Microsoft 70-680 Online Practice Questions and Exam Preparation

Microsoft 70-680 Online Questions & Answers

• Question 391:

  A standard user named User1 has a computer that runs Windows 7. You need to ensure that User1 can run Windows Easy Transfer. What should you do?

  A. Disable User Account Control (UAC).
  B. Add User1 to the Administrators group.
  C. Configure User1 to have a complex password.
  D. Copy the support folder from the Windows 7 installation media to the local hard disk drive.
  B. Add User1 to the Administrators group.

  ---

  Windows Easy Transfer Migration After you have set up Windows Easy Transfer on the source computer, you are ready to perform migration. If you want to migrate only a single user account, you can log on with that account to perform the transfer. If you want to migrate all accounts on the computer, you need to log on with a user account that has Local administrator privileges.

  To do this, start Windows Easy Transfer, select the transfer method, and then, on the Which Computer Are You Using Now? page, select This Is My Old Computer. If you are using the External Hard Disk or USB storage device method, Windows Easy Transfer will then perform a migration check and provide an estimate of the size of the data you can transfer to the new computer on the source computer. If you are using the Network or Easy Transfer Cable method, you will select items for migration on the destination computer.

  NOT User Account Control (UAC) UAC is a security feature of Windows 7 that informs you when the action that you want to undertake requires an elevation of privileges. If you logged on with a user account that was a member of the local administrators group in previous versions of Microsoft Windows, such as Windows XP, you automatically had administrator-level access at all times. This, by itself, was not a problem because recommended good practice was that people logged on with accounts that were members of the local administrator group only when they needed to do something related to administration. The problem with this is that people tended to use their administrator account as their normal user account. It was convenient for them because they did not have to log off and log on again each time they wanted to do something related to systems administration. Unfortunately, this behavior presented a security problem because any program run by a user logged on with an administrative account runs with the rights and privileges of that user. UAC resolves this problem by allowing a user that is a member of the local Administrators group to run as a standard user most of the time and to briefly elevate their privileges so that they are running as administrators when they attempt to carry out specific administration-related tasks.

• Question 392:

  You need to configure a computer to encrypt all inbound connections by using IPSec.

  What should you do?

  A. From Network and Sharing Center, click Connect to a network.
  B. From Network and Sharing Center, click Set up a new connection or network.
  C. From Windows Firewall with Advanced Security, click Inbound Rules and then click New Rule.
  D. From Windows Firewall with Advanced Security, click Connection Security Rules and then click New Rule.
  D. From Windows Firewall with Advanced Security, click Connection Security Rules and then click New Rule.

  ---

  Connection Security Rules Connection security rules are a special type of rule that deal with authenticated and encrypted traffic. You can use connection security rules to manage how communication occurs between different hosts on the network. You use the New Connection Security Rule Wizard, to create connection security rules. Connections can be authenticated using the Kerberos V5 protocol requiring a domain computer and user account or a domain computer account. If you select advanced properties, connections can be authenticated using NTLMv2, computer certificates from a particular certificate authority (CA) or using a pre-shared key.

  Connection Security Rules and IPSec policies The relationship between connection security rules and IPSec policies is similar to the relationship between AppLocker and Software Restriction Policies. Both sets of rules do similar things, but the ones that you use depend on the operating systems used by the client computers in your organization. All editions of Windows 7 and Windows Vista support connection security rules, but Windows XP does not.

• Question 393:

  A user named User1 uses a shared computer that runs Windows 7. User1 is a member of group named Group1.

  The computer contains a folder named Folder1.

  You need to configure the permissions on Folder1 to meet the following requirements:

  

  User1 must be allowed to delete all files in Folder1

  

  Members of Group1 must be able to create files in Folder1 All other members of Group1 must be prevented from deleting files they did not create in

  

  Folder1 All users must be prevented from modifying the permissions on Folder1

  What should you do?

  A. Assign Group1 the Write permission. Assign User1 the Modify permission.
  B. Assign Group1 the Modify permission. Assign User1 the Write permission.
  C. Deny Group1 the Write permission. Assign User1 the Modify permission.
  D. Deny Group1 the Modify permission. Assign User1 the Write permission.
  A. Assign Group1 the Write permission. Assign User1 the Modify permission.

  ---

  File and Folder Permissions Read Folders: Permits viewing and listing of files and subfolders Files: Permits viewing or accessing of the file's contents

  Write Folders: Permits adding of files and subfolders Files: Permits writing to a file

  Read and Execute Folders: Permits viewing and listing of files and subfolders as well as executing of files; inherited by files and folders Files: Permits viewing and accessing of the file's contents as well as executing of the file List Folder Contents Folders: Permits viewing and listing of files and subfolders as well as executing of files; inherited by folders only Files: N/A

  Modify Folders: Permits reading and writing of files and subfolders; allows deletion of the folder Files: Permits reading and writing of the file; allows deletion of the file

  Full Control Folders: Permits reading, writing, changing, and deleting of files and subfolders Files: Permits reading, writing, changing and deleting of the file

• Question 394:

  Your corporate network contains a Remote Desktop Gateway (RD Gateway) server named Server1 and a Remote Desktop Session Host (RD Session Host) server named Server2.

  You have a computer named Computer1 that runs Windows 7. You use Computer1 from home.

  You need to access Server2 from Computer1.

  What should you do?

  A. Run Mstsc.exe /admin /v:server2:443.
  B. Run Mstsc.exe /console /v:server2:8080.
  C. Create a Remote Desktop Connection and modify the Connect from anywhere settings.
  D. Create a Remote Desktop Connection and modify the Server authentication settings.
  C. Create a Remote Desktop Connection and modify the Connect from anywhere settings.

  ---

  To connect using an RD Gateway server, navigate to the Advanced tab of the Remote Desktop Connection Properties dialog box and click Settings under Connect From Anywhere. This opens the RD Gateway Server Settings dialog box. This dialog box allows you to specify RD Gateway settings, including whether or not you want the RD Gateway to be detected automatically, whether to use a specific RD Gateway server, as shown in the firgure, or you can specify Do Not Use an RD Gateway Server, which is the default setting.

  

• Question 395:

  You have a computer that runs Windows 7.

  You need to identify which applications were installed during the last week.

  What should you do?

  A. From Reliability Monitor, review the informational events.
  B. From System Information, review the Software Environment.
  C. From Performance Monitor, review the System Diagnostics Report.
  D. From Performance Monitor, run the System Performance Data Collector Set.
  A. From Reliability Monitor, review the informational events.

  ---

  Reliability Monitor tracks a computer's stability. It can also tell you when events that could affect stability (such as the installation of a software application) occurred and whether any restarts were required after these events. Action Center monitors your computer and reports problems with security, maintenance, and related settings. The Windows Experience Index indicates the suitability of your current computer hardware for running resource intensive applications.

  

• Question 396:

  You have a computer that runs Windows 7.

  You perform regular data backups and system image backups. The computer experiences a hard disk failure. You replace the failed hard disk.

  You need to recover the computer to the previous Windows 7 environment.

  You start the computer from the Windows 7 installation media. Which recover option should you select?

  A. Command Prompt
  B. Startup Repair
  C. System Image Recovery
  D. System Restore
  C. System Image Recovery

  ---

  System Image Recovery Enables you to implement a System Image restore. You would choose this option if your hard disk failed or needed to be wiped. If system changes are causing problems, you would choose the System Restore option.

  NOT Startup Repair Automatically fixes problems that prevent Windows from starting. If Windows 7 had boot problems during a previous restart, a normal boot (without accessing the Advanced Boot dialog box) gives you the option of selecting Startup Repair.

  NOT System Restore Gives you another method of starting a system restore to a previous restore point. Because you can access this menu when you boot from a DVD-ROM, this lets you repair your system when recent changes to system settings prevent your computer from booting normally.

  NOT Command Prompt Gives access to the file system, volumes, and files through a command- line interface.

• Question 397:

  Which of the following is not a volume type usable by Windows 7?

  A. FAT
  B. exFAT
  C. NTFS
  D. All of the above a volume types in Windows 7.
  D. All of the above a volume types in Windows 7.

• Question 398:

  You use a portable computer that has Windows 7 Enterprise SP1 installed. A conference room at your company has a network projector installed on a server within the company network. You need to connect to the projector from your computer.

  What should you do?

  A. From Device Manager, click Add legacy hardware.
  B. From Accessories, click Connect to a Network Projector.
  C. Run the Displayswitch.exe command and select Projector only.
  D. From Display, click Connect to a projector.
  C. Run the Displayswitch.exe command and select Projector only.

• Question 399:

  Your office contains the wireless networks shown the following table.

  

  You have a portable computer that runs Windows 7. The computer successfully connects to all of the wireless networks.

  You discover that when you start the computer, it connects to Network2. You need to ensure that the computer connects to Network3 by default.

  What should you do?

  A. From Network and Sharing Center, modify the Advanced sharing settings.
  B. From Network and Sharing Center, modify the Manage Wireless Networks settings.
  C. From Network Connections, modify the properties of the wireless network adapter.
  D. From Network Connections, modify the bindings of the wireless network adapter.
  B. From Network and Sharing Center, modify the Manage Wireless Networks settings.

  ---

  Managing Preferred Wireless Networks If you have a wireless-enabled mobile computer such as a laptop, you can take it to various locations and connect to whatever wireless networks are available at any location. You can see the available networks by opening Network And Sharing Center and clicking Connect To A Network. You can also click the Wireless icon on the Toolbar at the bottom right section of your screen. You can then right-click a network and click Connect. Available networks are listed in the Manage Wireless Networks dialog box. If you have previously connected to various wireless networks, the list of these networks is referred to as your preferred list. The wireless networks on your preferred list are your preferred wireless networks. You can click Manage Wireless Networks in the Network And Sharing Center and view saved wireless networks. You can change the order in which your computer attempts to connect to preferred networks by dragging the networks up or down in the list. You can also change preferences for the network by right- clicking the network and selecting Properties.

• Question 400:

  You have a stand-alone computer named Computer1 that runs Windows 7. Several users share Computer1.

  You need to prevent all users who are members of a group named Group1 from running Windows Media Player. All other users must be allowed to run Windows Media Player.

  You must achieve this goal by using the least amount of administrative effort.

  What should you do?

  A. From Software Restriction Policies, create a path rule.
  B. From Software Restriction Policies, create a hash rule.
  C. From Application Control Policies, create the default rules.
  D. From Application Control Policies, create an executable rule.
  D. From Application Control Policies, create an executable rule.

  ---

  Executable Rules Executable rules apply to files that have .exe and .com file extensions. AppLocker policies are primarily about executable files, and it is likely that the majority of the AppLocker policies that you work with in your organizational environment will involve executable rules. The default executable rules are path rules that allow everyone to execute all applications in the Program Files folder and the Windows folder. The default rules also allow members of the administrators group to execute applications in any location on the computer. It is necessary to use the default executable rules, or rules that mirror their functionality, because Windows does not function properly unless certain applications, covered by these default rules, are allowed to execute. When you create a rule, the scope of the rule is set to Everyone, even though there is not a local group named Everyone. If you choose to modify the rule, you can select a specific security group or user account.

  NOT Default rules Default rules are a set of rules that can be created automatically and which allow access to default Windows and program files. Default rules are necessary because AppLocker has a built- in fallback block rule that restricts the execution of any application that is not subject to an Allow rule. This means that when you enable AppLocker, you cannot execute any application, script, or installer that does not fall under an Allow rule. There are different default rules for each rule type. The default rules for each rule type are general and can be tailored by administrators specifically for their environments. For example, the default executable rules are path rules. Security-minded administrators might replace the default rules with publisher or hash rules because these are more secure.

  NOT Path Rules Path rules, allow you to specify a file, folder, or registry key as the target of a Software Restriction Policy. The more specific a path rule is, the higher its precedence. For example, if you have a path rule that sets the file C: \Program files \Application\App.exe to Unrestricted and one that sets the folder C:\Programfiles\Application to Disallowed, the more specific rule takes precedence and the application can execute. Wildcards can be used in path rules, so it is possible to have a path rule that specifies C:\Program files\Application\*.exe. Wildcard rules are less specific than rules that use a file's full path. The drawback of path rules is that they rely on files and folders remaining in place. For example, if you created a path rule to block the application C:\Apps\Filesharing.exe, an attacker could execute the same application by moving it to another directory or renaming it something other than Filesharing.exe. Path rules work only when the file and folder permissions of the underlying operating system do not allow files to be moved and renamed.

  NOT Hash Rules Hash rules, work through the generation of a digital fingerprint that identifies a file based on its binary characteristics. This means that a file that you create a hash rule for will be identifiable regardless of the name assigned to it or the location from which you access it. Hash rules work on any file and do not require the file to have a digital signature. The drawback of hash rules is that you need to create them on a per-file basis. You cannot create hash rules automatically for Software Restriction Policies; you must generate each rule manually. You must also modify hash rules each time that you apply a software update to an application that is the subject of a hash rule. Software updates modify the binary properties of the file, which means that the modified file does not match the original digital fingerprint.