Microsoft 70-688 Online Practice Questions and Exam Preparation

Microsoft 70-688 Online Questions & Answers

• Question 181:

  You support tablets that run Windows 8 Pro. You are designing a remote access server (RAS) that will be placed behind a firewall. The firewall will accept incoming TCP connections to ports 80 and 443 only.

  You want to connect to the RAS server from a tablet.

  You need to create a virtual private network (VPN) connection to the RAS server.

  Which VPN tunneling protocol should you use?

  A. IPSec/L2TP
  B. SSTP
  C. PPTP
  D. IPSec/IKEv2
  B. SSTP

  ---

  Was a bit difficult to find information on Technet regarding SSTP but, the below explains it well and why it would be used here. Secure Socket Tunneling Protocol Reference: http://en.wikipedia.org/wiki/Secure_Socket_Tunneling_Protocol http://technet.microsoft.com/en-us/library/cc783910%28v=WS.10%29.aspx Secure Socket Tunneling Protocol (SSTP) is a form of VPN tunnel that provides a mechanism to transport PPP or L2TP traffic through an SSL 3.0 channel. SSL

  provides transport-level security with key-negotiation, encryption and traffic integrity checking. The use of SSL over TCP port 443 allows SSTP to pass through virtually all firewalls and proxy servers.

• Question 182:

  You support computers that run Windows 8 Enterprise and are members of a workgroup.

  Users are able to download and install any app from Windows Store.

  You need to ensure that only approved apps can be installed from Windows Store.

  What should you do?

  A. Configure an AppLocker Packaged app rule.
  B. Enable Windows SmartScreen and select the Get administrator approval before running an unrecognized app from the Internet option.
  C. Configure an AppLocker Publisher rule.
  D. Configure a Software Restriction Policy Certificate rule.
  A. Configure an AppLocker Packaged app rule.

  ---

  http://technet.microsoft.com/en-us/library/ee619725%28v=WS.10%29.aspx http://technet.microsoft.com/en-us/library/dd759068.aspx

• Question 183:

  You have Windows 8.1 client computers. The computers use the Microsoft Application Virtualization (App-V) 5.0 client.

  You discover that when users sign in to their computer, the App-V client refreshes all of the published packages.

  You need to prevent the App-V client from refreshing the published packages at sign-in. The solution must ensure that the users can use App-V applications.

  Which Windows PowerShell cmdlet should you run?

  A. Set-AppvClientConfiguration
  B. Set-AppvClientMode
  C. Set-AppvClientPackage
  D. Set-AppvPublishingServer
  D. Set-AppvPublishingServer

  ---

  AppvClientConfiguration ?A configuration value for a setting of the App-V Client (E.g. EnablePackageScripts, AllowHighCostLaunch, PackageInstallationRoot) AppvClientMode ?The current mode (normal or uninstall) of the client. AppvClientPackage ?An App-V package that is available for use on the App-V Client. AppvPublishingServer ?An App-V server that hosts metadata about the packages available to the client over the network. http://technet.microsoft.com/enus/library/cc843710.aspx http://technet.microsoft.com/en-us/library/cc843704.aspx http://blogs.technet.com/b/appv/ archive/2012/12/03/app-v-5-0-client-powershell-deep- dive.aspx http://technet.microsoft.com/en-us/library/cc817137.aspx http://technet.microsoft.com/en-US/library/jj687745.aspx

• Question 184:

  A company has 100 Windows 8.1 client computers.

  A computer fails and reports a kernel error.

  You need to analyze the kernel error to identify what caused the failure.

  What should you use?

  A. A USB recovery drive created by using the advanced recovery tools on another Windows 8 computer
  B. A system repair disk created by using Windows 7 File Recovery on another Windows 8 computer
  C. The Windows 8 Debug/Checked Build installation media
  D. A recovery disk created by using the Microsoft Diagnostics and Recovery Toolset (DaRT)
  A. A USB recovery drive created by using the advanced recovery tools on another Windows 8 computer

  ---

  http://windows.microsoft.com/en-US/windows-8/create-usb-recovery-drive http://social.technet.microsoft.com/wiki/contents/articles/5738.windows- checked-build.aspx Reference: How to Deploy the DaRT Recovery Image as Part of a Recovery Partition

  http://technet.microsoft.com/en-us/windowsserver/hh475797.aspx

• Question 185:

  You administer Windows 8.1 Enterprise computers in an Active Directory domain. Your company has purchased a subscription to Windows Intune. You are assigned as a Global Administrator for Intune.

  You determine that a company employee who works at the help desk requires the following permissions:

  Manage support tickets

  Manage subscriptions

  You need to assign the appropriate administrative role to the employee.

  Which role should you assign to the help desk employee?

  A. User Management Administrator
  B. Password Administrator
  C. Billing Administrator
  D. Service Administrator
  D. Service Administrator

  ---

  People with Intune administrator roles (including tenant administrators and service administrators) are the only ones in your organization who are authorized to access the Intune Administration console and to communicate directly with Microsoft about Intune service requests. Reference: Microsoft Intune support

• Question 186:

  You administer 50 laptops that run Windows 7 Professional 32-bit.

  You want to install Windows 8 Pro 64-bit on every laptop. Users will keep their own laptops.

  You need to ensure that user application settings, Windows settings, and user files are maintained after Windows 8 Pro is installed.

  Which four actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

  Select and Place:

  

  

  ---

  Note:

  * You use the User State Migration Tool (USMT) 5.0 when hardware and/or operating system upgrades are planned for a large number of computers. USMT manages the migration of an enduser's digital identity by capturing the user's operating-system settings, application settings, and personal files from a source computer and reinstalling them on a destination computer after the upgrade has occurred.

  One common scenario when only the operating system, and not the hardware, is being upgraded is referred to as PC refresh. A second common scenario is known as PC replacement, where one piece of hardware is being replaced, typically by newer hardware and a newer operating system.

  * Scenario: PC-refresh using a hard-link migration store A company has just received funds to update the operating system on all of its computers to Windows 8. Each employee will keep the same computer, but the operating system on each computer will be updated. In this scenario, an administrator uses a hard-link migration store to save each user state to their respective computer.

  The administrator runs the ScanState command-line tool on each computer, specifying the /hardlink /nocompress command-line options. ScanState saves the user state to a hard-link migration store on each computer, improving performance by minimizing network traffic as well as minimizing migration failures on computers with very limited space available on the hard drive.

  On each computer, the administrator installs the company's SOE which includes Windows 8 and other company applications.

  The administrator runs the LoadState command-line tool on each computer. LoadState restores each user state back on each computer.

  Reference: User State Migration Toolkit (USMT)

  Reference: http://technet.microsoft.com/en-us/library/hh825256.aspx

• Question 187:

  You support Windows 8.1 Enterprise desktop computers.

  Your company is deploying proprietary devices that will use a signed device driver. The driver is stored on a server share and is updated frequently by the device manufacturer.

  You need to configure the desktop computers to automatically install the most recent version of the device driver from the file share when the proprietary device is plugged in to the computer.

  What should you do?

  A. Run the dism.exe tool and specify the /Add-Driver parameter,
  B. Run the pnputil.exe and specify the -e parameter.
  C. Modify the DevicePath value in the HKEY_LOCAL_MACHINE/Microsoft/Windows/CurrentVersion registry key.
  D. Run the pnputil.exe tool and specify the -a parameter.
  D. Run the pnputil.exe tool and specify the -a parameter.

  ---

  Pnputil.exe is a command line utility that you can use to manage the driver store. You can use Pnputil to add driver packages, remove driver packages, and list driver packages that are in the store.

  * -a

  Specifies to add the identified INF file.

  * -e

  Specifies to enumerate all third-party INF files. Example: pnputil.exe -a a:\usbcam\USBCAM.INF Adds the INF file that is specified by USBCAM.INF

  Reference: Pnputil

• Question 188:

  A company's Windows 8.1 tablets are joined to an Active Directory Domain Services (AD DS) domain. When employees work remotely, they use a mobile data plan to connect their tablets to the Internet. The company has the following requirements for the mobile data plan:

  1. Management users must synchronize offline files.

  2. Sales users must minimize data usage.

  3. Marketing users must receive all Windows Updates.

  You need to ensure that the tablets meet these requirements.

  How should the connections be configured? (To answer, drag the appropriate connection type to the corresponding department, Each connection type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.)

  Select and Place:

  

  

  ---

  * Enable background file synchronization of Offline Files on metered networks To enable background file synchronization of Offline Files for a group of users while using metered connections, use Group Policy to enable the Enable file synchronization on costed networks policy setting for the appropriate Group Policy Object (GPO).

  * Windows 8.1, Windows 8, Windows Server 2012 R2, and Windows Server 2012 support costaware synchronization by automatically tracking roaming and bandwidth usage limits while on metered connections. By default, when the user is using a metered connection (such as a 4G mobile network) and is near or over their bandwidth limit or roaming on another provider's network, Windows switches to Offline mode and disables background synchronization. Users can still manually initiate synchronization, and administrators can override cost-aware synchronization for specific users, such as executives. Reference: Enable Background File Synchronization on Metered Networks

• Question 189:

  You have a client Windows 8.1 Enterprise computer. The computer is joined to an Active Directory domain. The computer does not have a Trusted Platform Module (TPM) chip installed.

  You need to configure BitLocker Drive Encryption (BitLocker) on the operating system drive.

  Which Group Policy object (GPO) setting should you configure?

  A. Configure use of hardware-based encryption for operating system drives.
  B. Allow access to BitLocker-protected fixed data drives from earlier version of Windows.
  C. Require additional authentication at startup.
  D. Allow network unlock at startup.
  C. Require additional authentication at startup.

  ---

  http://support.microsoft.com/kb/2855131

• Question 190:

  You have computers that run Windows 8 Pro and are configured as a workgroup. Each computer is scheduled to run a Windows Defender full scan every morning at 07:00.

  Users report that they are unable to view previous instances of detected malware when they arrive to work.

  You need to ensure that all users can see previous instances of detected malware in Windows Defender.

  Which option on the Settings tab should you select? (To answer, select the appropriate option in the answer area.)

  Hot Area:

  

  

  ---

  The MAP Toolkit is used for multi-product assessment and planning. It assesses a network environment using agentless data collection technologies to gather inventory and performance information. Then provides assessment reports to aid organizations with their IT infrastructure planning. The main areas of planning covered by MAP: Migration Planning Consolidation/Virtualization Private/Public Cloud Planning Software Usage Tracking http://social.technet.microsoft.com/wiki/contents/articles/15142.map-software-usagetracking.aspx Real-Time Protection (RTP) is a feature of Windows Defender, running in the context of the logged-on user, that monitors the registry and file system on the computer by using agents that monitor auto-start extensibility points (ASEP). http://technet.microsoft.com/en-us/library/dd363904%28v=WS.10%29.aspx