70-697

70-697 practice questions, page 14 of 15, with answer review and explanations.

Question 66

You administer Windows 10 Enterprise laptop and desktop computers. Your company uses Active Directory Domain Services (AD DS) and Active Directory Certificate Services (AD CS). Your company decides that access to the company network for all users must be controlled by two-factor authentication. You need to configure the computers to meet this requirement. What should you do?

  1. Install smart card readers on all computers. Issue smart cards to all users.
  2. Enable the Password must meet complexity requirements policy setting. Instruct users to logon by typing their user principal name (UPN) and their strong password.
  3. Create an Internet Protocol security (IPsec) policy on each Windows 10 Enterprise computer to encrypt traffic to and from the domain controller.
  4. Issue photo identification to all users. Instruct all users to create and use a picture password.

Question 67

Your network contains an Active Directory domain and 100 Windows 10 client computers. All software is deployed by using Microsoft Application Virtualization (App-V) 5.0. Users are NOT configured as local administrators. Your company purchases a subscription to Microsoft Office 365 that includes Office 365 ProPlus. You need to create an App-V package for Office 365 ProPlus. What should you do?

  1. Run the Office Customization Tool (OCT), run the App-V Sequencer and then run Setup /Packager.
  2. Download the Office Deployment Tool for Click-to-Run, run the App-V Sequencer and then run Setup /Admin.
  3. Download the Office Deployment Tool for Click-to-Run, run Setup /Download and then run Setup /Packager.
  4. Run the Office Customization Tool (OCT), run Setup /Download and then run the App-V Sequencer.

Question 68

You administer computers that run Windows 8 Enterprise and are members of an Active Directory domain. Some volumes on the computers are encrypted with BitLocker. The BitLocker recovery passwords are stored in Active Directory. A user forgets the BitLocker password to local drive E: and is unable to access the protected volume. You need to provide a BitLocker recovery key to unlock the protected volume. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  1. Ask the user to run the manage-bde-protectors-disable e: command.
  2. Ask the user for his or her logon name.
  3. Ask the user to run the manage-bde-unlock E:-pw command.
  4. Ask the user for his or her computer name.
  5. Ask the user for a recovery key ID for the protected drive.

Question 69

You are a systems administrator for your company. The company has employees who work remotely by using a virtual private network (VPN) connection from their computers, which run Windows 8 Pro. These employees use an application to access the company intranet database servers. The company recently decided to distribute the latest version of the application through using a public cloud. Some users report that every time they try to download the application by using Internet Explorer, they receive a warning message that indicates the application could harm their computer. You need to recommend a solution that prevents this warning message from appearing, without compromising the security protection of the computers. What should you do?

  1. Publish the application through a public file transfer protocol (FTP) site.
  2. Publish the application through an intranet web site.
  3. Instruct employees to disable the SmartScreen Filter from within the Internet Explorer settings.
  4. Publish the application to Windows Store.

Question 70

You administer computers that run Windows 8 Enterprise in an Active Directory domain in a single Active Directory Site. All user account objects in Active Directory have the Manager attribute populated. The company has purchased a subscription to Windows Intune. The domain security groups are synchronized with the Microsoft Online directory. You create a Windows Intune group that specifies a manager as a membership criterion. You notice that the group has no members. You need to ensure that users that meet the membership criteria are added to the Windows Intune group. What should you do?

  1. Force Active Directory replication within the domain.
  2. Ensure that all user accounts are identified as synchronized users.
  3. Ensure that the user who is performing the search has been synchronized with the Microsoft Online directory.
  4. Synchronize the Active Directory Domain Service (AD DS) with the Microsoft Online directory.