Microsoft 70-688 Online Practice Questions and Exam Preparation

Microsoft 70-688 Online Questions & Answers

• Question 211:

  You administer computers that run Windows 8 Pro. You have secured the computers by using BitLocker.

  You have distributed a new application to the computers. Users report that file associations for ZIP archives is broken and users are unable to open ZIP files.

  You need to design a solution that recovers file association. You also need to ensure that BitLocker encryption settings are maintained.

  What should you do?

  A. Restore computer from the latest restore point.
  B. Delete the HKEY_CLASSES_ROOT\exefile\shell\open\command registry key.
  C. Modify setting in Change default settings for media or devices.
  D. Select Reset your PC.
  A. Restore computer from the latest restore point.

  ---

  http://windows.microsoft.com/en-us/windows-8/bitlocker-drive-encryption http://technet.microsoft.com/en-us/library/cc747463%28v=ws.10%29.aspx http://support.microsoft.com/kb/2855131

• Question 212:

  Your network contains an Active Directory domain. All client computers run Windows 8 Enterprise.

  Your company uses virtual smart cards.

  A user named User1 requires a virtual smart card on a new client computer named Computer1.

  Which two actions should you perform? (Each correct answer presents part of the solution.

  Choose two.)

  A. Enroll User1 for a certificate.
  B. Run the Enable-BitLocker cmdlet.
  C. Run the tpmvscmgr.exe command.
  D. Enroll Computer1 for a certificate.
  A. Enroll User1 for a certificate.
  C. Run the tpmvscmgr.exe command.

  ---

  A: Smart cards (virtual or otherwise) are based on digital certificates, which means you need a Public Key Infrastructure (PKI). A Windows Server 2012 certification authority (CA) has two default certificate templates that can be used for issuing smart card certificates. The Smartcard Logon template is appropriate when the card's use will be for logging on only. If you want users to be able to use the certificate for encrypting email, use the Smartcard User template.

  C: To create a Virtual Smart Card, use the Tpmvscmgr.exe command line utility. http://technet.microsoft.com/en-us/Library/dn593707.aspx http:// www.windowsecurity.com/articles-tutorials/authentication_and_encryption/Using- Virtual-SmartCards-Windows-8.html

• Question 213:

  You administer Windows 8.1 Pro laptops and tablets.

  Your company wants to start using Virtual Smart Cards on these laptops.

  You need to verify that the client laptops and tablets support Virtual Smart Cards before you implement any changes.

  What should you do?

  A. Connect a physical smart card reader to each laptop.
  B. Verify that each laptop has a Trusted Platform Module (TPM) chip of version 1.2 or greater.
  C. Configure BitLocker Drive Encryption on the system drive of each laptop.
  D. Upgrade the laptops to Windows 8 Enterprise edition.
  B. Verify that each laptop has a Trusted Platform Module (TPM) chip of version 1.2 or greater.

  ---

  Prerequisites

  You will need:

  A computer running Windows 8.1 or Windows 8 with an installed and fully functional TPM (version 1.2 or version 2.0). A test domain to which the computers listed above can be joined. Access to a server in that domain with a fully installed

  and running certification authority (CA).

  Reference: Get Started with Virtual Smart Cards: Walkthrough Guide

• Question 214:

  You support Windows 8.1 Enterprise desktop computers. One computer is a member of a workgroup and is used as a guest computer in a reception area.

  You need to configure the Windows SmartScreen setting to require administrator approval before running downloaded unknown software on the desktop computer.

  Which policy setting should you use? (To answer, select the appropriate object in the answer area.)

  Hot Area:

  

  

  ---

  http://technet.microsoft.com/en-us/library/jj618329.aspx

• Question 215:

  You support Windows 8.1 Enterprise computers that are members of a workgroup.

  Users are able to download and install any app from Windows Store.

  You need to ensure that only approved apps can be installed from Windows Store.

  What should you do?

  A. Configure a Software Restriction Policy Certificate rule.
  B. Configure an AppLocker Publisher rule.
  C. Configure an AppLocker Packaged app rule.
  D. Enable Windows SmartScreen and select the Get administrator approval before running an unrecognized app from the Internet option.
  D. Enable Windows SmartScreen and select the Get administrator approval before running an unrecognized app from the Internet option.

  ---

  The settings dialog box for Windows SmartScreen is now shown: Windows SmartScreen settings Reference: How To Disable / Turn Off Windows SmartScreen in Windows 8

  http://www.samlogic.net/articles/windows-8-disable-smartscreen.htm

• Question 216:

  You support desktop computers and tablets that run Windows 8 Enterprise. All of the computers are able to connect to your company network from the Internet by using DirectAccess.

  Your company wants to deploy a new application to the tablets. The deployment solution must meet the following requirements:

  Users have offline access to the application only within the first seven days following their latest online session. The application uses the least amount of disk space. You need to deploy the new application to the tablets.

  What should you do?

  A. Deploy the application as an Application Virtualization (App-V) package. Install the App- V client on the tablets.
  B. Deploy the application as a published application on the Remote Desktop server. Create a Remote Desktop connection on the tablets.
  C. Install the application on a local drive on the tablets.
  D. Install the application in a Windows To Go workspace.
  E. Install Hyper-V on tablets. Install the application on a virtual machine.
  F. Publish the application to Windows Store.
  G. Install the application within a separate Windows 8 installation in a virtual hard disk (VHD) file. Configure the tablets with dual boot.
  H. Install the application within a separate Windows 8 installation in a VHDX file. Configure tablets with dual boot.
  A. Deploy the application as an Application Virtualization (App-V) package. Install the App- V client on the tablets.

  ---

  http://technet.microsoft.com/en-us/library/jj680850.aspx http://technet.microsoft.com/en-us/library/cc843848.aspx

• Question 217:

  Your network contains an Active Directory domain named contoso.com. All client computers in the domain run Windows 8.1 Pro. All domain users have roaming user profiles.

  You need to prevent a user named User2 from being able to save changes to his roaming user profile.

  Which file or folder should you modify? (To answer, select the appropriate file or folder in the answer area.)

  Hot Area:

  

  

  ---

  An archive file on client computers that is updated each time the Administrative Templates CSE sets a policy setting. As processing completes, an Ntuser.pol containing the history of applied registry based policies in the Group Policy

  managed policies tree is written to the root of the user's profile containing user policy settings and to the “all users” profile containing computer

  policy settings.(%Allusersprofile%\ntuser.pol for computer policy and %userprofile%\ntuser.pol for user policy.)

  http://technet.microsoft.com/en-us/library/cc758189%28v=WS.10%29.aspx

  The NTUSER.DAT file on a Microsoft Windows computer is a registry file that stores the software and operating system settings for each user profile.

  NTUSER.INI is a hidden file in Documents and Settings\ There is one for each user account on the machine. and is used to set up the user roaming profile components.

  The ntuser.ini file is used to set up the user roaming profile components that are not copied to the server.

• Question 218:

  You are a Windows 8 user. Your organization has purchased an Office 365 subscription. You install Microsoft Lync and Microsoft Outlook on your computer. You need to connect Office 365 to Lync and Outlook. What should you do?

  A. Run the Office Professional Plus setup from the Office 365 portal.
  B. Run the Windows Mail application. Add a new account by using your Office 365 credentials.
  C. Run the People application. Add a new account by using your Office 365 credentials.
  D. Run the Office 365 desktop setup from the Office 365 portal.
  D. Run the Office 365 desktop setup from the Office 365 portal.

  ---

  Set up your desktop for Office 365

  When you have set up your desktop, you will be able to:

  Install the complete suite of Microsoft Office 2010 desktop apps, if you have a Office Professional Plus subscription. Install Lync, your workplace connection for instant messaging and online meetings, including audio and video.

  Use your user ID to sign in to Office 365 from your desktop applications.

  Reference:

  http://onlinehelp.microsoft.com/en-us/office365-enterprises/ff637594.aspx

• Question 219:

  You have 100 client computers that run Windows 8 Pro. Each computer has a single local hard disk drive, a DVD drive, and an external USB drive.

  Each computer has a different set of line-of-business (LOB) desktop applications that are installed locally. All of the applications store their configurations in the HKEY_Local_Machine\Software registry hive.

  You need to design a recovery solution to ensure that you can restore the initial state of the locally installed LOB desktop applications if an application is misconfigured. The solution must preserve the existing locally stored user data.

  What should you do?

  A. Enable File History. Restore files by using File History.
  B. Create a Microsoft Diagnostics and Recovery Toolset (DaRT) recovery image. Start the computer from the DaRT image and perform a file restore.
  C. Run recimg.exe. Perform a system refresh.
  D. Create a system repair disk by using Windows 7 File Recovery. Start the computer from the Windows 8 Enterprise installation media and perform an automatic repair,
  C. Run recimg.exe. Perform a system refresh.

  ---

  Reinstalling all of your Desktop apps can be time consuming, so Windows 8 offers a command called recimg.exe to make this easier. recimg creates an image which is used by the refresh facility when restoring Windows. Not only will your personal data and Metro style apps be saved, but so will Desktop apps you have installed at the time you create the image. This can save you a lot of time. http://gallery.technet.microsoft.com/Script-to-refresh-Windows-9aa30f2a http:// technet.microsoft.com/en-us/windowsserver/hh475797.aspx

• Question 220:

  You administer computers that run Windows 8 Pro. The desktops have the Application Virtualization (App-V) client installed. Multiple App-V applications are published on the network.

  A user reports that it is taking a long time to launch App-V applications on his computer. You discover that the user has a roaming profile on the computer.

  You need to minimize the time that is required for the user to start App-V applications on the computer.

  What should you do?

  A. Change the user profile to Super-Mandatory.
  B. Change the location of the App-V client cache file on the computer.
  C. Increase the size of the App-V client cache on the computer.
  D. Change the user profile to Local.
  C. Increase the size of the App-V client cache on the computer.

  ---

  How to Change the Size of the FileSystem Cache

  Reference:

  http://technet.microsoft.com/en-us/library/cc843780.aspx You can change the size of the FileSystem cache by using the command line. This action requires a complete reset of the cache, and it requires administrative rights.

  To change the size of the FileSystem cache

  Set the following registry value to 0 (zero):

  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SoftGrid\4.5\Client\AppFS\State

  Set the following registry value to the maximum cache size, in MB, that is necessary to hold the packages--for example, 8192 MB:

  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SoftGrid\4.5\Client\AppFS\FileSize

  Restart the computer.