Tag: 70-688 practice exam

QUESTION 41
You administer a company network that includes computers that run Windows 8 Enterprise in an Active Directory domain. The company has purchased a subscription to Windows Intune. Corporate security policy requires that computers in the accounting department have file and program activity logged. A user in the accounting department uses a computer that is managed by Windows Intune. You need to ensure that file and program activity is always monitored on this computer. What should you do?

A.    Create a new Windows Firewall Setting policy in the Windows Intune Admin Console.
B.    In the Windows Intune Admin Console, create a new Windows Intune Agent Settings policy that
uses the recommended settings.
C.    Create a new Windows Intune Mobile Security policy in the Windows Intune Admin Console.
D.    Create and deploy a custom policy in the Windows Intune Center Settings template.

Answer: B

QUESTION 42
Drag and Drop Questions
You use a desktop computer and a laptop, both of which run Windows 8. You use a Microsoft account to log on to the desktop computer and a local user account to log on to the laptop. The desktop computer is joined to the HomeGroup and the laptop is a member of a workgroup. When you access a frequently visited website from your laptop, Internet Explorer saves your password. When you visit the website from your desktop computer, you are prompted to enter your password. You need to sync your saved password from your laptop to your desktop computer. Which three actions should you perform on the laptop in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
 
Answer:
 
Explanation:
Note:
* Microsoft has integrated its cloud computing features into much of Windows 8. The focal point of that integration is the soon to be re-branded Windows Live service–use a Windows Live account as your login, and you can synchronize much of the information associated with your account to all your Windows devices through the cloud. Or at least, that’s the goal.
* Setting up for synchronization starts when you configure your user account. At installation, Windows 8 prompts you for a Windows Live account. You can create a new Live account or use an existing one for your user credentials, or choose to bypass this and set up a local-only user account– but you won’t be able to leverage the synchronization features if you do. You can also opt out later and switch to a local-only account through Windows 8’s settings menu. When you set up your user account–either at install time or from the PC settings menu afterward– you’ll be prompted to either use an existing Live account email address or enter a new one
 

QUESTION 43
Drag and Drop Questions
You support computers that run Windows 8 Pro. Your company recently purchased 200 new desktop computers. Company policy requires that the desktop computers include a recovery partition. The partition must contain a bootable image that includes support for incoming Remote Desktop connections. You need to configure the desktop computers to comply with company policy. Which four actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
 
Answer:
 
Explanation:
Note:
After you have finished running the Microsoft Diagnostics and Recovery Toolset (DaRT) 8.0 Recovery Image wizard and created the recovery image, you can extract the boot.wim file from the ISO image file and deploy it as a recovery partition in a Windows 8 image. A partition is recommended, because any corruption issues that prevent the Windows operating system from starting would also prevent the recovery image from starting.
Reference: How to Deploy the DaRT Recovery Image as Part of a Recovery Partition

QUESTION 44
You have computers that run Windows 8 Enterprise. Microsoft BitLocker Administration and Monitoring (MBAM) is deployed on your network on a server named MBAM1. Company policy requires that within 2 hours of being started, computers that have the MBAM client installed prompt users to enable BitLocker. You need to make changes to the Configure MBAM Services Group Policy settings. Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

A.    Set MBAM Recovery and Hardware service endpoint to MBAM1.
B.    Set Enter status reporting frequency (in minutes) to 120.
C.    Set MBAM Status reporting endpoint to MBAM1.
D.    Set Select Bitlocker Recovery Information to store to Recovery password and key package.
E.    Set Select Bitlocker Recovery Information to store to Recovery password only.
F.    Set Enter client checking status frequency (in minutes) to 120.

Answer: AC

QUESTION 45
You administer computers that run Windows 8 Enterprise in an Active Directory domain. Your company has purchased a subscription to Windows Intune. Users access a Microsoft Exchange environment by using the Mail tile. The Microsoft Exchange environment is connected to Windows Intune. Company security policy defines the minimum length of passwords and required encryption settings. You need to create a Windows Intune policy that meets the security policy requirements.
What should you do?

A.    Create a new Windows Intune Center Settings policy.
B.    Create a new Windows Intune Agent Settings policy.
C.    Create a new Windows Intune Mobile Security policy.
D.    Create a new Windows Firewall Settings policy.

Answer: C

QUESTION 46
You support computers that run Windows 8 Enterprise. Your company has started testing Application Virtualization (App-V) applications on several laptops. You discover that the App-V applications are available to users even when the laptops are offline. You need to ensure that the App-V applications are available to users only when they are connected to the company network.
What should you do?

A.    Configure mandatory profiles for laptop users.
B.    Reset the App-V client FileSystem cache.
C.    Disable the Disconnected operation mode.
D.    Change user permissions to the App-V applications.

Answer: C

QUESTION 47
At work, you use a desktop computer that runs Windows 8 Pro. At home, you use a laptop that runs Windows 8. You use the same Microsoft account to log on to both computers. You want to use the same settings for both computers. You need to ensure that all computer settings, including stored passwords, are synced between the computers. What should you do?

A.    Add both computers to the same Active Directory domain.
B.    Use the same local accounts for both computers.
C.    Install SkyDrive for Windows on both computers.
D.    Designate both computers as trusted PCs.

Answer: D

QUESTION 48
Your company recently purchased 10 new desktop computers for a remote unconnected location. All of the desktop computers have the same hardware configuration. You install Windows 8 Pro on a reference computer and install a custom driver to support the video adapter. You want to create an image of the reference desktop that retains the custom driver in the image. You need to edit the unattended answer file. Which setting in the unattended answer file should you edit?

A.    Microsoft-Windows-PnPSysprep | PersistAllDeviceInstalls
B.    Microsoft-Windows-PnPSysprep | DoNotCleanUpNonPresentDevices
C.    Microsoft-Windows-PnpCustomizattonNonWinPE | DriverPaths
D.    Microsoft-Windows-Shell-Setup | OEMInformation

Answer: A

QUESTION 49
Drag and Drop Questions
You administer 50 laptops that run Windows 7 Professional 32-bit. You want to install Windows 8 Pro 64-bit on every laptop. Users will keep their own laptops. You need to ensure that user application settings, Windows settings, and user files are maintained after Windows 8 Pro is installed. Which four actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
 
Answer:
 
Explanation:
Note:
* You use the User State Migration Tool (USMT) 5.0 when hardware and/or operating system upgrades are planned for a large number of computers. USMT manages the migration of an end- user’s digital identity by capturing the user’s operating-system settings, application settings, and personal files from a source computer and reinstalling them on a destination computer after the upgrade has occurred.
One common scenario when only the operating system, and not the hardware, is being upgraded is referred to as PC refresh. A second common scenario is known as PC replacement, where one piece of hardware is being replaced, typically by newer hardware and a newer operating system.
* Scenario: PC-refresh using a hard-link migration store A company has just received funds to update the operating system on all of its computers to Windows 8. Each employee will keep the same computer, but the operating system on each computer will be updated. In this scenario, an administrator uses a hard-link migration store to save each user state to their respective computer.
The administrator runs the ScanState command-line tool on each computer, specifying the /hardlink /nocompress command-line options. ScanState saves the user state to a hard-link migration store on each computer, improving performance by minimizing network traffic as well as minimizing migration failures on computers with very limited space available on the hard drive. On each computer, the administrator installs the company’s SOE which includes Windows 8 and other company applications.
The administrator runs the LoadState command-line tool on each computer. LoadState restores each user state back on each computer.
Reference: User State Migration Toolkit (USMT) Reference

QUESTION 50
You are a systems administrator for your company. The company has employees who work remotely by using a virtual private network (VPN) connection from their computers, which run Windows 8 Pro. These employees use an application to access the company intranet database servers. The company recently decided to distribute the latest version of the application through using a public cloud. Some users report that every time they try to download the application by using Internet Explorer, they receive a warning message that indicates the application could harm their computer. You need to recommend a solution that prevents this warning message from appearing, without compromising the security protection of the computers. What should you do?

A.    Publish the application through a public file transfer protocol (FTP) site.
B.    Publish the application through an intranet web site.
C.    Instruct employees to disable the SmartScreen Filter from within the Internet Explorer settings.
D.    Publish the application to Windows Store.

Answer: B

Passing Microsoft 70-688 Exam successfully in a short time! Just using Braindump2go’s Latest Microsoft 70-688 Dump:http://www.braindump2go.com/70-688.html

QUESTION 31
You are a systems administrator for Contoso; Ltd. All client computers run Windows 8 and are members of the contoso.com Active Directory domain. Users log on to their computers by using domain user accounts. Contoso develops an internal line of business (LOB) Windows Store app. You want to deploy the LOB app to the client computers and configure the app to access various resources in the domain. You need to enable all users to run the LOB app and access the required resources from the LOB app. What should you do?

A.    Certify the LOB app with Windows Store.
Ask users to log on to their computers by using a Microsoft Account.
Install the LOB app from Windows Store.
Ask users to log off, and then log back on in by using their domain accounts.
B.    Restart each computer by using WinPE.
From WinPE, copy all of the LOB app executable files in the Program Files folder.
Restart into Windows 8 and ask users to log on by using their domain accounts.
C.    Use the DISM utility to include the LOB app in a new Windows 8 image.
Reimage the computers with the new image.
Join the computers to a new workgroup.
Ask each user to log on to the computer by using a new Microsoft Account that ends with @contoso.com.
D.    Configure the Allow all trusted apps to install policy settings for all computers.
Ask users to log on by using their domain accounts, and then execute a PowerShell script that includes
the add- appxpackage cmdlet.

Answer: A

QUESTION 32
You administer a company network that includes a wireless network infrastructure and computers that run Windows 8 Enterprise. You are planning to add a guest wireless network. You need to collect information about nearby wireless networks, including their encryption methods. Which command should you include in the batch file?

A.    Netsh wlan set autoconfig enabled=no interface="Wireless Network Connection"
B.    ipconfig /allcompartments
C.    Get-WmiObject win32_networkadapterconfiguration -Filter ‘ipenabled = "true"’
D.    netsh wlan show networks
E.    netsh wlan show hostednetwork
F.    netstat -a

Answer: D

QUESTION 33
Drag and Drop Questions
You administer desktop computers that run Windows 8 Enterprise and are members of an Active Directory domain. A new security policy states that all traffic between computers in the research department must be encrypted and authenticated by using Kerberos V5. You need to configure the requested traffic authentication settings by using Windows Firewall with Advanced Settings. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
 
Answer:
 
Explanation:
Note:
A connection security rule forces two peer computers to authenticate before they can establish a connection and to secure information transmitted between the two computers. Windows Firewall with Advanced Security uses IPsec to enforce these rules.
To create a connection security rule
1. In Windows Firewall with Advanced Security, in the console tree, click Connection Security Rules.
2. In the Actions list, click New Rule.
The Rule Type page, shown in the Figure below, allows you to select the type of rule you want to create. Select a type, and use the wizard to configure the new rule according to the information in the following sections.
 
Isolation
An isolation rule isolates computers by restricting inbound connections based on credentials, such as domain membership or compliance with policies that define the required software and system configurations. Isolation rules allow you to implement a server or domain isolation strategy. When you create an isolation rule, you will see the following wizard pages:
* Requirements. You can choose when authentication is required:
/Request authentication for inbound and outbound connections /Require authentication for inbound connections and request authentication for outbound connections
/Require authentication for inbound and outbound connections *Authentication Method. You can select from the following authentication methods:
Default. This selection uses the current computer default selections specified on the IPsec Settings tab of the Windows Firewall Properties page.
Computer and user (Kerberos V5). This method uses both computer- and user-based Kerberos V5 authentication to restrict connections to domain-joined users and computers. User authentication, and therefore this method, is compatible only with computers running Windows Vista and later.
Computer (Kerberos V5). This method uses Kerberos V5 authentication to restrict connections to domain-joined computers. This method is compatible with computers running Windows 2000 or later.
Advanced. This setting allows you to designate multiple authentication methods, such as computer certificate, NTLMv2, and preshared key.
* Profile. Choose the profiles (Domain, Public, and Private) to which the rule applies.
* Name. Name the rule and type an optional description.
Reference: Creating Connection Security Rules

QUESTION 34
You support desktop computers and tablets that run Windows 8 Enterprise. All of the computers are able to connect to your company network from the Internet by using DirectAccess. Your company wants to deploy a new application to the tablets. The deployment solution must meet the following requirements:
– The application is stored locally on the tablets.
– Access to the application is protected with extra logon credentials, in addition to a standard domain account used by users.
– The application utilizes the least amount of network bandwidth.
– The application must maintain access to the current desktop.
You need to deploy the new application to the tablets. What should you do?

A.    Deploy the application as an Application Virtualization (App-V) package.
Install the App-V 4.6 client on the tablets.
B.    Deploy the application as a published application on the Remote Desktop server.
Create a Remote Desktop connection on the tablets.
C.    Install the application on a local drive on the tablets.
D.    Install the application in a Windows To Go workspace.
E.    Install Hyper-V on tablets.
Install the application on a virtual machine.
F.    Publish the application to Windows Store.
G.    Install the application within a separate Windows 8 installation in a virtual hard disk (VHD) file.
Configure the tablets with dual boot.
H.    Install the application within a separate Windows 8 installation in a VHDX file.
Configure tablets with dual boot.

Answer: E

QUESTION 35
You support desktop computers and tablets that run Windows 8. Domain joined computers are able to connect to your company network from the Internet by using DirectAccess. Your company wants to deploy a new application to the tablets. The deployment solution must meet the following requirements:
– The application is installed locally on the tablets.
– The application installation is hosted in a public cloud.
– The installation must support Windows RT.
You need to deploy the new application to the tablets.
What should you do?

A.    Deploy the application as an Application Virtualization (App-V) package.
Install the App-V 4.6 client on the tablets.
B.    Deploy the application as a published application on the Remote Desktop server.
Create a Remote Desktop connection on the tablets.
C.    Install the application on a local drive on the tablets.
D.    Install the application in a Windows To Go workspace.
E.    Install Hyper-V on tablets.
Install the application on a virtual machine.
F.    Publish the application to Windows Store.
G.    Install the application within a separate Windows 8 installation in a virtual hard disk (VHD) file.
Configure the tablets with dual boot.
H.    Install the application within a separate Windows 8 installation in a VHDX file.
Configure tablets with dual boot.

Answer: F

QUESTION 36
You support desktop computers and tablets that run Windows 8 Enterprise. All of the computers are able to connect to your company network from the Internet by using DirectAccess. Your company wants to deploy a new application to the tablets. The deployment solution must meet the following requirements:
– The application is not accessible if a user is working offline.
– The application is isolated from other applications.
– The application uses the least amount of disk space.
You need to deploy the new application to the tablets.
What should you do?

A.    Deploy the application as an Application Virtualization (App-V) package.
Install the App-V 4.6 client on the tablets.
B.    Deploy the application as a published application on the Remote Desktop server.
Create a Remote Desktop connection on the tablets.
C.    Install the application on a local drive on the tablets.
D.    Install the application in a Windows To Go workspace.
E.    Install Hyper-V on tablets.
Install the application on a virtual machine.
F.    Publish the application to Windows Store.
G.    Install the application within a separate Windows 8 installation in a virtual hard disk (VHD) file.
Configure the tablets with dual boot.
H.    Install the application within a separate Windows 8 installation in a VHDX file.
Configure the tablets with dual boot.

Answer: B

QUESTION 37
You support desktop computers and tablets that run Windows 8 Enterprise. All of the computers are able to connect to your company network from the Internet by using DirectAccess. Your company wants to deploy a new application. The deployment solution must meet the following requirements:
– The application does not utilize the company server infrastructure.
– The application is isolated from other applications.
– The application uses the least amount of disk space possible on a solid-state drive (SSD) on the tablets.
– The application utilizes the least amount of network bandwidth.
You need to deploy the new application to the tablets. What should you do?

A.    Deploy the application as an Application Virtualization (App-V) package.
Install the App-V 4.6 client on the tablets.
B.    Deploy the application as a published application on the Remote Desktop server.
Create a Remote Desktop connection on the tablets.
C.    Install the application on a local drive on the tablets.
D.    Install the application in a Windows To Go workspace.
E.    Install Hyper-V on tablets.
Install the application on a virtual machine.
F.    Publish the application to Windows Store.
G.    Install the application within a separate Windows 8 installation in a virtual hard disk (VHD) file.
Configure the tablets with dual boot.
H.    Install the application within a separate Windows 8 installation in a VHDX file.
Configure tablets with dual boot.

Answer: D

QUESTION 38
You administer laptop and desktop computers that run Windows 8 Enterprise in an Active Directory domain. Your company has purchased a subscription to Windows Intune. You plan to install Intune Endpoint Protection on all computers. Some of the computers also have another antimalware application installed. You need to ensure that only the Intune Endpoint Protection application is running on all computers. What should you do?

A.    Configure the Enable Realtime Protection policy to Yes.
B.    Configure the Enable Endpoint Protection policy to Only on computers that are unprotected when
Endpoint Protection is installed.
C.    Configure the Enable Endpoint Protection policy setting to Yes.
D.    Configure the Enable Endpoint Protection policy setting to No.

Answer: C

QUESTION 39
Your company has purchased a subscription to Windows Intune. You use Windows Intune to automatically deploy Windows updates. You create an automatic approval rule in Windows Intune but notice that previously existing updates are not deployed. You need to ensure that all previously existing updates are automatically approved. What should you do?

A.    Run the approval rule.
B.    Edit the schedule for the automatic approval rule.
C.    Create and deploy a policy that uses the recommended settings in the Windows Intune Center
Settings template.
D.    Create and deploy a custom policy in the Windows Intune Center Settings template.

Answer: A

QUESTION 40
You administer computers that run Windows 8 Pro. The desktops have the Application Virtualization (App-V) client installed. Multiple App-V applications are published on the network. A user reports that it is taking a long time to launch App-V applications on his computer. You discover that the user has a roaming profile on the computer. You need to minimize the time that is required for the user to start App-V applications on the computer. What should you do?

A.    Change the user profile to Super-Mandatory.
B.    Change the location of the App-V client cache file on the computer.
C.    Increase the size of the App-V client cache on the computer.
D.    Change the user profile to Local.

Answer: C
Passing Microsoft 70-688 Exam successfully in a short time! Just using Braindump2go’s Latest Microsoft 70-688 Dump:http://www.braindump2go.com/70-688.html

QUESTION 21
You have a computer that runs Windows 8. The computer has a shared folder named C:\Marketing. The shared folder is on an NTFS volume. The current NTFS and share permissions are configured as follows:
 
UserA is a member of both the Everyone group and the Marketing group. UserA must access
C:\Marketing from across the network. You need to identify the effective permissions of UserA to the C:\Marketing folder. What permission should you identify?

A.    Read
B.    Full Control
C.    Modify
D.    Read and Execute

Answer: C

QUESTION 22
Drag and Drop Questions
You support a desktop computer that runs Windows 8 Pro. The computer is joined to an Active Directory domain. The computer has a folder named C:\Reports. The folder NTFS permissions are shown in Exhibit 1. (Click the Exhibit button.)
 
The folder is shared over the network with Read permission for a domain user account named User1 as shown in Exhibit 2. (Click the Exhibit button.)

 
Members of the domain security group named Accountants must have access to the shared folder. You need to assign the required permissions. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
 
Answer:
 
Explanation:
Note:
Example:
Share Folders From `Users Profile’ Locations & Local Drives
If you want to quickly share a folder residing in local drives or User Profile folders, open Properties dialog from right-click context menu, and then head over to Sharing tab. From Network File and Folder Sharing section, click Share to open File Sharing dialog. Now, select Everyone from drop-down menu, and click Add.
 
This will add Everyone group in File Sharing list, and allow you to change folder access permission. Using Read pull-down menu, you can give read and write permissions to users, and remove Everyonegroup from the File Sharing list.

 
Once done, click Share to share the folder on the network. It will open a separate dialog, allowing you to email and copy the shared folder link.

 
Now, you can access the shared folder from any PC connected on the network.

QUESTION 23
You administer laptops that run Windows 8 Enterprise. The laptops are members of an Active Directory domain and are configured with IPv6 disabled. Some users require access to the internal company database servers while traveling. You need to configure the requested network connection to the database servers. What should you configure on the laptops?

A.    A DirectAccess connection to the company network
B.    A virtual private network (VPN) connection to the company network
C.    A metered network connection
D.    Out of band management

Answer: B

QUESTION 24
You have a desktop computer that runs Windows 8 Enterprise.
You add three new 3-terabyte disks. You need to create a new 9-terabyte volume. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A.    From Disk Management, create a new spanned volume.
B.    From Disk Management, convert all of the 3-terabyte disks to GPT.
C.    From PowerShell, run the New-VirtualDisk cmdlet.
D.    From Disk Management, bring all disks offline.
E.    From Diskpart, run the Convert MBR command.
F.    From PowerShell, run the Add-PhysicalDisk cmdlet.

Answer: BE

QUESTION 25
You administer laptop and desktop computers that run Windows 8 Pro. Your company uses Active Directory Domain Services (AD DS) and Active Directory Certificate Services (AD CS). Your company decides that access to the company network for all users must be controlled by two-factor authentication. You need to configure the computers to meet this requirement. What should you do?

A.    Install smart card readers on all computers. Issue smart cards to all users.
B.    Enable the Password must meet complexity requirements policy setting.
Instruct users to log on by using the domain \username format for their username and their strong password.
C.    Create an Internet Protocol security (IPsec) policy that requires the use of Kerberos to authenticate all traffic.
Apply the IPsec policy to the domain.
D.    Issue photo identification to all users. Instruct all users to set up and use PIN Logon.

Answer: A

QUESTION 26
You administer computers that run Windows 8 Enterprise and are members of an Active Directory domain. Some volumes on the computers are encrypted with BitLocker. The BitLocker recovery passwords are stored in Active Directory. A user forgets the BitLocker password to local drive E: and is unable to access the protected volume. You need to provide a BitLocker recovery key to unlock the protected volume. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A.    Ask the user to run the manage-bde -protectors -disable e: command.
B.    Ask the user for a recovery key ID for the protected drive.
C.    Ask the user for his or her logon name.
D.    Ask the user for his or her computer name.

Answer: AC

QUESTION 27
Drag and Drop Questions
You support desktop computers for a company named Fabrikam, Inc. The computers are members of the Active Directory domain named fabrikam.com. Fabrikam works with a supplier named Contoso, Ltd. Each company has a public key infrastructure (PKI), and no public certificate authorities (CAs) are used. Fabrikam employees regularly use a Contoso website that is hosted on a server in the contoso.com domain. The website requires SSL and mutual authentication. You need to configure the computers to allow Fabrikam users to access the Contoso website without any warning prompts. You also need to use the fewest certificates possible. Which certificate or certificates should you use? (To answer, drag the appropriate certificate to the correct certificate store. Each certificate may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.)
 
Answer:
 
Explanation:
Note:
* contoso.com provided the resources. contoso.com be the trusted root authorities store
* No untrusted certificates
* Not allow access to local computer account (just to user account)
* user account access through client (user) certificate issued by Contoso

QUESTION 28
A company has 10 client computers that run Windows 8. Employees log on to resources by using multiple accounts. You need to back up the user name and password for each logon account. What should you do on each client computer?

A.    Back up each user’s Personal Information Exchange PKCS #12 (.pfx) certificate.
B.    Use Credential Manager to save the information to a USB flash drive.
C.    Use File History to back up the ntuser.dat file.
D.    Run the Export-Certificate Windows PowerShell cmdlet.

Answer: B

QUESTION 29
A company has client computers that run Windows 8. You implement an AppLocker file hash rule that allows an application to run. You then apply a service pack to the application. When users attempt to run the application, the application is blocked by Group Policy. You need to ensure that the application runs. What should you do?

A.    Enable the Reschedule Automatic Updates scheduled installations Group Policy setting.
B.    Set the wired network connection to non-metered.
C.    Set the wired network connection to metered.
D.    Configure the Automatic Maintenance setting.

Answer: B

QUESTION 30
You are a systems administrator of a small branch office. Computers in the office are joined to a Windows 8 HomeGroup. The HomeGroup includes one shared printer and several shared folders. You join a new computer to the HomeGroup and try to access the HomeGroup shared folders. You discover that the shared folders are unavailable, and you receive an error message that indicates the password is incorrect. You need to reconfigure the new computer in order to access the HomeGroup resources. What should you do?

A.    Adjust the time settings on the new computer to match the time settings of the HomeGroup computers.
B.    Change the HomeGroup password and re-enter it on the computers of all members of the HomeGroup.
C.    Change the default sharing configuration for the shared folders on the HomeGroup computers.
D.    Reset your account password to match the HomeGroup password.

Answer: A
Passing Microsoft 70-688 Exam successfully in a short time! Just using Braindump2go’s Latest Microsoft 70-688 Dump:http://www.braindump2go.com/70-688.html

QUESTION 11
Hotspot Questions
You support desktop computers that run Windows 8 Enterprise. One computer is a member of a workgroup and is used as a guest computer in a reception area. You need to configure the SmartScreen setting to require administrator approval before running downloaded unknown software on the desktop computer. Which policy setting should you use? (To answer, select the appropriate object in the answer area.)
 
Answer:
 

QUESTION 12
You administer computers that run Windows 8 Pro. Your company uses credit card readers that require a custom driver supplied by the manufacturer. The readers frequently are moved from computer to computer. Your company recently purchased five new computers that run Windows 8 Pro. You want the required drivers to be installed automatically and silently when users connect the readers to the new computers. You need to pre-stage the credit card reader driver on the new computers. What should you do?

A.    Add a Registry key with a path to a network shared folder that has the driver installation files.
B.    Run the pnputil.exe utility.
Specify the document scanner driver.
C.    Add a Registry key with a path to a local folder on every computer.
Copy the driver installation files to the folder.
D.    Run the dism.exe utility.
Copy the driver files to the C:\Windows\System32\drivers folder in the WIM image.

Answer: B

QUESTION 13
You support computers that run Windows 8 Enterprise. Your company protects all laptops by using the BitLocker Network Unlock feature. Some employees work from home. You need to ensure that employees can log on to their laptops when they work from home. What should you do?

A.    Provide employees their BitLocker PINs.
B.    Ensure that the Trusted Platform Module (TPM) chips in the laptops are version 1.2 or greater.
C.    Enable BitLocker To Go.
D.    Have users run the Manage-bde.exe -unlock command before they disconnect from the company network.

Answer: A

QUESTION 14
Drag and Drop Questions
You administer computers and printers on your company network. The computers run Windows 8 Pro. You need to remove a print job from a print queue by using a remote PowerShell session. Which three commands should you run in sequence? (To answer, move the appropriate commands from the list of commands in the answer area and arrange them in the correct order.)
 
Answer:
 
Explanation:
Note:
* The Get-Printer cmdlet retrieves a list of printers installed on a computer. You can also use Get- Printer to retrieve the properties of a single printer, and then use that information as input into other cmdlets.
* Get-PrintJob
Retrieves a list of print jobs in the specified printer. The Get-PrintJob cmdlet retrieves the current print jobs in the specified printer. Use the PrinterName parameter to list the print jobs from the specified printer.
* Remove-PrintJob
Removes a print job on the specified printer.
Reference: Get-Printer; Get-PrintJob; Remove-PrintJob

QUESTION 15
You administer Windows 8 Pro and Windows RT tablets for your company. Your company network includes a Windows Server 2012 domain and Microsoft Exchange 2010 with ActiveSync and Outlook Web Access. Users will be using the tablets outside of the corporate network. The Microsoft Exchange ActiveSync policy is configured to require an alphanumeric password. You need to ensure an alphanumeric password is required on all Windows 8 tablets. What should you do?

A.    From the Mail app, add the user’s Exchange account.
B.    Set up New Partnership in Sync Center.
C.    From Sync your Settings, set Password to Off.
D.    Create a user profile by using a Microsoft account.

Answer: A

QUESTION 16
You support computers that run Windows 8 and are members of an Active Directory domain. Recently, several domain user accounts have been configured with super-mandatory user profiles. A user reports that she has lost all of her personal data after a computer restart. You need to configure the user’s computer to prevent possible user data loss in the future. What should you do?

A.    Configure the user’s documents library to include folders from network shares.
B.    Remove the .man extension from the user profile name.
C.    Add the .dat extension to the user profile name.
D.    Configure Folder Redirection by using the domain group policy.

Answer: D

QUESTION 17
Drag and Drop Questions
You administer computers that run Windows 8. The computers on your network are produced by various manufacturers and often require custom drivers. You need to design a recovery solution that allows the repair of any of the computers by using a Windows Recovery Environment (WinRE). In which order should you perform the actions? (To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.)
 
Answer:
 
Explanation:
Note:
* The Windows Assessment and Deployment Kit (Windows ADK) is a collection of tools and documentation that you can use to customize, assess, and deploy Windows operating systems to new computers.
* Walkthrough: Create a Custom Windows PE Image
Step 1: Set Up a Windows PE Build Environment
Step 2: Mount the Base Windows PE Image
Step 3: Add Boot-Critical Drivers
Step 4: Add Optional Components
Step 5: Add Language Support (Optional)
Step 6: Add More Customization (Optional)
Step 7: Commit Changes
* Walkthrough: Create a Windows RE Recovery Media
Step 1: Create a Windows RE Image
Step 2: Create a bootable media
Reference: Walkthrough: Create a Custom Windows PE Image Walkthrough: Create a Windows RE Recovery Media

QUESTION 18
Hotspot Questions
You have a computer that runs Windows 8 Enterprise. You need to ensure that all users can see the history of detected items in Windows Defender. Which option on the Settings tab should you select? (To answer, select the appropriate option in the answer area.)

 
Answer:
 

QUESTION 19
Drag and Drop Questions
You administer computers and printers on your company network. The computers run Window 8 Pro. An employee wants to add a separator page to her printer task on a network printer. You create a separator page file and save it to the C:\Windows\System32 folder on her computer. You need to configure the computer to use the separator page for the print task. Which three actions should you perform in sequence on the computer? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

 
Answer:
 

QUESTION 20
You are an IT consultant for small and mid-sized businesses. One of your clients wants to start using Virtual Smart Cards on its laptops and tablets, which run Windows 8 Pro. Before implementing any changes, the client wants to ensure that the laptops and tablets support Virtual Smart Cards. You need to verify that the client laptops and tablets support Virtual Smart Cards. What should you do?

A.    Ensure that each laptop and tablet can read a physical smart card.
B.    Ensure that BitLocker Drive Encryption is enabled on a system drive of the laptops and tablets.
C.    Ensure that each laptop and tablet has a Trusted Platform Module (TPM) chip of version 1.2 or greater.
D.    Ensure that the laptops and tablets are running Windows 8 Enterprise edition.

Answer: C

Passing Microsoft 70-688 Exam successfully in a short time! Just using Braindump2go’s Latest Microsoft 70-688 Dump:http://www.braindump2go.com/70-688.html

70-688 DumpsQUESTION 1
You administer client computers that run Windows 8 Enterprise deployed by using Windows Deployment Services (WDS).
Your company recently purchased 25 new tablets that run Windows 8 Pro. For all 25 new tablets, you want to replace the existing Windows 8 Pro installation with Windows 8 Enterprise.
You need to deploy the Windows 8 Enterprise image to all 25 tablets simultaneously by using the existing WDS infrastructure.
What should you do?

A.    Start the tablets from the Windows To Go workspace.
B.    Start the tablets from a USB flash drive with a customized Windows Preinstallation Environment (WinPE).
C.    Start the tablets normally. Map the Windows Image (WIM) file from a WDS network share.
D.    Start the tablets from a customized Windows Recovery Environment (WinRE).

Answer: A

QUESTION 2
Drag and Drop Questions
Your company recently purchased 25 new laptops. All 25 laptops have the same hardware configuration and do not have any operating system installed. You have been asked to deploy Windows 8 on these laptops. You have installed and configured Windows 8 on a reference laptop. You need to create an image and deploy it to the 25 new laptops. Which four actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
 
Answer:
 
Explanation:
Note:
* You can create a reference computer by deploying Windows, and then removing the computer- specific information from the system.
* On the destination computer, you will create a structure for the partitions where you apply your images. The partition structure on the destination computer must match the partition structure of the reference computer.
* Use the Diskpart tool and the DISM tool to apply Windows images to one or more partitions onto a computer for deployment.
* Use the DISM tool to apply images to your Windows partition. Reference: How to Capture Images of Hard Disk Partitions by Using DISM Reference: How to Apply Images by Using DISM

QUESTION 3
Drag and Drop Questions
You administer computers that run windows 7 and Windows 8. You run an application that saves files that contain local settings unique to each user. You want to allow users to synchronize settings for an application to any enterprise computer when they log on to the enterprise computer. You need to implement a solution that will move a user’s settings files to any computer. You also need to ensure that you can roll back the changes if necessary. Which required task or tasks should you perform with each approach? (To answer, drag the appropriate required task to the corresponding approach. Each required task may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.)

 
Answer:
 
Explanation:
Note:
* Microsoft User Experience Virtualization (UE-V) uses settings location templates to roam application settings between user computers. Some standard settings location templates are included with User Experience Virtualization. You can also create, edit, or validate custom settings location templates with the UE-V Generator.
* Settings template catalog
The User Experience Virtualization settings template catalog is a folder path on UE-V computers or a Server Message Block (SMB) network share that stores all the custom settings location templates. The UE-V agent retrieves new or updated templates from this location. The UE-V agent checks this location once each day and updates its synchronization behavior based on the templates in this folder. Templates that were added or updated in this folder since the last time that the folder was checked are registered by the UE-V agent. The UE-V agent deregisters templates that are removed from this folder. By default, templates are registered and unregistered one time per day at 3:30 A.M.
local time by the task scheduler.
* The Microsoft Desktop Optimization Pack (MDOP) is a suite of technologies available as a subscription for Software Assurance customers. MDOP virtualization technologies help personalize the user experience, simplify application deployment, and improve application compatibility with the Windows operating system (UE-V/App-V/MED-V). Additionally, MDOP helps manage, monitor, and deploy key Windows features (MBAM/AGPM). Using MDOP shifts desktop repair from reactive to proactive, saving time and removing challenges associated with troubleshooting and repairing system failures (DaRT).
Reference: Create UE-V Settings Location Templates with the UE-V Generator

QUESTION 4
Drag and Drop Questions
You support a computer that runs Windows 8 Enterprise. You want to create a dual-boot configuration by using the native boot virtual hard disk (VHD) method. You need to create an alternate Windows 8 installation. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
 
Answer:
 

QUESTION 5
Drag and Drop Questions
You support computers that run Windows 8 Enterprise. Company policy requires that Microsoft Internet Explorer be the only browser allowed and supported. You collect software metering data and discover that several users are running other third-party browsers. You need to block other web browsers from running on the computers. All other applications should be allowed. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
 
Answer: 

Explanation:
Note:
* Use Computer Configuration (not user configuration).
* Restrict Access to Programs with AppLocker in Windows 7 If you share a computer and don’t want other users accessing certain applications, there is a new feature in Windows 7 that allows you to block them. We restrict what programs other users can access using AppLocker.
Under Local Computer Policy go to Computer Configuration \ Windows Settings \ Security Settings \ Application Control Policies \ AppLocker.
Now under AppLocker Properties check the boxes next to Configured under Executable rules then click Ok.
 
Finally create a Deny Executable rule for each browser you want to block.

QUESTION 6
Drag and Drop Questions
You support computers that run windows 8 Enterprise. AppLocker policies are deployed. Company policy states that AppLocker must be disabled. You need to disable AppLocker. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
 
Answer:
 
Explanation:
Note:
* Before you can enforce AppLocker policies, you must start the Application Identity service by using the Services snap-in console.
* The Application Identity service determines and verifies the identity of an application. Stopping this service will prevent AppLocker policies from being enforced.

QUESTION 7
Drag and Drop Questions
You administer laptops and virtual desktop computers that run Windows 8 and are joined to an Active Directory domain. Your company provides virtual desktop computers to all users. Employees in the sales department also use laptops, sometimes connected to the company network and sometimes disconnected from the company network. You want sales department employees to have the same personal data, whether they are using their virtual desktop computers or their laptops. You need to configure the network environment to meet the requirements. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

 
Answer:
 
Explanation:
Note:
Folder Redirection and Offline Files are used together to redirect the path of local folders (such as the Documents folder) to a network location, while caching the contents locally for increased speed and availability.
* Folder Redirection enables users and administrators to redirect the path of a known folder to a new location, manually or by using Group Policy. The new location can be a folder on the local computer or a directory on a file share. Users interact with files in the redirected folder as if it still existed on the local drive. For example, you can redirect the Documents folder, which is usually stored on a local drive, to a network location. The files in the folder are then available to the user from any computer on the network.
* Offline Files makes network files available to a user, even if the network connection to the server is unavailable or slow. When working online, file access performance is at the speed of the network and server. When working offline, files are retrieved from the Offline Files folder at local access speeds. A computer switches to Offline Mode when:
The new Always Offline mode has been enabled
The server is unavailable
The network connection is slower than a configurable threshold The user manually switches to Offline Mode by using the Work offline button in Windows Explorer Reference: Folder Redirection, Offline Files, and Roaming User Profiles overview

QUESTION 8
You manage a network that includes computers that run Windows 8 Enterprise. All of the computers on the network are members of an Active Directory domain. The company recently proposed a new security policy that prevents users from synchronizing applications settings, browsing history, favorites, and passwords from the computers with their Microsoft accounts. You need to enforce these security policy requirements on the computers. What should you do?

A.    From each computer, navigate to Change Sync Settings and set the Sync Your Settings options for
Apps, Browser, and Passwords to Off.
B.    On the Group Policy Object, configure the Accounts: Block Microsoft accounts Group Policy setting
to Users can’t add or log on with Microsoft accounts.
C.    On the Group Policy Object, configure the Accounts: Block Microsoft accounts Group Policy setting
to Users can’t add Microsoft accounts.
D.    From each computer, navigate to Change Sync Settings and set the Sync Your Settings option to Off.

Answer: B

QUESTION 9
You administer a computer that runs Windows 8 Pro. You need to create a backup copy of the computer system drive. The backup copy must support a complete system drive restore to another computer. What should you do?

A.    Create a system restore point.
B.    Run the bcdedit /export command.
C.    Perfom a backup to a shared folder by using the wbadmin command with the -allcritical switch.
D.    Create a system recovery drive.

Answer: C

QUESTION 10
You manage client computers that run Windows 8 and are part of a workgroup. These computers are configured to use Microsoft Update. Updates are downloaded every day at 10:00 and installed automatically. Users report that their computers sometimes reboot without any interaction. You need to prevent unplanned automatic reboots of the computers. What should you do?

A.    Enable the Reschedule Automatic Updates scheduled installations policy setting.
B.    Disable the Re-prompt for restart with scheduled installations policy setting.
C.    Enable the Automatic Updates detection frequency policy setting.
D.    Enable the No auto-restart with logged on users for scheduled automatic updates installations policy setting.

Answer: A

Passing Microsoft 70-688 Exam successfully in a short time! Just using Braindump2go’s Latest Microsoft 70-688 Dump:http://www.braindump2go.com/70-688.html