Microsoft 70-697 Exam Questions 2021

NEW QUESTION 1
You administer Windows 10 Enterprise desktops.
You discover that a company employee enabled file encryption on several folders by using a self-signed
Encrypted File System (EFS) certificate.
You need to ensure that you are able to decrypt the encrypted files if the user profile is deleted.
What should you do?

• A. Open the Certificates console and connect to the user account certificate
• B. Export the personal self-signedEFS certificate from the Trusted Root Certification Authority folder to a Personal Information Exchange(PFX) file.
• C. Open the Certificates console and connect to the user account certificate
• D. Find the personal self-signedEFS certificate and export it to a Personal Information Exchange (PFX) file.
• E. Open the Certificates console and connect to the computer account certificates.Export the self-signed EFScertificate from the Trusted People folder to a Canonical Encoding Rules (CER) file.
• F. Open the Certificates console and connect to the user account certificate
• G. Export the self-signed EFScertificate from the Trusted People folder to a Canonical Encoding Rules (CER) file.

Answer: B

Explanation: References: https://docs.microsoft.com/en-us/windows/security/information-protection/windows-informationprotection/create-and-verify-an-efs-dra-certificate

NEW QUESTION 2
A company has Windows 10 Enterprise client computers.
You install a new device on a client computer. The device installation includes an application that runs when the computer starts. You experience problems with the application.
You need to prevent the application from the running when the computer starts, without affecting any other application.
What should you do?

• A. Configure the application by using Task Manager
• B. Run the bcdedit command
• C. Run the msconfig command
• D. Configure the device by using Device Manager

Answer: A

Explanation: References: https://support.microsoft.com/en-za/help/4026268/windows-change-tartup-apps-in-windows-10

NEW QUESTION 3
You administer a Windows 10 Enterprise computer.
The computer is configured to encrypt several folders by using a self-signed Encrypted File System (EFS) certificate.
You need to make a backup copy of the encryption keys. What should you do?

• A. Open the Certificates console and connect to the user account certificate
• B. Export the self-signed EFS certificate from the Trusted People folder to a Canonical Encoding Rules (CER) file.
• C. Open the Certificates console and connect to the user account certificate
• D. Find the personal self-signed EFS certificate and export it to a Personal Information Exchange (PFX) file.
• E. Open the Certificates console and connect to the user account certificate
• F. Export the personal self-signed EFS certificate from the Trusted Root Certification Authority folder to a Personal Information Exchange (PFX) file.
• G. Open the Certificates console and connect to the computer account certificate
• H. Export the self-signed EFS certificate from the Trusted People folder to a Canonical Encoding Rules(CER) file.

Answer: B

NEW QUESTION 4
Your company uses Microsoft Office 365.
You need to ensure that users are prompted to label and classify documents while they edit documents.
Solution: You configure an Office 365 data loss prevention (DLP) policy. Does the solution meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 5
HOTSPOT
You have an Active Directory domain. All of the client computers in the domain run Windows 10 Enterprise.
You need to configure the client computers to download updates from a Windows Server Update Service server.
Which two settings should you configure? To answer, select the appropriate settings in the answer area.

Answer:

Explanation: Configure Automatic Updates
Specify intranet Microsoft update service location

NEW QUESTION 6
HOTSPOT
You provide support for a small company. The company purchases a Windows 10 Enterprise laptop for an employee who travels often.
The company wants to use BitLocker to secure the hard drive for the laptop in case it is lost or stolen. While attempting to enable BitLocker, you receive the error message shown in the following image:

You view the TPM settings, which are shown in the following image:

Finally, you view the BIOS, which is shown in the following image:

For each of the following statement, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 7
A company implements Microsoft Office 365.
You must prevent credit card numbers and other sensitive information in documents from being sent externally.
You need to ensure that the data is protected on all devices.
What are two possible ways to achieve the goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

• A. Configure a data loss prevention (DLP) policy.
• B. Configure a Microsoft Intune mobile device management (MDM) policy.
• C. Implement Microsoft Azure Rights Management.
• D. Configure a threat management policy.

Answer: AC

Explanation: References: https://msdn.microsoft.com/en-us/library/mt718319.aspx https://docs.microsoft.com/en-us/information-protection/understand-explore/what-is- azure-rms

NEW QUESTION 8
DRAG DROP
You are a desktop administrator for a small company and have just upgraded two laptops from Windows 8 to Windows 10 Enterprise.
When the computers were running Windows 8, Backup and Restore was active and was scheduled to back up data files two times a day to an external hard disk.
You need to enable File History so that copies of files are saved to a network drive. Which three actions should you perform in sequence? To answer, move the appropriate three actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 9
You support Windows 10 Enterprise desktop computers and tablets. All of the computers are able to connect to your company network from the Internet by using DirectAccess.
Your company wants to deploy a new application to the tablets. The deployment solution must meet the
following requirements:
The application is stored locally on the tablets.
Access to the applications is protected with extra logon credentials, in addition to a standard domain
account used by users.
The application utilizes the least amount of network bandwidth. The application must maintain access to the current desktop. You need to deploy the new application to the tablets.
What should you do?

• A. Deploy the application as an Application Virtualization (App-V) packag
• B. Install the App-V 4.6 client on the tablets.
• C. Deploy the application as a published application on the Remote Desktop server.Create a Remote Desktop connection on the tablets.
• D. Install the application on a local drive on the tablets.
• E. Install the application in a Windows To Go workspace.
• F. Install Hyper-V on tablet
• G. Install the application on a virtual machine.
• H. Publish the application to Windows Store.
• I. Install the application within a separate Windows 10 Enterprise installation in a virtual hard disk (VHD) file.Configure the tablets with dual boot.
• J. Install the application within a separate Windows 10 Enterprise installation in a VHDX fil
• K. Configure tablets with dual boot.

Answer: A

NEW QUESTION 10
You support desktop computers and tablets that run Windows 8 Enterprise. All of the computers are able to connect to your company network from the Internet by using DirectAccess.
Your company wants to deploy a new application to the tablets. The deployment solution must meet the following requirements:
The application is not accessible if a user is working offline
The application is stored on an internal solid-state drive (SSD) on the tablets
The application is isolated from other applications
The application uses the least amount of disk space
You need to deploy the new application to the tablets. What should you do?

• A. Deploy the application as an Application Virtualization (App-V) packag
• B. Install the App-V 4.6 client on the tablets.
• C. Deploy the application as a published application on the Remote Desktop serve
• D. Create a Remote Desktop connection on the tablets.
• E. Install the application on a local drive on the tablets.
• F. Install the application in a Windows To Go workspace.
• G. Install Hyper-V on tablet
• H. Install the application on a virtual machine.
• I. Publish the application to Windows Store.
• J. Install the application within a separate Windows 8 installation in a virtual hard disk (VHD) file.Configure the tablets with dual boot.
• K. Install the application within a separate Windows 8 installation in a VHDX fil
• L. Configure tablets with dual boot.

Answer: B

Explanation: Deploying the application as a published application on the Remote Desktop server will use no disk space on the tablets. Users will be able to access the application by using Remote Desktop Connections. This will also ensure that the application is isolated from other applications on the tablets.
We can use Remote Desktop Connection ‘redirection’ to ensure that the application is able to access files stored on an internal solid-state drive (SSD) on the tablets. Redirection enables access to local resources such as drives, printers etc. in a Remote Desktop Connection.

NEW QUESTION 11
You support Windows 10 Enterprise computers that are members of an Active Directory domain. All of the computers have a dedicated recovery partition.
A computer indicates that the domain is unavailable. The password of a local administrator account on the
computer is unknown. You need to reset the password for the local administrator account on the computer.
What should you do?

• A. Run Windows To Go workspace from a USB flash drive.
• B. Run the Windows 10 Enterprise installation wizard from a USB flash drive.
• C. Run Microsoft Diagnostic and Recovery Tool (DaRT) from a USB flash drive.
• D. Run Windows Recovery Environment (WinRE) from a recovery partition.

Answer: C

Explanation: References: https://www.top-password.com/knowledge/reset-windows-10- password.html

NEW QUESTION 12
Your company has a main office that has a connection to the Internet.
The company has 100 Windows 10 Enterprise computers that run Microsoft Office 2010.
You purchase a subscription to Office 365 for each user. You download the Office Deployment Tool for Click-to-Run.
You need to deploy Office 365 Pro Plus to the computers. The solution must minimize the amount of traffic over the Internet connection.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

• A. On a file server, run setup.exe and specify the /download parameter.
• B. On each client computer, run setup.exe and specify the /configure parameter.
• C. On a file server, run setup.exe and specify the /configure parameter.
• D. On each client computer, run setup.exe and specify the /download parameter.

Answer: AC

Explanation: A: First we download the installation files to the server. The Office Deployment Tool Setup /Download command downloads files to create an Office 15 installation
C: The Office Deployment Tool Setup /Configure command adds, removes, or configures an Office 15 installation. This should be run on the server.
Note: To deploy Click-to-Run for Office 365 products and languages from a network share by using the Office Deployment Tool, you do the following:
Create a customized Configuration.xml file to specify which Click-to-Run for Office 365 products and languages to deploy.
Use the Office Deployment Tool with the /configure command and the customized Configuration.xml file to install Click-to-Run for Office 365 products and languages on a user’s computer.

NEW QUESTION 13
A company has client computer that run Win 10 enterprise. The corporate network is configured for IPv4 and IPv6.
You need to disable IPv6 on the client computer without affecting IPv4 communicatins.
What should you do on each computer?

• A. Run the Set-NetIPv4Protocol Windows PowerShell cmdlet
• B. Run the Set-NetIPv6Protocol Windows PowerShell cmdlet
• C. Run Disable-NetAdapter Windows PowerShell cmdlet
• D. Run the Disable-NetAdapterBinding Windows PowerShell cmdlet

Answer: D

Explanation: References: http://juventusitprofessional.blogspot.co.za/2013/11/powershell-windows-2012-disable-ipv6.html

NEW QUESTION 14
HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer!. On Computer1, you run the get-printer
*Lexmark | FL command, and you receive the following output.

The Advance sharing settings are shown in the Advanced Sharing exhibit. (Click the Exhibit button.) For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Answer:

Explanation:

NEW QUESTION 15
You manage desktop computers on your company network. The finance department uses computers that rub Widows 7 Enterprise and a 32-bit legacy application. The application has some compatibility issues with Widows 10 Enterprise. The application uses domain single sign-on for authentication.
The vendor releases a new version of the application that is fully compatible with Windows 10 Enterprise These versions cannot be installed on the same computer due to HKEY_CURRENT_USER registry setting conflicts.
You need to migrate the finance department computers Widows 10 Enterprise while meeting the following requirements:
Users are able to use the original version of the application while validating the new version.
Once the new version is validated, the old version is removed with minimal effort.
Users authenticate only once to use the application. Which technology should you choose?

• A. Microsoft Application Compatibility Toolkit (ACT)
• B. Hyper-V
• C. Microsoft Application Virtualization (App-V)
• D. User Experience Virtualization (UE-V)

Answer: A

Explanation: https://technet.microsoft.com/en-us/library/ee449434(v=ws.10).aspx

NEW QUESTION 16
You have a computer named Client1. Client1 is joined to an Active Directory domain.
You need to join Client1 to an Azure Active Directory (Azure AD) tenant. What should you do first?

• A. From the Local Group Policy Editor, modify the Add workstations to domain policy.
• B. From the network adapter properties, modify the DNS suffix.
• C. From System Control Panel, configure the computer to be a member of a workgroup.
• D. From the System in the Settings app, modify the sign-in options.

Answer: D

Explanation: https://blogs.technet.microsoft.com/enterprisemobility/2015/05/28/azure-ad-join-on- windows-10-devices/

NEW QUESTION 17
A company has Windows 10 Enterprise client computers that use DirectAccess.
You need to ensure that the client computers can communicate to IPv4 resources by name.
What should you implement on the client computers?

• A. AAA (Quad A) resource records
• B. Teredo tunnels
• C. NAT64/DNS64
• D. Teredo relays
• E. Intra-Site Automatic Tunnel Addressing Protocol (ISATAP)

Answer: C

Explanation: References: https://msdn.microsoft.com/en- us/library/windows/desktop/aa965905(v=vs.85).aspx

NEW QUESTION 18
A company has Windows 10 Enterprise client computers. The company uses Windows BitLocker Drive Encryption with the data-only option on all client computers.
You delete a file containing highly confidential information from your computer.
You need to clear the free space on the hard drive to minimize the chance of the confidential information being recovered.
Which command should you run on the client computer?

• A. diskpart clean
• B. manage-bde -w
• C. chkdsk /spotfix
• D. BdeHdCfg –target c: shrink

Answer: B