Microsoft 70-688 Online Practice Questions and Exam Preparation

Microsoft 70-688 Online Questions & Answers

• Question 31:

  Your company has purchased a subscription to Windows Intune. You use Windows Intune to automatically deploy Windows updates.

  You create an automatic approval rule in Windows Intune but notice that previously existing updates are not deployed.

  You need to ensure that all previously existing updates are automatically approved.

  What should you do?

  A. Run the approval rule.
  B. Edit the schedule for the automatic approval rule.
  C. Create and deploy a policy that uses the recommended settings in the Windows Intune Center Settings template.
  D. Create and deploy a custom policy in the Windows Intune Center Settings template.
  A. Run the approval rule.

  ---

  Creating Automatic Update Approval Rules

  When an automatic approval rule is created it only approves future updates, and does not automatically approve previously existing updates that already exist in Windows Intune. To approve these updates you need to run the automatic

  approval rule.

  Reference:

  http://onlinehelp.microsoft.com/en-us/windowsintune.latest/hh850815.aspx?sl=1

• Question 32:

  Your network contains an Active Directory domain. The domain contains Windows 8.1 Enterprise client computers.

  You need to a recommend a solution to ensure that help desk users can repair remotely a corrupt registry on a Windows 8.1 computer. The solution must minimize administrative effort.

  What should you recommend?

  A. Windows To Go
  B. Microsoft Diagnostics and Recovery Toolset (DaRT)
  C. Windows Recovery Environment (Windows RE)
  D. Windows Preinstallation Environment (Windows PE)
  B. Microsoft Diagnostics and Recovery Toolset (DaRT)

  ---

  Reference: http://technet.microsoft.com/en-us/windows/hh826071.aspx Reference: How to Deploy the DaRT Recovery Image as Part of a Recovery Partition http://technet.microsoft.com/en-us/windowsserver/hh475797.aspx http://tweaks.com/windows/52279/how-to-create-a-windows-to-go-usb-drive/ http://technet.microsoft.com/en-us/library/jj592680.aspx http://technet.microsoft.com/en-us/library/cc765966%28v=WS.10%29.aspx

• Question 33:

  You administer Windows 8.1 Enterprise laptops. All of the computers are members of an Active Directory domain.

  When traveling, users access the corporate network by using a virtual private network (VPN).

  You need to implement two-factor authentication.

  Which of the following should you use?

  A. EAP-TLS
  B. MS-CHAP v2
  C. 802.1X
  D. RADIUS
  E. PPTP
  F. L2TP/IPSEC
  G. IPSEC/IKEv2
  H. SSTP
  D. RADIUS

  ---

  The RADIUS Authentication section allows the administrator to enable and configure RADIUS authentication for the Azure Multi-Factor Authentication Server. Reference: Widnows RRAS VPN and Multi Factor Authentication

• Question 34:

  You administer desktop computers on your company network.

  You want to deploy a WMI file of Windows 8.1 Enterprise to several desktops that have a third-party PCI-X board installed. The hardware vendor provided a device driver to support this board.

  You need to customize the image to ensure that the device driver is installed when you deploy the image.

  What should you do?

  A. Download and run the imagex.exe tool and specify the /append parameter.
  B. Run the dism.exe tool and specify the /add-driver parameter.
  C. Download and run the drvload.exe tool and specify the path to the driver .inf file.
  D. Run the dism.exe tool and specify the /add-package parameter.
  B. Run the dism.exe tool and specify the /add-driver parameter.

  ---

  After you mount the boot image, use DISM to add optional components to the boot image. Use DISM to add specific drivers to the boot image, when required. Type the following to add drivers to the boot image, if required: dism.exe /image:C:\WinPEMount /add-driver /driver:< path to driver .inf file >

  Reference: How to Customize Windows PE Boot Images to Use in Configuration Manager

• Question 35:

  You administer Windows 8.1 Enterprise desktop computers that are members of an Active Directory domain.

  You want to create an archived copy of user profiles that are stored on the desktops. You create a standard domain user account to run a backup task.

  You need to grant the backup task user account access to the user profiles.

  What should you do?

  A. Add the backup task account to the Backup Operators group on every computer.
  B. Set the backup task account as NTFS owner on all the profiles.
  C. Add the backup task account to the Remote Management Users group on a domain controller.
  D. Add the backup task account to the Backup Operators group on a domain controller.
  D. Add the backup task account to the Backup Operators group on a domain controller.

• Question 36:

  Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  You support Windows 8.1 Enterprise desktop computers and tablets. All of the computers are able to connect to your company network from the Internet by using DirectAccess.

  Your company wants to deploy a new application to the tablets. The deployment solution must meet the following requirements:

  Users have offline access to the application only within the first seven days following their latest online session. The application uses the least amount of disk space. You need to deploy the new application to the tablets.

  What should you do?

  A. Deploy the application as an Application Virtualization (App-V) package. Install the App- V 4.6 client on the tablets.
  B. Deploy the application as a published application on the Remote Desktop server. Create a Remote Desktop connection on the tablets.
  C. Install the application on a local drive on the tablets.
  D. Install the application in a Windows To Go workspace.
  E. Install Hyper-V on tablets. Install the application on a virtual machine.
  F. Publish the application to Windows Store.
  G. Install the application within a separate Windows 8.1 installation in a virtual hard disk (VHD) file. Configure the tablets with dual boot.
  H. Install the application within a separate Windows 8.1 installation in a VHDX file. Configure tablets with dual boot.
  B. Deploy the application as a published application on the Remote Desktop server. Create a Remote Desktop connection on the tablets.

• Question 37:

  You administer computers that run Windows 8 Pro and are members of an Active Directory domain. The computers are encrypted with BitLocker and are configured to store BitLocker encryption passwords in Active Directory.

  A user reports that he has forgotten the BitLocker encryption password for volume E on his computer.

  You need to provide the user a BitLocker recovery key to unlock the protected volume. Which two actions should you perform? (Each correct answer presents part of the solution.

  Choose two.)

  A. Ask the user for his computer name.
  B. Ask the user to run the manage-bde -unlock E: -pw command.
  C. Ask the user for his logon name.
  D. Ask the user for a recovery key ID for the protected volume.
  A. Ask the user for his computer name.
  C. Ask the user for his logon name.

  ---

  http://windows.microsoft.com/en-US/windows-8/bitlocker-recovery-keys-faq http://technet.microsoft.com/en-us/library/dn383583.aspx http:// technet.microsoft.com/en-us/library/dd875560%28v=WS.10%29.aspx http://support.microsoft.com/ kb/2855131

• Question 38:

  You administer client computer that run Windows 8 Enterprise deployed by using Windows Deployment Services (WDS).

  Your company recently purchased 25 new tablets that run Windows 8 Pro.

  For all 25 new tables, you want to replace the existing Windows 8 Pro installation with Windows 8 enterprise.

  You need to deploy the Windows 8 Enterprise image to all 25 tablets simultaneously by using the existing WDS infrastructure.

  What should you do?

  A. Start the tablets normally. Map the Windows Image (WIM) file from a WDS network share.
  B. Start the tablets from a customized Windows Recovery Environment (WinRE)
  C. Start the tablets in Windows Recovery Mode.
  D. Start the tablets from a USB flash drive with a customized Windows Preinstallation Environment (WinPE.).
  A. Start the tablets normally. Map the Windows Image (WIM) file from a WDS network share.

  ---

  Note: Extract the boot.wim file Use the boot.wim file to create a bootable partition. http://technet.microsoft.com/en-us/library/cc709665%28v=WS.10%29.aspx

• Question 39:

  Your network contains an Active Directory domain named contoso.com. All client computers in the domain run Windows 8.1 Pro. All domain users have roaming user profiles.

  You need to prevent a user named User2 from being able to save changes to his roaming user profile.

  Which file you modify?

  A. registry.pol
  B. ntuser.pol
  C. ntuser.dat
  D. system.dat
  B. ntuser.pol

  ---

  Ntuser.pol

  An archive file on client computers that is updated each time the Administrative Templates CSE sets a policy setting. As processing completes, an Ntuser.pol containing the history of applied registry based policies in the Group Policy managed policies tree is written to the root of the user's profile containing user policy settings and to the "all users" profile containing computer policy settings.(%Allusersprofile%\ntuser.pol for computer policy and %userprofile%\ntuser.pol for user policy.) http://technet.microsoft.com/en-us/library/cc758189%28v=WS.10%29.aspx The NTUSER.DAT file on a Microsoft Windows computer is a registry file that stores the software and operating system settings for each user profile. The System.dat and User.dat files are the data elements that compile all the registry information seen when you access the Regedit.exe graphical user interface in Windows. The Administrative Templates extension of Group Policy saves information in the Group Policy template in text files with the name Registry.pol. These files contain the customized registry settings that are applied to the Machine or User portion of the registry which you specify using the Group Policy snap-in.

  Reference: http://www.expertsexchange.com/OS/Microsoft_Operating_Systems/Windows/XP/Q_21453487.html

• Question 40:

  You install Windows 8 Pro on a new client computer.

  You sign-in to the computer by using a domain user account.

  You need to synchronize the Personalize settings between your domain account and a Microsoft account.

  What should you configure first? (To answer, select the appropriate settings section in the answer area.)

  Hot Area:

  

  

  ---

  http://www.c-sharpcorner.com/UploadFile/6cde20/3/

  http://www.technospot.net/blogs/sync-windows-8-user-settings-pc-tablet-mobile-windows-liveid/