Microsoft 70-687 Online Practice Questions and Exam Preparation

Microsoft 70-687 Online Questions & Answers

• Question 71:

  A company has 50 client computers that run Windows 8. Forty client computers are connected to a secure internal network, and 10 client computers are located in public kiosks. A new company security policy includes the following requirements:

  1. Visitors can access only kiosk computers.

  2. Employees can access and shut down only internal computers.

  3. Only administrators can access all computers remotely.

  4. Only administrators can shut down kiosk computers.

  You need to assign security groups to local security policies to meet the requirements.

  What should you do? (To answer, drag the appropriate security group or groups to the correct location or locations in the answer area. Security groups may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.)

  Select and Place:

  

  

• Question 72:

  You are the desktop administrator for a medium-sized company.

  You are rolling out new Windows 8.1 computers to your employees. You configure one of the computers so that it has the devices and settings the employees need for testing purposes.

  You need to ensure that the hardware devices are operating properly.

  Which tool should you use?

  A. eventvwr.exe
  B. Mmcdevmgmt.msc
  C. sigverif.exe
  D. Driverquery /si
  A. eventvwr.exe

• Question 73:

  You administer Windows 8.1 computers in your company network. The security policies of the company require that USB storage devices are allowed only if they are protected with BitlockerTo Go.

  You need to prevent users from removing Bitlocker encryption from the USB storage devices.

  Which configuration setting should you modify? (To answer, select the appropriate setting in the answer area.)

  Hot Area:

  

  

• Question 74:

  You install Windows 8.1 Enterprise on a new laptop that will be shipped to a remote user.

  You logon to the laptop with the user credentials, map network drives, and configure the network drives to be always available offline.

  Company policy requires that files with a .db1 extension should be excluded from offline file synchronization.

  You need to prevent the user from creating files with a .dbl extension on the mapped drives. In the Local Group Policy Editor, which setting should you configure? (To answer, select the appropriate setting in the answer area.)

  Hot Area:

  

  

• Question 75:

  A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 8 and are joined to the domain. All Sales department employees are members of the Sales organizational unit (CU). AppLocker rules

  control the installation of applicatior on client computers.

  You create a new Group Policy object (GPO) to configure an AppLocker file hash rule. The file hash rule allows an application to run and links the application to the Sales OU. Several minutes later, you establish that the AppLocker rule is not

  present on some computers within SalesOU and the application cannot run.

  You need to quickly ensure that the application can run.

  What should you do?

  A. Run the Get-AppLockerPolicy Windows PowerShell cmdlet.
  B. Configure the AppLocker properties to enforce rules.
  C. Run the gpupdate /force command.
  D. Create a new AppLocker file hash condition.
  C. Run the gpupdate /force command.

• Question 76:

  A company has client computers that run Windows 8. Finance department employees store files in the C:\Finance directory. File History is on.

  A Finance department employee attempts to restore a file to a previous version by using File History. The file is not available to restore.

  You need to establish why the file history is not available and ensure that it is available in the future.

  Which two actions should you perform? (Each correct answer presents part of the solution.

  Choose two.)

  A. Review the File History backup log.
  B. Move the file into a library.
  C. Restore the data files from the Previous Versions tab located in the folder properties.
  D. Set the Protection Settings for drive C to On.
  A. Review the File History backup log.
  B. Move the file into a library.

  ---

  A: Configuring Advanced Settings of Windows 8 File History To set some more detailed options, or to clean up File History, click Advanced settings. The Event logs section includes the Open File History event logs to view recent events or

  errors command that opens File History backup log in Applications and Services Logs section of Event Viewer.

  B:* File History automatically backs up files that are in your libraries, contacts, favorites, Microsoft SkyDrive and on your desktop.

  * Do not expect File History to cover all your folders or whole drives - it backs up all your default and custom Libraries (including Public Folders), plus Contacts, Desktop and Favorites folders. Your only way to include other folders is to create

  your own custom Libraries.

• Question 77:

  You manage Windows 8.1 client computers.

  You have the following client computer update requirements:

  1. Ensure that all client computers check for updates twice a day.

  2. Install all critical and available updates, including updates that require a restart, each day.

  3. Restart client computers at 11:00 P.M. if required.

  4. Distribute all updates from a Windows Server Update Services (WSUS) server on the local network . You need to deploy Group Policy settings to the client computers to meet the update requirements.

  Which Group Policy settings should you enable and configure? (To answer, drag the appropriate Group Policy settings to the correct location or locations in the answer area. Group Policy settings may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.)

  Select and Place:

  

  

• Question 78:

  You administer Windows 8.1 Enterprise client computers in your company network.

  You change settings on a reference computer by using the Windows Firewall with Advanced Security tool. You want to apply the same settings to other computers.

  You need to save the Windows Firewall with Advanced Security configuration settings from the reference computer. You also need to be able to import the configuration settings into a Group Policy object later.

  What should you do?

  A. Run the netshadvfirewall export c:\settings.xml command.
  B. Open Local Group Policy Editor, select the Windows Firewall with Advanced Security node, and then select the Export Policy action.
  C. Open Local Group Policy Editor, select the Security Settings node, and then select the Export List action.
  D. From Control Panel, open Windows Firewall, click Advanced Settings, and then select the Export Policy action.
  A. Run the netshadvfirewall export c:\settings.xml command.

• Question 79:

  A company has client computers that run Windows 8. The company implements the following security requirements:

  ?All client computers must use two-factor authentication.

  ?At least one authentication method must include more than four characters or gestures.

  You need to choose authentication methods that comply with the security requirements.

  Which two authentication methods should you choose? (Each correct answer presents part of the solution. Choose two.)

  A. PIN
  B. Biometric authentication
  C. Picture Password
  D. Microsoft Account
  B. Biometric authentication
  D. Microsoft Account

  ---

  More than 4 characters are of course supported with the Microsoft Account. It is something the user knows. The picture password would be another thing the user knows (gestures).

  So there's only MS Account and Biometric authentication left. Two-factor authentication requires the use of two of the three authentication factors:

  Something the user knows (e.g., password, PIN); Something the user has (physical Object) (e.g., ATM card, smart card); and Something the user is (e.g., biometric characteristic, such as a fingerprint). The factors are identified in the

  standards and regulations for access to U.S. Federal Government systems.

• Question 80:

  You use a computer that has Windows 7 Professional (32-bit) installed.

  You need to migrate the computer to Windows 8.1 Pro (64-bit).

  Which installation method should you use?

  A. Download and run Windows 7 Upgrade Advisor.
  B. Download and run Windows 8.1 Upgrade Assistant.
  C. Start Windows 8.1 custom installation from a DVD.
  D. Open Windows Anytime Upgrade.
  C. Start Windows 8.1 custom installation from a DVD.