Microsoft 70-688 Online Practice Questions and Exam Preparation

Microsoft 70-688 Online Questions & Answers

• Question 41:

  Your network contains a wireless network access point that uses 802.IX certificate-based authentication.

  You purchase several devices that run Windows RT.

  You need to ensure that the Windows RT devices can authenticate to the wireless access point.

  What should you do first?

  A. Add a certificate to the Trusted Devices certificate store of the user.
  B. Add a certificate to the Trusted Root Certification Authorities certificate store of the computer.
  C. Add a certificate to the Trusted Root Certification Authorities certificate store of the user.
  D. Add a certificate to the Trusted Devices certificate store of the computer.
  B. Add a certificate to the Trusted Root Certification Authorities certificate store of the computer.

  ---

  http://answers.microsoft.com/en-us/windows/forum/windows_rt-ecoms/how- can-i-set-up-my-mail-app-to-connect-with/340d34a1-29cf-4f71-bfbc- 09e752907813 http://technet.microsoft.com/en-us/library/cc754841.aspx

• Question 42:

  You have client computers that run Windows 8 Pro. All of the computers are members of an Active Directory domain.

  The Folder Redirection Policy settings of all domain users are configured as shown in the Folder

  Redirection exhibit. (Click the Exhibit button.)

  

  You enable and configure the Configure slow-link mode Group Policy setting that applies to all of the computers as shown in the Slow-link mode exhibit. (Click the Exhibit button.)

  

  To answer, complete each statement according to the information presented in the exhibits. Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  References: http://social.technet.microsoft.com/Forums/windows/en-US/178188ef-48ea-419d-91e2-d5e73232ab16/offline-folders-slow-link-mode-bandwidth-assesed-as-0?forum=w7itpronetworking http://technet.microsoft.com/en-us/library/hh848267.aspx

• Question 43:

  You have laptops that run Windows 8. The laptops have Microsoft User Experience Virtualization (UE-V) installed.

  You need to ensure that the application settings, which are synchronized by using UE-V, apply to computers that are disconnected from the network.

  What should you do?

  A. From a command prompt, run sc config PeerDistSvc start=auto.
  B. From Group Policy Management Editor, configure the Windows Connection Manager settings.
  C. From a command prompt, run sc config CscService start=auto.
  D. From Group Policy Management Editor, configure the Network Connections settings.
  C. From a command prompt, run sc config CscService start=auto.

  ---

  Problem: UE-V Agent installation fails with error: The Offline Files service is not running Cause: The UE-V Agent installation failed because Offline Files was not enabled on the system.

  Resolution: To resolve the issue, enable Windows Offline files on the system.

  Windows 7 and Windows 8

  Run the following command from an elevated command prompt:

  sc config cscservice start=auto

  http://technet.microsoft.com/en-US/library/jj680025.aspx http://technet.microsoft.com/en-US/library/cc990290.aspx

• Question 44:

  Your company recently purchased 10 new desktop computers for a remote unconnected location. All of the desktop computers have the same hardware configuration.

  You install Windows 8 Pro on a reference computer and install a custom driver to support the video adapter.

  You want to create an image of the reference desktop that retains the custom driver in the image.

  You need to edit the unattended answer file.

  Which setting in the unattended answer file should you edit?

  A. Microsoft-Windows-PnPSysprep | PersistAllDeviceInstalls
  B. Microsoft-Windows-PnPSysprep | DoNotCleanUpNonPresentDevices
  C. Microsoft-Windows-PnpCustomizattonNonWinPE | DriverPaths
  D. Microsoft-Windows-Shell-Setup | OEMInformation
  A. Microsoft-Windows-PnPSysprep | PersistAllDeviceInstalls

  ---

  Microsoft-Windows-PnpSysprep

  Reference:

  http://technet.microsoft.com/en-us/library/cc766005(v=ws.10).aspx The Microsoft-Windows-PnpSysprep component specifies whether all Plug and Play information persists during the generalize pass. Typically, during the generalize pass, all

  device information is removed from the computer.

  If the device information is removed during the generalize pass, the next time the computer runs Plug and Play, the devices will be re-initialized. Typically, the next time the computer boots, the specialize pass runs, and Plug and Play runs.

  PersistAllDeviceInstalls

  Specifies whether all Plug and Play information persists during the generalize configuration pass.

• Question 45:

  You support Windows 8.1 desktop computers and tablets that are members of an Active Directory domain. The domain includes Active Directory Certificate Services. All users use virtual smart cards to log on to their computers.

  A domain user wants to log on to both his desktop computer and his tablet computer by using the same domain user account.

  You need to configure the desktop and tablet computers to support two-factor authentication for the same domain user account.

  What should you do?

  A. Enroll the user for two separate certificates based on the Smartcard Logon template. Install one certificate in a virtual smart card on each of the user's computers.
  B. Export the private key from the desktop computer. Import the private key to the tablet.
  C. After the user has logged on to one computer, disable the Trusted Platform Module (TPM) on the second computer. Run the tpmvscmgr.exe utility on each of the computers.
  D. Issue a temporary physical smart card. Use this smart card for an initial logon on each computer, then disconnect the tablet from the office network and destroy the temporary smart card.
  D. Issue a temporary physical smart card. Use this smart card for an initial logon on each computer, then disconnect the tablet from the office network and destroy the temporary smart card.

  ---

  Using one-time password for enrollment One option to ensure that users are strongly authenticated before virtual smart card certificates are issued is to send a user a one-time password through SMS, email, or phone. The user then types the

  one-time password during the certificate enrollment from an application or a script on a desktop that invokes built-in command-line tools.

  Note:

  *

  Virtual smart card technology from Microsoft offers comparable security benefits to physical smart cards by using two-factor authentication. Virtual smart cards emulate the functionality of physical smart cards, but they use the Trusted Platform Module (TPM) chip that is available on computers in many organizations, rather than requiring the use of a separate physical smart card and reader. Virtual smart cards are created in the TPM, where the keys that are used for authentication are stored in cryptographically secured hardware.

  *

  Because all private information on the virtual smart card is encrypted by using the TPM on the host computer, it cannot be used on a different computer with a different TPM. There is no method to export the user's virtual smart card for use on other computers, which adds to the security of virtual smart cards. If a user requires access to network resources on multiple computers, multiple virtual smart cards can be issued for that user.

  *

  Multi-factor authentication, or two-factor authentication, is the term used to define the authentication mechanism that involves two (or more) factors. A "factor" is something you can prove: something you know (for instance, the username and password), something you possess (for instance, a token, a TPM-enabled device, a certificate, or a phone), or something that confirms your physical identity (for instance, a positive iris scan or a specific thumbprint).

  Incorrect:

  Not B: This would only b

  Reference: Deploy Virtual Smart Cards

• Question 46:

  Your company is migrating from Windows 7 to Windows 8.1.

  Before you attempt to migrate a client computer named Computer1. Computer1 fails and can no longer start Windows 7.

  You need to migrate the user profile from Computer1 to a client computer named Computer2 that runs Windows 8.1.

  Which three actions should you perform in sequence? (To answer, move the appropriate three actions from the list of actions to the answer area and arrange them in the correct order.)

  Select and Place:

  

  

  ---

  LoadState.exe. The LoadState tool migrates the files and settings, one at a time, from the store to a temporary location on the destination computer. The files are decompressed, and decrypted if necessary, during this process. Next, LoadState transfers the file to the correct location, deletes the temporary copy, and begins migrating the next file. The ScanState tool scans the source computer, collects the files and settings, and then creates a store. ScanState does not modify the source computer. By default, it compresses the files and stores them as a migration store. ScanState copies files into a temporary location and then into the migration store.

  http://technet.microsoft.com/en-us/library/dd560755%28v=WS.10%29.aspx

  http://technet.microsoft.com/en-us/library/bb457090.aspx

  http://technet.microsoft.com/en-us/library/cc749015%28v=WS.10%29.aspx

  http://technet.microsoft.com/en-us/library/cc766226%28v=ws.10%29.aspx

• Question 47:

  You have a Windows 8.1 Enterprise client computer.

  You open Device Manager as shown in the following exhibit (Click the Exhibit button.)

  

  You need to ensure that you can pair a Bluetooth device to the computer.

  Which button should you click? (To answer, select the appropriate button in the answer area,)

  Hot Area:

  

  

  ---

  http://answers.microsoft.com/en-us/windows/forum/windows81-hardware/afterupgradingto-windows-81-my-bluetooth-device/bf6c7155-65cb-4874-b683-330e8bfbe9c8

• Question 48:

  You support computers that run Windows 8 Pro and are members of an Active Directory domain. Several desktop computers are located in a subnet that is protected by a firewall. The firewall allows incoming TCP connections only to ports 80

  and 443.

  You want to manage disk volumes on the desktop computers from your computer, which is located outside the protected subnet.

  You need to configure the network to support the required remote administration access.

  What should you do?

  A. Enable Remote Desktop on the desktop computers.
  B. Run the winrm quickconfig command on your computer.
  C. Install Remote Server Administration Tools (RSAT) on your computer.
  D. Run the winrm quickconfig command on the desktop computers.
  D. Run the winrm quickconfig command on the desktop computers.

  ---

  Installation and Configuration for Windows Remote Management (Windows)

  Reference:

  http://msdn.microsoft.com/en-us/library/windows/desktop/aa384372(v=vs.85).aspx Quick default configuration

  Starting with Windows Vista, you can enable the WS-Management protocol on the local computer and set up the default configuration for remote management with the following command: Winrm quickconfig.

  Windows Server 2003 R2: The Winrm quickconfig command is not available.

  The winrm quickconfig command (or the abbreviated version winrm qc) performs the following operations:

  Starts the WinRM service, and sets the service startup type to auto-start.

  Configures a listener for the ports that send and receive WS-Management protocol messages using either HTTP or HTTPS on any IP address.

  Defines ICF exceptions for the WinRM service, and opens the ports for HTTP and HTTPS.

  Note The winrm quickconfig command creates a firewall exception only for the current user profile. If the firewall profile is changed for any reason, winrm quickconfig should be run to enable the firewall exception for the new profile; otherwise,

  the exception might not be enabled.

  Reference 2:

  http://blogs.technet.com/b/jonjor/archive/2009/01/09/winrm-windows-remote-management- troubleshooting.aspx

  WinRM (Windows Remote Management) Troubleshooting

  While WinRM listens on port 80 by default, it doesn't mean traffic is unencrypted. Traffic by default is only accepted by WinRM when it is encrypted using the Negotiate or Kerberos SSP. WinRM uses HTTP (TCP 80) or HTTPS (TCP 443).

  WinRM also includes helper code that lets the WinRM listener share port 80 with IIS or any other application that may need to use that port.

  http://technet.microsoft.com/en-us/library/hh921475.aspx

• Question 49:

  You have Windows 8.1 Enterprise client computers. All of the computers are managed by using Microsoft System Center 2012 Configuration Manager.

  You enable Microsoft System Center 2012 Endpoint Protection on the computers.

  You need to ensure that Endpoint Protection automatically downloads the latest available malware definition updates when unidentified malware is detected on the computers.

  What should you configure form the System Center 2012 Endpoint Protection settings?

  A. Advanced
  B. MAPS
  C. Real-time protection
  D. Default actions
  B. MAPS

  ---

  Microsoft Active Protection Service. Allows the collection and sending of information about detected malware to Microsoft. Advanced. Use these settings to configure actions such as system restore point creation, client interface visibility,

  quarantined item deletion period, allowing users to exclude specific folders, and scan and definition update schedule randomization. Default actions. Allows you to specify how malware is treated once detected based on malware threat level.

  You have the option of having malware quarantined or removed. You can also configure Endpoint Protection to take whatever action is recommended by Microsoft.

  Enable real-time protection. You can use the settings here to enable real time protection. You can also enable or disable scanning of incoming and outgoing files, and all downloaded files and attachments. You can also enable behavior

  monitoring, which can detect new malware based on behavioral characteristics and also enable protection against network-based exploits.

  http://technet.microsoft.com/en-us/security/jj900682.aspx http://technet.microsoft.com/en-us/library/hh508836.aspx

• Question 50:

  You support computers that run Windows 8 Pro.

  Your company recently purchased 200 new desktop computers. Company policy requires that the desktop computers include a recovery partition. The partition must contain a bootable image that includes support for incoming Remote Desktop connections.

  You need to configure the desktop computers to comply with company policy.

  Which four actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

  Select and Place:

  

  

  ---

  Note: After you have finished running the Microsoft Diagnostics and Recovery Toolset (DaRT) 8.0 Recovery Image wizard and created the recovery image, you can extract the boot.wim file from the ISO image file and deploy it as a recovery partition in a Windows 8 image. A partition is recommended, because any corruption issues that prevent the Windows operating system from starting would also prevent the recovery image from starting. Reference: How to Deploy the DaRT Recovery Image as Part of a Recovery Partition http://technet.microsoft.com/en-us/windowsserver/hh475797.aspx