 8 9 10


Question 1 2 3 4 5 6 7 8 9 10



Incorrect. Internet-based client management supports a number of network scenarios that include all site systems located in the perimeter network, some site systems located in a perimeter network, and some site systems located in the intranet, and all site systems located in the intranet.

For More Information:Supported Scenarios for Internet-Based Client Management


Question 1 2 3 4 5 6 7 8 9 10



Correct! Internet-based client management supports a number of network scenarios that include all site systems located in the perimeter network, some site systems located in a perimeter network, and some site systems located in the intranet, and all site systems located in the intranet.



Can implementing Internet-based client management result in clients connecting to two different management points in a site?

Question 1 2 3 4 5 6 7 8 9 10


Question 1 2 3 4 5 6 7 8 9 10



Correct! When the site supports both Internet client and intranet clients, you can deploy one management point for Internet clients that can be located in the perimeter network and a default management point for intranet clients that can be located in the intranet. This offers additional security for the intranet management point because it does not accept direct connections from the Internet.



Question 1 2 3 4 5 6 7 8 9 10



Incorrect. When the site supports both Internet client and intranet clients, you can deploy one management point for Internet clients that can be located in the perimeter network and a default management point for intranet clients that can be located in the intranet. This offers additional security for the intranet management point because it does not accept direct connections from the Internet.



Can the implementation of SSL to HTTP bridging on a proxy Web server that publishes your Internet-based site systems eliminate the requirement for PKI certificates on the Internet-based site systems?

Question 1 2 3 4 5 6 7 8 9 10


Question 1 2 3 4 5 6 7 8 9 10



Incorrect. Internet-based site systems (with the exception of the Internet-based fallback status point) require connections over SSL, and therefore always require PKI certificates. If you are using a proxy Web server to publish the Internet-based site systems, you can configure the proxy Web server for SSL to SSL bridging or SSL tunneling. SSL to SSL bridging is recommended, but you can also use SSL tunneling if your proxy Web server cannot support bridging.

For More Information:Determine Requirements for Proxy Web Servers to Use With Internet-Based Client Management

Certificate Requirements for Native Mode




Question 1 2 3 4 5 6 7 8 9 10



Correct! Internet-based site systems (with the exception of the Internet-based fallback status point) require connections over SSL, and therefore always require PKI certificates. If you are using a proxy Web server to publish the Internet-based site systems, you can configure the proxy Web server for SSL to SSL bridging or SSL tunneling. SSL to SSL bridging is recommended, but you can also use SSL tunneling if your proxy Web server cannot support bridging.

For More Information:Determine Requirements for Proxy Web Servers to Use With Internet-Based Client Management

Certificate Requirements for Native Mode




Is HTTPS the only port configuration you might require on external firewalls for Internet-based client management traffic?

Question 1 2 3 4 5 6 7 8 9 10


Question 1 2 3 4 5 6 7 8 9 10



Incorrect. Most of the Internet-based client management traffic uses HTTPS, so external firewalls must be configured to allow HTTPS traffic from the Internet. However, if you are using an Internet-based fallback status point, which only accepts connections over HTTP, the external firewall must also be configured for HTTP.

For More Information:Determine the Ports Required for Internet-Based Client Management

Determine If You Should Install a Fallback Status Point for Configuration Manager Clients




Question 1 2 3 4 5 6 7 8 9 10



Correct! Most of the Internet-based client management traffic uses HTTPS, so external firewalls must be configured to allow HTTPS traffic from the Internet. However, if you are using an Internet-based fallback status point, which only accepts connections over HTTP, the external firewall must also be configured for HTTP.

For More Information:Determine the Ports Required for Internet-Based Client Management

Determine If You Should Install a Fallback Status Point for Configuration Manager Clients




Is it a requirement to use a SQL Server replica with Internet-based client management?

Question 1 2 3 4 5 6 7 8 9 10


Question 1 2 3 4 5 6 7 8 9 10



Incorrect. Configuring a SQL Server replica is optional but recommended if the Internet-based site systems are in a different forest than your site server and you want the additional security of the SQL Server connection to be initiated from the intranet rather than from the perimeter network.

For More Information:Determine Server Placement for Internet-Based Client Management

How to Configure SQL Server Site Database Replication



Question 1 2 3 4 5 6 7 8 9 10



Correct! Configuring a SQL Server replica is optional but recommended if the Internet-based site systems are in a different forest than your site server and you want the additional security of the SQL Server connection to be initiated from the intranet rather than from the perimeter network.

For More Information:Determine Server Placement for Internet-Based Client Management

How to Configure SQL Server Site Database Replication



Is it a requirement of Internet-based client management that the fully qualified domain names (FQDN) of site systems that will support clients over the Internet must be registered on public DNS servers?

Question 1 2 3 4 5 6 7 8 9 10


Question 1 2 3 4 5 6 7 8 9 10



Correct! The Internet FQDNs of site systems that support Internet-based client management must be registered as host entries on public DNS servers.


Configuring DNS for Configuration Manager Site System Roles



Question 1 2 3 4 5 6 7 8 9 10



Incorrect. The Internet FQDNs of site systems that support Internet-based client management must be registered as host entries on public DNS servers.


Configuring DNS for Configuration Manager Site System Roles



Where to go next:

For an overview of how Internet-based client management works, and related concepts, see the following resources:

Overview of Internet-Based Client Management

To help you plan the deployment of Internet-based client management in Configuration Manager:

Planning for Internet-Based Client Management

To help you configure the deployment of Internet-based client management in Configuration Manager:

Configuring Internet-Based Client Management

Administrator Checklist: Configuring a Site for Internet-Based Client Management


The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information presented after the date of publication.This white paper is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS DOCUMENT.Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation.Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property. © 2007 Microsoft Corporation. All rights reserved. Microsoft, BackOffice, Windows, and Windows NT are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.Other product and company names mentioned herein may be the trademarks of their respective owners.Microsoft Corporation • One Microsoft Way • Redmond, WA 98052-6399 • USA1/04

Copyright


the following 10 questions test your knowledge of internet-based client management in configuration...

Documents