Actual 70-697 Dumps Questions 2021

NEW QUESTION 1
Your company uses Microsoft Office 365.
You need to ensure that users are prompted to label and classify documents while they edit documents.
Solution: You import the data from on-premises to Office 365. Does the solution meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: References: https://docs.microsoft.com/en-us/information-protection/deploy- use/configure-policy

NEW QUESTION 2
You support Windows 10 Enterprise computers that are members of an Active Directory domain. Your company policy defines the list of approved Windows Store apps that are allowed for download and installation.
You have created a new AppLocker Packaged Apps policy to help enforce the company policy.
You need to test the new AppLocker Packaged Apps policy before you implement it for the entire company.
What should you do?

• A. From Group Policy, enforce the new AppLocker policy in Audit Only mode.
• B. From Group Policy, run the Group Policy Results Wizard.
• C. From Group Policy, run the Group Policy Modeling Wizard.
• D. From PowerShell, run the Get-AppLockerPolicy –Effective command to retrieve the AppLocker effective policy.

Answer: A

Explanation: You can test an AppLocker Packaged Apps policy by running it in audit mode.
After AppLocker rules are created within the rule collection, you can configure the enforcement setting to Enforce rules or Audit only.
When AppLocker policy enforcement is set to Enforce rules, rules are enforced for the rule collection and all events are audited. When AppLocker policy enforcement is set to Audit only, rules are only evaluated but all events generated from that evaluation are written to the AppLocker log.

NEW QUESTION 3
You manage a Microsoft Azure RemoteApp deployment. The deployment consists of a cloud collection named CloudCollection1 and a hybrid collection named HybridCollection1. Both collections reside in a subscription named Subscription1. Subscription1 contains two Active Directory instances named AzureAD1 and AzureAD2. AzureAD1 is the associated directory of Subcsription1.
AzureAD1 is synchronized to an on-premises Active Directory forest named constoso.com. Passwords are synchronized between AzureAD1 and the on-premises Active Directory.
You have the following user accounts:

You need to identify to which collections each user can be assigned access.
What should you identify? To answer, select the appropriate options in the answer area.

Answer:

Explanation: A Microsoft account can only access a cloud collection.
An Azure Active Directory (Azure AD) account can access a cloud collection and it can access a hybrid collection if directory synchronization with password sync is deployed.
An on-premise domain account that does not exist in any Azure Active Directory cannot access Azure cloud resources.
References: https://azure.microsoft.com/en-gb/documentation/articles/remoteapp-collections/

NEW QUESTION 4
You administer Windows 10 Enterprise laptops. The laptops are configured to connect to an unsecured wireless access point. You plan to configure the wireless access point to encrypt wireless traffic and turn off SSID broadcast.
You need to ensure the laptops will join the secured wireless network automatically after the configuration
changes.
What should you do?

• A. Create a network profile.
• B. Create an ad hoc network.
• C. Set Network Discovery to Enabled for the Public profile.
• D. Set the Unidentified Networks Properties User permissions to User can change location.

Answer: A

Explanation: References: http://ecross.mvps.org/howto/connect-to-wireless-network-with- windows-10.htm

NEW QUESTION 5
DRAG DROP
You have a Windows 8 computer. You need to migrate from Windows 8 to Windows 10 while retaining as much data as possible. You load the Windows 10 media into the DVD drive.
Which three actions should you perform next in sequence?

Answer:

Explanation: Box 1: Run the Setup.exe file from the DVD.
Launch setup.exe on the DVD drive to start the upgrade process. Box 2: Enter the license key.
You will be prompted for the license key.
Box 3: Under the installation, choose Keep personal files.

References: http://www.laptopmag.com/articles/how-to-upgrade-windows-10

NEW QUESTION 6
Your network contains an Active Directory domain named contoso.com. All client computers in the domain run Windows 10 Enterprise. All domain users have roaming user profiles. You need to prevent a user named User2 from being able to save changes to his roaming user profile. Which file you modify?

• A. ntuser.dat
• B. ntuser.pol
• C. system.dat
• D. registry.pol

Answer: B

Explanation: You would need to rename ntuser.pol to ntuser.dat to create a ‘mandatory’ profile.

NEW QUESTION 7
A company has Windows 10 Enterprise client computers. Client computers are connected to
a corporate private network. You deploy a Remote Desktop Gateway, DirectAccess, and a VPN server at the corporate main office.
Users are currently unable to connect from their home computers to their work computers by using Remote Desktop.
You need to ensure that users can remotely connect to their office computers by using Remote Desktop. Users must not be able to access any other corporate network resource by using the local Windows installation from their home computers.
Which setting should you configure on the home computers?

• A. Remote Desktop local resources
• B. Virtual Private Network connection
• C. Remote Desktop Gateway IP address
• D. DirectAccess connection

Answer: C

Explanation: The solution is to deploy Remote Desktop Gateway in the office. Remote users can then connect to their computers on the office network by using Remote Desktop client on their home computers configured with the IP address of the Remote Desktop Gateway. Remote Desktop Gateway (RD Gateway) is a role service that enables authorized remote users to connect to resources on an internal corporate or private network, from any Internet-connected device that can run the Remote Desktop Connection (RDC) client. The network resources can be Remote Desktop Session Host (RD Session Host) servers, RD Session Host servers running RemoteApp programs, or computers with Remote Desktop enabled. RD Gateway uses the Remote Desktop Protocol (RDP) over HTTPS to establish a secure, encrypted connection between remote users on the Internet and the internal network resources on which their productivity applications run. RD Gateway provides a comprehensive security configuration model that enables you to control access to specific internal
network resources. RD Gateway provides a point-to-point RDP connection, rather than allowing remote users access to all internal network resources.
Incorrect Answers:
B: Remote Desktop local resources determine which local resources (printers, drives etc.) are available in a Remote Desktop connection. However, this solution makes no provision for actually connecting to the office network.
C: Virtual Private Network connections would enable remote access to the office network but this solution would not prevent users accessing other corporate network resources.
D: DirectAccess connections would enable remote access to the office network but this solution would not prevent users accessing other corporate network resources.
References: https://technet.microsoft.com/engb/library/cc731150.aspx

NEW QUESTION 8
DRAG DROP
You install Widows 10 Enterprise on 15 computers. The computers require a static IP address to accommodate designated firewall policies.
You need to configure a static IP address, a primary DNS server with an IP address of 192.168.1.101, and an additional DNS server with an IP address of 192.168.1.102.
Which NETSH commands should you use to achieve these objectives? To answer, drag the appropriate
commands from the list of commands to the correct locations in the answer area. Each command may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 9
HOTSPOT
You need to configure Intune policies to meet the following requirements:
Jailbroken devices must be reported.
Noncompliant devices must not be allowed to connect to Microsoft Exchange.
Android devices must have passwords of 8 characters.
iOS devices must have passwords of 8 characters.
What type of policies should you implement? To answer, select the appropriate policy for each requirement in the dialog box in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 10
You work for a small company that recently upgraded to Windows 10 Enterprise computers.
The HR department stores sensitive data in a folder named Personnel Files. You need to encrypt this folder only, and no other data.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

• A. Use EFS.
• B. Use cipher.exe.
• C. Use BitLocker
• D. Use RFFS.

Answer: AB

NEW QUESTION 11
You plan to deploy a Microsoft Azure RemoteApp collection by using a custom template image. The image will contain Microsoft Office 365 ProPlus apps.
You need to ensure that multiple users can run Office 365 ProPlus from the custom template image simultaneously.
What should you include in the configuration file?

• A. <Property Name = “FORCEAPPSHUTDOWN” Value = “FALSE” />
• B. <Product ID = “0365ProPlusRetail” />
• C. <Property Name = “SharedComputerLicensing” Value = “1” />
• D. <Property Name = “AUTOACTIVATE” Value = “1” />

Answer: C

Explanation: To make Microsoft Office 365 ProPlusapps available as RemoteApps, you need to enable Shared computer activation. You do this by including the following text in the configuration file:
<Property Name = “SharedComputerLicensing” Value= “1” />
Shared computer activation lets you to deploy Office 365 ProPlus to a computer in your organization that is accessed by multiple users. For example, several nurses at a hospital connect to the same remote server to use their applications or a group of workers share a computer at a factory.
The most common shared computer activation scenario is to deploy Office 365 ProPlus to shared computers by using Remote Desktop Services (RDS). By using RDS, multiple users can connect to the same remote computer at the same time. The users can each run Office 365 ProPlus programs, such as Word or Excel, at the same time on the remote computer.

Topic 9, Manage updates and recovery

NEW QUESTION 12
You plan to deploy a Microsoft Azure Remote App collection by using a custom template image. The image will contain Microsoft Office 365 apps. The image will be used to deploy a collection that will be accessed by 50 users.
You need to identify licensing requirements for the deployment.
Which two requirements should you identify? Each correct answer presents part of the solution.

• A. An activated Office 365 ProPlus installation
• B. Windows client access licenses (CALs) assigned to the users
• C. Office 365 ProPlus licenses assigned to the users
• D. Remote Desktop client access licenses (CALS) assigned to the users
• E. Office 365 Enterprise E3 service plan

Answer: A

Explanation: References: https://docs.microsoft.com/en-us/azure/remoteapp/remoteapp-licensing

NEW QUESTION 13
HOTSPOT
A company plans to import data from on-premises to Microsoft Office 365 for data governance.
You need to import the data using available methods.
Which file type should you use for each import method? To answer, configure the appropriate options in the dialog box in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 14
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You manage a corporate network. All servers run Windows Server 2021. All servers and client devices are joined to an Active Directory Domain Services (AD DS) domain named adatum.com. The use of VPN servers on the network is strictly prohibited.
Users must be able to access the corporate network in addition to Work Folders when they work at home on Windows 10 devices. You install, configure, and publish the certificate revocation list (CRL) for an internal Active Directory Certificate Services (AD CS) server.
You need to configure the environment to allow your users to register devices. Solution: You create a DNS CNAME record of enterpriseregistration.adatum.com. You deploy Active Directory Federation Services (AD FS) and point the DNS record to your AD FS server. You deploy a Web Application Proxy server for the clients to connect to establish Internet connectivity to the device registration connection.
Does the solution meet the goal?

• A. Yes
• B. No

Answer: A

Explanation: References:
https://blog.nextxpert.com/2013/11/27/publishing-work-folders-with-web-application-proxy-2/

NEW QUESTION 15
DRAG DROP
A local printer named PRINTER1 is shared from a client computer named COMPUTER1 that run a 32-bit version of Windows 10. A workgroup contains client computers that run a 64-bit version of Windows 10.
Computers in the workgroup can't currently print to PRINTER1.
You need to ensure that the workgroup computers can print to PRINTER1.
Which three actions should you perform in sequence? To answer, move the appropriate actions to the answer area and arrange them in the correct order.

Answer:

Explanation: You can very well add a 64-bit printer driver to a local printer on a 32-bit Windows operating system.
After the 64-bit driver has been added connect the 64-bit Windows 10 computers to the printer.

NEW QUESTION 16
A company has Windows 10 Enterprise client computers.
You install a new printer on a client computer. The printer software installation includes an application that runs when the computer starts. You experience problems with the application.
You need to prevent the application from running when the computer starts, without affecting any other application.
What should you do?

• A. Run the bcdedit -p command.
• B. Run the msconfig -p command.
• C. Configure the printer by using Device Manager.
• D. Configure the printer application by using Task Manager.

Answer: D

NEW QUESTION 17
DRAG DROP
A company has a main office located in Miami, and branch offices in Boston, Los Angeles and Portland. The Office Networks are configured as described in the following table.

A management computer in the main office, named COMPUTER1, runs windows 8
and several third-party management applications. You need to meet the following requirements:
Ensure that only users in the Boston office can connect to COMPUTER1 by using http.
Ensure that only users in the Los Angeles office can connect COMPUTER1 by using https
Ensure that only users in the Portland office can connect to COMPUTER1 by using FTP.
You are configuring access to COMPUTER1. How should you configure windows firewall?

Answer:

Explanation: * First Row: 10.20.0.0/16, 21, TCP
The Portland users, on network 10.20.0.0/16, need FTP, which uses TCP port 21.
* Second Row: 10.30.0.0/16, 80, TCP
The Boston users, on network10.30.0.0/16, need HTTP, which uses TCP port 80.
*Third row:10.40.0.0/16, 443, TCP
The Los Angles users, on network 10.40.0.0/16, need HTTPS, which uses TCP port 443.
References: https://en.wikipedi a.org/wiki/List_of_TCP_and_UDP_port_numbers

NEW QUESTION 18
Your network contains an Active Directory domain named contoso.com. All client computers run Windows 10 Enterprise and Microsoft Office 2013. All of the computers are joined to the domain.
Your company purchases a subscription to Office 365. An administrator creates an Office 365 account for each user and deploys a federated solution for Office 365.
You need to prevent the users from being prompted for a user account and a password each time they access services from Office 365.
Which account should you instruct the users to use when they sign in to their computer?

• A. a Microsoft account
• B. a local user account
• C. an Office 365 account
• D. a contoso.com account

Answer: D