SCCM Interview Questions

The branch distribution points cannot operate if they can't download content from the standard distribution point. Branch distribution points are instructed to download packages that have been assigned using client policies, then they download the content using standard client components. If the standard distribution point is configured as a protected site system, make sure the branch distribution point is included within the protected boundaries. As long as the computer running the branch distribution point is not included in the protected boundary of the standard distribution point, BDP cannot install the packages it needs. As an example, here is a layout for a branch distribution point: 

Having multiple BDPs at the same location will help distribute requests from clients to download package source files. As long as all these branch distribution points have the same protected boundaries, they effectively work together as a group or unit. 

Following are some of the major features offered by System Center Configuration Manager (SCCM):  

• Operation System Deployment: SCCM provides an organization with all the tools it needs to deploy an operating system to client computers in a network - either via an image installation or via a scripted installation.
• Patching & Updating of OS: After installing the operating system successfully, SCCM starts patching and updating the systems. WSUS is used in most organizations to patch and update servers. SCCM, however, leverages WSUS' advantages and provides IT, administrators, with active patching in addition to WSUS.
• Asset Tracking: Following the installation of a required operating system and any subsequent updates or patches, such systems must be kept up to date with further timely updates or patches. With SCCM, you can keep track of the hardware and software assets of the system.
• Remote Control: Whenever a user or system encounters an issue requiring further assistance from an IT administrator, they can remotely access the system to assess the issue. Using SCCM's remote-control feature, IT administrators and support engineers can access the system remotely.
• Reporting: SCCM comes with a report generation tool that can generate reports based on the criteria outlined by the IT administrators. There are different types of reports based on what is required, such as reports of missing patches or updates, reports of standard configurations, inventory reports, etc.
• Internet Client: SCCM is a truly powerful tool that enables remote access to devices like mobile devices or remote systems without necessarily bringing them into the VPN network. Now, this can be done via an Internet client and an installed PKI (Public Key Infrastructure) certificate. These prerequisites will enable SCCM to automatically connect to that system anywhere in the world to inventory, patch, update, and monitor it.
• Desired Configuration Management (DCM): It is the feature that complies with the IT guidelines laid down by an organization, and the standard configuration of a system cannot be modified/altered. With DCM, you can ensure that your managed systems are compliant with key configuration settings that are important to your organization. It ensures that all systems have the same software setup, drivers, updates, and configuration settings.

The following are the Objects that can migrate/transfer from CM 2007 to SCCM 2012: 

• Virtual Application Packages 
• Package Distributing software 
• Collections and Boundaries 
• Configuration baseline 
• Configuration items 
• Software Update Deployment Templates 
• Task sequences

With System Center Configuration Manager 2012, a new concept called the content library was introduced. In short, the content library stores everything related to Configuration Manager efficiently on the disk (distribution point). Whenever the same file appears in two different packages, the content library only stores one copy of that file. There are, however, references indicating the file belongs to both packages. The content library is referred to as the "single-instance store" since it contains only one instance of any file. By introducing the content library, we are maximizing storage space and avoiding the distribution of files that are already distributed on the distribution point, so we conserve bandwidth on the WAN.

In the Inventory module, you can view comprehensive details of the hardware and software of every Windows system on the network. Inventory in SCCM can be divided into the following: 

• Hardware inventory: By using hardware inventory, you can gather data about the hardware configurations of clients' virtual machines in your entire organization.  
• Software inventory: Software inventory can provide information about files on client devices. It can also record and analyze data from client devices on the site server.

With System Center Configuration Manager 2012, a new concept called the content library was introduced. In short, the content library stores everything related to Configuration Manager efficiently on the disk (distribution point). Whenever the same file appears in two different packages, the content library only stores one copy of that file. There are, however, references indicating the file belongs to both packages. The content library is referred to as the "single-instance store" since it contains only one instance of any file. By introducing the content library, we are maximizing storage space and avoiding the distribution of files that are already distributed on the distribution point, so we conserve bandwidth on the WAN. 

Microsoft defines a boundary as a network location on the intranet that can contain multiple devices that you want to manage. Boundary groups are basically the logical groups of boundaries. Any number of boundary groups can be included in a hierarchy. Each boundary group may contain any combination of the following types of boundaries: 

• IP subnet 
• IPv6 prefix 
• Active Directory site name 
• IP address range 
• VPN

A client on the intranet first evaluates its current network location and then uses this location to determine which boundary groups they belong to.

The ports mostly used in SCCM are as follows: 

• TCP 2701 
• Default HTTPS port 443 
• Client to site system HTTP port 80 
• SMB 445

Log files are basically data files containing information about usage patterns, applications, and operations within an operating system, application, server, or other devices. Troubleshooting and fixing issues are easiest when you have the SCCM logs. These are generated on both the client and site servers. The client and server components maintain individual log files for logging/recording process information.  You can identify SCCM log files with the .log or .lo_ extensions. 

SCCM administrators are those who supervise and manage the use and control of Systems Center Configuration Manager within a business, ensuring that it is used in the correct way and that it does everything it should.    

SCCM administrator roles and responsibilities:

• An SCCM administrator should have a complete understanding of the operating system they are working with and should ensure that all systems are working smoothly alongside one another.  
• Their responsibilities include deploying drivers updates, BIOS updates for a range of different models, maintaining configuration baselines, preventing configuration drift, assisting and collaborating with all other teams, and many more within the company to achieve these objectives.  
• SCCM administrators must perform updates when needed, utilizing patches and new builds as necessary to ensure maximum security and usability. 

SMS Providers are essentially WMI (Windows Management Instrumentation) providers that provide read and write access to Configuration Manager databases. Configuration Manager administrative users are able to access information stored in a database by using the SMS Provider. It enables access and modifies Configuration Manager data. There must be at least one SMS provider per CAS and primary site. More providers can be installed as necessary. Secondary sites do not support SMS providers.

When the Configuration Manager client (software) is installed on your Windows devices, you can monitor their health and activity in the Configuration Manager console. Configuration Manager provides different types of information on the client status, such as client checks, client activity, client online status, etc. Generally, a Client check describes the status of the periodic evaluation carried out by the Configuration Manager client on the device. This evaluation can identify some of the problems with the device and remediate them if necessary.

SCCM provides several client deployment/installation options, including:   

• Client push installation: This allows you to automatically install the client software on a computer, or on a group of computers.
• Manual installation: This allows you to install the client software manually on computers using CCMSetup.exe.
• Group policy installation: This allows users to access the client software under Add or Remove Programs in the Control Panel and install it from there.
• Software update point-based installation: In the case of client software installed on a computer, the computer receives client policies from the site. The policy states the name and port of the software update-point server from which one can obtain software updates.
• Logon script installation: The login script installation is similar to the manual installation. The /logon installation parameter can be specified for CCMSsetup.exe. Whenever a client version is already installed on a computer, this parameter prevents its installation.

No, the secondary site cannot be changed to the primary site. Changing, moving, or upgrading a site requires deleting and reinstalling the site again. Data may be lost when a site is reset. 

It is not possible for the secondary site to have child sites, since the secondary sites are always child sites to the primary sites. 

The following differences exist between the Primary and Secondary sites in SCCM: 

The SCCM Architecture describes the functionalities and how it can run on different operating systems. Here is a diagram showing the SCCM architecture: 

Following are the key components of SCCM system configuration: 

• CAS (Central Administration Site): A CAS or central site is the primary site of SCCM and is located at the top of the configuration manager hierarchy. Additionally, it is referred to as the top-level site in the order. Besides providing a central point of administration, it allows you to manage devices that are distributed throughout a global network. In CAS, only primary sites are supported as child sites, and a single CAS can support 25 child primary sites so as to extend the scale of your hierarchy. This configuration is necessary because a CAS cannot manage devices directly, which is what primary sites do. CAS is used primarily for reporting and administration purposes.
• Primary site: The site is used to manage devices directly as well as manage bandwidth when your managed devices are distributed across different locations. Almost every client is connected to the primary site. Here, it should be noted that a primary site can only support child secondary sites. Each primary site is capable of supporting up to 250 secondary sites and the hierarchy of more than 100,000 clients.
• Secondary site: Secondary sites should be installed as child sites beneath primary sites. It is used to deliver management capabilities to devices in locations that do not have a reliable connection to a primary site. Despite the fact that a secondary site generally extends the primary site, it is still the primary site that manages all clients. In order to manage secondary sites, primary site servers are used. Each secondary site has its own SQL database server (SQL Express) that helps establish the connection between clients and primary site servers. Secondary site servers support 5,000 client hierarchies, and they also deploy SCCM clients.
• Distribution point: The distribution point helps the client systems obtain the content (files) necessary for installations (Packages, Applications, OS, Driver Packages, etc.). This can be either a local or remote distribution point. Distribution points can support up to 4,000 clients, and by default, primary sites and secondary sites are also distribution points.

Out-of-band management in SCCM offers powerful management control for PCs/computers that are equipped with the Intel vPro chipset and a version of Intel AMT (Intel Active Management Technology) that Configuration Manager supports. When a computer is in hibernation, off, or otherwise unresponsive through the operating system, an administrative user can still connect to its AMT management controller via out of band management. Other tasks associated with out of band management include: 

• Turning on one or more computers (for example, to perform maintenance outside of business hours).
• Turning off one or more computers in the network (e.g., the operating system no longer responds).
• Start a non-functioning computer or boot from a local device, etc.

Conclusion 

Despite the fact that other jobs exist, the SCCM role is unique, and therefore the demand for individuals with SCCM skills is even greater. SCCM positions are available almost everywhere. 

Possibly now you would like to pursue a career as an SCCM Engineer or Administrator? If so, you've come to the right place. Here, we have compiled a list of the top 30+ SCCM interview questions & answers for freshers and experienced professionals.  Having done enough research, we've selected the best SCCM questions that are frequently asked in interviews. We hope that it will help you revise your SCCM knowledge to prepare for your interview much more confidently and help you to land an SCCM job more easily.

Useful Resources:

• Android Interview Questions
• iOS Interview Questions
• Operating System Interview Questions
• Linux Interview Questions
• Unix Interview Questions
• PowerShell Interview Questions
• Coding Interview Questions
• Technical Interview Questions

• Asset Intelligence: Asset Intelligence in Configuration Manager identifies and manages the software you've stocked in your environment. It allows you to track and manage software license usage within your enterprise.  
• Asset Tracking: Asset tracking is the process of tracking updates or packages of assets by collecting inventory data about the assets (both hardware and software). Following the installation of a required operating system and any subsequent updates or patches, such systems must be kept up to date with further timely updates or patches. With SCCM, you have access to tools for keeping track of the hardware and software assets of the system. 

You can monitor clients and network traffic once the cloud management gateway (CMG) has been set up and clients are connected to it. With the cloud management dashboard, you'll have a centralized view of CMG usage. Additionally, it displays information about cloud users and devices. As shown in the following screenshot, the Cloud Management Dashboard contains a specific section that pertains to the CMG: 

The different types of Discovery methods that are available in SCCM are as follows:

• Active Directory System Discovery 
• Active Directory Security Group Discovery 
• Active Directory User Discovery 
• Network Discovery 
• Forest Discovery 
• Heartbeat Discovery

A SCCM console is basically an administrative tool that administrators can use to perform a variety of tasks, including device management, application deployment, network and server administration, etc. SCCM admins can easily manage applications, packages, OS (Operating system) deployments, and many more administrative functions using SCCM Console.

SCCM deployment shares are basically repositories or places where you store OS images, language packs, applications, device drivers, and other software that needs to be deployed to target machines. MDT (Microsoft Deployment Toolkit) simplifies the deployment process by condensing the following two features into a single feature (the deployment share).  

• Distribution share: This consists of operating system source files, application source files, out-of-box drivers and packages. 
• Deployment point: This provides the necessary files for accessing the distribution share and installing a build from it. 

• Site System: The word "site system" refers to any computer that runs or uses a supported version of Windows. Another possibility is that it may be a shared folder that hosts a single site system role or many. 
• Site Server: Any computer, whether a server or workstation, on which a site system role is installed is referred to as a site server. These servers host services needed for Configuration Manager. 
• Site System Role: A site system role is a way to provide additional functionality to a site. Install site system role on-site to provide additional functionalities as follows: 
  • Management Point 
  • Distribution point 
  • Reporting point 
  • PXE service point 
  • State migration point 
  • Software update point 
  • Server locator point 
  • Fallback status point

Communication between Configuration Manager sites must happen through one or more senders, and these senders can only be installed or deployed on primary or secondary site server systems. Instead of providing connectivity to sites, senders use existing network connections for managing connectivity, ensuring the integrity of transferred data, recovering from errors, and closing connections when they are no longer required. SCCM has the following types of senders: 

• Standard Sender: By default, all primary and secondary sites are configured with the standard sender. In the case of site-to-site communications over a LAN (Local Area Network) that uses a supported protocol, you do not have to install an additional sender. 
• Courier Sender: Primary and secondary sites are all configured with the courier sender by default. However, it cannot be created or displayed in the Configuration Manager console. The reason for this is that you need to start it manually from the Configuration Manager programs folder on your Start menu. As opposed to sending data over the network, courier senders are essentially used for software distribution in order to send package data via physical media to another site.

Following are the different prerequisites required for the Software update point: 

• Windows update agent 
• Windows Installer 
• Network load balancing 
• Site Server communication 
• Windows Server Update Services 
• Background Intelligent Transfer Server 

SUP (Software Update Points) are essentially system roles that are installed on WSUS (Windows Server Update Service) servers and allow you to create packages of software updates based on various criteria. Also, SCCM allows you to create lists of devices that need to be updated as well as set up maintenance windows with a start date and end time, as well as a recurrence pattern. As soon as a package is created, it is distributed to one or more distribution points. Based on ADRs (Automated Deployment Rules), SCCM's powerful scheduler can automatically deploy updates to target clients. The Software Update Point (SUP) illustrates how Windows Update works from an SCCM client's perspective.

Background Intelligent Transfer Service (BITS) is extensively used by SCCM to transfer or migrate data between client machines and the SCCM servers. It also affects client downloading policies. When you initiate a client push, BITS is used to download the client to the machine. 

In order to transfer data, BITS utilizes idle bandwidth. BITS transfers data in the background, that is, BITS transfers data only when there is available bandwidth that other applications aren't using.

Microsoft Intune is a cloud-based mobile device management service. With this solution, your business can use applications across devices, enjoy advanced security, and save money. With Microsoft Intune, your sensitive data stays secure while you stay productive. Using policies, you can restrict who has access to your company's data. It offers flexibility and control over securing your data, regardless of where it is stored. 

Intune Advantages: 

• Microsoft's Intune software allows you to manage PCs from the cloud without deploying any hardware infrastructure. With Endpoint Management, mobile devices can be easily managed from the cloud, eliminating the need to plan, purchase, and maintain hardware and infrastructure.   
• With Microsoft Intune, your team can work on their mobile devices without sacrificing security. It combines productivity and security in one.  
• Regardless of the device, they are using, your users can remain productive without having to worry about the security of the organization's data.   
• It supports the mobile management of Windows, MacOS, iOS, Android, Linux, as well as Windows Phone devices.   
• Microsoft Intune gives you the ability to deploy software updates across all your enrolled devices. Manage updates easily so all users are running the latest software and applications. 

Today, every business requires some sort of MDM (Mobile Device Management) solution, as mobile and cloud use are becoming increasingly intertwined. While some organizations opt for SaaS Cloud MDM solutions, others require customized on-premises MDM solutions. Microsoft provides both services: Intune and SCCM. There is confusion among many organizations over whether to use Microsoft Windows Intune, SCCM, or a hybrid approach, which is a combination of both.

SCCM vs Intune:

Both SCCM and Intune offer many features, many of which overlap. Consequently, the right decision depends on your own business strategy. 

The difference between WSUS and SCCM are as follows:

WSUS (Windows Server Update Services) is a tool that lets IT administrators deploy Microsoft product updates. You can manage the distribution of updates released from Microsoft Update to computers on your network using WSUS. SCCM is Microsoft's patch management solution and relies on WSUS to obtain and apply patches, but offers a number of more desirable features and allows users to control just how patches are installed/deployed. 

A WSUS server handles the management and distribution of updates through a management console. Also, WSUS servers can serve as update sources for other WSUS servers in an organization. WSUS servers that act as update sources are known as upstream servers. In WSUS implementations, at least one WSUS server needs to be able to connect to Microsoft Update in order to obtain updated information if available.