Microsoft 70-398 Dumps Questions 2021

NEW QUESTION 1
HOTSPOT
A Sales department user overwrites a version of a Word document on their device. You need to implement the required Group Policy settings.
How should you configure the Group Policy Objects (GPOs)? To answer, select the appropriate option from each list in the answer area.

Answer:

Explanation:

NEW QUESTION 2
DRAG DROP
A company uses Office 365 for email and instant messaging. You deploy Azure Active Directory (AD) Connect and enable password synchronization. The company acquires Enterprise Mobility Suite licenses.
You must allow users to update their passwords online. You need to configure Azure AD Connect.
Which three actions should you perform in sequence? To answer, move the appropriate
actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 3
HOTSPOT
A company has a Remote Desktop (RD) Services farm. The farm has six servers that run Windows Server 2008, five RD Session Host servers, and one RD Connection Broker server. User RD profiles are redirected to a hidden folder named PROFILES on a file server named FILTER01.
You must provide a deployment plan for migrating the RD farm to Windows Server 2012 R2. The new farm must use the same file server share to redirect user RD profiles. Users must be able to log on to any server and have the same experience.
You need to configure RD Services.
What should you do? To answer, select the appropriate action from each list in the answer area.

Answer:

Explanation: References:
http://woshub.com/user-profile-disks-in-windows-server-2012-r2-rds/

NEW QUESTION 4
DRAG DROP
You receive the following error message when you attempt to open a Remote Desktop Protocol (RDP) file to make a connection: “The remote session was disconnected because there are no Remote Desktop License Servers available to provide a license. Please contact the server administrator.”
You need to use the RDP file to sign into the virtual machine as administrator and then fix the issue.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 5
A company uses Office 365. The company has an on-premises Active Directory Domain Services (AD DS) domain and Azure Active Directory Connect. The company runs an on- premises installation of System Center Configuration Manager. All devices are joined to the domain. All users have AD DS accounts and use their AD DS credentials to access the Office 365 resources.
You plan to use Cloud App Discovery. You need to deploy a solution.
Which three will achieve the goal? Each correct answer presents a complete solution.

• A. Install the agent by using System Center Operations Manager.
• B. Install the agent by using SystemCenter Configuration Manager.
• C. Install the agent by using Group Policy.
• D. Install the agent manually.
• E. Install the agent by using the Office 365 portal.

Answer: BCD

NEW QUESTION 6
A company has a policy that all data stored on a corporate mobile device must be encrypted.
You need a management solution that enforces the policy.
Which two management solutions should you use? Each correct answer presents part of the solution.

• A. Windows Server 2012 R2 Active Directory Certificate Services Server role.
• B. Microsoft Exchange ActiveSync.
• C. System Center 2012 R2 Configuration Manager.
• D. Microsoft Operations Management Suite.
• E. Microsoft Intune Mobile Device Management.

Answer: BE

NEW QUESTION 7
DRAG DROP
Your organization is deploying new Windows 10 devices. You create a new organizational unit that contains all Windows 10 devices.
You are preparing a new security policy for Windows 10 devices. Your organization requires audits on the use of removable storage devices on personal devices.
You need to enable audits of removable storage.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 8
The company apps need to be made available to all mobile devices. You recently
published the new applications in Azure. What should you do?

• A. In the Microsoft Azure admin portal, add users to the app collection for the apps.
• B. In the MicrosoftAzure admin portal, enable multi-factor authentication.
• C. Instruct users to download the Remote Desktop app from the appropriate vendor app store.
• D. Run the following Windows PowerShell cmdlet:Update-AzureRemoteAppCollection

Answer: D

NEW QUESTION 9
A Sales department user overwrites a version of a Word document on their device.
You need to view the events that you monitored for Marketing users. Which log file should you view?

• A. StatusAgent Log
• B. System Event Log
• C. Security Event Log
• D. PolicyAgent Log
• E. Application Event Log

Answer: C

Explanation: References:
https://docs.microsoft.com/en-us/windows/device-security/auditing/view-the-security-event- log

NEW QUESTION 10
A company has an Office 365 E3 subscription. You deploy Enterprise Mobility + Security, Active Directory Federation Services (AD FS), and Microsoft Identity Manager.
You need to implement additional security when users remotely connect to corporate resources.
What should you implement?

• A. System Center Configuration Manager
• B. Microsoft Intune
• C. Azure Rights Management Service
• D. Azure Multi-Factor Authentication

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/intune/common-scenarios

NEW QUESTION 11
You are a system administrator for a department that has Windows 10 Enterprise computers in a domain configuration.
You deploy an application to all computers in the domain.
You need to use group policy to restrict certain groups from running the application. What should you do?

• A. Set up DirectAccess.
• B. Configure AppLocker.
• C. Disable BitLocker.
• D. Run the User State Management Tool.

Answer: B

Explanation: AppLocker is a feature in Windows Server 2012, Windows Server 2008 R2, Windows 8, and Windows 7 that advances the functionality of the Software Restriction Policies feature. AppLocker contains new capabilities and extensions that reduce administrative overhead and help administrators control how users can access and use files, such as executable files, scripts, Windows Installer files, and DLLs.
AppLocker rules can be applied to security groups. We can use a group policy to apply AppLocker rules to the security groups to prevent them from running the application.

NEW QUESTION 12
HOTSPOT
You administer Windows 10 Enterprise computers in your company network, including a computer named Wst1. Wst1 is configured with multiple shared printer queues.
Wst1 indicates hardware errors. You decide to migrate the printer queues from Wst1 to a new computer named Client1.
You export the printers on Wst1 to a file. You need to import printers from the file to Client1.
From the Print Management console, which Print Management node should you select? To answer, select the appropriate node in the answer area.

Answer:

Explanation: We have exported the printers on Wst1 to a file. To import printers from the file to Client1, we use the Printer Migration Wizard.
Right-click Print Management, and then click Migrate Printers to open the Printer Migration Wizard. Select Import printer queues and printer drivers from a file, and select the export file. Then complete the wizard.
References: http://blogs.technet.com/b/canitpro/archive/2013/06/17/step-by-step-install-use-and-remove-windows-server-migration-tools.aspx

NEW QUESTION 13
A Sales department user overwrites a version of a Word document on their device. You need to configure access for the contractors.
Which two actions should you perform? Each correct answer presents part of the solution.

• A. Store the BitLocker recovery keys in the contoso.com domain.
• B. Create a Microsoft account for each contractor.
• C. Store the BitLocker recovery keys inOneDrive.
• D. Join the contractors’ devices to the contoso.com Active Directory Domain Services (AD DS) domain.
• E. Create Active Directory Domain Services (AD DS) domain user accounts for each contractor.

Answer: BC

NEW QUESTION 14
HOTSPOT
You have a server that runs Windows Server 2012 R2 server named Server1. Server1 has Remote Desktop Services (RDS) installed. You create a session collection named Session1 and publish a RemoteApp in Session1.
Server1 has an application named App1. The executable for App1 is C:AppsApp1.exe.
You need to ensure that App1 is available as a RemoteApp in Session1.
What command should you run? To answer, select the appropriate options in the answer area.

Answer:

Explanation: We need to publish App1 as a RemoteApp. We do this with the New–RDRemoteApp cmdlet.
The –CollectionName parameter allows us to specify the session as “Session1”. The display name for the App1 will be “App1”.
The –FilePath parameter allows us to specify the path to the executable for App1.

NEW QUESTION 15
A company plans to actively manage mobile devices.
You need to create a list of all jailbroken devices after they are enrolled. What should you use?

• A. Azure Active Directory
• B. System Center 2012 R2 Configuration Manager SP1
• C. Intune
• D. Azure Active Directory Domain Services
• E. Azure Active Directory Device Registration Service

Answer: B

NEW QUESTION 16
HOTSPOT
A company has an Office 365 subscription. The company upgrades all devices to Windows
10. You configure all devices to synchronize folders with the user’s OneDrive for Business account.
A user presses the Shift and Delete keys to delete a file located in a synchronized folder on a local device. The user needs to immediately recover the file.
The user attempts to recover the file. For each recovery location, what is the outcome of the file recovery operation? To answer, select the appropriate option from each list in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://www.groovypost.com/howto/restore-deleted-files-local-onedrive-folder/

NEW QUESTION 17
HOTSPOT
A company runs Windows 10 Enterprise on all devices and has a single Active Directory Domain Services (AD DS) domain. The company uses Microsoft Intune to manage Windows Phones and iOS devices.
Security updates must be installed as quickly as possible. The update management solution must be able to automatically uninstall updates. You must not deploy any additional development or custom tools.
You need to implement a solution.
In the table below, identify the feature that each solution supports.
NOTE: Make only one selection in each column. Each correct answer is worth one point.

Answer:

Explanation: