The following 10 questions test your knowledge of Internet-based client management in Configuration Manager Configuration Manager 2007 Internet-Based Client Management Quiz

Question Is it true that not all Configuration Manager features are supported when clients are managed on the Internet? Configuration Manager 2007 Internet-Based Client Management Quiz

Question Is it true that not all Configuration Manager features are supported when clients are managed on the Internet? Configuration Manager 2007 Internet-Based Client Management Quiz Correct! Not all Configuration Manager 2007 features are appropriate for the Internet, so they are not supported when clients are managed on the Internet. The features that are not supported for Internet management typically rely on Active Directory Domain Services (which is not accessible from the Internet) or are not appropriate for a public network (such as network discovery and Wake On LAN). Features that are supported include software updates, software installation, collecting inventory and software metering data, and compliance information for desired configuration management. For More Information: Overview of Internet-Based Client Management

Question Is it true that not all Configuration Manager features are supported when clients are managed on the Internet? Configuration Manager 2007 Internet-Based Client Management Quiz Incorrect. Not all Configuration Manager 2007 features are appropriate for the Internet, so they are not supported when clients are managed on the Internet. The features that are not supported for Internet management typically rely on Active Directory Domain Services (which is not accessible from the Internet) or are not appropriate for a public network (such as network discovery and Wake On LAN). Features that are supported include software updates, software installation, collecting inventory and software metering data, and compliance information for desired configuration management. For More Information: Overview of Internet-Based Client Management

Do you have to choose between managing a Configuration Manager 2007 client computer on the Internet or on the intranet? Question Configuration Manager 2007 Internet-Based Client Management Quiz

Question Do you have to choose between managing a Configuration Manager 2007 client computer on the Internet or on the intranet? Configuration Manager 2007 Internet-Based Client Management Quiz Incorrect. A Configuration Manager client can be managed on both the Internet and on the intranet, which is ideal for laptop computers that connect to both types of networks. These computers detect which network they are on and change their behavior accordingly. However, you can install Configuration Manager 2007 clients for Internet-only client management if you are sure that you do not need to manage them on your intranet. For More Information: Overview of Internet-Based Client Management Example Scenarios for Implementing Internet-Based Client Management in Configuration Manager

Question Do you have to choose between managing a Configuration Manager 2007 client computer on the Internet or on the intranet? Configuration Manager 2007 Internet-Based Client Management Quiz Correct! A Configuration Manager client can be managed on both the Internet and on the intranet, which is ideal for laptop computers that connect to both types of networks. These computers detect which network they are on and change their behavior accordingly. However, you can install Configuration Manager 2007 clients for Internet-only client management if you are sure that you do not need to manage them on your intranet. For More Information: Overview of Internet-Based Client Management Example Scenarios for Implementing Internet-Based Client Management in Configuration Manager

Is it true that all site systems in Configuration Manager 2007 can support connections from the Internet? Question Configuration Manager 2007 Internet-Based Client Management Quiz

Question Is it true that all site systems in Configuration Manager 2007 can support connections from the Internet? Configuration Manager 2007 Internet-Based Client Management Quiz Incorrect. The management point, standard distribution point, software update point, and fallback status point support connections from the Internet. Only these site systems are used for the features that are supported over the Internet. For More Information: Site System Roles that Support Internet-Based Client Management

Question Is it true that all site systems in Configuration Manager 2007 can support connections from the Internet? Configuration Manager 2007 Internet-Based Client Management Quiz Correct! The management point, standard distribution point, software update point, and fallback status point support connections from the Internet. Only these site systems are used for the features that are supported over the Internet. For More Information: Site System Roles that Support Internet-Based Client Management

Do you have to configure the Internet-based site systems in Configuration Manager with an Internet fully qualified domain name (FQDN)? Question Configuration Manager 2007 Internet-Based Client Management Quiz

Question Do you have to configure the Internet-based site systems in Configuration Manager with an Internet fully qualified domain name (FQDN)? Configuration Manager 2007 Internet-Based Client Management Quiz Correct! When Internet-based, the management point, distribution points, software update point, and fallback status point must all be configured with an Internet FQDN, and they must be configured to accept client connections over the Internet. For More Information: Prerequisites for Internet-Based Client Management

Question Do you have to configure the Internet-based site systems in Configuration Manager with an Internet fully qualified domain name (FQDN)? Configuration Manager 2007 Internet-Based Client Management Quiz Incorrect. When Internet-based, the management point, distribution points, software update point, and fallback status point must all be configured with an Internet FQDN, and they must be configured to accept client connections over the Internet. For More Information: Prerequisites for Internet-Based Client Management

Is it a requirement of Internet-based client management in Configuration Manager that the Internet-based site systems are located in a perimeter network? Question Configuration Manager 2007 Internet-Based Client Management Quiz

Question Is it a requirement of Internet-based client management in Configuration Manager that the Internet-based site systems are located in a perimeter network? Configuration Manager 2007 Internet-Based Client Management Quiz Incorrect. Internet-based client management supports a number of network scenarios that include all site systems located in the perimeter network, some site systems located in a perimeter network, and some site systems located in the intranet, and all site systems located in the intranet. For More Information: Supported Scenarios for Internet-Based Client Management

Question Is it a requirement of Internet-based client management in Configuration Manager that the Internet-based site systems are located in a perimeter network? Configuration Manager 2007 Internet-Based Client Management Quiz Correct! Internet-based client management supports a number of network scenarios that include all site systems located in the perimeter network, some site systems located in a perimeter network, and some site systems located in the intranet, and all site systems located in the intranet. For More Information: Supported Scenarios for Internet-Based Client Management

Can implementing Internet-based client management result in clients connecting to two different management points in a site? Question Configuration Manager 2007 Internet-Based Client Management Quiz

Question Can implementing Internet-based client management result in clients connecting to two different management points in a site? Configuration Manager 2007 Internet-Based Client Management Quiz Correct! When the site supports both Internet client and intranet clients, you can deploy one management point for Internet clients that can be located in the perimeter network and a default management point for intranet clients that can be located in the intranet. This offers additional security for the intranet management point because it does not accept direct connections from the Internet. For More Information: Supported Scenarios for Internet-Based Client Management

Question Can implementing Internet-based client management result in clients connecting to two different management points in a site? Configuration Manager 2007 Internet-Based Client Management Quiz Incorrect. When the site supports both Internet client and intranet clients, you can deploy one management point for Internet clients that can be located in the perimeter network and a default management point for intranet clients that can be located in the intranet. This offers additional security for the intranet management point because it does not accept direct connections from the Internet. For More Information: Supported Scenarios for Internet-Based Client Management

Can the implementation of SSL to HTTP bridging on a proxy Web server that publishes your Internet-based site systems eliminate the requirement for PKI certificates on the Internet-based site systems? Question Configuration Manager 2007 Internet-Based Client Management Quiz

Question Can the implementation of SSL to HTTP bridging on a proxy Web server that publishes your Internet-based site systems eliminate the requirement for PKI certificates on the Internet-based site systems? Configuration Manager 2007 Internet-Based Client Management Quiz Incorrect. Internet-based site systems (with the exception of the Internet-based fallback status point) require connections over SSL, and therefore always require PKI certificates. If you are using a proxy Web server to publish the Internet-based site systems, you can configure the proxy Web server for SSL to SSL bridging or SSL tunneling. SSL to SSL bridging is recommended, but you can also use SSL tunneling if your proxy Web server cannot support bridging. For More Information: Determine Requirements for Proxy Web Servers to Use With Internet-Based Client Management Certificate Requirements for Native Mode

Question Can the implementation of SSL to HTTP bridging on a proxy Web server that publishes your Internet-based site systems eliminate the requirement for PKI certificates on the Internet-based site systems? Configuration Manager 2007 Internet-Based Client Management Quiz Correct! Internet-based site systems (with the exception of the Internet- based fallback status point) require connections over SSL, and therefore always require PKI certificates. If you are using a proxy Web server to publish the Internet-based site systems, you can configure the proxy Web server for SSL to SSL bridging or SSL tunneling. SSL to SSL bridging is recommended, but you can also use SSL tunneling if your proxy Web server cannot support bridging. For More Information: Determine Requirements for Proxy Web Servers to Use With Internet-Based Client Management Certificate Requirements for Native Mode

Is HTTPS the only port configuration you might require on external firewalls for Internet-based client management traffic? Question Configuration Manager 2007 Internet-Based Client Management Quiz

Question Is HTTPS the only port configuration you might require on external firewalls for Internet-based client management traffic? Configuration Manager 2007 Internet-Based Client Management Quiz Incorrect. Most of the Internet-based client management traffic uses HTTPS, so external firewalls must be configured to allow HTTPS traffic from the Internet. However, if you are using an Internet-based fallback status point, which only accepts connections over HTTP, the external firewall must also be configured for HTTP. For More Information: Determine the Ports Required for Internet-Based Client Management Determine If You Should Install a Fallback Status Point for Configuration Manager Clients

Question Is HTTPS the only port configuration you might require on external firewalls for Internet-based client management traffic? Configuration Manager 2007 Internet-Based Client Management Quiz Correct! Most of the Internet-based client management traffic uses HTTPS, so external firewalls must be configured to allow HTTPS traffic from the Internet. However, if you are using an Internet-based fallback status point, which only accepts connections over HTTP, the external firewall must also be configured for HTTP. For More Information: Determine the Ports Required for Internet-Based Client Management Determine If You Should Install a Fallback Status Point for Configuration Manager Clients

Is it a requirement to use a SQL Server replica with Internet-based client management? Question Configuration Manager 2007 Internet-Based Client Management Quiz

Question Is it a requirement to use a SQL Server replica with Internet-based client management? Configuration Manager 2007 Internet-Based Client Management Quiz Incorrect. Configuring a SQL Server replica is optional but recommended if the Internet-based site systems are in a different forest than your site server and you want the additional security of the SQL Server connection to be initiated from the intranet rather than from the perimeter network. For More Information: Determine Server Placement for Internet-Based Client Management How to Configure SQL Server Site Database Replication

Question Is it a requirement to use a SQL Server replica with Internet-based client management? Configuration Manager 2007 Internet-Based Client Management Quiz Correct! Configuring a SQL Server replica is optional but recommended if the Internet-based site systems are in a different forest than your site server and you want the additional security of the SQL Server connection to be initiated from the intranet rather than from the perimeter network. For More Information: Determine Server Placement for Internet-Based Client Management How to Configure SQL Server Site Database Replication

Is it a requirement of Internet-based client management that the fully qualified domain names (FQDN) of site systems that will support clients over the Internet must be registered on public DNS servers? Question Configuration Manager 2007 Internet-Based Client Management Quiz

Question Is it a requirement of Internet-based client management that the fully qualified domain names (FQDN) of site systems that will support clients over the Internet must be registered on public DNS servers? Configuration Manager 2007 Internet-Based Client Management Quiz Correct! The Internet FQDNs of site systems that support Internet- based client management must be registered as host entries on public DNS servers. For More Information: Prerequisites for Internet-Based Client Management Configuring DNS for Configuration Manager Site System Roles

Question Is it a requirement of Internet-based client management that the fully qualified domain names (FQDN) of site systems that will support clients over the Internet must be registered on public DNS servers? Configuration Manager 2007 Internet-Based Client Management Quiz Incorrect. The Internet FQDNs of site systems that support Internet- based client management must be registered as host entries on public DNS servers. For More Information: Prerequisites for Internet-Based Client Management Configuring DNS for Configuration Manager Site System Roles

Where to go next: For an overview of how Internet-based client management works, and related concepts, see the following resources: Overview of Internet-Based Client Management To help you plan the deployment of Internet-based client management in Configuration Manager: Planning for Internet-Based Client Management To help you configure the deployment of Internet-based client management in Configuration Manager: Configuring Internet-Based Client Management Administrator Checklist: Configuring a Site for Internet-Based Client Management Configuration Manager 2007 Internet-Based Client Management Quiz

The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information presented after the date of publication. This white paper is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS DOCUMENT. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property. © 2007 Microsoft Corporation. All rights reserved. Microsoft, BackOffice, Windows, and Windows NT are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Other product and company names mentioned herein may be the trademarks of their respective owners. Microsoft Corporation One Microsoft Way Redmond, WA USA 1/04 Copyright Configuration Manager 2007 Internet-Based Client Management Quiz