Microsoft 70-688 Online Practice Questions and Exam Preparation

Microsoft 70-688 Online Questions & Answers

• Question 61:

  You administer Windows 8.1 Enterprise client computers.

  You plan to distribute a new application through a corporate web portal. When you run the application, you receive a warning message as shown in the exhibit.

  (Click the Exhibit button.)

  You need to prevent the browser from displaying the warning message when users install the application without reducing security.

  What should you do?

  A. Digitally sign the application with a standard or Extended Validation (EV) code signing certificate from a trusted Certification Authority (CA).
  B. Turn off Internet Explorer Enhanced Security Configuration (IE ESC).
  C. Import a standard or Extended Validation (EV) code signing certificate on the client computers.
  D. Rename the application with the .cat extension.
  C. Import a standard or Extended Validation (EV) code signing certificate on the client computers.

  ---

  Programs signed by an EV code signing certificate can immediately establish reputation with SmartScreen reputation services even if no prior reputation exists for that file or publisher. Reference: Microsoft SmartScreen and Extended Validation (EV) Code Signing Certificates http://blogs.msdn.com/b/ie/archive/2012/08/14/microsoft-smartscreen-amp-extended- validation-ev-code-signing-certificates.aspx

• Question 62:

  HOTSPOT

  You support Windows 8.1 Pro computers.

  You plug a legacy hardware adapter into a computer. You open Device Manager and notice that the legacy hardware adapter is not listed.

  You need to install the legacy hardware adapter.

  To which node should you add the legacy hardware adapter? (To answer, select the appropriate object in the answer area.)

  Hot Area:

  

  

  ---

  1. Step Right click the Computer icon and select Manage from the drop-down list.

  2. Step Computer Management window would open up allowing you to make changes in the hardware of your system. Click Device Manager from the left pane and right click your computer name from the top of the list. Now click add legacy hardware.

  3. A new popup window would show.

  

  A new popup window would show for adding a new hardware

• Question 63:

  You administer Windows 8.1 Enterprise computers in an Active Directory domain. You have purchased a subscription to Windows Intune.

  Company security policy requires that Windows Intune track resolved malware for 15 days, and that a system restore point be created before malware remediation.

  You need to meet the requirements specified in the security policy.

  What should you do?

  A. Create a new Windows Intune Mobile Security Policy in the Windows Intune Admin Console with the recommended settings.
  B. Connect your Microsoft account to your domain account.
  C. Create and deploy a Windows Firewall policy by using a custom policy.
  D. Create a new Windows Intune Center Settings policy with custom settings.
  E. Create and configure an Endpoint Protection scan.
  F. Create a new Windows Intune Agent Settings policy with the recommended settings.
  G. Create a new Automatic Approval Update policy.
  H. Create a new Windows Intune Agent Settings policy with custom settings.
  E. Create and configure an Endpoint Protection scan.

  ---

  Microsoft Intune can help you to secure your managed computers in a number of ways, including:

  *

  Endpoint Protection ?Provides real-time protection against malware threats, keeps malware definitions up-to date, and automatically scans computers. Endpoint Protection also provides tools that help you to manage and monitor malware attacks.

  *

  Windows Firewall settings ?Uses policies that allow you to configure Windows Firewall settings on computers.

  *

  Software updates Reference: Help secure your computers with Endpoint Protection and Windows Firewall policy for Microsoft Intune

• Question 64:

  A company has client computers that run Windows 7. The company plans to migrate all of the client computers to Windows 8.1.

  Two custom applications named App1 and App2 are installed on all client computers. A company policy restricts network connectivity when App1 is running. App2 must be run in a centralized environment.

  You need to ensure that client computers can run the applications after the migration.

  What should you use for each application? (Make only one selection in each column. This question is worth two points.)

  Hot Area:

  

  

  ---

  * App1:

  Microsoft Application Virtualization (App-V) can make applications available to end user computers without having to install the applications directly on those computers. This is made possible through a process known as sequencing the application , which enables each application to run in its own self-contained virtual environment on the client computer. The sequenced applications are isolated from each other. This eliminates application conflicts, but the applications can still interact with the client computer.

  Reference: Overview of Application Virtualization

  * App2:

  Microsoft Enterprise Desktop Virtualization (MED-V)

  When upgrading to a new version of Windows, enterprises must first inventory and test line of business applications on the new operating system and your organization may have some applications that are not yet officially supported by your vendor, or might not work at all despite all efforts.

  This whole process of testing, fixing the application, upgrading to a new version that supports Windows 8 or finding an alternative application can be time-consuming. Meanwhile, users are unable to take advantage of the operating system's new capabilities and enhancements, and IT departments have to delay upgrade plans. Microsoft Enterprise Desktop Virtualization (MED-V) can help ease these challenges.

  Reference: Microsoft Enterprise Desktop Virtualization (MED-V)

  Incorrect:

  Not: Microsoft User Experience Virtualization

  Microsoft User Experience Virtualization (UE-V) is a virtualization tool that enables users to move from one Windows device to another and keep the same operating system (OS) and applications settings.

• Question 65:

  At home, you use a desktop computer that runs Windows 8. At work, you use a laptop that runs Windows 8 and is connected to a corporate network. You use the same Microsoft account to log on to both computers.

  You have a folder with some personal documents on your desktop computer. The folder must be available and synced between both computers.

  You need to ensure that the latest version of these files is available. What should you do?

  A. Move the folder to the Documents folder.
  B. Go to PC Settings. Under Homegroup, select Documents to be Shared.
  C. Install SkyDrive for Windows. In Windows Explorer, move the folder that contains the personal documents to the SkyDrive folder.
  D. Move the folder to the Libraries folder.
  E. Go to PC Settings. Under Sync your settings, enable App settings.
  F. Right-click the folder and click Properties. Under Security, provide Full Control for the Microsoft account.
  A. Move the folder to the Documents folder.

  ---

  Windows 8 Tip: Syncing Settings and Files with Multiple PCs

  Reference:

  http://winsupersite.com/windows-8/windows-8-tip-syncing-settings-and-files-multiple-pcs

  Windows 8: How to Synchronize your files and settings

  Reference 2:

  http://darktips.com/synchronize-windows-8-files-settings/

• Question 66:

  You administer computers that run Windows 8 Enterprise in an Active Directory domain in a single Active Directory Site. All user account objects in Active Directory have the Manager attribute populated. The company has purchased a

  subscription to Windows Intune. The domain security groups are synchronized with the Microsoft Online directory.

  You create a Windows Intune group that specifies a manager as a membership criterion.

  You notice that the group has no members.

  You need to ensure that users that meet the membership criteria are added to the Windows Intune group.

  What should you do?

  A. Force Active Directory replication within the domain.
  B. Ensure that all user accounts are identified as synchronized users.
  C. Ensure that the user who is performing the search has been synchronized with the Microsoft Online directory.
  D. Synchronize the Active Directory Domain Service (AD DS) with the Microsoft Online directory.
  B. Ensure that all user accounts are identified as synchronized users.

  ---

  Add Computers, Users, and Mobile Devices

  Reference:

  http://technet.microsoft.com/library/hh441723.aspx

  For users and security groups to appear in the Windows Intune administrator console, you must sign in to the Windows Intune account portal and do one of the following:

  Manually add users or security groups, or both, to the account portal.

  Use Active Directory synchronization to populate the account portal with synchronized users and security groups.

  Windows Intune

  The Windows Intune cloud service enables you to centrally manage and secure PCs through a single web-based console so you can keep your computers, IT staff, and users operating at peak performance from virtually anywhere without

  compromising the essentials--cost, control, security, and compliance.

  Reference 2:

  http://technet.microsoft.com/en-us/windows/intune.aspx

• Question 67:

  You are an administrator for a large company that has an Active Directory domain. Your company has tablets that run Windows RT.

  Users report that their tablets get locked after one minute of inactivity. They also report that when they change the Personalization setting to 15 minutes, it resets back to 1 minute.

  You need to ensure that the lockout time for inactivity is set to 15 minutes.

  What should you do?

  A. Log on to the tablets as a local administrator and configure the screensaver wait time and logon options.
  B. Modify Group Policy.
  C. Modify ActiveSync configuration.
  D. Log on to the tablets as a local administrator and run the PowerShell cmdlet Set- ScreenSaverTimeout -Seconds 900.
  E. Configure the local system policy Do not display the lock screen setting to Enabled.
  C. Modify ActiveSync configuration.

  ---

  http://answers.microsoft.com/en-us/windows/forum/windows_8- performance/windows-8-and-activesync/85a1bf41-54c7-47ee-9e25-c78939671153 http://windows.microsoft.com/en-ZA/windows-vista/How-to-keep-your-information-in-sync

• Question 68:

  At work, you use a desktop computer that runs Windows 8 Pro. At home, you use a laptop that runs Windows 8. You use the same Microsoft account to log on to both computers.

  You want to use the same settings for both computers.

  You need to ensure that all computer settings, including stored passwords, are synced between the computers.

  What should you do?

  A. Add both computers to the same Active Directory domain.
  B. Use the same local accounts for both computers.
  C. Install SkyDrive for Windows on both computers.
  D. Designate both computers as trusted PCs.
  D. Designate both computers as trusted PCs.

  ---

  *

  Microsoft has integrated its cloud computing features into much of Windows 8. The focal point of that integration is the soon to be re-branded Windows Live service--use a Windows Live account as your login, and you can synchronize much of the information associated with your account to all your Windows devices through the cloud. Or at least, that's the goal.

  *

  Setting up for synchronization starts when you configure your user account. At installation, Windows 8 prompts you for a Windows Live account. You can create a new Live account or use an existing one for your user credentials, or choose

  to bypass this and set up a local-only user account--but you won't be able to leverage the synchronization features if you do. You can also opt out later and switch to a local-only account through Windows 8's settings menu. When you set up your user account--either at install time or from the PC settings menu afterward--you'll be prompted to either use an existing Live account email address or enter a new one http://technet.microsoft.com/en-us/windowsserver/bb250462%28v=vs.71%29.aspx

• Question 69:

  You administer computers and printers on your company network. The computers run Window 8 Pro.

  An employee wants to add a separator page to her printer task on a network printer. You create a separator page file and save it to the C:\Windows\System32 folder on her computer.

  You need to configure the computer to use the separator page for the print task.

  Which three actions should you perform in sequence on the computer? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

  Select and Place:

  

  

  ---

  Windows allows the specification of a separator page file to be printed at the start of each print job. Several of these files are included with Windows. In addition, custom separator page files may be created to suit individual needs. The Windows "Concepts and Planning Guide" documents how to create such files.

  Reference:

  http://support.microsoft.com/kb/102712

• Question 70:

  You have several client computers that run Windows 7 Enterprise.

  You plan to configure the computers to dual-boot to Windows 8.1 Enterprise by using a native-boot VHD.

  You have a VHD file that contains an installation of Windows 8.1 Enterprise,

  You need to inject several device drivers into the VHD file.

  Which tool should you use?

  A. Bcdedit
  B. Bcdboot
  C. Pkgmgr
  D. Dism
  D. Dism

  ---

  Deployment Image Servicing and Management (DISM) is a command-line tool used to service Windows?images offline before deployment. You can use it to install, uninstall, configure, and update Windows features, packages, drivers, and

  international settings. Subsets of the DISM servicing commands are also available for servicing a running operating system.

  DISM is installed with Windows?7, and it is also distributed in the Windows OEM Preinstallation Kit (Windows OPK) and the Windows Automated Installation Kit (Windows AIK). It can be used to service Windows Vista?with Service Pack 1

  (SP1), Windows Server?2008, Windows?7, Windows Server?2008 R2, or Windows PE images. DISM replaces several Windows OPK tools, including PEimg, Intlcfg, and Package Manager.

  http://technet.microsoft.com/en-us/library/dd744256%28v=WS.10%29.aspx Reference: http://social.technet.microsoft.com/wiki/contents/articles/516.how-to-boot-from- a-vhd.aspx#Add http://technet.microsoft.com/en-us/library/cc749465%28v=WS.10%29.aspx Package Manager (Pkgmgr.exe) installs, uninstalls, configures, and updates features and packages for Windows Vista. You can install or update Windows Vista

  feature packages on an offline destination computer by using Package Manager and an unattended installation answer file. http://technet.microsoft.com/en-us/library/hh824874.aspx BCDboot can update an existing boot environment on the system partition: http://technet.microsoft.com/en-us/library/cc709667%28v=WS.10%29.aspx BCDEdit is a command-line tool for managing BCD stores. It can be used for a variety of purposes, including creating new stores, modifying existing stores, adding boot menu options, and so on. BCDEdit serves essentially the same purpose

  as Bootcfg.exe on earlier versions of Window