Microsoft 70-686 Online Practice Questions and Exam Preparation

Microsoft 70-686 Online Questions & Answers

• Question 121:

  All client computers in your network run Windows XP. Some of the computers are part of a secure network. Some of the computers connect to the network by using virtual private networking (VPN).

  You are planning to deploy Windows 7.

  You have the following requirements:

  You need to design a deployment strategy that meets the requirements.

  What should you do?

  A. Use the Microsoft Deployment Toolkit to perform a lite-touch installation.
  B. Use Windows Deployment Services on a network server to deploy Windows 7 by using an install image.
  C. Using a Windows PE boot media, use ImageX to apply the image from a network share to the client computers.
  D. Use System Center Configuration Manager 2007 R2 to perform a zero-touch installation.
  A. Use the Microsoft Deployment Toolkit to perform a lite-touch installation.

• Question 122:

  You are planning to deploy a computer in the lobby of each office. You need to control which programs can run on the computer.

  What should you do?

  A. Use the Group Policy Object Editor to modify the local computer policy on the computer to enable and configure AppLocker.
  B. Use the Group Policy Object Editor to modify the local computer policy on the computer to enable and configure BitLocker.
  C. Create a GPO that enables and configures AppLocker and link it to the Carlsbad OU.
  D. Create a GPO that enables and configures BitLocker and link it to the root of the AD DS domain.
  A. Use the Group Policy Object Editor to modify the local computer policy on the computer to enable and configure AppLocker.

• Question 123:

  You are designing a Windows 7 deployment image. You receive a baseline image over the network, from a different geographic location.

  You need to verify that the baseline image is valid. Which tool should you use?

  A. ImageX
  B. the Deployment Image Servicing and Management (DISM) tool
  C. Windows Compatibility Evaluator
  D. windows System Image Manager (Windows SIM)
  A. ImageX

  ---

  imagex /append image_path image_file {"description"}{/boot | /check | /config configuration_file.ini | /scroll | /verify}/check Checks the integrity of the .wim file. If not provided, existing checks are removed. http://technet.microsoft.com/en-us/library/cc749447(v=ws.10).aspx

• Question 124:

  Your network has a single domain with 1,000 client computers that run Windows 7.

  A large number of software installation scripts are configured to run on the client computers.

  You need to recommend a Group Policy setting to allow users to log on to their computers as soon as possible at first boot.

  What should you recommend?

  A. Configure the Run logon scripts synchronously setting to be Enabled.
  B. Configure the Run logon scripts synchronously setting to be Disabled.
  C. Configure the Run startup scripts asynchronously setting to be Enabled.
  D. Configure the Run startup scripts asynchronously setting to be Disabled.
  C. Configure the Run startup scripts asynchronously setting to be Enabled.

  ---

  Run logon scripts synchronously Description Directs the system to wait for logon scripts to finish running before it starts the Windows Explorer interface program and creates the desktop. If you enable this policy, Windows Explorer does not start until the logon scripts have finished running. This setting assures that logon script processing is complete before the user starts working, but it can delay the appearance of the desktop. If you disable this policy or do not configure it, the logon scripts and Windows Explorer are not synchronized and can run simultaneously. Run startup scripts asynchronously Description Lets the system run startup scripts simultaneously. Startup scripts are batch files that run before the user is invited to log on. By default, the system waits for each startup script to complete before it runs the next startup script. If you enable this policy, the system does not coordinate the running of startup scripts. As a result, startup scripts can run simultaneously. If you disable this policy or do not configure it, a startup script cannot run until the previous script is complete. http://msdn.microsoft.com/en-us/library/ms811602.aspx

• Question 125:

  Your companys network has client computers that run Windows 7.

  A software vendor releases version 2 of an application that your company uses.

  Your company currently uses version 1.

  Version 1 and version 2 are not compatible.

  You plan to deploy version 2 of the application.

  You have the following requirements:

  Users must be able to run both versions of the application on their computers.

  Version 2 must be available when a client computer is not connected to the network.

  You need to plan a software deployment process that meets the requirements.

  What should you do?

  A. Deploy version 2 of the application by using a Microsoft System Center Configuration Manager package.
  B. Deploy version 2 of the application by using a Group Policy Software Installation policy.
  C. Deploy version 2 of the application as a Remote Desktop Services RemoteApp.
  D. Deploy version 2 of the application by using Microsoft Application Virtualization (App-V).
  D. Deploy version 2 of the application by using Microsoft Application Virtualization (App-V).

  ---

  Microsoft Application Virtualization (MS App-V) platform allows applications to be deployed in real-time to any client from a virtual application server. It removes the need for local installation of the applications. Instead, only the App-v client needs to be installed on the client machines. All application data is permanently stored on the virtual application server. Whichever software is needed is either streamed or locally cached from the application server on demand and run locally. The App-V stack sandboxes the execution environment so that the application does not make changes to the client itself (OS File System and/or Registry). App-V applications are also sandboxed from each other, so that different versions of the same application can be run under App-V concurrently. http://en.wikipedia.org/wiki/Microsoft_App-V

• Question 126:

  Your company has 1,000 client computers that run Windows 7 Enterprise.

  You need to ensure that users cannot bypass or disable Internet Explorer logging.

  What should you do?

  A. Set the Disable the Advanced Page state to Enabled, and set the Turn off InPrivate Browsing state to Enabled.
  B. Set the Turn off InPrivate Filtering state to Enabled, and set the Disable the General Page state to Enabled.
  C. Set the Turn off InPrivate Browsing state to Enabled, and set the Disable the General Page state to Enabled.
  D. Set the Disable the General Page state to Enabled, and set the Disable the Advanced Page state to Enabled.
  C. Set the Turn off InPrivate Browsing state to Enabled, and set the Disable the General Page state to Enabled.

  ---

  InPrivate Browsing in Internet Explorer 8 helps prevent one's browsing history, temporary Internet files, form data, cookies, and usernames and passwords from being retained by the browser, leaving no easily accessible evidence of browsing

  or search history.

  http://en.wikipedia.org/wiki/Internet_Explorer_8

  hints:

  run IE InPrivate Browsing will not keep any history or logging.

  General Page able to clear IE history

  

  untitled

• Question 127:

  Your company has client computers that run Windows XP Professional.

  You are planning to install Windows 7 Enterprise on the existing client computers.

  You need to ensure that the user state can be viewed after it has been collected and saved.

  What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)

  A. Perform an offline migration by using Windows PE.
  B. Use an uncompressed migration store.
  C. Perform an offline migration by using Windows.old.
  D. Use a hard-link migration store.
  B. Use an uncompressed migration store.
  D. Use a hard-link migration store.

• Question 128:

  You are planning to upgrade Internet Explorer.

  You have the following requirements:

  You need to design a deployment method that meets the requirements.

  What should you do?

  A. Use Windows Server Update Services (WSUS).
  B. Use Internet Explorer Administration Kit (IEAK) and Group Policy.
  C. Use Microsoft System Center Configuration Manager.
  D. Use Microsoft System Center Essentials.
  A. Use Windows Server Update Services (WSUS).

  ---

  Windows Server Update Services 2.0 and above comprise a repository of update packages from Microsoft. It allows administrators to approve or decline updates before release, to force updates to install by a given date, and to obtain extensive reports on what updates each machine requires. System administrators can also configure WSUS to approve certain classes of updates automatically (critical updates, security updates, service packs, drivers, etc.). One can also approve updates for "detection" only, allowing an administrator to see what machines will require a given update without also installing that update. http://en.wikipedia.org/wiki/Windows_Server_Update_Services

• Question 129:

  You deploy Windows 7 to the computers that are used by your companys Web developers. All Web developer user accounts are in a single organizational unit (OU).

  Internet Explorer is blocking pop-up windows for multiple internal Web applications that are hosted on different servers.

  You need to use Group Policy to ensure that Internet Explorer does not block pop-up windows for internal Web applications.

  What should you do?

  A. Enable Compatibility View in Internet Explorer.
  B. Add each server to the Intranet zone.
  C. Add each server to the Trusted Sites zone.
  D. Set the default security setting in Internet Explorer to Medium.
  B. Add each server to the Intranet zone.

  ---

  Pop-up Blocker features

  Pop-up Blocker is turned on by default. There are restrictions on the size and position of pop-up windows, regardless of the Pop-up Blocker setting. Pop-up windows cannot be opened larger than or outside the viewable desktop area. For

  more information, see "Windows Restrictions" in this document.

  When this functionality is enabled, automatic and background pop-up windows are blocked, but windows that are opened by a user click will still open in the usual manner. Note that sites in the

  Trusted Sites and Local

  Intranet zones do not have their pop-up windows blocked by default, as they are considered safe. This setting can be configured in the Security tab in Internet Options. http://technet.microsoft.com/en-us/library/cc784600(v=ws.10).aspx hints:

  internal web , so i choose intranet zones.

  Local Intranet Zone

  By default, the Local Intranet zone contains all network connections that were established by using a Universal

  Naming Convention (UNC) path, and Web sites that bypass the proxy server or have names that do not include periods (for example, http://local), as long as they are not assigned to either the Restricted Sites or Trusted Sites zone. The

  default security level for the Local Intranet zone is set to Medium (Internet Explorer 4) or Medium-low (Internet Explorer 5 and 6). Be aware that when you access a local area network (LAN) or an intranet share, or an intranet Web site by

  using an Internet Protocol (IP) address or by using a fully qualified domain name (FQDN), the share or Web site is identified as being in the Internet zone instead of in the Local intranet zone.

  Trusted Sites Zone

  This zone contains Web sites that you trust as safe (such as Web sites that are on your organization's intranet or that come from established companies in whom you have confidence). When you add a Web site to the Trusted Sites zone, you

  believe that files you download or that you run from the Web site will not damage your computer or data. By default, there are no Web sites that are assigned to the Trusted Sites zone, and the security level is set to Low.

  http://support.microsoft.com/kb/174360

• Question 130:

  All client computers in your network run Windows 7 Enterprise.

  You need to prevent all standard user accounts from running programs that are signed by a specific publisher.

  What should you do?

  A. Use AppLocker application control policies. Create an Executable rule.
  B. Use software restriction policies. Create a hash rule.
  C. Use AppLocker application control policies. Create a Windows Installer rule.
  D. Use software restriction policies. Create a path rule.
  A. Use AppLocker application control policies. Create an Executable rule.

  ---

  http://technet.microsoft.com/en-us/library/dd759068.aspx The AppLocker Microsoft Management Console (MMC) snap-in is organized into four areas called rule collections. The four rule collections are executable files, scripts, Windows Installer files, and DLL files. These collections give the administrator an easy way to differentiate the rules for different types of applications. Rule conditions are criteria that the AppLocker rule is based on. Primary conditions are required to create an AppLocker rule. The three primary rule conditions are publisher, path, and file hash. Publisher - This condition identifies an application based on its digital signature and extended attributes. The digital signature contains information about the company that created the application (the publisher). The extended attributes, which are obtained from the binary resource, contain the name of the product that the application is part of and the version number of the application. The publisher may be a software development company, such as Microsoft, or the information technology department of your organization. Path - This condition identifies an application by its location in the file system of the computer or on the network. AppLocker uses path variables for directories in Windows. File hash - When the file hash condition is chosen, the system computes a cryptographic hash of the identified file.