NEW QUESTION 1
A company has Windows 10 Enterprise client computers. Client computers are connected to a corporate private network. You deploy a Remote Desktop Gateway, DirectAccess, and a VPN server at the corporate main office.
Users are currently unable to connect from their home computers to their work computers by using Remote Desktop
You need to ensure that users can remotely connect to their office computers by using Remote Desktop. Users must not be able to access any other corporate network resource from their home computers.
What should you do?

• A. Configure a Virtual Private Network connection.
• B. Configure the local resource settings of the Remote Desktop connection.
• C. Configure a DirectAccess connection.
• D. Configure the Remote Desktop Gateway IP address in the advanced Remote Desktop Connection settings on each client.

Answer: D

Explanation: The solution is to deploy Remote Desktop Gateway in the office. Remote users can then connect to their computers on the office network by using Remote Desktop client on their home computers configured with the IP address of the Remote DesktopGateway.
Remote Desktop Gateway (RD Gateway) is a role service that enables authorized remote users to connect to resources on an internal corporate or private network, from any Internet-connected device that can run the Remote Desktop Connection (RDC) client. The network resources can be Remote Desktop Session Host (RD Session Host) servers, RD Session Host servers running RemoteApp programs, or computers with Remote Desktop enabled.
RD Gateway uses the Remote Desktop Protocol (RDP) over HTTPS to establish a secure, encrypted connection between remote users on the Internet and the internal network resources on which their productivity applications run.
RD Gateway provides a comprehensive security configuration model that enables you to control access to specific internal network resources. RD Gateway provides a point-to-point RDP connection, rather than allowing remote users access to all internal network resources.

Topic 8, Manage apps

NEW QUESTION 2
You have 100 Windows computers that are managed by using Microsoft Intune.
You need to ensure that when a new critical update is released, the update is approved automatically and deployed to the computers within 24 hours of approval. What should you do from the Microsoft Intune administration portal?

• A. From the updates node, select Critical Updates, and then modify the Approval settings.
• B. From the Admin node, click Enrollment Rules, and then modify the device enrollment rules.
• C. From the Policy node, click Configuration Policies, and then create a new Windows policy.
• D. From the Policy node, click Compliance Policies, and then create a new compliance policy.

Answer: A

Explanation: References: https://docs.microsoft.com/en-us/intune/deploy-use/keep-windows-pcs-up-to-date-with-software-updates-in-microsoft-intune

NEW QUESTION 3
DRAG DROP
You are a desktop administrator for an organization.
Developers must be able to develop applications and process on their own machines without affecting a corporate desktop, and without needing virtual machines (VMs) created on server-based virtualization platforms. The developers need three different VMs configured for the development environment.
The requirements are as follows:
Dev1 VM must support a virtual floppy disk. Dev2 VM must boot from a virtual SCSI disk. Dev3 VM must boot from a virtual IDE disk.
You need to create the appropriate generation 1 or generation 2 VMs to support the requirements.
How should you configure the VMs? To answer, drag the appropriate VM generations to the correct VMs. Each VM generation may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 4
You provide IT support for a small business.
A member of the team needs the ability to use Remote Desktop and VPN to access a desktop computer from a laptop when traveling. This desktop computer is running Windows 10 Enterprise, while the laptop is running Windows 8.
You need to set up a secure Remote Desktop connection on the desktop computer. Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A. Make the user account a standard user.
• B. Allow remote connections.
• C. Require Network Level Authentication.
• D. Disable Remote Assistance connections.

Answer: BC

Explanation: References: https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/remotedesktop-allow-access

NEW QUESTION 5
You administer desktop computers in your company network.
You are developing User State Migration Tool (USMT) procedures.
You need to ensure that the files located in C:projects are included in the migration package.
What should you do?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: C

NEW QUESTION 6
You administer computers that run Windows 8 Enterprise in an Active Directory domain in a single Active Directory Site. All user account objects in Active Directory have the Manager attribute populated. The company has purchased a subscription to Windows Intune. The domain security groups are synchronized with the Microsoft Online directory.
You create a Windows Intune group that specifies a manager as a membership criterion. You notice that the group has no members.
You need to ensure that users that meet the membership criteria are added to the Windows Intune group. What should you do?

• A. Force Active Directory replication within the domain.
• B. Ensure that all user accounts are identified as synchronized users.
• C. Ensure that the user who is performing the search has been synchronized with the Microsoft Online directory.
• D. Synchronize the Active Directory Domain Service (AD DS) with the Microsoft Online directory.

Answer: B

Explanation: For users and security groups to appear in the Windows Intune administrator console, you must sign in to the Windows Intune account portal and do one of the following:
Manually add users or security groups, or both, to the account portal.
Use Active Directory synchronization to populate the account portal with synchronized users and security groups.
The Windows Intune cloud service enables you to centrally manage and secure PCs through a single web-based console so you can keep your computers, IT staff, and users operating at peak performance from virtually anywhere without compromising the essentials: cost, control, security, and compliance.
References: http://technet.microsoft.com/en-us/windows/intune.aspx http://technet.microsoft.com/library/hh441723.aspx

NEW QUESTION 7
DRAG DROP
You are a desktop support technician for your company. You support more than 100 Windows 8 and Windows 10 Enterprise desktop computers.
You are preparing an installation image of a Windows 10 Enterprise computer by using the Deployment and Imaging Tools Environment command prompt on your own computer. The image includes a customized instance of the Windows Recovery Environment (Windows RE).
You need to extract and mount the Windows RE image.
Which three actions should you perform in sequence? To answer, move the appropriate three actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 8
You manage a network that includes Windows 10 Enterprise computers. All of the computers on the network are members of an Active Directory domain.
The company recently proposed a new security policy that prevents users from synchronizing applications settings, browsing history, favorites, and passwords from the computers with their Microsoft accounts.
You need to enforce these security policy requirements on the computers. What should you do?

• A. On the Group Policy Object, configure the Accounts: Block Microsoft accounts Group Policy setting to Users can’t add Microsoft accounts.
• B. On the Group Policy Object, configure the Accounts: Block Microsoft accounts Group Policy setting to Users can’t add or log on with Microsoft accounts.
• C. From each computer, navigate to Change Sync Settings and set the Sync Your Settings options for Apps, Browser, and Passwords to Off.
• D. From each computer, navigate to Change Sync Settings and set the Sync Your Settings option to Off.

Answer: B

Explanation: The computers are members of a domain so the users should be using domain user accounts. We need to block the use of Microsoft accounts.
We could use the Users can’t add Microsoft accounts setting which would mean that users will not be able to create new Microsoft accounts on a computer, switch a local account to a Microsoft account, or connect a domain account to a Microsoft account.
Alternatively, we can also deny the ability to log on to a domain computer with a Microsoft account (and sync computer settings) by using the Users can’t add or log on with Microsoft accounts. This will ensure that the company policy is enforced.

NEW QUESTION 9
DRAG DROP
You are the system administrator for a company. You need to deploy Windows to Go for all users. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 10
You have a computer named Computer1 that runs Windows 10 Enterprise. You add a 1 TB hard drive and create a new volume that has the drive letter D.
You need to limit the amount of space that each user can consume on D: to 200 GB. Members of the Administrators group should have no limit.
Which three actions should you perform? Each correct answer presents part of the solution.

• A. Run fsutil quota violations D:.
• B. Enable the Deny disk space to users exceeding quota limit setting.
• C. Enable the Enable Quota Management setting.
• D. Set a default quota limit.
• E. Run convert D: /FS:NTFS.
• F. Add a quota entry.

Answer: BCD

Explanation: To limit the amount of space that each user can consume, you should enable the Enable Quota Management setting, and then enter the appropriate values in the Limit Disk Space To text box and the Set Warning Level To text box, and then select the Deny Disk Space To Users Exceeding Quota Limit check box to enforce identical quota limits for all users.

NEW QUESTION 11
You have a computer that runs Windows 10 and has BitLocker Drive Encryption (BitLocker) configured.
You need to change the BitLocker PIN for the drive. What should you run?

• A. the repair–bde.exe Windows script file
• B. the Enable–BitLocker cmdlet
• C. the bitsadmin.exe command
• D. the manage–bde.exe command

Answer: D

Explanation: https://technet.microsoft.com/en-us/library/dd875513(v=ws.10).aspx#BKMK_changepin

NEW QUESTION 12
A company has an Active Directory Domain Services (AD DS) domain with one physical domain controller. All client computers run Windows 10 Enterprise.
A client computer hosts a Windows 10 Enterprise virtual machine (VM) test environment. The VMs are connected to a private virtual switch that is configured as shown in the Virtual Switch Manager exhibit.

The VMs are unable to connect to the domain controller. You have the following
requirements:
Configure the test environment to allow VMs to communicate with the domain controller.
Ensure that the VMs can communicate with other VMs in the test environment when the domain controller is unavailable.
You need to meet the requirements. What should you do first?

• A. Create a new virtual switch with an Internal Network connection type.
• B. Change the connection type of the private virtual switch to Internal only.
• C. Create a new virtual switch with a Private Network connection type.
• D. Create a new virtual switch with an External Network connection type.

Answer: A

Explanation: http://john.bryntze.net/jbkb-v2/certification-exam-70-687-configuring-windows-8-part-
2- configure-hardware-and-applications-16/
Virtual switches/ Hyper-V VLAN - you can create 3 different types of virtual switches depending the needs of your virtual machines and one single machine can use multiple virtual NICs that is member of different Virtual Switches.
External - This virtual switch binds to the physical network adapter and create a new adapter you can see in Control PanelNetwork and InternetNetwork Connections so if a virtual machine needs contact outside the host machine this one is a must. Internal - This virtual switch can be used to connect all virtual machines and the host machine but cannot go outside that.
Private - This virtual switch can only be used by the virtual host Further information:
http://technet.microsoft.com/en-us/library/cc816585%28v=ws.10%29.aspx http://technet.microsoft.com/en-us/library/cc816585(v=ws.10).aspx

Configuring Virtual Networks Private will not allow communication with the host machine. External will allow communication with the host machine but also allow access to other machines on the host machine's network which is not a requirement.

NEW QUESTION 13
You support Windows 10 Enterprise tablets. The tablets have the Application Virtualization (App-V) client installed.
Company policy requires that all published App-V applications be available to users only when they are connected to the company network.
You need to configure the tablets so that the company policy requirements are enforced.
What should you do?

• A. Configure mandatory profiles for tablet users.
• B. Reset the App-V client FileSystem cache on the tablets.
• C. Disable the Disconnected operation mode on the tablets.
• D. Change user permissions to the App-V applications.

Answer: C

NEW QUESTION 14
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are the system administrator for a sales company. You manage the Microsoft Office 365 environment for your company. You are investigating the requirements for Office 365 data loss prevention (DLP). All users have an Enterprise E5 license.
You must ensure that all users are prevented from storing social security numbers in Office 365.
You need to implement a DLP policy that meets the requirement.
Solution: Create a DLP policy with Microsoft Exchange Online as a content source location.
Does the solution meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 15
You have a server that runs Windows Server 2012 R2 server named Server1. Server1 has Remote Desktop Services (RDS) installed. You create a session collection named Session1 and publish a RemoteApp in Session1.
Server1 has an application named App1. The executable for App1 is C:AppsApp1.exe. You need to ensure that App1 is available as a RemoteApp in Session1.
What command should you run? To answer, select the appropriate options in the answer area.

Answer:

Explanation: We need to publish App1 as a RemoteApp. We do this with the New–RDRemoteApp cmdlet.
The –CollectionName parameter allows us to specify the session as “Session1”. The display name for the App1 will be “App1”.
The –FilePath parameter allows us to specify the path to the executable for App1.

NEW QUESTION 16
HOTSPOT
You have a computer named Computer1 that runs Windows 10 Enterprise. You plan to implement File History on Computer1.
You need to identify the interface that can be used to perform File History management actions.
Which interface should you identify for each action? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

NEW QUESTION 17
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
You have an application named App1 installed on a computer named Computer1. Computer1 runs Windows 10. App1 saves data to %UserProfile%App1Data.
You need to ensure that you can recover the App1 data if Computer1 fails. What should you configure?

• A. share permissions
• B. application control policies
• C. Encrypting File System (EFS) settings
• D. NTFS permissions
• E. HomeGroup settings
• F. Microsoft OneDrive
• G. software restriction policies
• H. account policies

Answer: F