Microsoft 70-697 Online Practice Questions and Exam Preparation

Microsoft 70-697 Online Questions & Answers

• Question 321:

  DRAG DROP

  Ten client computers run Windows 7 and a custom application. The custom application is compatible with Windows 10 Enterprise.

  You purchase 10 new computers that have Windows 10 Enterprise pre-installed. You plan to migrate user settings and data from the Windows 7 computers to the Windows 10 Enterprise computers. You add the User State Migration Toolkit

  (USMT) on a USB flash drive.

  You need to ensure that the custom application settings are applied to the Windows 10 Enterprise computers after the migration is complete.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 322:

  You are the network administrator for Contoso, Ltd. Many users have Windows 10 Enterprise laptops, and your IT department configures all of them to use BitLocker on all fixed drives.

  Many users carry sensitive corporate data on their USB drives.

  You need to enable BitLocker for these USB drives.

  Which key protector option should you use?

  A. a smartcard
  B. a startup key
  C. TPM+PIN
  D. TPM+Password
  A. a smartcard

  ---

  You have two options. You can choose Password (not TPM+Password) or Smartcard. References: https://technet.microsoft.com/en-us/library/ff404223.aspx

• Question 323:

  DRAG DROP

  A company has an Active Directory Domain Services (AD DS) domain.

  All client computers run Windows 8.1.

  The company has three departments named Accounting, Human Resources (HR), and Marketing. User account objects are stored in their respective departmental AD security groups and have full access to shared folders for each department.

  A new company policy requires that the following access rules are in place:

  Users must have complete access only to their department's shared folder.

  Accounting department users must be able to change files in the HR folder.

  HR department users must be able to change files in the Marketing folder.

  Marketing department users must be able to change files in the Accounting folder.

  You need to comply with the company policy.

  Which permissions should you assign? (To answer, drag the appropriate security group or groups to the correct location or locations in the answer area. Security groups may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.)

  Select and Place:

  

  

• Question 324:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  A company has a forest trust with a partner organization. Users from both organizations log on to devices that run Windows 8.1.

  You plan to replace the devices with devices running Windows 10.

  You need to migrate user profiles from both forests using the least amount of administrative effort.

  Solution: You migrate both profiles simultaneously by using the User State Migration Tool (USMT).

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  References: https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-migrate-user-accounts#bkmk-migrateall

• Question 325:

  You provide support for a small company. The company purchases a Windows 10 Enterprise laptop for an employee who travels often.

  The company wants to use BitLocker to secure the hard drive for the laptop in case it is lost or stolen. While attempting to enable BitLocker, you receive the error message shown in the following image:

  

  You view the TPM settings, which are shown in the following image:

  

  Finally, you view the BIOS, which is shown in the following image:

  

  For each of the following statement, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 326:

  A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 10 Enterprise.

  You are configuring security for a portable client computer that does not have a Trusted Platform Module (TPM) chip installed.

  You need to configure local Group Policy to turn on Windows BitLocker Drive Encryption on the computer.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Enable the Enforce drive encryption type on operating system drives policy setting.
  B. Enable the option to Alow BitLocker without a compatible TPM.
  C. Enable the Require additional authentication at startup policy setting.
  D. Configure the TPM validation profile to enable Platform Configuration Register indices (PCRs) 0, 2, 4, and 11.
  B. Enable the option to Alow BitLocker without a compatible TPM.
  C. Enable the Require additional authentication at startup policy setting.

  ---

  References: https://www.howtogeek.com/howto/6229/how-to-use-bitlocker-on-drives-without-tpm/

• Question 327:

  You administer a group of 10 client computers that run Windows 10. The client computers are members of a local workgroup. Employees log on to the client computers by using their Microsoft accounts.

  The company plans to use Windows BitLocker Drive Encryption. You need to back up the BitLocker recovery key.

  Which two options can you use? (Each correct answer presents a complete solution. Choose two.)

  A. Save the recovery key to a file on the BitLocker-encrypted drive.
  B. Save the recovery key in the Credential Store.
  C. Save the recovery key to OneDrive.
  D. Print the recovery key.
  C. Save the recovery key to OneDrive.
  D. Print the recovery key.

  ---

  C: The Bitlocker recovery key is saved in your OneDrive account in the cloud.

  D: The recovery key can be printed.

  References: https://support.microsoft.com/en-us/help/17133/windows-8-bitlocker-recovery-keys-frequently-asked-questions

• Question 328:

  You have a desktop computer that runs Windows 10 Enterprise. You add three new 3-terabyte disks. You need to create a new 9-terabyte volume. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. From Disk Management, create a new spanned volume.
  B. From Disk Management, convert all of the 3-terabyte disks to GPT.
  C. From PowerShell, run the New-VirtualDisk cmdlet.
  D. From Disk Management, bring all disks offline.
  E. From Diskpart, run the Convert MBR command.
  F. From PowerShell, run the Add-PhysicalDisk cmdlet.
  A. From Disk Management, create a new spanned volume.
  B. From Disk Management, convert all of the 3-terabyte disks to GPT.

  ---

  B: GPT disks can grow to a very large size. The maximum partition (and disk) size is a function of the operating system version. Windows XP and the original release of Windows Server 2003 have a limit of 2TB per physical disk, including all partitions. For Windows Server 2003 SP1, Windows XP x64 edition, and later versions, the maximum raw partition of 18 exabytes can be supported.

  A: A spanned volume is a dynamic volume consisting of disk space on more than one physical disk. If a simple volume is not a system volume or boot volume, you can extend it across additional disks to create a spanned volume, or you can create a spanned volume in unallocated space on a dynamic disk. You can make a spanned volume of GPT disks.

  References: https://msdn.microsoft.com/en-us/library/windows/hardware/dn640535(v=vs.85).aspx#gpt_faq_how_big http://msdn.microsoft.com/en-us/library/windows/hardware/gg463524.aspx

• Question 329:

  HOTSPOT

  Your network contains an Active Directory domain.

  The Default Domain Policy contains the AppLocker settings configured as shown in the AppLocker Settings exhibit. (Click the Exhibit button.)

  

  The Default Domain Policy contains the AppLocker properties configured as shown in the AppLocker properties exhibit. (Click the Exhibit button.)

  

  Use the drop-down menus to select the answer choice that completes each statement. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 330:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You administer devices in your corporate environment. The company allows employees to bring their own devices (BYOD). All BYOD devices must run Windows 10. For employees who elect to not use BYOD, the company provides a

  corporate laptop.

  The company has a Microsoft Intune subscription and all BYOD devices have the Intune client installed. None of the BYOD devices are joined to the domain. All the corporate standard devices are managed by System Center Configuration

  Manager (SCCM).

  You have an application that was developed in house that must be installed on all the BYOD devices.

  The application must be installed automatically on the BYOD devices without any user intervention.

  Solution: You download and install a sideloading product activation key on all of the BYOD devices. You upload the application to the Intune storage and configure the app deployment action as required install.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No