Download New Updated (Spring 2015) Microsoft 70-687 Actual Tests 1-10




A company has 100 client computers that run Windows 8.1.


You need to assign static IPv6 addresses to the client computers.


Which Windows Powershellcmdlet should you run?











Answer: D

Explanation: Set-NetIPAddress


The Set-NetIPAddress cmdlet modifies IP address configuration properties of an existing IP address.


To create an IPv4 address or IPv6 address, use the New-NetIPAddress cmdlet.




A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 8.1.


Portable client computers no longer connect to the corporate wireless network.


You need to ensure that when the corporate wireless network is available, the computers always connect to it automatically.


Which two actions would achieve the goal? (Each correct answer presents a complete solution. Choose two.)



Create a Group Policy object (GPO) to configure a wireless network policy. Link the GPO to the organizational unit that contains the computers.


Configure the corporate wireless network as an unmetered network.


Configure the corporate wireless network as a preferred network.


Manually connect to the corporate wireless network and select the option to connect automatically to that network.


Answer: CD

Explanation: Answer:

Configure the corporate wireless network as a preferred network. Manually connect to the corporate wireless network and select the option to connect automatically to that network. network-profiles.aspx

Windows 8.1 tips: Managing Wireless Network Profiles


And finally, if you wanted to change the preferred order for your machine to connect to specific wireless network, you could move a network up in the priority list by using the command: set profileorder name=goose interface=”Wi-Fi” priority=1


clip_image002[4] a.html

How to Change Connection Priority of Wireless Networks in Windows 8 and 8.1


Windows usually connects to networks in this priority order:


WiFi (wireless)

Mobile broadband


When you connect to a new WiFi network, it’s added to the list, and Windows will connect to that network while it’s in range. If you connect to another WiFi network while in range of the first network, Windows will prefer the second network over the first one.


Mobile broadband networks are treated differently. If you manually connect to a mobile

broadband network when there is a WiFi network in range, the mobile broadband network is preferred just for that session. The next time you’re in range of both networks, the WiFi network is preferred. This is because mobile broadband networks typically are metered.


If you want to force your PC to prefer a mobile broadband network over WiFi, tap or click the WiFi network in the list of networks, and then click Disconnect. Windows won’t automatically connect to that WiFi network.




A company has client computers that run Windows 8.1. The corporate network is configured for IPv4 and IPv6.


You need to disable Media Sensing for IPv6 on the client computers without affecting IPv4 communications.


What should you do on each client computer?



Run the Disable-NetAdapterBinding Windows PowerShell cmdlet.


Run the Disable-NetAdapter Windows PowerShell cmdlet.


Run the Set-NetlPv6Protocol Windows PowerShell cmdlet.


Run the Set-NetlPv4Protocol Windows PowerShell cmdlet.


Answer: C

Explanation: Set-NetIPv6Protocol


Set-NetIPv6Protocol -DhcpMediaSense<DhcpMediaSense>


Specifies a value for Media Sense. The cmdlet modifies the value for this setting.


Media Sense provides a mechanism for the network adapter to notify the protocol stack of media connect and disconnect events. These events trigger the DHCP client to take an action, such as attempting to renew a DHCP lease or removing routes that are related to a disconnected network. When Media Sense is enabled, the network parameters on the laptop of a roaming user are automatically and transparently updated without requiring a restart when the user moves from one location to another. The acceptable values for this parameter are:


– Enabled

– Disabled

The default value is Enabled.


Further information:


The Disable-NetAdapterBinding cmdlet disables a binding to a network adapter. Running this cmdlet causes loss of network connectivity depending on the binding that is disabled. Note: Disabling some adapter bindings can automatically enable other network adapter bindings.



The Disable-NetAdapter cmdlet disables a network adapter. A network adapter must be enabled to connect to a network. This cmdlet causes loss of network connectivity of the specified network adapter. Note: Do not disable the network adapter being used to manage a remote computer. By default the user will be prompted to confirm the network adapter should be disabled



Is not a valid cmdlet.





A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 8.1. Two computers named COMPUTER1 and COMPUTER2 are connected to one network switch and joined to the domain. Windows Firewall is turned off on both computers.


You are planning a remote management solution.


You have the following requirements:


Ensure that COMPUTER2 can run remote commands on COMPUTER1.

Test the solution by successfully running a command from COMPUTER2 that executes on COMPUTER1.


You need to select the commands to run on COMPUTER1 and COMPUTER2 to meet the remote management requirements.


Which commands should you run? (To answer, drag the appropriate command or commands to the correct location or locations in the answer area. Commands may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.)









A company has 100 client computers that run Windows 8.1. The client computers are members of a workgroup.


A custom application requires a Windows Firewall exception on each client computer.


You need to configure the exception on the client computers without affecting existing firewall settings.


Which Windows PowerShell cmdlet should you run on each client computer?













Answer: A

Explanation: New-NetFirewallRule


The New-NetFirewallRule cmdlet creates an inbound or outbound firewall rule and adds the rule to the target computer.


Further information:


The Set-NetFirewallSetting cmdlet configures properties that apply to the firewall and IPsec settings, regardless of which network profile is currently in use. This cmdlet allows the administrator to specify global firewall behavior.



The Set-NetFirewallRule cmdlet modifies existing firewall rule properties.



The Set-NetFirewallProfile cmdlet configures options for the profiles, including domain, public, and private, that are global, or associated with the input rules.



The New-NetIPsecMainModeRule cmdlet creates an IPsec main mode rule. A main mode rule contains a set of local and remote end points to determine the peers to which it applies. When an application on the local computer attempts to communicate with one of these specified remote hosts, the computer attempts to establish a security association (SA) with the remote server.




A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 8.1. Portable client computers connect to the corporate wireless network.


You have the following requirements:


Prevent users from configuring a wireless network by using settings from a USB flash drive.

Do not affect the use of other USB devices.


You need to create a Group Policy object (GPO) to meet the requirements.


Which GPO should you create?



A GPO that disables the Allow only USB root hub connected Enhanced Storage Features policy setting.


A GPO that enables wireless policy processing.


A GPO that prohibits connections to mobile broadband networks when roaming.


A GPO that configures Windows Connect Now settings.


Answer: D

Explanation: Computer ConfigurationPoliciesAdministrative TemplatesNetworkWindows Connect Now Turn Off Ability To Configure Using A USB Flash Drive setting:

Prevents Windows from being able to store a Windows Connect Now configuration to a UFD. Because the Windows Connect Now information stored on a UFD contains information that can allow computers to access your protected wireless network, you might choose to disable this setting to improve the security of your wireless networks.


What is Windows Connect Now?


Microsoft Windows Connect Now (WCN) is a technology designed to address the need for a simple and more secure way to configure network devices and computers. In addition to easier device configuration, you can use WCN to save wireless network settings to a USB flash drive and then plug that drive into devices (such as routers) and computers so you can quickly and easily add them to a network.


Using WCN (Windows Connect Now)






A company has client computers that run Windows 8.1.


The client computers are connected to a corporate private network.


Users are currently unable to connect from their home computers to their work computers by using Remote Desktop.


You need to ensure that users can remotely connect to their office computers by using Remote Desktop. Users must not be able to access any other corporate network resource from their home computers.


Which setting should you configure on the home computers?



Virtual Private Network connection


Remote Desktop local resources


DirectAccess connection


Remote Desktop Gateway IP address


Answer: A


DirectAccess is for Windows Server 2008/2012/Win 7 Ultimate/Enterprise/Win 8 Enterprise only RD Gateway setup is only for servers

Create VPN through manage networks. File –> Allow incoming connections. Connect through internet and create VPN which will allow one computer at a time to view the hosts resources, and only the hosts resources unlike standard VPNs.










A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 8.1. Client computers use Window BitLocker Drive Encryption with a Trusted Platform Module (TPM) chip.


You need to create a Group Policy object (GPO) that will secure the TPM owner information.


Which policy setting should you configure?



Enable the Turn on TPM backup to Active Directory Domain Services policy setting.


Enable the Configure the level of TPM usage authorization information available to the registry policy setting.


Set the Configure the level of TPM owner authorization information available to operating system policy setting to Full.


Enable the Configure TPM platform validation profile policy setting.


Answer: A



Trusted Platform Module Services Group Policy Settings


If you enable this policy setting, TPM owner information will be automatically and silently backed up to AD DS when you use Windows to set or change a TPM owner password.






A company has client computers that run Windows 8.1. The company uses Windows BitLocker Drive Encryption with the data-only option o all client computers.


You delete a file containing highly confidential information from your computer.


You need to clear the free space on the hard drive to minimize the chance of the confidential information being recovered.


Which command should you run on the client computer?



manage-bde -w




diskpart clean


BdeHdCfg -target c: shrink


Answer: A



Manage-bde: WipeFreeSpace



manage-bde -wipeFreeSpace|-w [<Drive>] [-Cancel] [-computername <Name>] [{-?|/?}] [{- help|-h}]


Wipes the free space on the volume removing any data fragments that may have existed in the space. Running this command on a volume that was encrypted using the “Used Space Only” encryption method provides the same level of protection as the “Full Volume Encryption” encryption method.



The following example illustrates using the -w command to create wipe the free space on drive C.

manage-bde -w C:


Further information:




chkdsk [<Volume>[[<Path>]<FileName>]] [/f] [/v] [/r] [/x] [/i] [/c] [/l[:<Size>]] [/b]




The Diskpart Clean command removes any and all partition or volume formatting from the disk with focus. Bdehdcfg


Prepares a hard drive with the partitions necessary for BitLocker Drive Encryption.





You deploy several tablet PCs that run Windows 8.1.


You need to minimize power usage when the user presses the sleep button.


What should you do?



Configure the active power plan to disable Wake Timers.


Configure the active power plan to use Fast Startup.


In Power Options, configure the sleep button setting to Hibernate.


In Power Options, configure the sleep button setting to Sleep.


Answer: C




Sleep and hibernation: frequently asked questions


What’s the difference between sleep, hibernate, and hybrid sleep?


Sleep is a power-saving state that allows a computer to quickly resume full-power operation (typically within several seconds) when you want to start working again. Putting your computer into the sleep state is like pausing a DVD player–the computer immediately stops what it’s doing and is ready to start again when you want to resume working.


Hibernation is a power-saving state designed primarily for laptops. While sleep puts your work and settings in memory and draws a small amount of power, hibernation puts your open documents and programs on your hard disk, and then turns off your computer. Of all the power-saving states in Windows, hibernation uses the least amount of power. On a laptop, use hibernation when you know that you won’t use your laptop for an extended period and won’t have an opportunity to charge the battery during that time.


Hybrid sleep is designed primarily for desktop computers. Hybrid sleep is a combination of sleep and hibernate–it puts any open documents and programs in memory and on your hard disk, and then puts your computer into a low-power state so that you can quickly resume your work. That way, if a power failure occurs, Windows can restore your work from your hard disk. When hybrid sleep is turned on, putting your computer into sleep automatically puts your computer into hybrid sleep. Hybrid sleep is typically turned on by default on desktop computers.


Further information: accidentally/

How To Prevent Your Computer From Waking Up Accidentally


Disable Wake Timers

If you find your Windows computer waking from sleep for no apparent reason, your computer is either being woken up by a hardware device ?such as your mouse — or scheduled task set to wake your computer. Distinguishing Fast Startup from Wake-from-Hibernation


Starting with Windows 8, a fast startup mode is available to start a computer in less time than is typically required for a traditional, cold startup. A fast startup is a hybrid combination of a cold startup and a wake-from-hibernation startup. Enable Windows 8 / 8.1 Hibernate Mode Option [How-To Tutorial]


Another similarly missing power option (apparently) is Hibernate, which, although not readily visible, is still a part of the operating system, and you just have to enable it.


Free VCE & PDF File for Microsoft 70-687 Real Exam

Instant Access to Free VCE Files: MCSE|MCSA|MCITP…
Instant Access to Free PDF Files: MCSE|MCSA|MCITP…