Microsoft 70-680 Online Practice Questions and Exam Preparation

Microsoft 70-680 Online Questions & Answers

• Question 461:

  You have a computer named Computer1 that runs Windows 7.

  You need to configure Computer1 to support the collection of Windows system events from other computers.

  Which command should you run?

  A. Wecutil.exe qc
  B. Winrm.exe quickconfig
  C. Winrs r: Computer1
  D. Wmic /aggregate
  A. Wecutil.exe qc

  ---

  Wecutil To configure a computer running Windows 7 to collect events, open an elevated command prompt and enter the following command to configure the Windows Event Collector service: wecutil qc {qc | quick-config}

  Configures the Windows Event Collector service to ensure a subscription can be created and sustained through reboots. This includes the following steps:

  8.

  Enable the ForwardedEvents channel if it is disabled.

  9.

  Set the Windows Event Collector service to delay start.

  10.

  Start the Windows Event Collector service if it is not running.

• Question 462:

  You have a computer that runs Windows 7.

  Your network contains a DHCP server that runs Windows Server 2008 R2. The server is configured as a Network Access Protection (NAP) enforcement point.

  You need to configure the computer as a NAP client.

  Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. From Services, set the Netlogon service Startup Type to Automatic.
  B. From Services, set the Network Access Protection Agent service Startup Type to Automatic.
  C. From the NAP Client Configuration console, configure the user interface settings.
  D. From the NAP Client Configuration console, enable the DHCP Quarantine Enforcement Client.
  B. From Services, set the Network Access Protection Agent service Startup Type to Automatic.
  D. From the NAP Client Configuration console, enable the DHCP Quarantine Enforcement Client.

  ---

  Network Access Protection Network Access Protection (NAP) is a feature in Windows Server 2008 that controls access to network resources based on a client computer's identity and compliance with corporate governance policy. NAP allows network administrators to define granular levels of network access based on who a client is, the groups to which the client belongs, and the degree to which that client is compliant with corporate governance policy. If a client is not compliant, NAP provides a mechanism to automatically bring the client back into compliance and then dynamically increase its level of network access.

  NAP Client Configuration Network Access Protection (NAP), a new feature in Windows Vista?and Windows Server?2008, allows you to control the access of client computers to network resources based on computer identity and compliance with corporate governance policy. To implement NAP, you must configure NAP settings on both servers and client computers. There are three tools that you can use to configure NAP client settings: The NAP Client Configuration console provides a graphical user interface with which you can configure NAP client settings on the local computer or in a configuration file that you can save and apply to other computers. The Netsh commands for NAP client provide a command-line tool that you can use to configure client computers or to create a configuration file that you can save and apply to other computers. If you want to manage NAP client settings on domain member client computers, you can use the Group Policy Management Console and the Group Policy Management Editor. When you configure NAP client settings in Group Policy, these settings are applied on NAP-capable domain member client computers when Group Policy is refreshed.

  To enable and disable the DHCP enforcement client by using the Windows interface

  1.

  To open the NAP Client Configuration console, click Start, click All Programs, click Accessories, click Run, type NAPCLCFG.MSC, and then click OK.

  2.

  Click Enforcement Clients.

  3.

  Right-click DHCP Enforcement Client, and then click Enable or Disable.

  Network Access Protection Agent The Network Access Protection (NAP) agent service collects and manages health information for client computers on a network. Information collected by NAP agent is used to make sure that the client computer has the required software and settings. If a client computer is not compliant with health policy, it can be provided with restricted network access until its configuration is updated. Depending on the configuration of health policy, client computers might be automatically updated so that users quickly regain full network access without having to manually update their computer.

• Question 463:

  You have a computer that runs Windows 7. The computer contains a folder named C:\data. You use Advanced Sharing to share C:\data by using the default share permissions.

  When a user tries to access the share over the network, he gets an "Access is Denied" error message.

  You need to ensure that the user can access the share.

  What should you do?

  A. Allow file and printer sharing through Windows Firewall.
  B. Change the network location from a Public network to a Home or Work network.
  C. From the Security settings of the folder, assign the user the Read NTFS permission.
  D. From the Advanced Sharing settings of the folder, assign the user the Read share permission.
  C. From the Security settings of the folder, assign the user the Read NTFS permission.

  ---

  Advanced Security Settings Properties Page - Permissions Tab You can add additional resources, groups or users to have explicit NTFS permissions to access this object, or you can edit or remove the NTFS permissions granted to a resource, group, or user on the object. Inherited permissions are those that are propagated to an object from a parent object. Inherited permissions ease the task of managing permissions and ensure consistency of permissions among all objects within a given container.

• Question 464:

  You have a computer that runs windows 7.

  You configure the computer to automatically install all updates.

  You need to verify whether a specific update is installed.

  What should you do?

  A. In event viewer, examine the application log.
  B. In windows update, examine the update history.
  C. At the command prompt, run Wusa.exe and specify the /kb parameter.
  D. At the command prompt, run Verifier.exe and specify the /query parameter.
  B. In windows update, examine the update history.

• Question 465:

  You work as the desktop support technician at Abc.com.

  The Abc.com network consists of a single Active Directory domain named Abc.com. All client computers on the Abc.com network run Windows Vista Business.

  You have been instructed to upgrade a client computer named GB680 to Microsoft Windows 7 Professional.

  GB680 has the following specifications:

  

  Drive C (system drive) with 12 GB of free space

  

  Drive D (data drive) with 40 GB of free space

  

  Four memory slots with two occupied by 512 MB memory sticks

  

  One 2.0 GHz 32-bit processor

  You need to ensure that Windows 7 Professional can be installed on GB680.

  What should you do?

  A. Install Windows 7 on Drive D.
  B. Create more free space on Drive C.
  C. Upgrade the memory.
  D. Upgrade the processor.
  B. Create more free space on Drive C.

• Question 466:

  You are a network administrator for a global company that has Windows Server 2008 R2 servers and Windows 7 Enterprise computers.

  Management wants to decrease VPN costs by implementing DirectAccess for remote network access.

  They assign you to evaluate the current network infrastructure, which includes the following elements:

  

  Active Directory

  

  IPv6 network and applications

  

  Server for DirectAccess service

  You need to ensure that all critical infrastructure components are present.

  What should you add to the infrastructure?

  A. Windows Internet Name Service (WINS) server
  B. Public key infrastructure
  C. NAT-PT devices
  D. Windows Server 2012
  B. Public key infrastructure

  ---

  DirectAccess With Windows Server 2008 R2 requires:

  *

  Public key infrastructure (PKI) to issue computer certificates.

  *

  One or more DirectAccess servers running Windows Server 2008 R2 with two network adapters: one that is connected directly to the Internet, and a second that is connected to the intranet.

  *

  On the DirectAccess server, at least two consecutive, public IPv4 addresses assigned to the network adapter that is connected to the Internet.

  *

  DirectAccess clients running Windows 7 or Windows 8 "Enterprise" edition clients

  *

  At least one domain controller and Domain Name System (DNS) server running Windows Server 2008 SP2 or Windows Server 2008 R2.

  Note: DirectAccess, also known as Unified Remote Access, is a VPN-like technology that provides intranet connectivity to client computers when they are connected to the Internet. Unlike many traditional VPN connections, which must be initiated and terminated by explicit user action, DirectAccess connections are designed to connect automatically as soon as the computer connects to the Internet. DirectAccess was introduced in Windows Server 2008 R2, providing this service to Windows 7 and Windows 8 "Enterprise" edition clients.

• Question 467:

  You have a computer that runs Windows 7.

  You update the driver for the computer's video card and the computer becomes unresponsive. You need recover the computer in the minimum amount of time.

  What should you do?

  A. Restart in safe mode and then roll back the video card driver.
  B. Restart in safe mode and then revert the computer to a previous restore point.
  C. Start the computer from the Windows 7 installation media. Select Repair your computer and then select System Restore.
  D. Start the computer from the Windows 7 installation media. Select Repair your computer and then select System Image Recovery.
  A. Restart in safe mode and then roll back the video card driver.

  ---

  If you install a driver that causes your computer to become unstable, you should first attempt to roll back the driver.

  If this does not solve the problem, you can restore system files and settings by performing a system restore to restore the computer to its last system restore point.

  A system restore returns a computer system to a selected restore point. System restores do not alter user files. Note that a system restore is not the same as a System Image restore.

• Question 468:

  Your network has a main office and a branch office.

  The branch office has five client computers that run Windows 7. All client computers are configured to use BranchCache.

  At the branch office, a computer named Computer1 is experiencing performance issues.

  You need to temporarily prevent all computers from retrieving cached content from Computer1.

  What should you do on Computer1?

  A. At the command prompt, run Netsh branchcache flush.
  B. At the command prompt, run Netsh branchcache dump.
  C. Modify the Configure BranchCache for network files Group Policy setting.
  D. Modify the Set percentage of disk space used for client computer cache Group Policy setting.
  A. At the command prompt, run Netsh branchcache flush.

  ---

  Flush

  Deletes the contents of the local BranchCache cache.

• Question 469:

  You have a computer that runs Windows 7. The computer is in a workgroup.

  You need to ensure that you can decrypt Encrypting File System (EFS) files on the computer if you forget your password.

  What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)

  A. From Credential Manager, select Back up vault.
  B. From User Accounts, select Create a password reset disk.
  C. From User Accounts, select Manage your file encryption certificates.
  D. From Authorization Manager, modify the Authorization Manager options.
  B. From User Accounts, select Create a password reset disk.
  C. From User Accounts, select Manage your file encryption certificates.

  ---

  Password reset disks It is not unusual for users to forget their passwords to local user accounts from time to time, especially when they use strong passwords. Before the advent of password reset disks, the only way for administrators to restore a forgotten local user account password was to manually reset the user's password. In the process, the following information was lost: E-mail that was encrypted with the user's public key Internet passwords that were saved on the computer Files that the user had encrypted Password reset disks offer another solution to the problem of a forgotten password for a local user account. If users create password reset disks for their local accounts before they forget their passwords, they can reset the passwords without losing valuable data that was lost previously with administrative password resets. When you create a password reset disk, a public key and private key pair are created. The private key is stored on a disk: the password reset disk. The public key encrypts the local user account password. If users forget their passwords, they can insert the password reset disk, which contains the private key, and decrypt the current password. The Forgotten Password Wizard prompts the user for a new password, which is then encrypted with the public key. Data is not lost because, basically, the user is simply changing a password. It is essential that password reset disks be stored in secured locations.

  Back up your Encryption Certificate

  1.

  Open User Accounts by clicking the Start button, clicking Control Panel, clicking User Accounts and Family Safety (or clicking User Accounts, if you are nnected to a network domain), and then clicking User Accounts.

  2.

  In the left pane, click Manage your file encryption certificates.

  3.

  In the Encrypting File System wizard, click Next.

  4.

  Click Use this certificate, and then click Next.

  If you need more details to identify the certificate that is listed, click View certificate. If you want to choose a different certificate, click Select certificate, and then click the certificate you want to back up.

  5.

  Click Back up the certificate and key now.

  6.

  Type or navigate to the location where you want to store the backup. We recommend that you store the backup on removable media such as a disc or USB flash drive.

  7.

  Type and then confirm a password for the backup file, and then click Next. We recommend that you protect the backup file with a strong password.

  8.

  Select the I'll update my encrypted files later check box, and then click Next.

• Question 470:

  A company has an Active Directory forest which is shown in the following graphic.

  

  The company's client computers run Windows 7. You deploy BitLocker Drive Encryption on all the client computers.

  You need to configure BitLocker Drive Encryption to back up recovery information to Active Directory for BitLocker protected drives and the Trusted Platform Module (TPM).

  Which actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

  Select and Place:

  

  

  ---

  Ref: http://technet.microsoft.com/en-us/library/cc766015(v=WS.10).aspx