70-697 practice questions, page 3 of 15, with answer review and explanations.
Question 11
You are the desktop administrator for a small company. Your workgroup environment consists of Windows 10 Enterprise computers. You want to prevent 10 help desk computers from sleeping. However, you want the screens to shut off after a certain period of time if the computers are not being used. You need to configure and apply a standard power configuration scheme for the 10 help desk computers on your network. Which two actions should you perform? Each correct answer presents part of the solution.
Import the power scheme by using POWERCFG /IMPORT on each of the remaining help desk computers. Set the power scheme to Active by using POWERCFG /S.
Use POWERCFG /X on one help desk computer to modify the power scheme to meet the requirements. Export the power scheme by using POWERCFG / EXPORT.
Use POWERCFG /S on one help desk computer to modify the power scheme to meet the requirements. Export the power scheme by using POWERCFG / EXPORT.
Import the power scheme by using POWERCFG /IMPORT on each of the remaining help desk computers. Set the power scheme to Active by using POWERCFG /X.
Question 12
A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 10 Enterprise. Some computers have a Trusted Platform Module (TPM) chip. You need to configure a single Group Policy object (GPO) that will allow Windows BitLocker Drive Encryption on all client computers. Which two actions should you perform? Each correct answer presents part of the solution.
Enable the Require additional authentication at startup policy setting.
Enable the Enforce drive encryption type on operating system drives policy setting.
Enable the option to allow BitLocker without a compatible TPM.
Configure the TPM validation profile to enable Platform Configuration Register indices (PCRs) 0, 2, 4, and 11.
Question 13
Employees are permitted to bring personally owned portable Windows 10 Enterprise computers to the office. They are permitted to install corporate applications by using the management infrastructure agent and access corporate email by using the Mail app. An employees personally owned portable computer is stolen. You need to protect the corporate applications and email messages on the computer. Which two actions should you perform? Each correct answer presents part of the solution.
Prevent the computer from connecting to the corporate wireless network.
Change the user’s password.
Disconnect the computer from the management infrastructure.
Initiate a remote wipe.
Question 14
You are an IT consultant for small and mid-sized business. One of your clients wants to start using Virtual Smart Cards on its Windows 10 Enterprise laptops and tablets. Before implementing any changes, the client wants to ensure that the laptops and tablets support Virtual Smart Cards. You need to verify that the client laptops and tablets support Virtual Smart Cards. What should you do?
Ensure that each laptop and tablet has a Trusted Platform Module (TPM) chip of version 1.2 or greater.
Ensure that BitLocker Drive Encryption is enabled on a system drive of the laptops and tablets.
Ensure that each laptop and tablet can read a physical smart card.
Ensure that the laptops and tablets are running Windows 10 Enterprise edition.
Question 15
Your network contains an Active Directory domain named contoso.com. Contoso.com is synchronized to a Microsoft Azure Active Directory. You have a Microsoft Intune subscription. Your company plans to implement a Bring Your Own Device (BYOD) policy. You will provide users with access to corporate data from their personal iOS devices. You need to ensure that you can manage the personal iOS devices. What should you do first?
Install the Company Portal app from the Apple App Store.
Create a device enrollment manager account.
Set a DNS alias for the enrollment server address.
Configure the Intune Service to Service Connector for Hosted Exchange.
Enroll for an Apple Push Notification (APN) certificate.