SCCM Interview Questions and Answers

1.  What is Standalone primary site?

Ans: Use a standalone primary site when it can support management of all devices and users. This topology is also successful when your company's geographic locations can be served by a single primary site. It simplified administrative overhead, simplified client site assignment and discovery of available resources and service

2.  What is CAS?

Ans: A Central Site is a Configuration Manager Primary Site that resides at the top of the Configuration Manager hierarchy. All Database information rolls from the child to the parent and is collected by the Central Site’s Configuration Manager Database. The Central Site can administer any site below it in the hierarchy and can send data down to those sites as well.

3.  What is Primary Site?

Ans:  The primary site is main site to manage clients directly in a well-defined network. Primary sites are responsible for processing all client data from their assigned clients. A primary site can be a standalone primary site or a child primary site below a central administration site in a larger hierarchy. Both child primary sites and standalone primary sites support secondary sites. 

4.  What is Secondary Site?

Ans:  Secondary site is a child site of primary site which extends the reach of a primary site to manage the transfer of deployment content and client data that have a slow network connection to the primary site. It can only be installed as a child site below a primary site. You can manage a secondary site from a central administration site or the secondary site's direct parent primary site.

5. What is the purpose to create CAS?

Ans:  Create a Central administration site (CAS) when you require more than one primary site to support management of all your devices and users. It is used to configure hierarchy-wide settings and to monitor all sites and objects in the hierarchy. It coordinates site-to-site data replication, which includes the configuration of sites and clients throughout the hierarchy.

6. Can you add Secondary site as child site to CAS?

Ans:  No, the central administration site supports only primary sites as child sites.

7. Which factors consider hierarchy topology whether to create standalone site or CAS for organization?

Ans: Number of devices to manage, company's geographic locations and network infrastructure. 

  • Use a standalone primary site when it can support management of all devices and users and company's geographic locations can be served by a single primary site.
  • Use CAS when you require more than one primary site to support management of all your devices and users.

8. Is it possible to expand a standalone primary site into a larger hierarchy with a central administration site?

Ans: Yes, you can expand a standalone primary site into a larger hierarchy with a central administration site. This option enables you to then install new primary sites to expand the scale of your deployment.

9.  Can you assign clients to a secondary site?

Ans:  No, client can only have assigned to the primary parent of the secondary site. However, Configuration Manager knows how to manage clients at the child secondary site. If there is a distribution point at the secondary site that has the content the clients need, the clients will probably get the content from the local distribution point instead of crossing the WAN link to the primary site.

10.  What are site server, site system and Site system roles?

Ans:

  • Site server: The site server is the computer on which you install Configuration manager and it hosts services required for Configuration Manager
  • Site System: A site system is any computer running a supported version of Microsoft Windows or a shared folder that hosts one or more site system roles.
  • Site System Role: A site system role is a function required to be able to use Configuration Manager or to use a feature of Configuration Manager.

11.  What are the Site system roles?

Ans: Asset Intelligence synchronization point, Certificate registration point, Cloud management gateway connection point, Data warehouse service point, Distribution point, Endpoint Protection point, Enrollment point, Enrollment proxy point, Exchange Server connector, Fallback status point, Management point, Reporting services point, Service connection point, Software update point and State migration point.

Note: both Application catalog web service point and Application catalog website point roles are depreciated. Starting in version 1906, updated clients automatically use the management point for user-available application deployments. You also can't install new application catalog roles. Support ends for these 2 roles with version 1910.

12.  Can we install Distribution Point role on CAS server?

Ans:  No, this role isn't supported at a central administration site.

13. What is Management Point?

Ans: This role provides policy and service location information to clients. It also receives configuration data from clients. By default, this role installs on the site server when you install a new primary or secondary site.

14.  How to install SCCM Management Point role?

Ans:    

  • Open SCCM console and navigate to Administration > Overview > Site Configuration > Servers and Site System Roles.
  • Right click Site System and click Add Site System Roles.
  • Select Management Point role and click on next to install this role.

15.  How you verify Management point role is installed successfully or not?

Ans:  mpMSI.log and MPSetup.log files show the installation status of MP.

16.  What is Fallback status point role?

Ans:  A site system role that helps you monitor client installation. It identifies clients that are unmanaged because they can't communicate with their management point.

17.  What is State migration point?

Ans:  State migration role is used to capture and restore user state data.

18.  What is Software metering?

Ans:  Software Metering in Configuration Manager allows you to monitor and collect software usage data on Configuration Manager Clients.

19.  Which site system roles can be supported to install on CAS?

Ans: Asset Intelligence synchronization point, Certificate registration point, Endpoint Protection point, Reporting services point, Service connection point and Software update point role.

20.  What is SMS Provider?

Ans: The SMS Provider is a Windows Management Instrumentation (WMI) provider that assigns read and write access to the Configuration Manager database at a site. The provider is the interface between a Configuration Manager console and the site database. By default, this role automatically installs on the site server of a central administration site and primary sites. Configuration Manager administrative users use an SMS Provider to access information that's stored in the database.

21.  Can we install SMS provider role on Secondary site?

Ans:  No, Secondary sites don't support the SMS Provider role.

22.  What is boundary?

Ans:  Boundary is a location that contains device to manage.

23.  What are the boundary types available?

Ans:  IP Subnet, Active Directory Site, IPv6 Prefix and IP Address range.

24.  What are the discovery method available in SCCM 2012?

Ans:  AD User, AD System, AD Group, AD Forest Discovery, Network Discovery and Heartbeat Discovery

25.  How to take backup of SCCM site server?

Ans:  There are 2 ways to take backup of SCCM servers 

  • Automatic backup - Select the “Backup Site Server” option under Administration> Site Configuration> Site Maintenance Tasks.
  • Manual backup - On the SCCM server, start “SMS_SITE_BACKUP” service

26.  How to verify whether site backup is completed successfully or not?

Ans:  

  • Verify smsbkup.log to check backup successfully completed or not which is located under the path C:\Program Files\Microsoft Configuration Manager\Logs.
  • Verify “SiteDBServer” and “SiteServer” folders contain “CM_sitecode.mdf” and “CM_sitecode_log.ldf” database files and SCCM folders (inboxes, Logs, Data etc) respectively.
27. What gets backed up during SCCM Site Maintenance task?

Ans:
  • Configuration Manager site database.
  • Master site control file.
  • SMS and NAL registry keys on the site server.
  • Configuration Manager installation directory on the site server.
28.  What does not get backed up during SCCM Site Maintenance task?

Ans:
  • Content library or the package source file.
  • Modified predefined or created custom Reporting Services reports.
  • User state migration data.

29.  Secondary sites or site system servers gets backed up through SCCM Site Maintenance task?

Ans:  No, only central administration site and primary site get backed up. but there is no backup support for secondary sites or site system servers.

30.  What is file-based replication?

Ans:  Configuration Manager uses file-based replication to transfer file-based data between sites in your hierarchy. This data includes applications and packages that you want to deploy to distribution points in child sites. It also handles unprocessed discovery data records that the site transfers to its parent site and then processes.

31.  What is Configuration Manager database replication?

Ans: Configuration Manager database replication uses SQL Server to transfer data. Configuration Manager primarily classifies the data that it replicates as either global data or site data. When database replication occurs, the site transfers changes to global data and site data across the database replication link. Global data replicates to a parent or child site. Site data replicates only to a parent site. A third data type, local data, doesn't replicate to other sites. Local data is information that other sites don't require

32. How you verify the replication status of site servers?

Ans: Open Configuration Manager console, expand Monitoring workspace, click the Database Replication and verify the link state.

33.  How you fix the database replication issue?

Ans: 

  • Verify if there is any recent change made in the environment.
  • Run the Replication Link Analyzer to analyze and repair replication issues.
  • If Replication Link Analyzer was unable to detect and resolve the problem, Run SPDiagDRS and verify.
  • Verify RCMCtrl.log on each site for errors.

34. What are the client deployments methods?

Ans: Client push installation, manual installation, deploy through Group Policy, software update point based installation, Logon Script Installation, Upgrade Installation (software Distribution).

35. Can you install the configuration manager client without discovering the computer first?

Ans:  Yes, client push installation is the only client installation method that requires clients to be discovered first.

36.  Which client log files show the sccm client installation status whether it is succeeded or not?

Ans:  Verify CCMSETUP.LOG and CLIENTMSI.LOG files of client machines for client installation status.

37.  What are the advantages of SCCM application over package method?

Ans:

  • Application contains detection method (an installation only runs if conditions are met).
  • Applications can utilize the new approval request feature which allows the administrator to deploy applications to a wider user base, while still maintaining license control.
  • Applications provide a much greater level of detail when looking at the application’s deployment status. It pulls up error codes, and also has more categories of statuses.
  • In application method, older version of an application can be suppressed. The new version installs without having to deploy it.
  • The Application feature can deploy apps to devices that are in the Apple App Store (for iOS devices), Google Play store (Android devices) or the Windows Store (for Windows Phone or Windows 8).

38. What could be the issue if all applications are failed to download during deployment on one of the location but same applications are installed for other location?

Ans:

  • Verify boundaries are configured for that location and mapped to required DPs.
  • Verify DPs are up and running.
  • Verify applications are distributed to respective DPs, verify the status of distributed applications.
  • Verify certificate expire or not and it is correctly mapped to respective DPs.
  • Verify CAS.log, ContentTransferManager.log and DataTransferService.log files for error details on client device.

39. What does it mean if deployment status for the application is showing unknown?

Ans:  This status usually means that the client hasn't received policy or client is either inactive or offline since deployment available.

40. How you verify the client machine is receiving updated policy or not? How you troubleshoot if there is an issue?

Ans:

  • Check PolicyAgent.log on client machine to verify client is receiving policies or not.
  • Manually update client policies through control panel and check.
  • Verify client is communicating with MP, check ClientIDManagerStartup.log, ClientLocation.log and LocationServices.log files
  • Verify client is active and it has assigned correct site code.
  • Verify client is installed correctly, if not reinstall client. 

41. What is Software update point role?

Ans:  A site system role that integrates with Windows Server Update Services (WSUS) to provide software updates to Configuration Manager clients.

42.  How to monitor software update synchronization status?

Ans: 

  • Open Configuration Manager console, Navigate Monitoring workspace > Software Update Point Synchronization Status.
  • Review the wsyncmgr.log file for more detailed information about the synchronization process that is located in <ConfigMgrInstallationPath>\Logs on each site server.

43.  How to troubleshooting software update synchronization failed?

Ans:

  • Verify that the Update Services service is running on the WSUS Server.
  • Verify that the Default Website or WSUS Administration website is running on the WSUS Server.
  • Verify that the proxy and account settings are properly configured.
  • Verify that the WSUS server can connect to the Internet and the firewall is configured to allow communication with Microsoft Update.
  • Verify that the certificate has not expired and WSUS is properly configured for SSL.
  • Verify if there is any issue with WSUS web services.
  • Verify WCM.log and WsyncMgr.log for error details.
  • If the Software Update Point is remote from the Site Server, verify that you can connect to the WSUS Server from the Site Server.

44. How you investigate when software update got failed to download during deployment?

Ans:
  • Verify the CAS.log, ContentTransferManager.log and DataTransferService.log files for errors.
  • Verify that the client is in the appropriate boundary associated with the boundary group for the Distribution Point.
  • Check the Software Update Package status and verify that the updates are downloaded and distributed on the distribution points.
  • If the client receives the download location but fails to download content, try to download the content manually by accessing the URL for the content. You can find the URL by reviewing DataTransferServices.log.
  • Check to see whether the scan failed during the deployment evaluation. Also review WUAHandler.log and WindowsUpdate.log to find the errors received during update installation.
  • To rule out an installation issue with the update itself, try to manually install the update or install it from Microsoft Update (if possible) to see whether the update installation is successful. 
45. How you troubleshoot if software update got failed during scan?
Ans:
  • Verify communication or firewall issues between the client and the software update point computer.
  • Verify WUAHandler.log and WindowsUpdate.log files for error.
  • Verify the client have a latest version of the Windows Update Agent.
  • Run the Windows Update Troubleshooter to detect and fix if scan failures due to missing or corrupted components.
  • If running the Windows Update Troubleshooter does not fix the problem, reset the Windows Update Agent data store on the client.
  • Verify the proxy settings on the client and make sure that they are configured correctly.

46. How to reset Windows update agent data store on client machine?

Ans:

  • Stop the Windows Update service by running the following command
         NET STOP WUAUSERV
  • Rename the C:\Windows\SoftwareDistribution folder to C:\Windows\SoftwareDistribution.old.
  • Start the Windows Update service by running the following command:
         NET START WUAUSERV
  • Start a software update scan cycle.


 


 




No comments:

Post a Comment