Microsoft 70-697 Online Practice Questions and Exam Preparation

Microsoft 70-697 Online Questions & Answers

• Question 301:

  You support Windows 10 Enterprise computers that are members of an Active Directory domain. Your company policy defines the list of approved Microsoft Store for Business apps that are allowed for download and installation.

  You have created a new AppLocker Packaged Apps policy to help enforce the company policy.

  You need to test the new AppLocker Packaged Apps policy before you implement it for the entire company.

  What should you do?

  A. From Group Policy, run the Group Policy Results Wizard
  B. From Group Policy, enforce the new AppLocker policy in Audit Only mode
  C. From Group Policy, run the Group Policy Modeling Wizard
  D. From PowerShell, run the Get-AppLockerPolicy -effective command to retrieve the AppLocker effective policy
  B. From Group Policy, enforce the new AppLocker policy in Audit Only mode

  ---

  You can test an AppLocker Packaged Apps policy by running it in audit mode.

• Question 302:

  You support Windows 10 Enterprise desktop computers that are members of an Active Directory domain. Standard domain user accounts are configured with mandatory user profiles.

  Several users have been transferred to a different department.

  You need to allow the users to modify their profiles.

  What should you do?

  A. Change the extension of the NTUSER file in the user profile directory to .dat
  B. Configure Folder Redirection by using Group Policy
  C. Configure the user's document library to include folders from network shares
  D. Remove the .man extension from the user profile name
  A. Change the extension of the NTUSER file in the user profile directory to .dat

  ---

  References: https://msdn.microsoft.com/en-us/library/windows/desktop/bb776895(v=vs.85).aspx

• Question 303:

  You support Windows 10 Enterprise computers that are members of an Active Directory domain. All of the computers have a dedicated recovery partition.

  A computer indicates that the domain is unavailable. The password of a local administrator account on the computer is unknown. You need to reset the password for the local administrator account on the computer.

  What should you do?

  A. Run Windows To Go workspace from a USB flash drive.
  B. Run the Windows 10 Enterprise installation wizard from a USB flash drive.
  C. Run Microsoft Diagnostic and Recovery Tool (DaRT) from a USB flash drive.
  D. Run Windows Recovery Environment (WinRE) from a recovery partition.
  C. Run Microsoft Diagnostic and Recovery Tool (DaRT) from a USB flash drive.

  ---

  References: https://www.top-password.com/knowledge/reset-windows-10-password.html

• Question 304:

  A company plans to deploy Windows 10 to kiosks in public areas. User profiles must be persistent and must not be modified by users.

  You need to configure the devices.

  How should you configure the user accounts?

  A. domain profile
  B. mandatory profile
  C. local profile
  D. Microsoft account
  B. mandatory profile

• Question 305:

  You are a Windows 10 Enterprise user. Your organization has purchased an Office 365 subscription. You install Microsoft Skype for Business and Microsoft Outlook on your computer.

  You need to connect Office 365 to Skype for Business and Outlook.

  What should you do?

  A. Run the People application. Add a new account by using your Office 365 credentials.
  B. Run the Office Professional Plus setup from the Office 365 portal.
  C. Run the Windows Mail application. Add a new account by using your Office 365 credentials.
  D. Run the Office 365 desktop setup from the Office 365 portal.
  D. Run the Office 365 desktop setup from the Office 365 portal.

  ---

  References: https://www.agileit.com/news/manual-office-365-setup-workstations/

• Question 306:

  A company has an Active Directory Domain Services (AD DS) domain with Windows 10 Enterprise client computers.

  You need to minimize the amount of Trusted Platform Module (TPM) authorization information that is stored in the registry.

  What should you do?

  A. Create a Group Policy Object (GPO) that enables the Turn on TPM Local Encryption policy setting.
  B. Enable Platform Configuration Register indices (PCRs) 0, 2, 4, and 11 for the Configure TPM validation profile for native UEFI firmware configuration policy setting.
  C. Create a Group Policy Object (GPO) that disables the Configure the level of TPM owner authorization information available to operating system policy setting.
  D. Create a Group Policy Object (GPO) that sets the Configure the level of TPM owner authorization information available to operating system policy setting to None.
  D. Create a Group Policy Object (GPO) that sets the Configure the level of TPM owner authorization information available to operating system policy setting to None.

  ---

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-8.1-and-8/jj679889(v=ws.11)#BKMK_tpmgp_oauthos

• Question 307:

  You administer Windows 10 Enterprise desktops.

  You discover that a company employee enabled file encryption on several folders by using a self-signed Encrypted File System (EFS) certificate.

  You need to ensure that you are able to decrypt the encrypted files if the user profile is deleted.

  What should you do?

  A. Open the Certificates console and connect to the user account certificates. Export the personal self-signed EFS certificate from the Trusted Root Certification Authority folder to a Personal Information Exchange (PFX) file.
  B. Open the Certificates console and connect to the user account certificates. Find the personal self-signed EFS certificate and export it to a Personal Information Exchange (PFX) file.
  C. Open the Certificates console and connect to the computer account certificates. Export the self-signed EFS certificate from the Trusted People folder to a Canonical Encoding Rules (CER) file.
  D. Open the Certificates console and connect to the user account certificates. Export the self-signed EFS certificate from the Trusted People folder to a Canonical Encoding Rules (CER) file.
  B. Open the Certificates console and connect to the user account certificates. Find the personal self-signed EFS certificate and export it to a Personal Information Exchange (PFX) file.

  ---

  References: https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate

• Question 308:

  You are a systems administrator of a small branch office. Computers in the office are joined to a Windows 10 HomeGroup.

  The HomeGroup includes one shared printer and several shared folders.

  You join a new computer to the HomeGroup and try to access the HomeGroup shared folders. You discover that the shared folders are unavailable, and you receive an error message that indicates the password is incorrect.

  You need to reconfigure the new computer in order to access the HomeGroup resources.

  What should you do?

  A. Adjust the time settings on the new computer to match the time settings of the HomeGroup computers.
  B. Change the Enterprise password and re-enter it on the computers of all members of the HomeGroup.
  C. Change the default sharing configuration for the shared folders on the HomeGroup computers.
  D. Reset your account password to match the HomeGroup password.
  A. Adjust the time settings on the new computer to match the time settings of the HomeGroup computers.

  ---

  Symptoms

  When joining a system to a HomeGroup, you may receive the following error message "The password is incorrect", even though you have typed the password correctly.

  Cause

  This can be caused by a difference in the Date and Time settings on the computer trying to join the HomeGroup, and not an invalid password. If the date/time of the computer joining a HomeGroup is greater than 24 hours apart from the date/

  time of the system that owns the HomeGroup, this will cause the error.

  Resolution

  Adjust the date/time settings on the system joining the HomeGroup, to match the system that owns the HomeGroup, and then try to join again.

• Question 309:

  HOTSPOT

  You plan to use a Group Policy to configure the power settings of several laptops. You need to ensure that the laptops meet the following requirements:

  Enter hibernation mode when the lid is closed.

  Enter sleep mode when the battery level is critical.

  Which two Power Management Group Policy settings should you modify? To answer, select the appropriate settings in the answer area.

  Hot Area:

  

  

• Question 310:

  You have a computer named Computer1 that runs Windows 10 Enterprise. Computer1 is a member of an Active Directory domain named contoso.com.

  You have a line-of-business universal app named App1. App1 is developed internally.

  You need to ensure that you can run App1 on Computer1. The solution must meet the following requirements:

  Minimize costs to deploy the app.

  Minimize the attack surface on Computer1.

  What should you do?

  A. Have App1 certified by the Windows Store.
  B. Sign App1 with a certificate issued by a third-party certificate authority.
  C. From the Update and Security setting on Computer1, enable the Sideload apps setting.
  D. Run the Add-AppxProvisionedPackage cmdlet.
  C. From the Update and Security setting on Computer1, enable the Sideload apps setting.

  ---

  To install the application, you need to `Sideload' it. First you need to enable the Sideload apps setting.

  LOB Windows Store apps that are not signed by the Windows Store can be sideloaded or added to a PC in the enterprise through scripts at runtime on a per-user basis. They can also be provisioned in an image by the enterprise so that the

  app is registered to each new user profile that's created on the PC. The requirements to sideload the app per-user or in the image are the same, but the Windows PowerShell cmdlets you use to add, get, and remove the apps are different.

  Before you can sideload LOB Windows Store apps that are not signed by the Windows Store, you will need to configure the PC.

  References:

  https://msdn.microsoft.com/en-us/library/hh454036.aspx