Verified 70-398 Exam Questions and Answers 2021

NEW QUESTION 1
DRAG DROP
You manage 500 laptop devices and 250 desktop devices that run Windows 10. All devices are joined to an Active Directory Domain Services (AD DS) domain. You also manage a Windows Server 2012 R2 file server named FILE01.
All user document folders must be located on FILE01.
You need to ensure that the mobile users can access documents offline.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 2
You have a computer named Computer1 that runs Windows 10 Enterprise. Computer1 is a member of an Active Directory domain named contoso.com.
You have a line-of-business universal app named App1. App1 is developed internally. You need to ensure that you can run App1 on Computer1. The solution must meet the
following requirements:
Minimize costs to deploy the app.
Minimize the attack surface on Computer1. What should you do?

• A. Have App1 certified by the Windows Store.
• B. Sign App1 with a certificate issued by a third-party certificate authority.
• C. From the Update & Security setting on Computer1, enable the Sideload apps setting.
• D. Run the Add–AppxProvisionedPackage cmdlet.

Answer: C

Explanation: To install the application, you need to ‘Sideload’ it. First you need to enable the Sideload apps setting.
LOBW indows Store apps that are not signed by the Windows Store can be sideloaded or added to a PC in the enterprise through scripts at runtime on a per-user basis. They can also be provisioned in an image by the enterprise so that the app is registered to each new user profile that's created on the PC. The requirements to sideload the app per-user or in the image are the same, but the Windows PowerShell cmdlets you use to add, get, and remove the apps are different.
Before you can sideload LOB Windows Store apps that are not signed by the Windows Store, you will need to configure the PC.

NEW QUESTION 3
DRAG DROP
You need to configure the mobile devices for the Engineering department users.
In the Microsoft Intune administration portal, which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/intune/deploy-use/configure-intune-certificate-profiles

NEW QUESTION 4
You need to create the policy for the Tokyo branch office. What should you use?

• A. Azure Active Directory Device Registration Service
• B. System Center 2012 R2 Configuration Manager SP1
• C. Intune
• D. Azure Active Directory
• E. Azure Active Directory Domain Services

Answer: C

Explanation: References:
https://docs.microsoft.com/en-us/intune/deploy-use/introduction-to-device-compliance-policies-in-microsoft-intune

NEW QUESTION 5
You need to import RemApp1 into the Azure RemoteApp Template Image Library. Which tool should you run first?

• A. Disk2VHD
• B. System Preparation Tool
• C. Application Compatibility Toolkit
• D. Azure Mobile Apps Software Development Kit installer.

Answer: B

NEW QUESTION 6
HOTSPOT
A Sales department user overwrites a version of a Word document on their device.
You need to monitor the company’s environment according to the technical requirements.
What should you do? To answer, select the appropriate option from each list in the answer area.

Answer:

Explanation:

NEW QUESTION 7
A company deploys Office 365 in a federated identity model. The environment has two Active Directory Domain Services (AD DS) servers and two Web Application Proxy servers that are not joined to the domain.
All externally published applications that use Windows Authentication and are hosted on- premises must use Active Directory Federation Services (AD FS) to log on.
You need deploy pre-authentication on the Web Application Proxy (WAP) servers. What should you do first?

• A. Enable Kerberos constrained delegation.
• B. Join the WAP servers to the AD DS domain.
• C. Remove and reinstall the AD FS role.
• D. Remove and reinstall the WAP role.

Answer: B

NEW QUESTION 8
You are a network administrator for a company that has an Office 365 E3 subscription. You purchase Enterprise Mobility Suite licenses. You implement synchronization by using a federated identity model.
Passwords for Sales team users often expire while they are travelling. When this happens, the users are not able to log on to the virtual private network (VPN) to perform their duties. Users must be able to reset their own passwords.
You need to enable password write-back. Which application should you configure?

• A. Web Application Proxy
• B. Active Directory Federation Services (AD FS)
• C. Microsoft Online Services Sign-in Assistant
• D. Directory Synchronization (DirSync)
• E. Azure Active Directory Connect

Answer: E

NEW QUESTION 9
A company has tablet devices that run Windows 10. You configure auditing for devices. You need to determine which audit policies are configured on the devices.
What should you do?

• A. At a command prompt, run the following command:auditpol
• B. Run the following Windows PowerShell cmdlet:Get-AdminAuditLogConfig
• C. At a command prompt, run the following command:Dsget
• D. At a command prompt, run the following command:Winrm
• E. Run the following Windows PowerShell cmdlet:Get-AuditLogSearch

Answer: A

NEW QUESTION 10
HOTSPOT
You need to configure access to the custom inventory app for Sales department users.
Which action should you perform to complete each task? To answer, select the appropriate action for each task in the answer area.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/intune/deploy-use/create-and-deploy-mobile-app-management-policies-with-microsoft-intune

NEW QUESTION 11
A company implements offline files for all Windows 10 devices. A user reports that they are running low on free disk space.
You need to determine the amount of disk space being used by offline files on the user’s device.
What should you do?

• A. On the device, run the following Windows PowerShell command:Get-Disk | Where- Object IsOffline- Eq $True | Set-Disk-IsOffline $False
• B. Instruct the user to launch Resource Manager.
• C. On the device, run the following Windows PowerShell command:Get-Disk | Where- Object IsOffline- Eq $False | Set-Disk-IsOffline $True
• D. Instruct the user to launch Sync Center.

Answer: D

NEW QUESTION 12
DRAG DROP
Your organization needs to implement a Dynamic Access Control (DAC) plan that includes user and device claims.
The domain controllers have not been enabled to provide claims and compound authentication.
You need to configure the Default Domain Controller’s Group Policy Object to provide claims and compound authentication.
You decide to first enable the domain controllers to provide claims and compound authentication on request.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 13
HOTSPOT
A Sales department user overwrites a version of a Word document on their device. You need to implement the password requirements for the Office 365 portal.
Which three actions should you perform? To answer, select the appropriate option from each list in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://technet.microsoft.com/en-us/library/office-365-user-account-management.aspx

NEW QUESTION 14
HOTSPOT
A bank deploys Active Directory Rights Management Services (AD RMS). The bank plans to migrate to Azure Rights Management Services (Azure RMS) as an alternative to the on- premises based AD RMS.
The bank must follow regulatory policies that restrict access to certain financial documents. In the table below, identify which function each platform supports.
NOTE: Make only selection in each column. Each correct selection is worth one point.

Answer:

Explanation: References:
https://expertslab.wordpress.com/2015/09/30/comparison-between-ad-rms-azure-rms/

Topic 2, ProseWare Inc.
Background
ProseWare, Inc.is a software company that specializes in developing smartphone apps that work on multiple platforms. The main office for the company is located in Atlanta. The company has branch offices in Tokyo and Paris.
The company recently published a new game. The game has sold over 10 million copies in the first year. In the same period, 25 million copies of the free version of the game were downloaded. ProseWare also developed a user productivity app named MyNotesPro.
Employees
Due to the massive demand for the game and for potential new versions and features, ProseWare plans to increase their staff from 100 to 1,000 employees. The employees will be evenly distributed between the three locations. Each employee will have a tablet device that runs Windows 10.
ProseWare plans to connect all offices together by using high-speed internet links. Each employee will be issued a smartphone that runs Apple iOS, Android, or Windows 10. The quality assurance (QA) department includes 50 employees. Each QA department employee will be issued three smartphone devices, one device for each of the operating
systems. ProseWare uses Microsoft Intune to manage devices. The company has joined the Apple Device Enrollment program.
Current environment
You create a virtual machine (VM) named RemApp1 in Microsoft Azure by using the Windows Server Remote Desktop Session Host gallery image. Users in the Training department connect to the VM and run several training apps.
You have a file server named FILER01 that runs Windows Server 2012 R2.
In Azure, you create a virtual network and a DNS record. You implement directory synchronization between the on-premises domain and Azure.
You have purchased Remote Desktop Services Client Access Licenses.
Business Requirements
All employees will be given access to a suite of ProseWare premium apps that includes MyNotesPro. You must provide access to the apps by using Azure RemoteApp.
The Atlanta corporate headquarters performs training on a weekly basis for all Tokyo and Paris employees. The training is conducted by using Microsoft Skype for Business on Windows 10 Enterprise devices. You configure the devices to display content in the respective language for the location. Some of the trainers in Atlanta speak Japanese or French.
The Chief Technology Officer requires the following reports:

Technical Requirements
Employees must be able to download and install the appropriate RemoteApp client for their specific mobile device. The procedure for installing RemoteApp clients differs for each mobile operating system. All users must have access to the Azure RemoteApp infrastructure on their mobile devices in order to access the ProseWare premium apps.
All apps must be centrally managed and updated. You must ensure that the apps are available to all employees. Employees must install all apps from a common source location. The ProseWare apps must only be installed on employee devices.
You must import RemApp1 into the Azure RemoteApp Template Image Library. RemApp1 will host the Proseware premium apps.
Some of the apps must be able to access data kept in the on-premises servers at the Atlanta office.
You must design a Work Folders solution on a FILER01. You have the following requirements:
*You must encrypt all data that is synchronized.
*You must synchronize settings every 60 minutes.
*You must restrict the size of each file that is synchronized to 5 gigabytes.

NEW QUESTION 15
HOTSPOT
A Sales department user overwrites a version of a Word document on their device. You need to plan the backup and recovery options for the devices in the environment.
Which recovery options should you implement? To answer, select the appropriate option from each list in the answer area.

Answer:

Explanation:

NEW QUESTION 16
DRAG DROP
You need to test the ProseWare MyNotesPro app.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

Topic 3, Blue Yonder Airline
Overview Background
Blue Yonder Airlines provides regional commercial jet services in the continental United States. The company also designs, manufactures, and sells custom parts for jet aircraft. The custom parts business is growing rapidly. Blue Yonder airlines has developed a new part that will help airlines comply with new safety regulations. The company has a backlog of customers that would like to purchase the part.
The Sales department has 500 users and the Engineering department has 200 users. All employees work eight hour shifts. The Sales and Engineering teams cannot effectively collaborate on projects. This has resulted in missed deadlines for releasing new products to manufacturing.
Mobile device management
Blue Yonder Airlines has a subscription to Microsoft Intune for Mobile Device Management (MDM). The subscription includes the MDM Authority and Terms and Conditions components. The company has deployed the Network Device Enrollment service, Enterprise Certification Authority, and the Intune Certificate Connector. Blue Yonder Airlines has an on-premises Microsoft Exchange environment.
The company will use a combination of Intune and Azure RemoteApp for Mobile Application Management.
Mobile devices for employees
Blue Yonder Airlines plans to deploy mobile devices to the Sales and Engineering department employees for use while they are outside of the company network. The company plans to deploy the latest iOS devices for Sales department users and Windows 10 tablet devices for Engineering department users.
You configure a Sales group for Sales department users and an Engineering group for Engineering department users. In Intune, you configure a computer device group for Windows 10 devices, and a mobile device group for iOS devices. You synchronize the Sales and Engineering groups with Azure Active Directory (AD).
Network resources
You have a network file share that is used by Engineering department users to collaborate on projects. The file share is configured with full control permissions. The company is concerned that users may be disrupted if they are suddenly denied access to the file share.
Applications
Inventory Management App
Blue Yonder Airlines has developed a custom inventory management app. Sales department users must be able to access the app from enrolled mobile devices. The data that the app uses is considered confidential and must be encrypted.
New product Sales App
You procure a third-party app from a vendor to support new product sales. The data that the app uses is highly confidential. You must restrict access to the app and the app’s data to only Engineering department users. The app has been signed by using a Blue Airlines certificate. This certificate is not trusted by devices that run Windows 10.
Product Request Program App
The company has developed the Product Request Program app as a 32-bit Windows application. The application allows the company to manage the sales fulfillment process. It is also used to record customer requests for new parts and services. You plan to publish the Product Request Program app in Azure RemoteApp and configure access for users in the Engineering and Sales departments. This app is not compatible with the iOS platform and cannot by published by using Intune. You create a virtual machine in Azure that runs Windows Server 2012 R2. You install the Product Request Program app on the virtual machine.
Business Requirements
You must ensure that the Sales and Engineering teams can share documents and collaborate effectively. Any collaboration solution must be highly available and must be accessible from the internet. You must restrict access to any shared files to prevent access.
You must restrict permissions to the Engineering file share. You must monitor access to the file share.
You must provide users in the Sales and Engineering departments access to the following resources:
*Corporate email
*File Shares hosted in Microsoft SharePoint Online
*The Product Request Program app
Technical Requirements
You have the following technical requirements:
*Allow all Sales department users to enroll iOS devices for device management andenable encrypted notifications to the devices.
*Employees must be able to access company resources without having to manually install certificates or using an out-of-band process.
*Employees must only access corporate resources from devices that comply withthe company’s security policies.
Mobile device protection policies
*All devices must include a trusted build and must comply with Blue Yonder Airlines password complexity rules.
*You must clear all corporate data from a mobile device when the number of repeated log on failures is more than 10.
*All devices must be protected from data loss in the event that a device is lost or damaged.
*Data that is considered confidential must be encrypted on devices.
Additional technical requirements for Engineering department users and devices
*Users must not be challenged for credentials after they initially enroll a device in Intune.
*Users must be able to access corporate email on enrolled Windows 10 devices.
*Devices must be automatically updated when an update is available. You must configure the Intune agent to prompt for restart no more than one time during normal business hours. System restarts to complete update installations must occur outside of normal business hours.
Problem Statements
Sales and Engineering teams
Sales and Engineering department users report that it is difficult to share documents and collaborate on new projects. Blue Yonder Airlines has an urgent need to improve collaboration between the Sales department and Engineering department. Any collaboration solution must be highly available and accessible from the Internet.
Engineering department users report that Intune prompts them to restart their Windows 10 devices every 30 minutes when an update is available for installation. The prompts are disruptive to users.
Security issues
The Blue Yonder Airlines Security team has detected a vulnerability in Windows 10 devices. Microsoft has released a patch to address the vulnerability. The Security department has issued a service announcement. They request that you deploy the patch to all Windows 10 devices managed by Microsoft Intune.

NEW QUESTION 17
A Sales department user overwrites a version of a Word document on their device. You need to configure synchronization.
Which option should you use?

• A. the IdFix tool
• B. Azure Active Directory Connect
• C. Forefront Identity Manager 2010 R2
• D. the Azure Active Directory Synchronization tool
• E. the Directory Synchronization tool

Answer: B