NEW QUESTION 1
DRAG DROP
You manage 500 laptop devices and 250 desktop devices that run Windows 10. All devices are joined to an Active Directory Domain Services (AD DS) domain. You also manage a Windows Server 2012 R2 file server named FILE01.
All user document folders must be located on FILE01.
You need to ensure that the mobile users can access documents offline.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 2
DRAG DROP
A company plans to upgrade all devices from Windows 7 to Windows 10. All Windows 10 devices belong to an organizational unit (OU) named Desktops. All devices for users in the sales department are enrolled in Azure Active Directory (AD). All users belong to an OU named Employees.
Users in the finance department must not be able to modify the power policy settings. You need to apply the power policy.
What should you do? To answer, drag the appropriate option to the correct item. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation:

NEW QUESTION 3
HOTSPOT
You have a server that runs Windows Server 2012 R2 server named Server1. Server1 has Remote Desktop Services (RDS) installed. You create a session collection named Session1 and publish a RemoteApp in Session1.
Server1 has an application named App1. The executable for App1 is C:AppsApp1.exe.
You need to ensure that App1 is available as a RemoteApp in Session1.
What command should you run? To answer, select the appropriate options in the answer area.

Answer:

Explanation: We need to publish App1 as a RemoteApp. We do this with the New–RDRemoteApp cmdlet.
The –CollectionName parameter allows us to specify the session as “Session1”. The display name for the App1 will be “App1”.
The –FilePath parameter allows us to specify the path to the executable for App1.

NEW QUESTION 4
HOTSPOT
You need to configure the required security measures for the sales department mobile devices.
What should you do? To answer, select the appropriate action from each list in the answer area. Each correct answer is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/intune/deploy-use/ios-policy-settings-in-microsoft-intune https://docs.microsoft.com/en-us/intune/deploy-use/introduction-to-device-compliance-policies-in-microsoft-intune

NEW QUESTION 5
A company uses Office 365. The company has an on-premises Active Directory Domain Services (AD DS) domain and Azure Active Directory Connect. The company runs an on- premises installation of System Center Configuration Manager. All devices are joined to the domain. All users have AD DS accounts and use their AD DS credentials to access the Office 365 resources.
You plan to use Cloud App Discovery. You need to deploy a solution.
Which three will achieve the goal? Each correct answer presents a complete solution.

• A. Install the agent by using System Center Operations Manager.
• B. Install the agent by using SystemCenter Configuration Manager.
• C. Install the agent by using Group Policy.
• D. Install the agent manually.
• E. Install the agent by using the Office 365 portal.

Answer: BCD

NEW QUESTION 6
You are a network administrator for a company that has an Office 365 E3 subscription. You purchase Enterprise Mobility Suite licenses. You implement synchronization by using a federated identity model.
Passwords for Sales team users often expire while they are travelling. When this happens, the users are not able to log on to the virtual private network (VPN) to perform their duties. Users must be able to reset their own passwords.
You need to enable password write-back. Which application should you configure?

• A. Web Application Proxy
• B. Active Directory Federation Services (AD FS)
• C. Microsoft Online Services Sign-in Assistant
• D. Directory Synchronization (DirSync)
• E. Azure Active Directory Connect

Answer: E

NEW QUESTION 7
A company plans to deploy 100 new Windows 10 devices. Then pilot users are currently testing Windows 10 is not corporate network.
The pilot users report that the Hibernate option is not available. You need to enable hibernation on the Windows 10 devices. Which command should you run?

• A. Powercfg –energy
• B. Powercfg –h off
• C. Powercfg –h on
• D. Powercfg –deviseenablewake
• E. Powercfg -setactive

Answer: C

Explanation: References:
https://www.cnet.com/how-to/how-to-enable-or-disable-hibernate-in-windows-10/

NEW QUESTION 8
You need to create the policy for the Tokyo branch office. What should you use?

• A. Azure Active Directory Device Registration Service
• B. System Center 2012 R2 Configuration Manager SP1
• C. Intune
• D. Azure Active Directory
• E. Azure Active Directory Domain Services

Answer: C

Explanation: References:
https://docs.microsoft.com/en-us/intune/deploy-use/introduction-to-device-compliance-policies-in-microsoft-intune

NEW QUESTION 9
You administer a Windows 10 Enterprise computer. The computer has File History turned on, and system protection turned on for drive C.
You accidentally delete a folder named LibrariesCustomers by using the Shift+Delete keyboard shortcut.
You need to restore the most recent version of the folder to its original location. Which approach should you use to restore the folder?

• A. Recycle Bin
• B. the latest restore point
• C. File History
• D. a manually selected restore point

Answer: C

Explanation: File History is similar to Previous Versions in previous versions of Windows. It takes regular backups of your data and saves them to a separate disk volume or external drive. When File History is enabled, it backs up all the system libraries and your custom libraries by default.
To restore a deleted folder, you can browse to the parent folder or library and select Restore Previous Versions. The Previous Versions tab will list the previous versions that can be restored to its original location or restored to an alternative location.

NEW QUESTION 10
DRAG DROP
You need to test the ProseWare MyNotesPro app.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

Topic 3, Blue Yonder Airline
Overview Background
Blue Yonder Airlines provides regional commercial jet services in the continental United States. The company also designs, manufactures, and sells custom parts for jet aircraft. The custom parts business is growing rapidly. Blue Yonder airlines has developed a new part that will help airlines comply with new safety regulations. The company has a backlog of customers that would like to purchase the part.
The Sales department has 500 users and the Engineering department has 200 users. All employees work eight hour shifts. The Sales and Engineering teams cannot effectively collaborate on projects. This has resulted in missed deadlines for releasing new products to manufacturing.
Mobile device management
Blue Yonder Airlines has a subscription to Microsoft Intune for Mobile Device Management (MDM). The subscription includes the MDM Authority and Terms and Conditions components. The company has deployed the Network Device Enrollment service, Enterprise Certification Authority, and the Intune Certificate Connector. Blue Yonder Airlines has an on-premises Microsoft Exchange environment.
The company will use a combination of Intune and Azure RemoteApp for Mobile Application Management.
Mobile devices for employees
Blue Yonder Airlines plans to deploy mobile devices to the Sales and Engineering department employees for use while they are outside of the company network. The company plans to deploy the latest iOS devices for Sales department users and Windows 10 tablet devices for Engineering department users.
You configure a Sales group for Sales department users and an Engineering group for Engineering department users. In Intune, you configure a computer device group for Windows 10 devices, and a mobile device group for iOS devices. You synchronize the Sales and Engineering groups with Azure Active Directory (AD).
Network resources
You have a network file share that is used by Engineering department users to collaborate on projects. The file share is configured with full control permissions. The company is concerned that users may be disrupted if they are suddenly denied access to the file share.
Applications
Inventory Management App
Blue Yonder Airlines has developed a custom inventory management app. Sales department users must be able to access the app from enrolled mobile devices. The data that the app uses is considered confidential and must be encrypted.
New product Sales App
You procure a third-party app from a vendor to support new product sales. The data that the app uses is highly confidential. You must restrict access to the app and the app’s data to only Engineering department users. The app has been signed by using a Blue Airlines certificate. This certificate is not trusted by devices that run Windows 10.
Product Request Program App
The company has developed the Product Request Program app as a 32-bit Windows application. The application allows the company to manage the sales fulfillment process. It is also used to record customer requests for new parts and services. You plan to publish the Product Request Program app in Azure RemoteApp and configure access for users in the Engineering and Sales departments. This app is not compatible with the iOS platform and cannot by published by using Intune. You create a virtual machine in Azure that runs Windows Server 2012 R2. You install the Product Request Program app on the virtual machine.
Business Requirements
You must ensure that the Sales and Engineering teams can share documents and collaborate effectively. Any collaboration solution must be highly available and must be accessible from the internet. You must restrict access to any shared files to prevent access.
You must restrict permissions to the Engineering file share. You must monitor access to the file share.
You must provide users in the Sales and Engineering departments access to the following resources:
*Corporate email
*File Shares hosted in Microsoft SharePoint Online
*The Product Request Program app
Technical Requirements
You have the following technical requirements:
*Allow all Sales department users to enroll iOS devices for device management andenable encrypted notifications to the devices.
*Employees must be able to access company resources without having to manually install certificates or using an out-of-band process.
*Employees must only access corporate resources from devices that comply withthe company’s security policies.
Mobile device protection policies
*All devices must include a trusted build and must comply with Blue Yonder Airlines password complexity rules.
*You must clear all corporate data from a mobile device when the number of repeated log on failures is more than 10.
*All devices must be protected from data loss in the event that a device is lost or damaged.
*Data that is considered confidential must be encrypted on devices.
Additional technical requirements for Engineering department users and devices
*Users must not be challenged for credentials after they initially enroll a device in Intune.
*Users must be able to access corporate email on enrolled Windows 10 devices.
*Devices must be automatically updated when an update is available. You must configure the Intune agent to prompt for restart no more than one time during normal business hours. System restarts to complete update installations must occur outside of normal business hours.
Problem Statements
Sales and Engineering teams
Sales and Engineering department users report that it is difficult to share documents and collaborate on new projects. Blue Yonder Airlines has an urgent need to improve collaboration between the Sales department and Engineering department. Any collaboration solution must be highly available and accessible from the Internet.
Engineering department users report that Intune prompts them to restart their Windows 10 devices every 30 minutes when an update is available for installation. The prompts are disruptive to users.
Security issues
The Blue Yonder Airlines Security team has detected a vulnerability in Windows 10 devices. Microsoft has released a patch to address the vulnerability. The Security department has issued a service announcement. They request that you deploy the patch to all Windows 10 devices managed by Microsoft Intune.

NEW QUESTION 11
You need to import RemApp1 into the Azure RemoteApp Template Image Library. Which tool should you run first?

• A. Disk2VHD
• B. System Preparation Tool
• C. Application Compatibility Toolkit
• D. Azure Mobile Apps Software Development Kit installer.

Answer: B

NEW QUESTION 12
A Sales department user overwrites a version of a Word document on their device. You need to configure synchronization.
Which option should you use?

• A. the IdFix tool
• B. Azure Active Directory Connect
• C. Forefront Identity Manager 2010 R2
• D. the Azure Active Directory Synchronization tool
• E. the Directory Synchronization tool

Answer: B

NEW QUESTION 13
DRAG DROP
A company uses Office 365 for email and instant messaging. You deploy Azure Active Directory (AD) Connect and enable password synchronization. The company acquires Enterprise Mobility Suite licenses.
You must allow users to update their passwords online. You need to configure Azure AD Connect.
Which three actions should you perform in sequence? To answer, move the appropriate
actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 14
HOTSPOT
A Sales department user overwrites a version of a Word document on their device.
You need to monitor the company’s environment according to the technical requirements.
What should you do? To answer, select the appropriate option from each list in the answer area.

Answer:

Explanation:

NEW QUESTION 15
Your company runs Windows 10 Enterprise on all devices. You hire a new employee and provide a device for the employee.
All drives must be encrypted.
You need to determine whether volume C in the device is encrypted. At an elevated command prompt, which command should you run?

• A. mange-bde –setidentifier C:
• B. mange-bde –on C:
• C. mange-bde –unlock C:
• D. mange-bde –status C:

Answer: D

Explanation: References:
https://technet.microsoft.com/en-us/library/jj647767(v=ws.11).aspx#BKMK_managebde

NEW QUESTION 16
HOTSPOT
You administer Office 365 and Azure Active Directory (AD) for a car rental company. You also manage an on-premises Active Directory Domain Services (AD DS) domain. You implement Active Federation Services (AD FS).
You plan to implement Azure AD Connect Health.
You need to ensure that you can install and configure Azure AD Connect Health.
What should you do? To answer, select the appropriate option from each list in the answer area.

Answer:

Explanation: References:
https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnect-health-agent-install/#Requirements

NEW QUESTION 17
DRAG DROP
You manage 50 computers that run Windows 10 Enterprise. You have a Microsoft Azure RemoteApp deployment. The deployment consists of a hybrid collection named Collection1.
All computers have the Hyper-V feature installed and have a virtual machine that runs Windows 7.
You plan to install applications named App1 and App2 and make them available to all users. App1 is a 32-bit application. App2 is a 64-bit application.
You need to identify the installation method for each application. The solution needs to minimize the number of installations.
Which deployment method should you identify for each application? To answer, drag the appropriate deployment methods to the correct applications. Each deployment method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: Azure RemoteApp supports streaming 32-bit or 64-bit Windows-based applications. Therefore, we can minimize the number of installations by installing the applications on Azure and making them available as Azure RemoteApps. This would mean one installation for App1 and one installation for App2.

NEW QUESTION 18
You are a system administrator for a department that has Windows 10 Enterprise computers in a domain configuration.
You deploy an application to all computers in the domain.
You need to use group policy to restrict certain groups from running the application. What should you do?

• A. Set up DirectAccess.
• B. Configure AppLocker.
• C. Disable BitLocker.
• D. Run the User State Management Tool.

Answer: B

Explanation: AppLocker is a feature in Windows Server 2012, Windows Server 2008 R2, Windows 8, and Windows 7 that advances the functionality of the Software Restriction Policies feature. AppLocker contains new capabilities and extensions that reduce administrative overhead and help administrators control how users can access and use files, such as executable files, scripts, Windows Installer files, and DLLs.
AppLocker rules can be applied to security groups. We can use a group policy to apply AppLocker rules to the security groups to prevent them from running the application.