Microsoft 70-686 Online Practice Questions and Exam Preparation

Microsoft 70-686 Online Questions & Answers

• Question 21:

  You are planning the deployment of Windows 7 to computers that are located in a main office, in branch offices, and in a store kiosk.

  Computers in all three types of location use the same hardware. Kiosk computers are members of a workgroup. Kiosk computers must use specific settings for local security. Branch office computers must use BitLocker Drive Encryption.

  You have the following requirements: Create deployment images. Minimize image maintenance.

  You need to define an image-creation strategy that meets the requirements.

  What should you do?

  A. Create a single image to use for the branch office computers and the kiosk computers. Create a separate image to use for the main office computers.
  B. Create a single image to use for all location types. Create a custom Windows security template for each location type.
  C. Create one image to use for each location type. Encrypt the hard disks on the branch office computers prior to capturing the image.
  D. Create a single image to use for the main office computers and the branch office computers, and apply the required settings through Group Policy. Create a separate image to use for the kiosk computers.
  D. Create a single image to use for the main office computers and the branch office computers, and apply the required settings through Group Policy. Create a separate image to use for the kiosk computers.

  ---

  hints:

  Kiosk is belong to workgroup, it does not support by group policy. so it must use seperate image for its own local security.

• Question 22:

  Your company includes mobile computer users who frequently work offline.

  You are planning to deploy Windows 7 by using an image.

  You have the following requirements:

  You need to ensure that your image-creation strategy meets the requirements.

  What should you do?

  A. Create a single thin image for all computers.
  B. Create one thin image for the mobile computers. Create one thick image for all other computers.
  C. Create one thick image for the mobile computers. Create one thin image for all other computers.
  D. Create a single hybrid image for all computers.
  C. Create one thick image for the mobile computers. Create one thin image for all other computers.

  ---

  MCTS Self-Paced Training Kit (Exam 70-680): Configuring Windows?7 By Ian McLean, Orin Thomas http://books.google.com.my/books?id=lpNuBdGgFncCandpg=PT310andlpg=PT310anddq=thin+i mage+thick+image+languagepackandsource=blandots=mU6XADkqKYandsig=C_BBoYQjkIHwwo 7B9P2MlXM4TOUandhl=enandsa=Xandei=QEKTDvC4fJrAfs7JGyCwandved=0CB8Q6AEwAA#v=onepageandq=thin%20image%20thick%20i mage%20languagepackandf=false

  

  untitled

• Question 23:

  Your company has an Active Directory domain.

  You are planning the deployment of Windows 7 to client computers that are located in a main office and in satellite offices. All client computers use the same hardware.

  Your company's security policy has the following requirements:

  The template must not apply to client computers in the satellite offices.

  You need to recommend an image-creation strategy that meets the requirements of the security policy. The solution must minimize administrative effort.

  What should you include in your recommendations?

  A. One image for all client computers A Group Policy object
  B. One image for the main office computers One image for the satellite office computers A Data Recovery Agent A Security database (secedit.sdb)
  C. One image for the main office computers One image for the satellite office computers A Group Policy object
  D. One image for all client computers A Data Recovery Agent A Security database (secedit.sdb)
  A. One image for all client computers A Group Policy object

• Question 24:

  You are planning the delivery of the ERP add-on to the remote users. You need to ensure that the ERP add-on meets company requirements and functions for all remote users. Which product should you recommend?

  A. MED-V
  B. Remote Desktop RemoteApp
  C. System Center Virtual Machine Manager Self Service Portal 2.0
  D. Windows XP Mode
  A. MED-V

• Question 25:

  You are the desktop architect for an enterprise organization with computers that run Windows 7 Enterprise.

  You need to create a customized WinPE image.

  Which four actions should you perform in sequence? (To answer, move the appropriateactions from the list of actions to the answer area and arrange them in the correct order)

  Select and Place:

  

  

• Question 26:

  Your company has an internal Web application that uses a self-signed SSL certificate. The company has an internal certification authority (CA) with auto enrollment.

  When users attempt to start the Web application, Internet Explorer displays an error message that recommends closing the Web page rather than continuing to the application.

  You need to ensure that Internet Explorer does not display the error message.

  What should you do?

  A. Install the Web applications certificate into the computer store on each client computer.
  B. Purchase a commercial certificate and install it on the internal CA.
  C. Issue a certificate from the internal CA and install it on the application server.
  D. Install the Web applications certificate into the personal store on each client computer. Add the applications URL to the Trusted Sites zone in Internet Explorer.
  C. Issue a certificate from the internal CA and install it on the application server.

• Question 27:

  You plan to deploy an image of Windows 7 Enterprise to 1,000 client computers.

  You need to design a custom image that will enable users to connect to a Telnet server.

  What should you do?

  A. Create a Network Connection before capturing the image.
  B. Turn on the Telnet Server feature in the image.
  C. Create a Certificate-Based credential before capturing the image.
  D. Turn on the Telnet Client feature in the image.
  D. Turn on the Telnet Client feature in the image.

• Question 28:

  Your company has a single Active Directory Domain Services (AD DS) domain named contoso.com that uses Active DirectoryCintegrated DNS.

  You deploy the Key Management Service (KMS) on a Windows 7 computer.

  You need to ensure that Windows 7 client computers can locate the KMS host and perform activation.

  Which two actions should you perform? (Each correct answer presents part of the solution.

  Choose two.)

  A. Create and deploy a GPO firewall rule to allow RPC traffic through TCP port 1688 on the client computers.
  B. Deploy a Windows Server 2008 KMS host.
  C. Grant the KMS server the Full Control permission on the _vlmcs._tcp.contoso.com DNS record.
  D. Grant the KMS server the Full Control permission on the _msdcs._tcp.contoso.com DNS zone.
  A. Create and deploy a GPO firewall rule to allow RPC traffic through TCP port 1688 on the client computers.
  C. Grant the KMS server the Full Control permission on the _vlmcs._tcp.contoso.com DNS record.

  ---

  http://technet.microsoft.com/en-us/library/ee939272.aspx The KMS clients find the KMS host via a DNS SRV record (_vlmcs._tcp) and then automatically attempt to discover and use this service to activate themselves. When in the 30 day Out

  of Box grace period, they will try to activate every 2 hours. Once activated, the KMS clients will attempt a renewal every 7days.

  Listening on Port:

  Communication with KMS is via anonymous RPC. 1688 is the default TCP port used by the clients to connect to the KMS host. Make sure this port is open between your KMS clients and the KMS host.

• Question 29:

  You have a single Active Directory Domain Services (AD DS) site. All client computers run Windows 7. Users in the marketing department use a custom application.

  You create a new Group Policy object (GPO) and link it to the site. Users in the marketing department then report that they are unable to use the custom application.

  You need to ensure that all users in the marketing department are able to use the custom application. You need to ensure that all other users continue to receive the new GPO.

  What should you do?

  A. Add marketing users to a domain group. Use security filtering to grant the group the Allow-Read permission and the Allow-Apply Group Policy permission for the GPO.
  B. Move marketing users to a dedicated organizational unit (OU). Apply the Block Inheritance setting to the OU.
  C. Add marketing users to a domain group. Use security filtering to grant the group the Allow-Read permission and the Deny-Apply Group Policy permission for the GPO.
  D. Move marketing users to a dedicated organizational unit (OU). Apply the Block Inheritance setting to the domain.
  C. Add marketing users to a domain group. Use security filtering to grant the group the Allow-Read permission and the Deny-Apply Group Policy permission for the GPO.

• Question 30:

  You are designing an implementation of BitLocker. You create a GPO with BitLocker settings that conform to company requirements.

  You need to design an implementation strategy that supports the company requirements.

  What should you do? (Choose all that apply.)

  A. Link the GPO to the Munich-Computers OU. Use a security filter to apply the GPO to all Munich desktop computers.
  B. Block the Munich-Computers OU from inheriting policies.
  C. Link the GPO to the Madrid-Computers OU. Use a security filter to apply the GPO to all Madrid desktop computers.
  D. Link the GPO to the Munich-Users OU.
  E. Create and use a WMI filter that targets all portable computers with the GPO. Link the WMI filter to the GPO
  F. Link the GPO to the root of the AD DS domain.
  B. Block the Munich-Computers OU from inheriting policies.
  C. Link the GPO to the Madrid-Computers OU. Use a security filter to apply the GPO to all Madrid desktop computers.
  E. Create and use a WMI filter that targets all portable computers with the GPO. Link the WMI filter to the GPO
  F. Link the GPO to the root of the AD DS domain.