70-688

Microsoft 70-688

Managing and Maintaining Windows 8Version: 20.0

QUESTION NO: 1

You work as a desktop technician at ABC.com. The ABC.com network consists of an ActiveDirectory Domain Services (AD DS) domain named ABC.com.

You are in the process of replacing the current client computers with new laptop computersrunning Windows 8.

The company has purchased 30 new laptops with identical hardware and no operating systeminstalled.

You need to install Windows 8 and corporate applications on the new laptops.

You install Windows 8 on one of the new laptop then install and configure the corporateapplications. You want to use this laptop as a reference computer.

Which four of the following actions should you perform to deploy an image of the referencecomputer to the remaining new laptops? (Choose four).

A. Generalize the reference computer using DISM. B. Generalize the reference computer using Sysprep. C. Boot the reference laptop using Windows PE media and use DISM to capture an image andcopy the .WIM file to a network shared folder. D. Boot the reference laptop using Windows PE media and use ImageX.exe to capture an imageand copy the .WIM file to a network shared folder. E. Boot a new laptop using Windows PE media and create disk partitions using Diskpart. F. Boot a new laptop using Windows PE media and create disk partitions using FDisk. G. Connect to the network shared folder and use PkgMgr.exe to apply the image file. H. Connect to the network shared folder and use DISM to apply the image file.

Answer: B,C,E,HExplanation:

QUESTION NO: 2

You work as a desktop technician at ABC.com. The ABC.com network consists of an ActiveDirectory Domain Services (AD DS) domain named ABC.com. The client computers run eitherWindows 7 Enterprise or Windows 8 Enterprise.

Company users use a custom application named CorpApp. The application is installed on everyclient computer in the network. The application creates unique files that store settings for eachuser when the user uses the application.

Microsoft 70-688 Exam

"Pass Any Exam. Any Time." - www.actualtests.com 2

Users often log in to different client computers.

You need to recommend a solution that would enable a user to log in to any client computer andretrieve their settings file so that the application does not need to be configured whenever a userlogs into a different computer.

The solution must enable users to reverse any changes to the settings files if required.

Which of the following would be the best solution?

A. Application Virtualization (App-V). B. Roaming Profiles. C. Microsoft Enterprise Desktop Virtualization (MED-V). D. RemoteApp. E. User Experience Virtualization (UE-V)

Answer: EExplanation:

QUESTION NO: 3

You work as a desktop technician at ABC.com. The ABC.com network consists of an ActiveDirectory Domain Services (AD DS) domain named ABC.com. All client computers run Windows8 Enterprise.

You have a Windows 8 Enterprise client computer named AdminClient1.

You want to install a second instance of Windows 8 Enterprise named Win8Test on AdminClient1. You plan to create a virtual hard disk (VHD) for the Windows 8 installation and configure a dual-boot system by using a native boot VHD.

Which of the following actions should you perform? (Choose all that apply)

A. In the Computer Management console, create a VHD by right-clicking on Disk Managementand selecting Create VHD. B. In the Computer Management console, select Disk Management and create a VHD by right-clicking on unallocated disk space and selecting Create VHD. C. Convert the disk containing the AdminClient1 installation to a dynamic disk. D. Create an active primary partition on the VHD. E. Install Windows 8 on the VHD. F. Boot into the Win8Test Windows 8 installation on the VHD and modify the boot configuration



using BCDEdit. G. Boot into the AdminClient1 Windows 8 installation and modify the boot configuration usingBCDEdit.

Answer: A,D,E,GExplanation:

QUESTION NO: 4

You work as a desktop technician at ABC.com. The ABC.com network consists of an ActiveDirectory Domain Services (AD DS) domain named ABC.com. All servers run Windows Server2012 and all client computers run Windows 8 Enterprise.

The company uses Windows Deployment Services to deploy operating systems. The WDS serverhas a Windows 8 Enterprise image configured for deployment to client computers.

The company has purchased 30 new tablet computers with Windows 8 Professional installed.

You want to use WDS to deploy Windows 8 Enterprise to the new tablets.

How should you configure the tablets to connect to the WDS server and download the Windows 8Enterprise image?

A. By customizing a WinRE (Windows Recovery Environment) image and booting the tablets tothe WinRE. B. By configuring the tablets to boot to a Windows To Go workspace. C. By booting the tablets to a Windows 8 Enterprise DVD. D. By booting the tablets to the Windows 8 Professional installations and copying the Windows 8Enterprise image file from the WDS network shared folder. E. By customizing a WinPE (Windows Preinstallation Environment) image and booting the tabletsto the WinPE.


QUESTION NO: 5




A Windows 8 Enterprise computer named Client1 is used by multiple users.

You discover that several third-party Web browsers have been installed on Client1. You want torestrict Client1 to running only Microsoft Internet Explorer for Web browsing to comply withcompany security policy.

You open the Local Group Policy Editor on Client1.

What should you do to block third-party Web browsers on Client1 without affecting otherapplications?

A. You should configure AppLocker Executable Rules. Configure the enforcement setting forExecutable Rules to Enforce Rules. B. You should configure AppLocker Windows Installer Rules. Configure the enforcement settingfor Windows Installer Rules to Enforce Rules. C. You should configure AppLocker Script Rules. Configure the enforcement setting for ScriptRules to Enforce Rules. D. You should configure AppLocker Packaged App Rules. Configure the enforcement setting forPackaged App Rules to Enforce Rules. E. Under Software Restriction Policies, configure the default policy to be Basic User.

Answer: AExplanation:

QUESTION NO: 6


A Windows 8 Enterprise computer named Client1 has AppLocker policies in place to restrictaccess to applications. You have been asked to disable AppLocker on Client1.

You log in to Client1 and open the Local Group Policy Editor. You then delete all the AppLockerrules, disable the Application Identity service then run the gpupdate /force command to refresh thepolicy.

You discover that the AppLocker rules are still be applied. You need to disable AppLocker.

What should you do?



A. Restart the computer. B. Delete all the rules under Software Restriction Policies then run the gpupdate /force command. C. Create new AppLocker rules to allow access to the restricted applications. D. Enable the Application Identity service, run the gpupdate /force command then disable theApplication Identity service.

Answer: DExplanation:

QUESTION NO: 7


Every company user has a laptop or desktop computer running Windows 8 Professional. Someusers also have tablet computers that run Windows 8 Professional.

All users in the Sales department have a laptop and a tablet. The Sales users often work awayfrom the office.

You want to enable the Sales users to have the same personal data files available whether theylog on to their laptop or tablet computers. You create a network shared folder.

Which two of the following actions should you perform next? (Choose two)

A. Enable offline files on the network share and configure offline files on the laptops and tablets forthe Sales users. B. Disable offline files on the network shared folder. C. Configure mandatory roaming profiles using the network shared folder for the Sales users. D. Configure folder redirection to the network shared folder for the Sales users. E. Configure the Distributed File System Replication (DFSR) service on the server hosting thenetwork shared folder.

Answer: A,CExplanation:

QUESTION NO: 8




A new corporate security policy states the following security requirements:

All users must log on to their computers using domain user accounts.

Computer settings including desktop themes, passwords, app settings and browser settings mustnot be synchronized with the users Microsoft accounts.

How can you ensure that the corporate security policy is adhered to?

A. On each client computer, set the Sync your settings option under PC Settings\Sync yoursettings to Off. B. Configure the corporate firewall to block outbound traffic on TCP Port 80. C. By applying a Group Policy Object (GPO) to the computers with the Accounts: Block Microsoftaccounts Group Policy setting configured to This policy is disabled. D. By applying a Group Policy Object (GPO) to the computers with the Accounts: Block Microsoftaccounts Group Policy setting configured to Users can't add or log on with Microsoft accounts. E. By applying a Group Policy Object (GPO) to the computers with the Accounts: Block Microsoftaccounts Group Policy setting configured to Users can't add or log on with Microsoft accounts.


QUESTION NO: 9


You use a Windows 8 Pro computer named ABC-Admin1. You want to back up ABC-Admin1.

You need to be able to restore the backup to another computer in case of a hardware failure inyour computer.

Which two of the following options could you use to create the backup? (Choose two).

A. Create a Recovery Drive. B. Create a System Image. C. Create a System Restore Point. D. Create a backup using the WBAdmin command with the allcritical option. E. Create a backup using the WBAdmin command systemstate option.

Answer: B,DExplanation:



QUESTION NO: 10


Users in the Marketing department use Windows 8 Pro computers.

A group policy object (GPO) is in place that configures automatic updates on the Marketingcomputers. The GPO configures the Marketing computers to download updates and install themat 2pm every day.

Users in the Marketing department complain that their computers sometimes automatically rebootafter the updates have been installed.

How can you prevent the automatic reboots?

A. By enabling the Turn on Software Notifications setting in the GPO. B. By enabling the No auto-restart with logged on users for scheduled automatic updatesinstallations setting in the GPO. C. By enabling the Reschedule Automatic Updates scheduled installations setting in the GPO. D. By disabling the Delay Restart for scheduled installations setting in the GPO.

Answer: BExplanation:

QUESTION NO: 11


You want to modify the SmartScreen setting on a shared desktop computer. You want to applythe same SmartScreen settings to every user that logs on to the shared computer.

You open the Local Group Policy Editor.

Where would you find the Configure Windows SmartScreen policy?

A. Computer Configuration > Windows Settings > Security Settings > Local Policies.



B. Computer Configuration > Windows Settings > Security Settings > Software RestrictionPolicies. C. Computer Configuration > Administrative Templates > Windows Components > File Explorer. D. Computer Configuration > Administrative Templates > Windows Components > InternetExplorer. E. Computer Configuration > Administrative Templates > Windows Components > SecurityCenter.


QUESTION NO: 12

You work as a desktop technician at ABC.com. The ABC.com network consists of an ActiveDirectory Domain Services (AD DS) domain named ABC.com. All client computers run Windows8 Pro.

Company users use bar code scanners that connect to computers via a USB port. A manufacturersupplied custom driver is required on each computer to operate the bar code scanners.

You are in the process of configuring ten new Window 8 Pro laptops.

You need to ensure that the bar code scanner drivers are automatically installed when usersconnect a bar code scanner to a new computer. Users should not be prompted to install thedrivers.

How can you pre-stage the driver on the new computers?

A. Use Windows Explorer to copy the driver files to the C:\Windows\System32\drivers folder onthe new computers. B. Use DISM to Use Windows Explorer to copy the driver files to theC:\Windows\System32\drivers folder on the new computers. C. Copy the driver files to a network shared folder. Add a Registry key that references the networkshared folder. D. Use the pnputil.exe utility to copy the driver package to the driver store on the new computers.


QUESTION NO: 13

You work as a desktop technician at ABC.com. The ABC.com network consists of an Active



Directory Domain Services (AD DS) domain named ABC.com. All client computers run Windows8 Enterprise.

All portable computers are configured to use BitLocker Drive Encryption. BitLocker NetworkUnlock is enabled to automatically unlock computers when they are connected to the network.

Sales users need to be able to use their laptops when they are away from the office.

How can you ensure that the Sales users can use their laptops when they are not connected tothe corporate network?

A. Instruct the Sales users to run the Manage-bde -off command when they are away from theoffice. B. Ensure the Sales users know their BitLocker PINs. C. Instruct the Sales users to run the Manage-bde -unlock command before they leave the office. D. Install and configure BitLocker To Go on the Sales users laptops.


QUESTION NO: 14


A user named Jane in the Sales department uses a client computer named ABC-Sales03.

Jane reports that a print job is stuck in a print queue on ABC-Sales03.

You need to delete the print job.

You open a remote PowerShell session on ABC-Sales03 and run the Get-Printer cmdlet todetermine the name of the printer.

What should you do next?

A. You should run the Get- PrinterProperty and Set- PrinterProperty cmdlets. B. You should run the Get-PrintConfiguration and Set- PrintConfiguration cmdlets. C. You should run the Remove-Printjob and Restart-PrintJob cmdlets.



D. You should run the Get-PrintJob and Remove-Printjob cmdlets. E. You should run the Get-PrinterPort and Set-PrinterPort cmdlets.


QUESTION NO: 15

You work as a desktop technician at ABC.com. The ABC.com network consists of an ActiveDirectory Domain Services (AD DS) domain named ABC.com. All servers run Windows Server2012 and all client computers run Windows 8 Pro.

The company has a Microsoft Exchange 2010 infrastructure. ActiveSync is enabled in MicrosoftExchange 2010 to enable users with Windows Mobile devices to receive company email.

Company security policy states that all passwords should be a minimum of 6 alphanumericcharacters. The default ActiveSync policy in Microsoft Exchange is configured to enforce thispolicy on mobile devices.

The company purchases tablet devices running Windows RT for Sales users and companymanagers.

You need to configure the tablets for external access to company email while ensuring that thepassword policy is enforced.

How should you configure the tablets?

A. You should upgrade the Windows RT tablets to Windows 8 Pro. B. You should install Microsoft Outlook on the Windows RT tablets. C. You should use Microsoft accounts on the Windows RT tablets. D. You should add the users Exchange account in the Mail App.


QUESTION NO: 16




To improve security in the Research department, you are configuring super-mandatory userprofiles for the Research department users.

You need to minimize the risk of data loss of the Research department users personal data in theevent of a hardware failure of the Research department users computers. Your solution mustautomatically apply to any new computers deployed in the Research department.

Which of the following options would meet the requirements and maintain security?

A. Configure a group policy object (GPO) to redirect users Documents folders. B. Configure a group policy object (GPO) to add a network share to user's documents libraries. C. Configure roaming profiles for the Research users. D. Configure the File History feature on the Research computers.


QUESTION NO: 17


The network includes client computers from different hardware manufacturers. All clientcomputers run Windows 8 Pro.

You currently have multiple bootable Windows Recovery Environment (WinRE) disks, each withdifferent drivers for the different hardware configurations.

You want to create a single bootable Windows Recovery Environment (WinRE) disk that can beused on all different hardware configurations.

You use Deployment Image Servicing and Management (DISM) to mount a WinRE image file.

How should you create the WinRE image?

A. Copy all the required drivers to %systemroot%\system32\drivers folder then unmount the imagefile. B. Use DISM to add the drivers, commit the changes then unmount the image file. C. Copy the WinRE image files from all the other WinRE disks to the \Images folder. D. Use PkgMgr.exe to add the drivers, commit the changes then unmount the image file.




QUESTION NO: 18

You work as a desktop technician at ABC.com.

You are configuring Windows Defender on a client computer running Windows 8 Pro.

You want to configure Windows Defender to remove quarantined files after 1 month.

You navigate to the Settings tab in Windows Defender.

Which option should you select to configure the quarantined files retention period?

A. Real-time protection. B. Excluded file types and locations. C. Excluded processes. D. Advanced. E. Administrator


QUESTION NO: 19


A server named ABC-Print01 runs the Print and Document Services role and hosts shared printersfor the client computers in the network.

A user named Jane uses a client computer named ABC-Sales03. ABC-Sales03 has a connectionto a shared printer on ABC-Print01.

Jane wants to configure the network printer to print a separator page with every print job that shesends to the printer. She creates a separator page file.



You need to configure Janes network printer to use the separator page. Your configuration mustnot affect other users using the network printer.

Which three of the following actions should you perform? (Choose three)

A. Copy the separator page file to the C:\Windows\System32 folder on ABC-Print01. B. Copy the separator page file to the C:\Windows\System32 folder on ABC-Sales03. C. Open Devices and Printers on the ABC-Print01. D. Open Devices and Printers on the ABC-Sales03. E. Right click on the printer and select Printer Properties. Click the Separator Page button on theAdvanced tab then browse to the separator page file. F. Right click on the printer and select Printing Preferences. Click the Separator Page button onthe Advanced tab then browse to the separator page file.

Answer: B,D,EExplanation:

QUESTION NO: 20

You work as a desktop technician at ABC.com. The ABC.com network consists of an ActiveDirectory Domain Services (AD DS) domain named ABC.com. All servers run Windows Server2012.

The company uses laptop computers that run Windows 8 Enterprise or Windows 8 Pro and tabletcomputers that run Windows 8 Pro or Windows 8 RT.

You are evaluating the use of Virtual Smart Cards on all Window 8 devices.

How can you ensure that all Windows 8 devices support Virtual Smart Cards?

A. By ensuring that all Windows 8 devices have a Trusted Platform Module (TPM) chip thatadheres to Trusted Computing Group (TCG) specification version 1.2 or later. B. By upgrading all Windows RT and Windows 8 Pro devices to Windows 8 Enterprise. C. By upgrading all Windows RT devices to Windows 8 Pro or Windows 8 Enterprise. D. By enabling BitLocker Drive Encryption on all Windows 8 devices.


QUESTION NO: 21




All users in the Sales department are members of a global security group named Sales. A userSales named Jane uses a client computer named ABC-Sales03.

Jane creates a folder on her computer named C:\Sales. She configures the NTFS permissions togrant Allow - Read permission to the Everyone group and Allow - Modify permission to the Salesgroup.

Jane shares the C:\Sales folder and grants the Allow Read share permission to the Everyonegroup and the Allow Full Control share permission to the Sales group.

A user named Mia is a member of the Sales group.

Mia accesses the \\ABC-Sales03\Sales folder over the network.

What permission does Mia have on the shared folder?

A. Full Control B. Modify C. Read and Write D. Read E. None Access Denied


QUESTION NO: 22


A user Sales named Jane uses a client computer named ABC-Sales03.

Jane has a folder on her computer named C: \SalesTotals.

The NTFS permissions on the C: \SalesTotals are shown in the following table:



Group or User NamePermission

ABC\JaneFull Control

Jane wants to share the C: \SalesTotals folder and grant members of a global security groupnamed Managers read access to the folder.

Which of the following are the minimum steps required to share the folder and grant the requiredaccess? (Choose all that apply).

A. In the folder properties, navigate to the Security tab. B. Right click on the C: \SalesTotals folder and select Share with then select Specific people. C. Add the Managers group and grant them Read NTFS permission. D. Add the Managers group then click the Share button. E. In the folder properties, navigate to the Sharing tab. F. Click the Advanced Sharing button and tick the Share this folder checkbox. G. Click the Permissions button.

Answer: B,DExplanation:

QUESTION NO: 23

You work as a desktop technician at ABC.com. The ABC.com network consists of an ActiveDirectory Domain Services (AD DS) domain named ABC.com. All servers run Windows Server2008 R2 and all client computers run Windows 8 Pro.

All servers and client computers use IPv4 and have IPv6 disabled.

Sales users often work away from the office. The Sales users require access to internal networkresources when they are away from the office.

You need to recommend a solution for providing the required access.

What should you include in your solution?

A. Windows Server 2012 and Windows 8 Enterprise. B. DirectAccess. C. BranchCache in Distributed Cache Mode. D. Virtual Private Network (VPN).

Answer: D



Explanation:

QUESTION NO: 24


You store files on a Windows 8 Enterprise desktop computer named ABC-Data1.

You need to expand the hard disk capacity of ABC-Data1.

You install three new 4TB (terabyte) disks in ABC-Data1.

You want to configure the three new disks as a single 12TB volume. Your solution must maximizethe usable disk space.

Which two of the following actions should you perform? (Choose two).

A. Convert the disks to GPT. B. Convert the disks to MBR. C. Create a spanned volume. D. Create a RAID 5 volume. E. Create a Storage Space using the Parity option. F. Create a Virtual Hard Disk (VHD).

Answer: A,CExplanation:

QUESTION NO: 25


The company has asked for improved security when logging on to the network. A new companysecurity policy states that logging in to the network should use two-factor authentication.

Which of the following solutions would implement two-factor authentication?



A. Linking all domain user accounts with Microsoft Live accounts. B. Configuring an IPSec policy to require Kerberos authentication in the network. C. The use of smart cards or virtual smart cards. D. A group policy that applies the password complexity requirement setting.

Answer: CExplanation:

QUESTION NO: 26


All client computers are configured with a disk configured a drive E. On all client computers, driveE: is encrypted with BitLocker Drive Encryption and the recovery passwords stored in ActiveDirectory.

A user named Clive works in the Sales department.

Clive reports that he has forgotten the BitLocker password and is unable to access drive E: on hiscomputer.

How can you provide Clive with the Bitlocker recovery key to access his E: drive?

A. In Active Directory Users and Computers, open the properties of Clives user account. B. In Active Directory Users and Computers, open the properties of Clives computer account. C. Run the manage-bde -protectors -disable e: command on Clives computer. D. Run the manage-bde -autounlock -disable e: command on Clives computer.


QUESTION NO: 27


The company has a public key infrastructure (PKI). The company Intranet Web site is hosted on aWindows 2012 Web server named ABC-Web1. The Intranet Web site is configured to require SSL



using a certificate from the companys certificate authority (CA). The Intranet Web site is alsoconfigured to require mutual authentication.

You want to be able to access the Intranet Web site from your home computer. Your homecomputer runs Windows 8 Pro and is not a member of the domain.

How can you configure your home computer to access the Intranet Web site without receiving anysecurity warning prompts? (Choose two).

A. Install a client (user) certificate issued by ABC.com in the personal certificate store for your useraccount. B. Install a client (user) certificate issued by ABC.com in the personal certificate store for yourcomputer account. C. Install a client (user) certificate issued by ABC.com in the trusted root authorities certificatestore for your computer account D. Install a ABC.com root certificate issued by ABC.com in the trusted root authorities certificatestore for your computer account

Answer: A,DExplanation:

QUESTION NO: 28


You receive a new tablet computer running Windows 8 Pro. The tablet is not a member of thedomain.

You want to configure the tablet to enable you to manage Active Directory when you are awayfrom the office.

You configure the tablet to access the corporate network over a VPN connection.

How should you configure the tablet to enable you to manage Active Directory?

A. Join the tablet to the domain. B. Install Remote Server Administration Tools (RSAT) on the tablet. C. Install AdminPak.msi on the tablet. D. Enable the Remote Registry service on the tablet.




QUESTION NO: 29


Sales users have been issued with tablet computers that run Windows 8 Enterprise. The Salesusers want to be able to connect to network resources when they are working away from theoffice.

You are configuring a Windows Server 2012 server as a VPN server to accept the external remoteconnections.

The corporate firewall allows inbound traffic on TCP port 80 and TCP port 443 only.

How should you configure the VPN?

A. You should configure a PPTP (Point to Point Tunneling Protocol) VPN. B. You should configure an L2TP (Layer 2 Tunneling Protocol) VPN. C. You should configure an SSTP (Secure Socket Tunneling Protocol) VPN. D. You should configure an SSL (Secure Sockets Layer) VPN.


QUESTION NO: 30

You are configuring a HomeGroup for your computers at home. You have computers runningWindows 7 and Windows 8.

You purchase a new computer running Windows 8. You configure the new computer, create auser account and join the HomeGroup.

When you attempt to access a shared folder on another computer in the HomeGroup, you receivea message saying the password is incorrect.

What should you do?



A. Sign in to the new computer using a Microsoft Live account. B. Change your user account password to be the same as the HomeGroup password. C. Disable Network Discovery on the new computer. D. Configure the new computer with the correct time and date.


QUESTION NO: 31

You work as a desktop technician at ABC.com. The ABC.com network consists of an ActiveDirectory Domain Services (AD DS) domain named ABC.com. All servers run Windows Server2012 and all 500 client computers run Windows 8 Enterprise.

All 500 users in the company log on to their client computers using domain user accounts.

The company has a Development department. Developers create custom Windows Store appsfor use on Windows 8 computers.

The developers create a new line of business Windows Store app named CorpApp1.

CorpApp1 will be used by all company employees and will access resources in the corporatenetwork.

You have the following requirements:

Deploy CorpApp1 to all client computers in the domain.

Configure CorpApp1 to access the required network resources.

Minimize administrative effort.

What should you do?

A. Install CorpApp1 on a reference computer. Capture an image of the reference computer anddeploy the image to the client computers. B. Apply a Group Policy Object (GPO) to the client computers that configures the Allow all trustedapps to install setting. Configure a PowerShell script that includes the add-appxpackage cmdlet.Instruct the users to log on to their computers and run the script. C. Submit CorpApp1 to Windows Store. Instruct the users to log on using Microsoft accounts andinstall CorpApp1 from Windows Store then log off on log back on using their domain useraccounts.



D. Boot each computer using WinPE. Run the DISM utility to provision CorpApp1 in the Windows8 image file.


QUESTION NO: 32

You work as Network Administrator at ABC.com includes the management of the corporate wiredand wireless networks.

You use a client computer named ABC-Admin1 which runs Windows 8 Enterprise.

You want to view all the wireless networks within range of ABC-Admin1. You want to determinethe following information for each wireless network:

SSID

Network Type

Authentication Method

Encryption Method

Signal Strength

Channel

Which two of the following commands will return the required information? (Choose two)

A. netsh wlan show networks mode=bssid B. net view /all C. netsh wlan show hostednetwork D. netsh wlan show all E. netstat -n

Answer: A,DExplanation:

QUESTION NO: 33




The company has a Research department. Computers in the Research department often containsensitive information.

You need to secure all network communications for the computers in the Research department.

You want to configure network communications to require both computer-based and user-basedKerberos V5 authentication to restrict connections to domain-joined users and computers.

You plan to create a new Connection Security Rule in Windows Firewall with Advanced Settings. You start the New Connection Security Rule wizard. You need to select which Rule Type tocreate.

Which of the following Rule Types should you select?

A. Isolation B. Authentication Exemption C. Server-to-server D. Tunnel


QUESTION NO: 34

Your role of Systems Administrator at ABC.com includes the management of the Windows Server2012 servers and the Windows 8 client computers. The network network consists of an ActiveDirectory Domain Services (AD DS) domain named ABC.com. All users log on to their clientdevices using domain user accounts.

The company plans to issue new tablet devices that run Windows 8 Enterprise. You will configurethe tablets for external access to the corporate network using DirectAccess.

Company users use an application named ABC-App1. You need to choose a deployment methodfor ABC-App1. ABC-App1 must be stored on the hard drive of the tablets and secured byrequiring an extra login in addition to the users domain login. ABC-App must be able to interactwith the desktop on the tablets and minimize the network bandwidth required to run theapplication.

How should you deploy ABC-App1?

A. Configure ABC-App1 as a Terminal Services (TS) RemoteApp on a Remote Desktop Server.



B. Install ABC-App1 locally on the tablets. C. Deploy a Windows to Go Workspace containing ABC-App1. D. Install the Application Virtualization (App-V) client software on the tablets. Create an App-Vpackage for ABC-App1 and deploy the package to the tablets. E. Install Windows 8 Enterprise on a Native Boot VHD on the tablets. Install ABC-App1 on theVHD. F. Enable the Hyper-V role on the tablets. Configure a Windows 8 Virtual Machine (VM) in Hyper-V. Install ABC-App1 in the VM.


QUESTION NO: 35

Your role of Systems Administrator at ABC.com includes the management of the Windows Server2012 servers and the Windows 8 client computers. The network network consists of an ActiveDirectory Domain Services (AD DS) domain named ABC.com.

The company plans to issue new tablet devices that run Windows 8 Enterprise or Windows RT. You will configure the Windows 8 Enterprise tablets for external access to the corporate networkusing DirectAccess.

Company users use an application named ABC-App2. You need to choose a deployment methodfor ABC-App2. ABC-App2 must be hosted in a public cloud and downloaded and

installed on the hard drive of the tablets. Tablets running either Windows 8 Enterprise or Windows8 RT must be able to install ABC-App2.


A. Configure ABC-App2 as a Terminal Services (TS) RemoteApp on a Remote Desktop Server. B. Certify and publish ABC-App2 to Windows Store. C. Deploy a Windows to Go Workspace containing ABC-App2. D. Install the Application Virtualization (App-V) client software on the tablets. Create an App-Vpackage for ABC-App2 and deploy the package to the tablets. E. Install Windows 8 Enterprise on a Native Boot VHD on the tablets. Install ABC-App2 on theVHD. F. Enable the Hyper-V role on the tablets. Configure a Windows 8 Virtual Machine (VM) in Hyper-V. Install ABC-App2 in the VM.




QUESTION NO: 36



Company users use an application named ABC-App3. You need to choose a deployment methodfor ABC-App3. The SSD (solid state drive) space used on the tablets by ABC-App3 must beminimized. ABC-App3 should only be accessible while the user is working online and theapplication must be isolated from other applications running on the tablets.


A. Configure ABC-App3 as a Terminal Services (TS) RemoteApp on a Remote Desktop Server. B. Install ABC-App3 locally on the tablets. C. Deploy a Windows to Go Workspace containing ABC-App3. D. Install the Application Virtualization (App-V) client software on the tablets. Create an App-Vpackage for ABC-App3 and deploy the package to the tablets. E. Install Windows 8 Enterprise on a Native Boot VHD on the tablets. Install ABC-App3 on theVHD. F. Enable the Hyper-V role on the tablets. Configure a Windows 8 Virtual Machine (VM) in Hyper-V. Install ABC-App3 in the VM.


QUESTION NO: 37



Company users use an application named ABC-App4. You need to choose a deployment methodfor ABC-App4. The SSD (solid state drive) space used on the tablets by ABC-App4 must beminimized and the application must be isolated from other applications running on the tablets.



ABC-App4 must run without requiring a connection to the company server infrastructure.


A. Configure ABC-App4 as a Terminal Services (TS) RemoteApp on a Remote Desktop Server. B. Install ABC-App4 locally on the tablets. C. Deploy a Windows to Go Workspace containing ABC-App4. D. Install the Application Virtualization (App-V) client software on the tablets. Create an App-Vpackage for ABC-App4 and deploy the package to the tablets. E. Install Windows 8 Enterprise on a Native Boot VHD on the tablets. Install ABC-App4 on theVHD. F. Enable the Hyper-V role on the tablets. Configure a Windows 8 Virtual Machine (VM) in Hyper-V. Install ABC-App4 in the VM.


QUESTION NO: 38

Your role of Systems Administrator at ABC.com includes the management of the Windows Server2012 servers and the Windows 8 Enterprise client computers. The network network consists of anActive Directory Domain Services (AD DS) domain named ABC.com. All users log on to theirclient devices using domain user accounts.

The client computers have antimalware applications from various vendors installed. The companywants to standardize on a single antimalware solution.

The company has recently purchased a Windows Intune subscription.

You want to deploy Intune Endpoint Protection on the client computers and ensure it runs on allcomputers. You plan to deploy a Windows Intune Agent Policy.

Which setting should you configure in the Windows Intune Agent Policy?

A. Enable Endpoint Protection - Yes B. Enable behavior monitoring - Yes C. Monitor file and program activity on computers - Yes D. Join Microsoft Active Protection Service Yes




QUESTION NO: 39

Your role of Systems Administrator at ABC.com includes the management of the Windows 8laptops and tablets.

You will use a recently purchased Windows Intune subscription to manage the Windows 8devices. All Windows 8 devices have been added to device groups in Windows Intune.

You want to deploy Windows Updates to all the Windows 8 devices by using Windows Intune.

You log in to the Windows Intune portal and create a new automatic approval rule for WindowsUpdates. You select the option to apply all critical updates and you select the All Computersgroup to apply the updates to.

You discover that some critical updates currently in the system have not been approved and madeavailable to the computers.

How can you ensure that all critical updates are automatically approved and made available to thecomputers?

A. By assigning the updates to a different device group in Windows Intune. B. By selecting the Run Selected option in the approval rule. C. By modifying the approval rule by selecting the All Updates option. D. By adding the Windows 8 devices to the All Computers group.


QUESTION NO: 40


The company has an Application Virtualization (App-V) infrastructure. All client computers havethe App-V client installed and run multiple App-V applications.

All users in the Sales department have roaming profiles. A new user named Mia works in theSales department.

Mia reports that it takes a long time open App-V applications on her computer. You confirm that



locally installed applications launch quickly on Mias computer.

How can you reduce the time it takes for Mia to launch App-V applications?

A. Reset the App-V FileSystem Cache on Mias computer. B. Configure a local user profile for Mia. C. Change the location of the App-V FileSystem Cache on Mias computer. D. Increase the size of the App-V FileSystem Cache on Mias computer.


QUESTION NO: 41


You will use a recently purchased Windows Intune subscription to manage the Windows 8devices.

Computers in the Research department often contain sensitive information. You want to monitorfile and program activity on computers in the Research department. You add the Researchdepartment computers to a Windows Intune device group named ResearchPCs.

What should you do next?

A. Apply a Windows Intune Agent Policy that uses the recommended settings. B. Apply a Windows Intune Agent Policy that enforces the Enable real-time protection setting. C. Apply a Windows Intune Agent Policy that enforces the Scan all downloads setting. D. Apply a Windows Intune Agent Policy that enforces the Enable Network Inspection Systemsetting.


QUESTION NO: 42

You have two computers at home. One is a laptop computer and one is a tablet computer. Bothdevices run Windows 8 Pro.



The laptop is named Win8Lap and is a member of a workgroup named HOME. The tablet isnamed Win8Tab and is a member of a HomeGroup.

You log in to Win8Lap using a local user account. You log in to Win8Tab using a Microsoftaccount.

You use Internet Explorer to visit websites. Passwords required by the websites are saved whenyou visit the websites on Win8Tab. When you visit the same websites on Win8Lap, you areprompted to enter the passwords.

You want the saved passwords on Win8Tab to be synchronized to Win8Lap.

Which two of the following actions should you perform? (Choose two).

A. Join Win8Lap to the HomeGroup. B. Join Win8Tab to the workgroup. C. Switch the local account to a Microsoft account. D. Switch the Microsoft account to a local account. E. Select the Trust this PC option on Win8Lap. F. Select the Trust this PC option on Win8Tab.

Answer: C,EExplanation:

QUESTION NO: 43


You are modifying a Windows 8 Enterprise image to deploy to 100 new computers.

You want to include a bootable recovery partition in the image that will enable you to connect tothe computer using a Remote Desktop connection when the computer is booted into the recoverypartition.

You plan to use Microsoft Diagnostics and Recovery Toolset (DaRT) to create a recovery image.You run the DaRT Recovery Image Wizard and create a recovery image named Win8RecImg.ISO.

How can you replace the recovery partition in your Windows 8 Image with your DaRT RecoveryImage?



A. Extract the boot.wim file from Win8RecImg.ISO and use it to create a bootable partition toreplace the recovery partition in the Windows 8 Image. B. Extract the install.wim file from Win8RecImg.ISO and use it to create a bootable partition toreplace the recovery partition in the Windows 8 Image. C. Replace the boot.wim file in the Windows 8 Image with the boot.wim file from Win8RecImg.ISO. D. Install WinRE to the recovery partition in the Windows 8 Image. Copy install.wim fromWin8RecImg.ISO into the recovery partition.


QUESTION NO: 44


You plan to deploy Microsoft BitLocker Administration and Monitoring (MBAM) to manageBitlocker on the client computers.

You configure MBAM on a server and deploy the MBAM Client software to all Windows 8Enterprise computers.

You now need to configure the MBAM Services Group Policy settings.

Which two policy settings must be configured to enable the MBAM Client BitLocker encryptionmanagement? (Choose two)

A. Select BitLocker recovery information to store. B. MBAM Recovery and Hardware service endpoint. C. Enter the client checking status frequency in minutes. D. Choose how BitLocker-protected fixed drives can be recovered. E. MBAM Status reporting service endpoint. F. Configure use of password for fixed drives.

Answer: B,EExplanation:

QUESTION NO: 45

You work as a desktop technician at ABC.com. The ABC.com network consists of an ActiveDirectory Domain Services (AD DS) domain named ABC.com. All servers run Windows Server



2012 and all client computers run Windows 8 Enterprise.

The company has a Microsoft Exchange email infrastructure. Users use the Mail app to accesstheir Microsoft Exchange mailboxes.

You will use a recently purchased Windows Intune subscription to manage the Windows 8 devicesand the Microsoft Exchange infrastructure.

You need to configure Windows Intune to enforce security settings on the Windows 8 devices thatinclude password length, password expiration and password history.

Which of the four Windows Intune policies should you configure to enforce the password settings?

A. Windows Intune Agent Settings. B. Windows Firewall Settings. C. Windows Intune Center Settings. D. Windows Intune Mobile Security.


QUESTION NO: 46


You have recently configured an Application Virtualization (App-V) infrastructure. All clientcomputers have the App-V client installed.

You plan to deploy an App-V application to computers in the Sales department.

You need to configure the Application Virtualization (App-V) infrastructure to ensure that Salesusers can only run the App-V application when their computers are connected to the network.

What should you configure?

A. You should decrease size of the App-V FileSystem Cache on the Sales computers. B. You should configure super-mandatory user profiles for the Sales users. C. You should tick the Limit disconnected operation to checkbox and enter a value of 1 in the



App-V client properties. D. You should clear the Allow disconnected operation check box in the App-V client properties.


QUESTION NO: 47


At work, you use a client computer named ABC-Admin1. ABC-Admin1 is a member of theABC.com domain. You log in to ABC-Admin1 using a Microsoft Account.

At home, you use a tablet computer named Tablet1. Tablet1 runs Windows 8 Pro and is amember of a HomeGroup. You log in to Tablet1 using the same Microsoft Account as the one youuse for your work computer.

You discover that saved passwords and other computer settings are not being synced betweenABC-Admin1 and Tablet1.

How can you ensure that the settings are synced between the two computers?

A. Configure Tablet1 and ABC-Admin1 as Trusted PCs. B. Join Tablet1 to the ABC.com domain. C. Join ABC-Admin1 to the HomeGroup. D. Upgrade Tablet1 to Windows 8 Enterprise.


QUESTION NO: 48

Your role of Systems Administrator at ABC.com includes the management of the Windows Server2012 servers and the Windows 8 client computers.

The company has purchased 20 new computers. The new computers all have the same hardwareconfigurations. You are planning to deploy Windows 8 to the new computers using a Windows 8image. After configuring one of the new computers as a reference computer with Windows 8 andthe required applications, you plan to capture an image of it.



To reduce the time taken for each new installation, you want to prevent the device drivers beingremoved when you generalize the reference computer so that the same device drivers areinstalled when you deploy the image to the remaining computers.

How can you prevent the Sysprep /Generalize process removing the device drivers from thereference computer before capturing the image?

A. Create an unattended answer file with the DoNotCleanUpNonPresentDevices option set to True. B. Create an unattended answer file with the DoNotCleanUpNonPresentDevices option set to False. C. Create an unattended answer file with the PersistAllDeviceInstalls option set to True. D. Create an unattended answer file with the PersistAllDeviceInstalls option set to False.


QUESTION NO: 49


Sales users often work away from the office. When they are away from the office, they canconnect to network resources using VPN (virtual private network) connections.

All client computers have a custom application named CorpApp installed. A new version of theapplication is deployed to computers in the network.

The new version of CorpApp is made available in a public cloud for the remote Sales users todownload and install.

Sales users report that Internet Explorer displays a warning message saying the application couldbe harmful to their computer when they attempt to download the application.

You need to enable remote users to download the new version of CorpApp without receiving thewarning messages.

How can you achieve this goal while maintaining the security of the remote users computers?

A. By publishing CorpApp to Windows Store.



B. By emailing CorpApp to the remote users. C. By instructing the remote users to disable Protected Mode in Internet Explorer. D. By publishing CorpApp in an Intranet Web site.


QUESTION NO: 50

Your role of desktop technician at ABC.com includes the management of the companys Windowsclient computers. All client computers run Windows 7 Professional 32-bit.

The company plans to migrate the client computers to Windows 8 Pro 64-bit.

You are developing a migration strategy to enable the migration to Windows 8 Pro. Your strategymust enable users to keep their current operating-system settings, application settings, andpersonal files.

You plan to use the User State Migration Tool (USMT) 5.0 to perform the PC-refresh using ahard-link migration store migration method.

You are testing your migration strategy on test computer.

You copy USMT 5.0 to the test computer. You then run the following command:

Scanstate C:\Store /i:migdocs.xml /i:migapp.xml /v:13 /c /hardlink /nocompress

Which two of the following actions should you perform next? (Choose two)

A. Install Windows 8 Pro using the existing disk partitions without formatting the partitions theninstall the required applications. B. Install Windows 8 Pro by creating and formatting new disk partitions then install the requiredapplications. C. Install Windows 8 Pro by selecting the upgrade option. D. Run the following command: Scanstate C:\Store /i:migdocs.xml /i:migapp.xml /v:13 /c /hardlink/nocompress E. Run the following command: Loadstate C:\Store /i:migdocs.xml /i:migapp.xml /v:13 /c /hardlink/nocompress

Answer: A,EExplanation:



70-688

Documents

Transcript of 70-688