Microsoft 70-686 Online Practice Questions and Exam Preparation

Microsoft 70-686 Online Questions & Answers

• Question 131:

  All client computers in a company run Windows 7 Enterprise. The company creates Windows PowerShell scripts to collect statistical data from client computers. A logon script is configured to run the PowerShell scripts during logon.

  An error occurs when the scripts are run on client computers.

  You need to ensure that all PowerShell scripts run correctly.

  Which command should you use? (To answer, drag the appropriate component from the list of components to the correct location or locations in the work area.)

  Select and Place:

  

  

• Question 132:

  A company has a server that runs Windows Server 2008 R2 in an Active Directory Domain Services (AD DS) environment. The domain controllers were recently upgraded from Windows Server 2003. You are using Group Policy to deploy

  applications to the client computers remotely. The computers reboot each night as part of routine maintenance.

  You need to ensure that the application installs when the computer starts up.

  Which Group Policy setting should you configure? To answer, select the appropriate setting or settings in the work area.

  Hot Area:

  

  

• Question 133:

  Your company's network is shown in the following diagram.

  

  All client computers are members of the contoso.com Active Directory Domain Services (AD DS) domain. Each network segment is represented by an AD DS site object that is named to match the network segment. Your company plans to deploy Windows 7 to all client computers. You need to manage the deployment to ensure that client computers in branch office C can activate Windows. What should you do?

  A. Create a DNS service (SRV) resource record named _vlmcs._udp.BranchOfficeC._sites.contoso.com.
  B. Deploy the Multiple Activation Key (MAK) in branch office C.
  C. Deploy the Key Management Service (KMS) in branch office C.
  D. Create a DNS service (SRV) resource record named _vlmcs._tcp.BranchOfficeC._sites.contoso.com.
  B. Deploy the Multiple Activation Key (MAK) in branch office C.

  ---

  Key Management Service (KMS) requires a count of 25 or higher from the KMS host to activate itself. refer to http://technet.microsoft.com/en-us/library/ee939272.aspx

• Question 134:

  You use Group Policy to configure Windows 7 Enterprise client computers.

  You need to modify a Group Policy object (GPO) to specify a custom location for the temp folder.

  Which setting should you select? To answer, select the appropriate setting or settings in the work area.

  Hot Area:

  

  

• Question 135:

  You are using Windows Deployment Services (WDS) to deploy new images of Windows 7 to 64-bit computers.

  Technicians receive the error message shown in the exhibit when they attempt to boot by using PXE.

  You need to ensure that the technicians can boot the client computers by using PXE.

  What should you do? (Choose all that apply.)

  

  A. Run the bcdedit /set {ntldr} description "Windows 7 32-bit" command.
  B. Add a 64-bit boot image to the WDS server.
  C. Add a 64-bit install image to the WDS server.
  D. Add a 32-bit boot image to the WDS server.
  E. Run the bcdedit /set {ntldr} description "Windows 7 64-bit" command.
  F. Add a 32-bit install image to the WDS server.
  B. Add a 64-bit boot image to the WDS server.
  D. Add a 32-bit boot image to the WDS server.

• Question 136:

  Your network has a single domain with 1,000 client computers that run Windows 7. You use Microsoft System Center Configuration Manager 2007 to distribute and install software applications. All users have standard user accounts.

  You plan to use Group Policy to ensure that application installation functions properly.

  You need to design the User Account Control (UAC) policy.

  What should you do?

  A. Configure the User Account Control: Behavior of the elevation prompt for standard users setting to be Prompt for credentials.
  B. Configure the User Account Control: Only elevate executables that are signed and validated setting to be Enabled.
  C. Configure the User Account Control: Detect application installations and prompt for elevation setting to be Disabled.
  D. Configure the User Account Control: Detect application installations and prompt for elevation setting to be Enabled.
  C. Configure the User Account Control: Detect application installations and prompt for elevation setting to be Disabled.

  ---

  User Account Control: Detect application installations and prompt for elevation The User Account Control: Detect application installations and prompt for elevation policy setting controls the behavior of application installation detection for the

  computer.

  The options are:

  Enabled. (Default for home) When an application installation package is detected that requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation

  continues with the applicable privilege.

  Disabled. (Default for enterprise) Application installation packages are not detected and prompted for elevation. Enterprises that are running standard user desktops and use delegated installation technologies such as Group Policy Software

  Installation or Systems Management Server (SMS) should disable this policy setting. In this case, installer detection is unnecessary.

  http://technet.microsoft.com/en-us/library/dd851376.aspx

• Question 137:

  A company has client computers that run windows 7. A new corporate security policy states that all client computers in the legal department should allow only inbound and outbound network connections for which there is an existing firewall rule.

  You need to ensure that all client computers in the legal department are configured to follow the new security policy.

  Which settings should you select? To answer, select the appropriate setting or settings in the work area.

  Hot Area:

  

  

• Question 138:

  Your companys network includes client computers that run Windows 7.

  You design a wireless network to use Extensible Authentication ProtocolCTransport Level Security (EAP-TLS). The Network Policy Server has a certificate installed.

  Client computers are unable to connect to the wireless access points.

  You need to enable client computers to connect to the wireless network.

  What should you do?

  A. Install a certificate in the Trusted Root Certification Authorities certificate store.
  B. Configure client computers to use Protected Extensible Authentication ProtocolCTransport Layer Security (PEAP-TLS).
  C. Configure client computers to use Protected Extensible Authentication Protocol- Microsoft Challenge Handshake Authentication Protocol version 2 (PEAP-MS-CHAP v2).
  D. Install a certificate in the Third-Party Root Certification Authorities certificate store.
  A. Install a certificate in the Trusted Root Certification Authorities certificate store.

• Question 139:

  Your companys network has client computers that run Windows 7. Multiple users share the computers in the shipping department. These computers reside in the Shipping Computers organizational unit (OU). The network design is shown in the following diagram.

  

  You are planning to deploy an application. The application is packaged as a Microsoft Windows Installer package (MSI).

  You need to deploy the application only to computers in the shipping department.

  Which two actions should you perform? (Each correct answer presents part of the solution.

  Choose two.)

  A. Link the software installation policy to the Workstations OU.
  B. Link the software installation policy to the Shipping Computers OU.
  C. Create a new Group Policy object (GPO) and add a software installation policy under the User Configuration container.
  D. Create a new Group Policy object (GPO) and add a software installation policy under the Computer Configuration container.
  B. Link the software installation policy to the Shipping Computers OU.
  D. Create a new Group Policy object (GPO) and add a software installation policy under the Computer Configuration container.

  ---

  To specify how and when computers are updated through Group Policy In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update. In the details pane of Group Policy Object Editor, configure the appropriate policies. See the following table for examples of the policies you might want to set.. refer to http://technet.microsoft.com/en-us/library/cc708536(v=WS.10).aspx Hints: Workstations OU = engineering computer OU + finance computer OU + shipphing computer OU

• Question 140:

  You need to prevent users from accessing USB flash drives on portable computers. What should you do? (Choose all that apply.)

  A. Create a security group in AD DS and place all user objects for users with portable computers in the group.
  B. Create a security group in AD DS and place all portable computer objects in the group.
  C. Create a GPO that blocks the use of specific GUIDs used by USB flash drives and link it to the root of the domain.
  D. Create a WMI filter that applies only to Model A and B computers and link it to a GPO.
  E. Create an AppLocker policy that applies to the AD DS computer group you created.
  F. Create an AppLocker policy that applies to the AD DS user group you created.
  C. Create a GPO that blocks the use of specific GUIDs used by USB flash drives and link it to the root of the domain.
  D. Create a WMI filter that applies only to Model A and B computers and link it to a GPO.