Microsoft 70-697

Configuring Windows Devices

(Page 1 out of 6)
Showing 15 of 83 Questions
Exam Version: 9.0
Question No : 1 -

You administer Windows 10 Enterprise desktop computers that are members of an Active
Directory domain.
You want to create an archived copy of user profiles that are stored on the desktops. You
create a standard domain user account to run a backup task.
You need to grant the backup task user account access to the user profiles.
What should you do?

  • A. Add the backup task account to the Remote Management Users group on a domain controller.
  • B. Add the backup task account to the Backup Operators group on every computer.
  • C. Add the backup task account to the Backup Operators group on a domain controller.
  • D. Set the backup task account as NTFS owner on all the profiles.

Answer : B

Question discussion



Question No : 2 -

You have a Windows 10 Enterprise computer.
The computer has a shared folder named C:\Marketing. The shared folder is on an NTFS
volume.
The current NTFS and share permissions are configured as follows.


UserA is a member of both the Everyone group and the Marketing group. UserA must
access C:\Marketing from across the network. You need to identify the effective
permissions of UserA to the C:\Marketing folder.
What permission should you identify?

  • A. Full Control
  • B. Read and Execute
  • C. Read
  • D. Modify

Answer : D

Question discussion



Question No : 3 -

Your company upgrades a research and development department workstation to a
Windows 10 Enterprise computer. Two of the workstations folders need to be encrypted.
The folders are named C:\ProtectedFiles and C:\Backups.
You attempt to encrypt the folders. The output is shown in the following exhibit.


Use the drop-down menus to select the answer choice that completes each statement.
NOTE: Each correct selection is worth one point.


Answer :

Question discussion



Question No : 4 -

You are a system administrator for a department that has Windows 10 Enterprise
computers in a domain configuration.
You deploy an application to all computers in the domain.
You need to use group policy to restrict certain groups from running the application.
What should you do?

  • A. Set up DirectAccess.
  • B. Configure AppLocker.
  • C. Disable BitLocker.
  • D. Run the User State Management Tool.

Answer : B

Question discussion



Question No : 5 -

You have a Microsoft Intune subscription.
You have three security groups named Security1, Security2 and Security3. Security1 is the
parent group of Security2. Security2 has 100 users.
You need to change the parent group of Security2 to be Security3.
What should you do first?

  • A. Edit the properties of Security1.
  • B. Edit the properties of Security2.
  • C. Delete security2.
  • D. Remove all users from Security2.

Answer : C

Question discussion



Question No : 6 -

Your network contains an Active Directory domain named contoso.com. The domain
contains Windows 10 Enterprise client computers.
Your company has a subscription to Microsoft Office 365. Each user has a mailbox that is
stored in Office 365 and a user account in the contoso.com domain. Each mailbox has two
email addresses.
You need to add a third email address for each user.
What should you do?

  • A. From Active Directory Users and Computers, modify the E-mail attribute for each user.
  • B. From Microsoft Azure Active Directory Module for Windows PowerShell, run the Set- Mailbox cmdlet.
  • C. From Active Directory Domains and Trust, add a UPN suffix for each user.
  • D. From the Office 365 portal, modify the Users settings of each user.

Answer : B

Question discussion



Question No : 7 -

You have an Active Directory domain named contoso.com that contains a deployment of
Microsoft System Center 2012 Configuration Manager Service Pack 1 (SP1). You have a
Microsoft Intune subscription that is synchronized to contoso.com by using the Microsoft
Azure Active Directory Synchronization Tool (DirSync.)
You need to ensure that you can use Configuration Manager to manage the devices that
are registered to your Microsoft Intune subscription.
Which two actions should you perform? Each correct answer presents a part of the
solution.

  • A. In Microsoft Intune, create a new device enrollment manager account.
  • B. Install and configure Azure Active Directory Synchronization Services (AAD Sync.)
  • C. In Microsoft Intune, configure an Exchange Connector.
  • D. In Configuration Manager, configure the Microsoft Intune Connector role.
  • E. In Configuration Manager, create the Microsoft Intune subscription.

Answer : D,E

Question discussion



Question No : 8 -

You manage Microsoft Intune for a company named Contoso. You have 200 computers
that run Windows 10. The computers are Intune clients.
You need to configure software updates for the clients.
Which policy template should you use to configure each software updates setting? To
answer, drag the appropriate policy templates to the correct settings. Each policy template
may be used once, more than once, or not at all. You may need to drag the split bar
between panes or scroll to view content.


Answer :

Question discussion



Question No : 9 -

You have a computer that runs Windows 10 and is used by 10 users. The computer is
joined to an Active Directory domain. All of the users are members of the Administrators
group. Each user has an Active Directory account.
You have a Microsoft Word document that contains confidential information.
You need to ensure that you are the only user who can open the document.
What should you configure?

  • A. account policies
  • B. application control polices
  • C. HomeGroup settings
  • D. software restriction policies
  • E. NTFS permissions
  • F. Microsoft OneDrive
  • G. share permissions
  • H. Encrypting File System (EFS) settings

Answer : B

Question discussion



Question No : 10 -

You have a Windows 10 Enterprise computer. You have a 1-terabyte external hard drive.
You purchase a second 1-terabyte external hard drive.
You need to create a fault-tolerant volume that includes both external hard drives. You also
need to ensure that additional external hard drives can be added to the volume.
Which three actions should you perform in sequence? To answer, move the appropriate
actions from the list of actions to the answer area and arrange them in the correct order.


Answer :

Question discussion



Question No : 11 -

You have a computer named Computer1 that runs Windows 10 Enterprise.
You plan to install the most recent updates to Computer1.
You need to ensure that you can revert to the current state of Computer1 in the event that
the computer becomes unresponsive after the update.
What should you include in your solution?

  • A. The Reset this PC option from the Recovery section of the Settings app
  • B. The Sync your settings options from the Accounts section of the Settings app
  • C. The Backup and Restore (Windows 7) control panel item
  • D. The Refresh your PC option from the PC Settings

Answer : C

Question discussion



Question No : 12 -

You have an image of Windows 10 Enterprise named Image1. Image1 has version number
1.0.0.0 of a custom, line-of-business universal app named App1.
You deploy Image1 to Computer1 for a user named User1.
You need to update App1 to version 1.0.0.1 on Computer1 for User1 only.
What command should you run? To answer, select the appropriate options in the answer
area.



Answer :

Question discussion



Question No : 13 -

You have a Microsoft Intune subscription.
You need to identify devices based on the following requirements:
✑ Devices that are jailbroken or rooted.
✑ Devices that are remote wiped or deleted.
✑ Devices that have blacklisted applications instated.
Which type of report should you use for each requirement? To answer, drag the
appropriate reports to the correct requirements. Each report may be used once, more than
once, or not at all. You may need to drag the split bar between panes or scroll to view
content.


Answer :

Question discussion



Question No : 14 -

You manage a network that includes Windows 10 Enterprise computers. All of the
computers on the network are members of an Active Directory domain.
The company recently proposed a new security policy that prevents users from
synchronizing applications settings, browsing history, favorites, and passwords from the
computers with their Microsoft accounts.
You need to enforce these security policy requirements on the computers.
What should you do?

  • A. On the Group Policy Object, configure the Accounts: Block Microsoft accounts Group Policy setting to Users cant add Microsoft accounts.
  • B. On the Group Policy Object, configure the Accounts: Block Microsoft accounts Group Policy setting to Users cant add or log on with Microsoft accounts.
  • C. From each computer, navigate to Change Sync Settings and set the Sync Your Settings options for Apps, Browser, and Passwords to Off.
  • D. From each computer, navigate to Change Sync Settings and set the Sync Your Setting s option to Off.

Answer : B

Question discussion



Question No : 15 -

You have DHCP server. The server has a scope that is configured as shown in the DHCP
scope exhibit. (Click the Exhibit button.)


A user fails to access internal websites and resources.
The computer of the user has the firewall settings shown in the Firewall settings exhibit
(Click the Exhibit button.)

The computer also has the network settings shown in the Network Settings exhibit (Click
the Exhibit
button.)

For each of the following statements, select Yes if the statement is true. Otherwise, select
No.

Answer :

Question discussion



(Page 1 out of 6)
Showing of 83 Questions
Exam Version: 9.0