Microsoft 70-688 Online Practice Questions and Exam Preparation

Microsoft 70-688 Online Questions & Answers

• Question 171:

  You support computers that run windows 8 Enterprise. AppLocker policies are deployed.

  Company policy states that AppLocker must be disabled.

  You need to disable AppLocker.

  Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

  Select and Place:

  

  

  ---

  Note:

  * Before you can enforce AppLocker policies, you must start the Application Identity service by using the Services snap-in console.

  * The Application Identity service determines and verifies the identity of an application.

  Stopping this service will prevent AppLocker policies from being enforced.

  References:

  http://technet.microsoft.com/en-us/library/hh852337.aspx

• Question 172:

  You support Windows 8.1 Enterprise computers. Your company protects all laptops by using the BitLocker Network Unlock feature.

  Some employees work from home.

  You need to ensure that employees can log on to their laptops when they work from home.

  What should you do?

  A. Provide employees their BitLocker PINs.
  B. Have users run the Manage-bde.exe -unlock command before they disconnect from the company network.
  C. Ensure that the Trusted Platform Module (TPM) chips in the laptops are version 1.2 or greater.
  D. Enable BitLocker To Go.
  A. Provide employees their BitLocker PINs.

  ---

  Network Unlock allows BitLocker-enabled systems with TPM+PIN and that meet the hardware requirements to boot into Windows without user intervention. Network Unlock works in a similar fashion to the TPM+StartupKey at boot. Rather

  than needing to read the StartupKey from USB media, however, the key for Network Unlock is composed from a key stored in the TPM and an encrypted network key that is sent to the server, decrypted and returned to the client in a secure

  session.

  Incorrect:

  Not D: Bitlocker To GO is used to protect removable devices.

  Reference: Understand and Troubleshoot BitLocker in Windows Server "8" Beta and Windows 8 Consumer Preview

• Question 173:

  You administrator Windows 8.1 Enterprise 64-bit client computers. Your network includes printers that require custom drivers. When local administrators attempt to install the custom printer drivers, an error message appears. The error states

  that an unsigned driver cannot be installed.

  You need to configure the computers so that printer drivers can be installed. You also need to ensure that standard users are able to use the printers after installation.

  What should you do?

  A. Press F8 during startup log in as an administrator and connect the printer.
  B. Disable User Account control Log in as an administrator and connect the printer.
  C. Sign the printer drivers with a certificate issued by a trusted Certificate Authority (CA).
  D. Submit the printer drives for certification in Windows Store Search Windows Store for the approved drivers.
  B. Disable User Account control Log in as an administrator and connect the printer.

• Question 174:

  You administer Windows 8.1 Enterprise laptops. All of the computers are members of an Active Directory domain.

  You are in a remote office. You connect to a variety of Microsoft clients in the main office, including Windows 8, Windows XP, and Server 2008. The VPN authentication traffic must be encrypted.

  You need to establish a VPN connection that will allow you to connect to all Microsoft clients.

  Which of the following should you use?

  A. EAP-TLS
  B. MS-CHAP v2
  C. 802.1X
  D. RADIUS
  E. PPTP
  F. L2TP/IPSEC
  G. IPSEC/IKEv2
  H. SSTP
  G. IPSEC/IKEv2

  ---

  VPN profile properties

  The VPN profile created is a single-user VPN profile with the following properties:

  A:

  Authentication Method

  User can choose authentication method to be used for the VPN connection. The authentication method can be the following:

  i.

  User name and password: When user selects this option, the VPN client negotiates the username-password based authentication methods with the server. Client will be able to negotiate MSCHAP v2, EAP-MSCAHPv2, PEAP with

  MSCHAPv2 as inner method, EAP- TTLS with inner method as PAP (for non-domain joined only) and EAP-TTLS with inner method as MSCHAPv2 (for domain joined only) with the VPN server. Once the user selects this authentication

  method, he has the option of entering User name and password in the UI itself.

  ii.

  Smart Card

  ii.

  One-time password

  Tunnel Type

  The Tunnel Type is set to `Automatic', which results in IKEv2, SSTP, PPTP and L2TP tunnel types being negotiated (in that order). Once the tunnel is negotiated, the VPN client remembers it for the subsequent connections. User cannot

  change tunnel type through PC Settings.

  Encryption Level

  The encryption level is by default set to `Optional Encryption'. For IKEv2 and L2TP, this encryption level has been expanded to negotiate all the IPsec proposals that are supported. Admins can control the proposal to be used by specifying it

  on the VPN server (using Set-VpnServerConfiguration cmdlet for Windows RRAS). For PPTP connections, when set to `optional encryption' the VPN client does not require encryption but uses it if it is required by the VPN server. The

  encryption setting is not used for SSTP connections, hence, as before, they remain unaffected by it. User cannot change Encryption Level through PC Settings.

  Reference: Configuring native VPN client through PC Settings

• Question 175:

  You support computers that run Windows 8. You are designing a remote access server (RAS).

  The firewall accepts incoming TCP connections only to ports 80 and 443.

  You want to connect to the RAS server from a laptop.

  You need to create a virtual private network (VPN) connection to the RAS server.

  Which VPN tunneling protocol should you use?

  A. L2TP
  B. SSTP
  C. PPTP
  D. IPSEC
  B. SSTP

  ---

  http://www.windowsecurity.com/articles-tutorials/firewalls_and_VPN/Secure- Socket-Tunneling-Protocol.html http://technet.microsoft.com/en-us/library/cc731352%28v=WS.10%29.aspx

• Question 176:

  You administer Windows 8 Pro and Windows RT tablets for your company. Your company network includes a Windows Server 2012 domain and Microsoft Exchange 2010 with ActiveSync and Outlook Web Access.

  Users will be using the tablets outside of the corporate network.

  The Microsoft Exchange ActiveSync policy is configured to require an alphanumeric password.

  You need to ensure an alphanumeric password is required on all Windows 8 tablets.

  What should you do?

  A. From the Mail app, add the user's Exchange account.
  B. Set up New Partnership in Sync Center.
  C. From Sync your Settings, set Password to Off.
  D. Create a user profile by using a Microsoft account.
  A. From the Mail app, add the user's Exchange account.

  ---

  http://technet.microsoft.com/enus/library/bb123783%28v=exchg.150%29.aspx http://office.microsoft.com/en-us/exchange/microsoft-exchange-features-cloud-email- services-FX103737962.aspx

• Question 177:

  You administer laptops and virtual desktop computers that run Windows 8 and are joined to an Active Directory domain.

  Your company provides virtual desktop computers to all users. Employees in the sales department also use laptops, sometimes connected to the company network and sometimes disconnected from the company network.

  You want sales department employees to have the same personal data, whether they are using their virtual desktop computers or their laptops.

  You need to configure the network environment to meet the requirements.

  Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

  Select and Place:

  

  

  ---

  Note:

  Folder Redirection and Offline Files are used together to redirect the path of local folders (such as the Documents folder) to a network location, while caching the contents locally for increased

  speed and availability.

  * Folder Redirection enables users and administrators to redirect the path of a known folder to a new location, manually or by using Group Policy. The new location can be a folder on the local computer or a directory on a file share. Users interact with files in the redirected folder as if it still existed on the local drive. For example, you can redirect the Documents folder, which is usually stored on a local drive, to a network location. The files in the folder are then available to the user from any computer on the network.

  * Offline Files makes network files available to a user, even if the network connection to the server is unavailable or slow. When working online, file access performance is at the speed of the network and server. When working offline, files are retrieved from the Offline Files folder at local access speeds. A computer switches to Offline Mode when: The new Always Offline mode has been enabled The server is unavailable The network connection is slower than a configurable threshold The user manually switches to Offline Mode by using the Work offline button in Windows Explorer References: Folder Redirection, Offline Files, and Roaming User Profiles overview http://technet.microsoft.com/en-us/windows/hh868022.aspx

• Question 178:

  You support desktop computers and tablets that run Windows 8 Enterprise. All of the computers are able to connect to your company network from the Internet by using DirectAccess.

  Your company wants to deploy a new application to the tablets.

  The deployment solution must meet the following requirements:

  The application is not accessible if a user is working offline. The application is isolated from other applications. The application uses the least amount of disk space. You need to deploy the new application to the tablets.

  What should you do?

  A. Deploy the application as an Application Virtualization (App-V) package. Install the App- V 4.6 client on the tablets.
  B. Deploy the application as a published application on the Remote Desktop server. Create a Remote Desktop connection on the tablets.
  C. Install the application on a local drive on the tablets.
  D. Install the application in a Windows To Go workspace.
  E. Install Hyper-V on tablets. Install the application on a virtual machine.
  F. Publish the application to Windows Store.
  G. Install the application within a separate Windows 8 installation in a virtual hard disk (VHD) file. Configure the tablets with dual boot.
  H. Install the application within a separate Windows 8 installation in a VHDX file. Configure the tablets with dual boot.
  A. Deploy the application as an Application Virtualization (App-V) package. Install the App- V 4.6 client on the tablets.

  ---

  Microsoft Application Virtualization (App-V)

  Microsoft Application Virtualization (App-V) enables enterprises to meet the needs of users and IT by empowering anywhere productivity and accelerated application deployment. App- V provides anywhere user access to applications that available on any authorized device without application installs. Virtual applications and user settings are preserved whether users are online or offline. App-V increases business agility through faster application deployment and updates with no user interruptions. It minimizes conflicts between applications, allowing enterprises to reduce application compatibility testing time. App-V together with Microsoft User State Virtualization (USV) provides users with a consistent experience and reliable access to applications and business data, no matter their location and connection to the Internet.

  Reference:

  http://www.microsoft.com/en-us/windows/enterprise/products-and- technologies/virtualization/app-v.aspx

• Question 179:

  You are a systems administrator of a small branch office. Computers in the office are joined to a Windows 8 HomeGroup. The HomeGroup includes one shared printer and several shared folders.

  You join a new computer to the HomeGroup and try to access the HomeGroup shared folders. You discover that the shared folders are unavailable, and you receive an error message that indicates the password is incorrect.

  You need to reconfigure the new computer in order to access the HomeGroup resources.

  What should you do?

  A. Adjust the time settings on the new computer to match the time settings of the HomeGroup computers.
  B. Reset your account password to match the HomeGroup password.
  C. Disjoin all HomeGroup members and re-create the HomeGroup.
  D. Change NTFS security permission on the shared folders. Grant Everyone account Read and Execute permission.
  A. Adjust the time settings on the new computer to match the time settings of the HomeGroup computers.

  ---

  http://technet.microsoft.com/en-us/library/cc754178.aspx

• Question 180:

  You have a computer that runs Windows 8.

  You have a 1-terabyte external hard drive.

  You purchase a second 1-terabyte external hard drive.

  You need to create a fault-tolerant volume that includes both external hard drives.

  You also need to ensure that additional external hard drives can be added to the volume.

  Which three actions should you perform in sequence?

  (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

  Select and Place:

  

  

  ---

  Note:

  To create a storage space, you’ll have to connect two or more additional drives to your computer – you can't use your system drive for this. The drives can be either internal or external drives.

  You can open the Storage Spaces configuration window from the Control Panel or by bringing up the Start screen with the Windows key, typing “Storage Spaces,” clicking the Settings category and selecting the Storage Spaces shortcut.

  Select the drives you want to use for the storage space and click the “Create pool” button to continue. You’ll lose any files that are already on the drive – copy any important files off the drives before pooling them. You can add additional drives later.

  The resiliency type controls how Windows handles your data. There are four options:

  * None: Windows will store only a single copy of your . You’ll lose the data if one of your drives fails, but no space will be used on backups.

  * Two-way mirror: Windows will store two copies of your data. If one of your drives fails, you won't lose your data. This requires at least two drives.

  * Three-way mirror: Windows will store three copies of your data. If one or two of your drives fails, you won't lose your data. This requires at least three drives.

  * Parity: Windows stores parity information with the data, protecting you from a single drive failure. Parity uses drive space more efficiently than mirroring, but file access times are slower.

  Parity is ideal for drives with large, infrequently updated files, such as video files.

  Reference: How to Use Windows 8 Storage Spaces to Mirror and Combine Drives

  http://technet.microsoft.com/en-us/library/jj899886.aspx