Microsoft 70-688 Online Practice Questions and Exam Preparation

Microsoft 70-688 Online Questions & Answers

• Question 121:

  You support Windows 8.1 Enterprise computers. AppLocker policies are deployed.

  Company policy states that AppLocker must be disabled.

  You need to disable AppLocker.

  Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

  Select and Place:

  

  

  ---

  Note:

  * Before you can enforce AppLocker policies, you must start the Application Identity service by using the Services snap-in console.

  * The Application Identity service determines and verifies the identity of an application.

  Stopping this service will prevent AppLocker policies from being enforced.

  The gpresult command is used to display the Resultant Set of Policy (RSoP) information for a remote user and computer. And used in conjunction with the /v parameter – it displays verbose policy information. This includes detailed settings that were applied with a precedence of 1.

  References:

  http://technet.microsoft.com/en-us/library/hh852337.aspx

  http://technet.microsoft.com/en-us/library/cc733160.aspx

• Question 122:

  You support desktop computers and tablets that run Windows 8. Domain joined computers are able to connect to your company network from the Internet by using DirectAccess.

  Your company wants to deploy a new application to the tablets.

  The deployment solution must meet the following requirements:

  The application is installed locally on the tablets. The application installation is hosted in a public cloud.

  The installation must support Windows RT.

  You need to deploy the new application to the tablets.

  What should you do?

  A. Deploy the application as an Application Virtualization (App-V) package. Install the App- V 4.6 client on the tablets.
  B. Deploy the application as a published application on the Remote Desktop server. Create a Remote Desktop connection on the tablets.
  C. Install the application on a local drive on the tablets.
  D. Install the application in a Windows To Go workspace.
  E. Install Hyper-V on tablets. Install the application on a virtual machine.
  F. Publish the application to Windows Store.
  G. Install the application within a separate Windows 8 installation in a virtual hard disk (VHD) file. Configure the tablets with dual boot.
  H. Install the application within a separate Windows 8 installation in a VHDX file. Configure tablets with dual boot.
  F. Publish the application to Windows Store.

  ---

  http://technet.microsoft.com/en-US/library/dn645534.aspx http://technet.microsoft.com/en-us/windows/dn168168.aspx http://technet.microsoft.com/ library/hh857623.aspx

• Question 123:

  You administer several computers that run Windows 8.

  The manufacturer of the video display adapters used in these computers issues a new version of the video driver.

  You need to install the new version of the driver on the computers.

  What should you do first?

  A. From the Start screen, search settings for "update device drivers."
  B. From the Start screen, search settings for "devices and printers."
  C. From the Start screen, right-click the Video tile.
  D. From the Start screen, open the Charms bar and select Devices.
  E. From the Start screen, open the Charms bar and select Settings.
  A. From the Start screen, search settings for "update device drivers."

  ---

  http://windows.microsoft.com/en-za/windows/update-driver-hardware-isnt- working-properly#update-driver-hardware-isnt-working-properly=windows-

• Question 124:

  You are a systems administrator for Contoso, Ltd.

  You disabled picture passwords by using a Group Policy object (GPO) named Picture Password Disable.

  Management wants to use picture passwords. You disable and remove the GPO that disables picture passwords.

  One user's picture password does not function properly on the user's tablet. The tablet is wirelessly connected to the network. You connect to the tablet and view the screen, which is shown in the following exhibit.

  You need to ensure that the tablet is able to use picture passwords. What should you do?

  A. Log off of the tablet and then log back on.
  B. Run the gpupdate/force command from an elevated command prompt.
  C. Run the gpupdate /target:user command from an elevated command prompt.
  D. Connect the tablet to a wired connection, and then run the gpresult /F command.
  B. Run the gpupdate/force command from an elevated command prompt.

  ---

  Gpupdate refreshes local and Active Directory-based Group Policy settings, including security settings. This command supersedes the now obsolete / refreshpolicy option for the secedit command.

  Parameter: /force : Ignores all processing optimizations and reapplies all settings.

  Reference: Technet, Gpupdate

• Question 125:

  Your network contains a web server named testweb.contoso.com that is used for testing.

  You have a Windows 8.1 Pro laptop.

  After a network administrator changes the IP address of the web server, you discover that you can no longer connect to testweb.contoso.com.

  You need to resolve immediately the issue that prevents you from connecting to the server.

  Which command line tool should you run?

  A. Set-DnsClient
  B. Netstat
  C. Ipconfig
  D. Netcfg
  B. Netstat

  ---

  Ipconfig - Displays all current TCP/IP network configuration values and refreshes Dynamic Host Configuration Protocol (DHCP) and Domain Name System (DNS) settings. Used without parameters, ipconfig displays the IP address, subnet

  mask, and default gateway for all adapters. Set-DnsClient - Sets the interface specific DNS client configurations on the computer. Netcfg - Installs the Windows Preinstallation Environment (WinPE), a lightweight version of Windows used to

  deploy workstations.

  Reference:

  http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en- us/nbtstat.mspx?mfr=true http://technet.microsoft.com/en-us/library/bb490947.aspx http://technet.microsoft.com/en-us/library/jj590776.aspx http://technet.microsoft.com/en-us/library/hh875638.aspx http://technet.microsoft.com/en-us/library/bb490921.aspx

• Question 126:

  You use a Windows 8.1 desktop computer and a Windows 8.1 tablet. The desktop computer is connected to the Internet by using your home network.

  You plan to travel and want to have access to the desktop computer from the tablet.

  You need to configure remote access to the file system on the desktop computer by using the Internet.

  What should you do?

  A. Configure User Experience Virtualization (UE-V).
  B. Allow Remote Assistance connections to the desktop computer.
  C. Go to the SkyDrive website and create a group named Administrators. Add your user Windows accounts for both computers to the group.
  D. Install SkyDrive for Windows on the desktop computer and select the Make files on this PC available to me on my other devices check box.
  D. Install SkyDrive for Windows on the desktop computer and select the Make files on this PC available to me on my other devices check box.

  ---

  Select the Fetch files setting

  If you didn't select the Fetch files setting when you set up the OneDrive app, you can select it in Settings.

  1.

  Go to the PC where OneDrive is installed.

  2.

  Right-click the OneDrive icon (The OneDrive icon) in the notification area, at the far right of the taskbar. Then click Settings.

  3.

  On the Settings tab, under General, select Let me use OneDrive to fetch any of my files on this PC, and then click OK.

  Note: If you have the OneDrive desktop app for Windows installed on a PC, you can use the Fetch files feature to access all your files on that PC from another computer by going to the OneDrive website. You can even access network locations if they're included in the PC's libraries or mapped as drives. When you browse a PC's files remotely, you can download copies of them to work on Reference: Fetch files on your PC

• Question 127:

  Your network contains an Active Directory domain named contoso.com. The domain contains Windows 8.1 Enterprise client computers.

  Your company has a subscription to Microsoft Office 365. Each user has a mailbox that is stored in Office 365 and a user account in the contoso.com domain.

  Each mailbox has two email addresses.

  You need to add a third email address for each user.

  What should you do?

  A. From Windows Azure Active Directory Module for Windows PowerShell, run the Set- Mailbox cmdlet.
  B. From Active Directory Users and Computers, modify the E-mail attribute for each user.
  C. From Active Directory Domains and Trust, add a UPN suffix for each user.
  D. From the Office 365 portal, modify the Users settings of each user.
  D. From the Office 365 portal, modify the Users settings of each user.

  ---

  https://support.office.live.com/article/6e27792a-9267-4aa4-8bb6- c84ef146101b https://support.office.live.com/article/70c2b230-9d23-4c41-98c5-a639e68e06dc

• Question 128:

  Your network contains an Active Directory domain. The domain contains client computers that run Windows 8 Enterprise.

  Users frequently use USB drives to store sensitive files that are used on multiple computers.

  Your corporate security policy states that all removable storage devices, such as USB data drives, must be encrypted.

  You need to ensure that if a user forgets the password for a USB disk that is encrypted by using BitLocker To Go, the user can resolve the issue themselves.

  What should you do?

  A. Instruct the user to open BitLocker Drive Encryption, select Backup Recovery Key, and then select Save to your Microsoft account.
  B. Instruct the user to open BitLocker Drive Encryption, select Backup Recovery Key, and then select Print the recovery key.
  C. Implement the BitLocker Network Unlock feature.
  D. Publish a data recovery agent certificate by using a Group Policy object (GPO).
  B. Instruct the user to open BitLocker Drive Encryption, select Backup Recovery Key, and then select Print the recovery key.

  ---

  http://technet.microsoft.com/en-us/library/cc732725%28v=WS.10%29.aspx http://support.microsoft.com/kb/2855131

• Question 129:

  You have a computer that runs Windows 8 Enterprise.

  You need to ensure that all users can see the history of detected items in Windows Defender.

  Which option on the Settings tab should you select? (To answer, select the appropriate option in the answer area.)

  Hot Area:

  

  

  ---

  Configure Windows Defender in Windows 8

  Reference: http://www.winhelp.us/index.php/general-security/free-anti-virus-programs/windows-defenderinwindows-8/configure-windows-defender-in-windows-8.html http://social.technet.microsoft.com/wiki/contents/articles/15142.map-software-usagetracking.aspx http://technet.microsoft.com/en-us/library/dd363904%28v=WS.10%29.aspx

• Question 130:

  You support laptops that run Windows 8 Pro and are members of an Active Directory domain.

  The domain is configured with user folder redirection by using a Group Policy Object (GPO). Loopback group policies are not used.

  Your company has decided to deploy tablets to all managers, for use as secondary computers.

  Tablets will be added to the domain.

  You need to ensure that the folder redirection settings are applied only to laptops.

  What should you do?

  A. Apply one GPO to the managers' laptops and another GPO to the tablets.
  B. Assign the msDS-Primary Computer attribute for the managers' user domain accounts.
  C. Assign the msDS-Primary Computer attribute for the computer domain accounts on the managers' laptops.
  D. Block the managers' tablets from receiving the GPO.
  B. Assign the msDS-Primary Computer attribute for the managers' user domain accounts.

  ---

  The Storage Team at Microsoft - File Cabinet Blog

  To designate a primary computer in Active Directory Domain Services (AD DS), use the following procedure:

  Open Active Directory Administrative Center.

  In the console tree, under the domain name node (dPMDemo in my case), click Computers.

  To designate PMClient1 as Bob Smith's primary computer, double click PMClient1, and then in the Extensions section, click the Attribute Editor tab. Double-click the distinguishedName attribute, right-click the value and then click Copy. In

  Active Directory Administrative Center, click Users, and then double-click Bob Smith. In the Extensions section, click the Attribute Editor tab. Double-click the msDS-Primary Computer attribute, paste the distinguished name of PMClient1 into

  the Value to Add box, and then click Add.You can specify a list of computer names in the Value to Add box; each listed computer will be designated as a primary computer for the user.

  Click OK in the Multi-valued String Editor dialog and again in the Bob Smith window.PMClient1 is now configured in AD DS as a primary computer for Bob Smith.

  Reference:

  http://blogs.technet.com/b/filecab/archive/2012/03/30/configuring-primary-computers-for- folder-redirection-and-roaming-profiles-in-windows-server-8-beta.aspx