Microsoft 70-688 Online Practice Questions and Exam Preparation

Microsoft 70-688 Online Questions & Answers

• Question 201:

  You administer a Windows 8.1 Enterprise computer.

  Your company wants to deploy Windows 8.1 Enterprise on 120 new computers. You have created a .win image file and placed it on a network share.

  You need to create a Windows Preinstallation Environment (WinPE) media to deploy this image to new computers.

  What should you do?

  A. Download and install the Windows Automated Installation Kit (AIK), and then use the Copype tool.
  B. Download and install the Windows Automated Installation Kit (AIK), and then use the Xcopy tool.
  C. Download and install the Windows Assessment and Deployment Kit (ADK), and then use the Xcopy tool.
  D. Download and install the Windows Assessment and Deployment Kit (ADK), and then use the Copype tool.
  A. Download and install the Windows Automated Installation Kit (AIK), and then use the Copype tool.

  ---

  Set up a Windows PE build environment In this step, you create a required directory structure that supports building a Windows PE image. On your technician computer, click Start, point to All Programs, point to Windows OPK or Windows AIK, and then click Windows PE Tools Command Prompt.The menu shortcut opens a Command Prompt window and automatically sets environment variables to point to all the necessary tools. By default, all tools are installed at C:\Program Files\\Tools, where can be Windows OPK or Windows AIK. At the command prompt, run the Copype.cmd script.The script requires two arguments: hardware architecture and destination location. For example,copype.cmd where can be x86, amd64, or ia64 and is a path to a local directory. For example,copype.cmd x86 c: \winpe_x86The script creates the following directory structure and copies all the necessary files for that architecture. For example,\winpe_x86\winpe_x86\ISO \winpe_x86\mount

  Reference: Walkthrough: Create a Bootable Windows PE RAM Disk on CD-ROM

  https://technet.microsoft.com/en-us/library/cc749311(v=ws.10).aspx

• Question 202:

  You administer a computer that runs Windows 8 Enterprise and is a member of an Active Directory domain.

  You create a folder named C:\Reports and assign NTFS permissions as shown in Exhibit 1. (Click the Exhibit button.)

  

  You share the folder over the network with Read permission for a domain user account named User1 as shown in Exhibit 2. (Click the Exhibit button.)

  

  You want to provide access to the shared folder only for the time that User1 is a member of the domain security group named Project. You need to assign the required permissions.

  Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

  Select and Place:

  

  

  ---

  Note: http://technet.microsoft.com/en-us/library/cc726004.aspx http://technet.microsoft.com/en-us/library/cc754178.aspx Example: Share Folders From ‘Users Profile’ Locations and Local Drives If you want to quickly share a folder residing in local drives or User Profile folders, open Properties dialog from right-click context menu, and then head over to Sharing tab. From Network File and Folder Sharing section, click Share to open File Sharing dialog. Now, select Everyone from drop-down menu, and click Add.

  

  This will add Everyone group in File Sharing list, and allow you to change folder access permission. Using Read pull-down menu, you can give read and write permissions to users, and remove Everyonegroup from the File Sharing list.

  

  Once done, click Share to share the folder on the network. It will open a separate dialog, allowing you to email and copy the shared folder link.

  

  Now, you can access the shared folder from any PC connected on the network.

• Question 203:

  You are a systems administrator for your company. The company has employees who work remotely by using a virtual private network (VPN) connection from their computers, which run Windows 8 Pro. These employees use an application

  to access the company intranet database servers. The company recently decided to distribute the latest version of the application through using a public cloud.

  Some users report that every time they try to download the application by using Internet Explorer, they receive a warning message that indicates the application could harm their computer.

  You need to recommend a solution that prevents this warning message from appearing, without compromising the security protection of the computers.

  What should you do?

  A. Publish the application through a public file transfer protocol (FTP) site.
  B. Publish the application through an intranet web site.
  C. Instruct employees to disable the SmartScreen Filter from within the Internet Explorer settings.
  D. Publish the application to Windows Store.
  B. Publish the application through an intranet web site.

  ---

  Intranet is the generic term for a collection of private computer networks within an organization. An intranet uses network technologies as a tool to facilitate communication between people or work groups to improve the data sharing capability and overall knowledge base of an organization's employees. Intranets utilize standard network hardware and software technologies like Ethernet, Wi-Fi, TCP/IP, Web browsers and Web servers. An organization's intranet typically includes Internet access but is firewalled so that its computers cannot be reached directly from the outside.

  http://compnetworking.about.com/cs/intranets/g/bldef_intranet.htm http://www.dynamicwebs.com.au/tutorials/ftp.htm http://msdn.microsoft.com/en-us/library/windows/apps/xaml/hh974576.aspx

• Question 204:

  You are desktop administrator. You manage more than 100 Windows 8.1 desktop and laptop computers. The computers are joined to a Windows 2012 R2 domain. Employees log in to the domain.

  Twelve Windows 8.1 laptop computers are available for employees to use remotely. The custom application settings on the employee's desktop computers do not appear on the laptops. You want to implement Microsoft's User Experience

  Virtualization (UE-V) as a solution.

  You need to use the UE-V Generator on a Windows 8.1 computer to create UE-V templates.

  Which four actions should you perform in sequence? (To answer, move the appropriate four actions from the list of actions to the answer area and arrange them in the correct order.)

  Select and Place:

  

  

• Question 205:

  You manage a client Windows 8.1 computer named Computer1. The computer has the OneDrive desktop application installed.

  You have an OneDrive synchronized folder that contains .pdf files.

  What should you do?

  A. Enable File History.
  B. Enable Sync your settings on Computer1.
  C. Configure Computer1 as a trusted PC.
  D. Configure System Restore.
  B. Enable Sync your settings on Computer1.

  ---

  How to Turn On and Off the Synchronization Features in Windows 8.1

  The first switch is for turning On or Off the synchronization of all your settings. Setting it to On will allow you to change the behavior of all the other synchronization settings. Setting it to Off will disable the synchronization of all your settings.

  Reference: Introducing Windows 8.1: How to Synchronize and Back Up Your Settings http://www.7tutorials.com/introducing-windows-81-how-synchronize-back-your-settings

• Question 206:

  You are the system administrator for your company. The company has 500 users. The company's Windows servers, desktop computers, and laptop computers are joined to a Windows Server 2012 Active Directory Domain Services (AD DS) domain.

  You implement Remote Desktop Services for all users. The service includes access via a Remote Desktop Gateway (RD Gateway) server.

  The first users to use the RD Gateway receive the following error message: "This computer can't connect to the remote computer because the certificate authority that generated the Terminal Services Gateway server's certificate is not valid.

  Contact your network administrator for assistance."

  You need to ensure that users can connect to the RD Gateway.

  What should you do?

  A. Create a certificate and export it to the certificate Personal store of the local computer. Install the certificate on the RD Gateway.
  B. Verify that the RD gateway certificate name matches the external FQDN of the RD Gateway server.
  C. Create and assign an RD Gateway certificate.
  D. Import the RD Gateway certificate to the client computers and install it in the user trusted store.
  D. Import the RD Gateway certificate to the client computers and install it in the user trusted store.

  ---

  Certificate authority not trusted

  Error message - "This computer can't connect to the remote computer because the certificate authority that generated the Terminal Services Gateway server's certificate is not valid. Contact your network administrator for assistance. "

  clip_image004

  Brief description - The TS Gateway certificate authority is not trusted by the client. This issue can most likely arise if the administrator has provisioned the TS Gateway with a self- signed certificate or private certificate authority.

  Resolution (user-specific) - Import the TS Gateway certificate to the client machine and install it in the user trusted store.

  Note:

  To install the certificate in the user trusted store:

  1.

  Download the TS Gateway certificate on the client machine.

  2.

  Click Start, click Run, type "mmc.exe" (without the quotation marks), and then click OK.

  3.

  Click File, and then click Add/Remove Snap-In,

  4.

  Click the Certificates snap-in, and then click Add.

  5.

  Click User account, and then click Next.

  6.

  Click Local computer, and then click Finish.

  7.

  Expand Certificates (Local Computer).

  8.

  Right-click Trusted Root Certification Authorities, click All Tasks, and then click Import.

  9.

  Use the Certificate Import Wizard to import the certificate to the user trusted store.

  After completing the above actions, try reconnecting using TS Gateway. Reference: TS Gateway Certificates Part III: Connection Time Issues related to TS Gateway Certificates http://blogs.msdn.com/b/rds/archive/2008/12/18/ts-gateway-certificates-part-iii-connection- time-issues-related-to-ts-gateway-certificates.aspx

• Question 207:

  You administer computers that run Windows 8 Pro. Your company uses credit card readers that require a custom driver supplied by the manufacturer. The readers frequently are moved from computer to computer.

  Your company recently purchased five new computers that run Windows 8 Pro. You want the required drivers to be installed automatically and silently when users connect the readers to the new computers.

  You need to pre-stage the credit card reader driver on the new computers.

  What should you do?

  A. Add a Registry key with a path to a network shared folder that has the driver installation files.
  B. Run the pnputil.exe utility. Specify the document scanner driver.
  C. Add a Registry key with a path to a local folder on every computer. Copy the driver installation files to the folder.
  D. Run the dism.exe utility. Copy the driver files to the C:\Windows\System32\drivers folder in the WIM image.
  B. Run the pnputil.exe utility. Specify the document scanner driver.

  ---

  Reference:

  http://technet.microsoft.com/en-us/library/ff800798(v=ws.10).aspx

  Pnputil.exe is a command line utility that you can use to manage the driver store. You can use Pnputil to add driver packages, remove driver packages, and list driver packages that are in the store.

• Question 208:

  You have a Windows 8.1 Enterprise desktop computer.

  You add three new 3-terabyte disks.

  You need to create a new 9-terabyte volume.

  Which two actions should you perform? (Each correct answer presents part of the solution.

  Choose two.)

  A. From Diskpart, run the Convert MBR command.
  B. From Disk Management, bring all disks offline.
  C. From PowerShell, run the Add-PhysicalDisk cmdlet.
  D. From Disk Management, create a new spanned volume.
  E. From Disk Management, convert all of the 3-terabyte disks to GPT.
  F. From PowerShell, run the New-VirtualDisk cmdlet.
  D. From Disk Management, create a new spanned volume.
  E. From Disk Management, convert all of the 3-terabyte disks to GPT.

  ---

  You can build a spanned volume from GPT discs. A spanned volume is a dynamic volume consisting of disk space on more than one physical disk. If a simple volume is not a system volume or boot volume, you can extend it across additional

  disks to create a spanned volume, or you can create a spanned volume in unallocated space on a dynamic disk.

  You need at least two dynamic disks in addition to the startup disk to create a spanned volume. You can extend a spanned volume onto a maximum of 32 dynamic disks.

  Reference: Create a Spanned Volume

  https://technet.microsoft.com/sv-se/library/cc772180.aspx

• Question 209:

  You administer a company network that includes a wireless network infrastructure and computers that run Windows 8 Enterprise.

  You are planning to add a guest wireless network.

  You need to collect information about nearby wireless networks, including their encryption methods.

  Which command should you include in the batch file?

  A. Get-WmiObject win32_networkadapterconfiguration -Filter 'ipenabled = "true"'
  B. PowerShell commandlet Get-Host
  C. PowerShell commandlet Get-Netadapter with parameter -Wireless
  D. netstat -a
  E. netsh wlan show hostednetwork
  F. netsh wlan show networks
  F. netsh wlan show networks

  ---

  http://technet.microsoft.com/en-us/library/cc755301%28v=WS.10%29.aspx http://technet.microsoft.com/en- us/library/cc755301%28v=WS.10%29.aspx#bkmk_wlanShowNetworks

• Question 210:

  You administer laptops that run Windows 8 Enterprise. The laptops are members of an Active Directory domain and are configured with IPv6 disabled.

  Some users require access to the internal company database servers while traveling.

  You need to configure the requested network connection to the database servers.

  What should you configure on the laptops?

  A. A DirectAccess connection to the company network
  B. A virtual private network (VPN) connection to the company network
  C. A metered network connection
  D. Out of band management
  B. A virtual private network (VPN) connection to the company network

  ---

  DirectAccess cannot be used in this case as IPv6 is disabled and DirectAccess requires IPv6 and IPsec. IPv6 is the cornerstone of DirectAccess communications The DirectAccess client always uses IPv6 to communicate with the DirectAccess server. The DirectAccess server will then forward these connections to IPv6- enabled hosts on the corpnet. The corpnet can use native IPv6 infrastructure

  (where the routers, switches, operating systems, and applications are all IPv6 capable) or it can use IPv6 transition technologies to connect to IPv6 resources on the corpnet.

  Reference:

  http://www.techrepublic.com/blog/10things/10-things-you-should-know-about- directaccess/1371