Microsoft TS Forefront Protection for Endpoints and Applications, Configuring

Your company network includes Microsoft Exchange Server 2007 and Forefront Protection for Exchange
(FPE) 2010 in a Windows Server 2008 environment. You use the FPE console to monitor all antivirus and
antimalware engines. You detect that a spam attack has occurred. You analyze the following messages:
You need to create a filter that will prevent the occurrence of this type of email in the future.
Which type of filter should you use?

Your company network includes Microsoft Exchange Server 2007 and Forefront Protection for Exchange
Server (FPE) 2010 in a Windows Server 2008 environment. You use the FPE console to monitor all antivirus and antimalware (anti-malicious software) engines. You detect that a spam attack has occurred.
You need to create a filter that identifies words repeated in the body of email messages.
Which type of filter should you use?

Your network environment includes Microsoft Exchange Server 2010. You detect that a spam attack has occurred. You need to prevent further spread of messages based on IP addresses repeated in email headers. Which type of filter should you use?

Your company network is configured according to the following table. All Exchange servers run Forefront Protection for Exchange Server (FPE). You need to ensure that all emails are scanned for viruses even if they have been scanned by another instance of FPE . What should you do? (Choose all that apply.)

Your network environment uses Microsoft Exchange Server 2010 and Forefront Protection for Exchange Server (FPE) 2010. "First Test, First Pass" - www.lead2pass.com 5 Microsoft 70-162 Exam The Edge Transport role is installed on a separate server named EdgeServer1. You want to install an additional Edge Transport server named EdgeServer2. You need to use the existing FPE configuration settings of EdgeServer1 on EdgeServer2. Which command or commands should you use? (Choose all that apply.)

Your network environment has a single System Center Configuration Manager (SCCM) site. All computers in the network run Forefront Endpoint Protection (FEP) 2010. SCCM collects configuration baseline
statistics for the FEP High-Security Desktop baseline once a week.
You want to update the baseline statistics in the FEP dashboard once a day.
You need to configure SCCM to collect the baseline statistics every day.
What should you do?

Your network environment has servers that have System Center Configuration Manager (SCCM) 2007, System Center Operations Manager (SCOM), and Forefront Endpoint Protection (FEP) 2010 installed. You discover that five computers have outdated definition files. You need to use SCOM to force definition updates on the computers. What should you do? (Each correct answer presents part of the solution. Choose all that apply.)

Your network environment has Active Directory Domain Services and Forefront Endpoint Protection (FEP) 2010. You plan to add a new client computer to the network. You need to install the following components
to the client computer before joining the computer to the network:
FEP 2010 client software
A FEP policy named FEP_newpolicy.xml
What should you do?

You use System Center Configuration Manager (SCCM) 2007 to deploy the Forefront Endpoint Protection (FEP) 2010 client on a collection of Windows 7 computers that are used in branch offices. Users at the
branch offices have local administrator rights.
You need to ensure that if the FEP client is uninstalled, the amount of time that the computer runs without
FEP protection is reduced.
What should you do?

You install the Forefront Endpoint Protection (FEP) 2010 client on a Windows Server 2008 computer. After the installation, FEP fails to start and you receive an unknown error.
You need to find out the cause of the installation error.
What should you do?