New Updated Microsoft MCSA 70-689 Real Exam Questions and Answers Download 61-70

Ensurepass

QUESTION 61

You administer computers that run Windows 8 Pro and are members of an Active Directory domain. The computers are encrypted with BitLocker and are configured to store BitLocker encryption passwords in Active Directory. A user reports that he has forgotten the BitLocker encryption password for volume E on his computer. You need to provide the user a BitLocker recovery key to unlock the protected volume. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

 

A.

Ask the user to run the manage-bde -unlock E: -pw command.

B.

Ask the user for a recovery key ID for the protected volume.

C.

Ask the user for his computer name.

D.

Ask the user for his logon name.

 

Correct Answer: BC

 

 

QUESTION 62

DRAG DROP

You support a desktop computer that runs Windows 8 Pro. The computer is joined to an Active Directory domain.

 

The computer has a folder named C:Reports. The folder NTFS permissions are shown in Exhibit 1. (Click the Exhibit button.)

 

clip_image002

 

The folder is shared over the network with Read permission for a domain user account named User1 as shown in Exhibit 2. (Click the Exhibit button.)

 

clip_image004

 

Members of the domain security group named Accountants must have access to the shared folder.

 

You need to assign the required permissions.

 

Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

 

clip_image006

 

Correct Answer:

clip_image008

 

 

QUESTION 63

You administer laptops that run Windows 8 Enterprise and are members of an Active Directory domain. Users travel frequently and access domain resources from inside client networks or from their home network. You want to manage the laptops when they are connected to the company network from the external networks. You need to ensure that the laptops can be managed and maintained while users are not logged on to the computers. Which of the following should you recommend?

 

A.

Remote Assistance

B.

Remote Desktop

C.

Windows Remote Management (WinRM)

D.

DirectAccess

 

Correct Answer: D

 

 

QUESTION 64

You support computers that run Windows 8 and are members of an Active Directory domain. Recently, several domain user accounts have been configured with super- mandatory user profiles. A user reports that she has lost all of her personal data after a computer restart. You need to configure the user’s computer to prevent possible user data loss in the future. What should you do?

 

A.

Remove the .man extension from the user profile name.

B.

Add the .dat extension to the user profile name.

C.

Configure the user’s documents library to include folders from network shares.

D.

Configure Folder Redirection by using the domain group policy.

 

Correct Answer: D

 

 

QUESTION 65

You are an IT consultant for small and mid-sized businesses. One of your clients wants to start using Virtual Smart Cards on its laptops and tablets, which run Windows 8 Pro. Before implementing any changes, the client wants to ensure that the laptops and tablets support Virtual Smart Cards. You need to verify that the client laptops and tablets support Virtual Smart Cards. What should you do?

 

A.

Ensure that the laptops and tablets are running Windows 8 Enterprise edition.

B.

Ensure that each laptop and tablet has a Trusted Platform Module (TPM) chip of version 1.2 or greater.

C.

Ensure that each laptop and tablet can read a physical smart card.

D.

Ensure that BitLocker Drive Encryption is enabled on a system drive of the laptops and tablets.

 

Correct Answer: B

 

 

QUESTION 66

You support computers that run Windows 8 Enterprise and are members of a workgroup. Users are able to download and install any app from Windows Store. You need to ensure that only approved apps can be installed from Windows Store. What should you do?

 

A.

Enable Windows SmartScreen and select the Get administrator approval before running an unrecognized app from the Internet option.

B.

Configure a Software Restriction Policy Certificate rule.

C.

Configure an AppLocker Packaged app rule.

D.

Configure an AppLocker Publisher rule.

 

Correct Answer: C

 

 

QUESTION 67

You support computers that run Windows 8 Enterprise. Your company protects all laptops by using the BitLocker Network Unlock feature. Some employees work from home. You need to ensure that employees can log on to their laptops when they work from home. What should you do?

 

A.

Have users run the Manage-bde.exe -unlock command before they disconnect from the company network.

B.

Enable BitLocker To Go.

C.

Provide employees their BitLocker PINs.

D.

Ensure that the Trusted Platform Module (TPM) chips in the laptops are version 1.2 or greater.

 

Correct Answer: C

 

 

QUESTION 68

You administer a company network that includes computers that run Windows 8 Enterprise in an Active Directory domain. The company has purchased a subscription to Windows Intune. Corporate security policy requires that computers in the accounting department have file and program activity logged. A user in the accounting department uses a computer that is managed by Windows Intune. You need to ensure that file and program activity is always monitored on this computer. What should you do?

 

A.

Create a new Windows Firewall Setting policy in the W
indows Intune Admin Console.

B.

Create a new Windows Intune Mobile Security policy in the Windows Intune Admin Console.

C.

Create and deploy a custom policy in the Windows Intune Center Settings template.

D.

In the Windows Intune Admin Console, create a new Windows Intune Agent Settings policy that uses the recommended settings.

 

Correct Answer: D

 

QUESTION 69

You have computers that run Windows 8 Enterprise. Microsoft BitLocker Administration and Monitoring (MBAM) is deployed on your network on a server named MBAM1. Company policy requires that within 2 hours of being started, computers that have the MBAM client installed prompt users to enable BitLocker. You need to make changes to the Configure MBAM Services Group Policy settings. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

 

A.

Set MBAM Recovery and Hardware service endpoint to MBAM1.

B.

Set Select Bitlocker Recovery Information to store to Recovery password only.

C.

Set Enter status reporting frequency (
in minutes) to 120.

D.

Set Select Bitlocker Recovery Information to store to Recovery password and key package.

E.

Set Enter client checking status frequency (in minutes) to 120.

F.

Set MBAM Status reporting endpoint to MBAM1.

 

Correct Answer: AE

 

 

QUESTION 70

Your company has purchased a subscription to Windows Intune. You use Windows Intune to automatically deploy Windows updates. You create an automatic approval rule in Windows Intune but notice that previously existing updates are not deployed. You need to ensure that all previously existing updates are automatically approved. What should you do?

 

A.

Create and deploy a policy that uses the recommended settings in the Windows Intune Center Settings template.

B.

Edit the schedule for the automatic approval rule.

C.

Create and deploy a custom policy in the Windows Intune Center Setting
s template.

D.

Run the approval rule.

 

Correct Answer: D

 

Instant Access to Download Latest Complete Collection of Microsoft MCSA 70-689 Real Exam

Try Microsoft MCSA 70-689 Free Demo