Microsoft 70-697 Exam Questions and Answers 2021

NEW QUESTION 1
You have a computer that runs Windows 10 and has BitLocker Drive Encryption (BitLocker) configured.
You need to change the BitLocker PIN for the drive. What should you run?

• A. the repair–bde.exe Windows script file
• B. the Enable–BitLocker cmdlet
• C. the bitsadmin.exe command
• D. the manage–bde.exe command

Answer: D

Explanation: https://technet.microsoft.com/en-us/library/dd875513(v=ws.10).aspx#BKMK_changepin

NEW QUESTION 2
HOTSPOT
You are a consultant at a small company. The company’s employees use Windows 10 Enterprise computers.
An employee wants to share his printer with only selected users. You need to enable the correct settings.
Which two tab settings should you modify? To answer, select the appropriate tab settings in the answer area.

Answer:

Explanation:

NEW QUESTION 3
You manage a branch office of a company named Contoso.
The branch office contains 20 computers that run Windows 10 Enterprise.
The main office of Contoso hosts a Win Server Update Service server. (WSUS). Branch office computers are configured to download updates from the Internet.
You need to prevent computers in the branch office from sharing updates with other computers.
What should you do?

• A. Modify the branch cache hosted mode settings
• B. Modify branch cache distributed cache mode settings
• C. Modify the Chose how updates are delivered settings
• D. Deploy a downstream WSUS server to the branch office

Answer: C

Explanation: References: https://www.howtogeek.com/223068/what-you-need-to-know-about-windows-update-on-windows-10/

NEW QUESTION 4
You are the system administrator for a company. All devices run Windows 10 and use a variety of Microsoft Store for Business apps. All user reports issues updating a Windows Store app. You need to troubleshoot the issue.
Winch three actions should you perform? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

• A. Run the SFC command.
• B. Run the repair-bde command.
• C. Run the net start wuauserv command.
• D. Run the Windows App Troubleshooter.
• E. Use the Programs and Features Control Panel applet to repair the application.

Answer: ADE

NEW QUESTION 5
A company has Windows 10 Enterprise client computers. All user data is stored locally. Each data file has a system access control list (SACL).
You need to ensure that an event is generated when a user modifies a local file. Which audit policy setting should you configure?

• A. Audit process tracking
• B. Audit object access
• C. Audit policy change
• D. Audit privilege use

Answer: B

NEW QUESTION 6
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are the system administrator for a sales company. You manage the Microsoft Office 365 environment for your company. You are investigating the requirements for Office 365 data loss prevention (DLP). All users have an Enterprise E5 license.
You must ensure that all users are prevented from storing social security numbers in Office 365.
You need to implement a DLP policy that meets the requirement.
Solution: Create a DLP policy with Microsoft Exchange Online as a content source location.
Does the solution meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 7
А company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 10 Enterprise. A client computer named COMPUTER1 has a shared printer named PRINTER1 installed and Remote Desktop enabled.
A user named Intern is a member of a security group named Sales. The Sales group is a member of the
Remote Desktop Users group on COMPUTER1. Only the Sales group has access to PRINTER1.
You need to configure COMPUTER1 to meet the following requirements:
Allow all members of the Sales group other than Intern to establish Remote Desktop connections to
COMPUTER1.
Allow Intern to print to PRINTER1. What should you do?

• A. Remove the Sales group from the Remote Desktop Users group.
• B. Assign Intern the Deny log on through Remote Desktop Services user right.
• C. Assign Intern the Deny access to this computer from the network user righ
• D. Assign the Sales group theAllow log on locally user right.
• E. Remove Intern from the Sales group.

Answer: D

NEW QUESTION 8
You manage Microsoft Intune for a company named Contoso. You have an administrative computer named Computer1 that runs Windows 10 Enterprise.
You need to add a Windows Store universal app named App1 to the Company Portal Apps list for all users. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: Log into your computer using a domain account.
Run the Microsoft Intune Software Publisher wizard app. Configure the deployment settings of the app.

NEW QUESTION 9
You have a computer named Computer1 that runs Windows 10 Enterprise. You add a 1 TB hard drive and create a new volume that has the drive letter D. You format the drive by using NTFS.
You need to limit the amount of space that each user can consume on D: to 200 GB. Members of the Administrators group should have no limit.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A. Set a default quota limit.
• B. Run convert D: /FS:NTFS.
• C. Run fsutil quota violations D:.
• D. Enable the Deny disk space to users exceeding quota limit setting.
• E. Add a quota entry.

Answer: ACD

Explanation: https://msdn.microsoft.com/en-us/library/dd163561.aspx https://technet.microsoft.com/en-us/library/cc788136(v=ws.11).aspx

NEW QUESTION 10
You have a Windows Server 2012 R2 server that runs Remote Desktop services. Users report that they cannot connect to RemoteApp programs. You observe that users do not know the proper
connection details to access the Remote Desktop Web Access server.
You need to simplify the process for connecting from Windows 10 devices to the Remote Desktop Web Access server.
What should you create?

• A. Connection Manager Administration Kit connection profile
• B. Remote Desktop Connection configuration file
• C. Windows Remote Management script
• D. client configuration file

Answer: A

Explanation: References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc753977(v=ws.10)

NEW QUESTION 11
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
You have a computer that runs Windows 10 and is used by 10 users. The computer is joined to an Active Directory domain. All of the users are members of the Administrators group. Each user has an Active Directory account.
You have a Microsoft Word document that contains confidential information. You need to ensure that you are the only user who can open the document. What should you configure?

• A. account policies
• B. application control policies
• C. HomeGroup settings
• D. software restriction policies
• E. NTFS permissions
• F. Microsoft OneDrive
• G. share permissions
• H. Encrypting File System (EFS) settings

Answer: H

NEW QUESTION 12
HOTSPOT
You run the Get–AppvClientConfiguration cmdlet and you receive the following output.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the output.

Answer:

Explanation:

NEW QUESTION 13
A company has 100 Windows 10 Enterprise client computers. The client computers are members of a workgroup.
A custom application requires a Windows Firewall exception on each client computer.
You need to configure the exception on the client computers without affecting existing firewall settings.
Which Windows PowerShell cmdlet should you run on each client computer?

• A. Set–NetFirewallRule
• B. New–NetFirewallRule
• C. New–NetIPSecMairModeRule
• D. Set–NetFirewallProfile
• E. Set–NetFirewallSetting

Answer: B

Explanation: References: https://technet.microsoft.com/en-us/library/jj554908.aspx

NEW QUESTION 14
You support Windows 10 Enterprise desktop computers that are members of an Active Directory domain. Standard domain user accounts are configured with mandatory user profiles.
Several users have been transferred to a different department. You need to allow the users to modify their profiles.
What should you do?

• A. Change the extension of the NTUSER file in the user profile directory to .dat
• B. Configure Folder Redirection by using Group Policy
• C. Configure the user’s document library to include folders from network shares
• D. Remove the .man extension from the user profile name

Answer: A

Explanation: References: https://msdn.microsoft.com/en- us/library/windows/desktop/bb776895(v=vs.85).aspx

NEW QUESTION 15
You have a laptop that is a member of a workgroup. The laptop does not have a Trusted Platform Module (TPM) chip.
You plan to enable BitLocker Drive Encryption (BitLocker) for the operating system drive.
What are two methods that you can use to unlock the drive when the laptop restarts? Each correct answer presents a complete solution.

• A. a password
• B. a Near Field Communication (NFC)-enabled portable device
• C. a USB drive
• D. a user account
• E. Network Unlock

Answer: C

Explanation: References: http://www.howtogeek.com/howto/6229/how-to-use-bitlocker-on-drives- without-tpm/

NEW QUESTION 16
You administer computers that run Windows 10 Enterprise and are members of an Active Directory domain. The computers are encrypted with BitLocker and are configured to store BitLocker encryption passwords in Active Directory.
A user reports that he has forgotten the BitLocker encryption password for volume E on his computer. You need to provide the user a BitLocker recovery key to unlock the protected volume.
Which two actions should you perform? Each correct answer presents part of the solution.

• A. Ask the user for his computer name.
• B. Ask the user to run the manage–bde –unlock E: –pw command.
• C. Ask the user for his logon name.
• D. Ask the user for a recovery key ID for the protected volume.

Answer: AB

Explanation: A: To view the recovery passwords fora computer you would need the computer
name:
In Active Directory Users and Computers, locate and then click the container in which the computer is located.
Right-click the computer object, and then click Properties.
In the Properties dialog box, click the BitLocker Recovery tab to view the BitLocker recovery passwords that are associated with the particular computer.
B: The Manage–bde: unlock command unlocks a BitLocker-protected drive by using a recovery password or a recovery key.

NEW QUESTION 17
You have an Active Directory domain named contoso.com. Work folders are deployed.
A user named User1 has a Windows 10 Home computer that is configured to use Work Folders.
User1 connects a new removable USB drive to the computer. User1 needs to move the Work Folders to the new drive. What should User1 do first?

• A. From the Work Folders settings, click Manage Credentials.
• B. From Services, stop the Work Folders service.
• C. From the Work Folders settings, click Stop using Work Folders.
• D. From Services, set the BitLocker Drive Encryption Service to start automatically.

Answer: C

NEW QUESTION 18
You have a desktop computer and a tablet that both run Windows 10 Enterprise.
The desktop computer is located at your workplace and is a member of an Active Directory domain. The
network contains an Application Virtualization (App-V) infrastructure. Several App-V applications are deployed to all desktop computers.
The tablet is located at your home and is a member of a workgroup. Both locations have Internet connectivity. You need to be able to access all applications that run on the desktop computer from you tablet.
Which actions should you perform on each computer? To answer, drag the appropriate action to the correct computer. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: You can connect to your work computer by using Remote Desktop. You first need to enable Remote Desktop on the work computer. You then run the Remote Desktop Client on the home computer to connect to the work computer.
With Remote Desktop Connection, you can connect to a computer running Windows from another computer running Windows that's connected to the same network or to the Internet. For example, you can use all of your work computer's programs, files, and network resources from your home computer, and it's just like you're sitting in front of your computer at work.
To connect to a remote computer, that computer must be turned on, it must have a network connection, Remote Desktop must be enabled, you must have network access to the remote computer (this could be through the Internet), and you must have permission to connect. For permission to connect, you must be on the list of users. Before you start a connection, it's a good idea to look up the name of the computer you're connecting to and to make sure Remote Desktop connections are allowed through its firewall.