QUESTION 311
You support computers that run Windows 8 and are members of an Active Directory domain. Recently, several domain user accounts have been configured with super-mandatory user profiles. A user reports that she has lost all of her personal data after a computer restart. You need to configure the user’s computer to prevent possible user data loss in the future. What should you do?
A. Remove the .man extension from the user profile name.
B. Add the .dat extension to the user profile name.
C. Configure the user’s documents library to include folders from network shares.
D. Configure Folder Redirection by using the domain group policy.
Answer: D
QUESTION 312
You are an IT consultant for small and mid-sized businesses. One of your clients wants to start using Virtual Smart Cards on its laptops and tablets, which run Windows 8 Pro. Before implementing any changes, the client wants to ensure that the laptops and tablets support Virtual Smart Cards. You need to verify that the client laptops and tablets support Virtual Smart Cards. What should you do?
A. Ensure that the laptops and tablets are running Windows 8 Enterprise edition.
B. Ensure that each laptop and tablet has a Trusted Platform Module (TPM) chip of version 1.2 or greater.
C. Ensure that each laptop and tablet can read a physical smart card.
D. Ensure that BitLocker Drive Encryption is enabled on a system drive of the laptops and tablets.
Answer: B
QUESTION 313
You support computers that run Windows 8 Enterprise and are members of a workgroup. Users are able to download and install any app from Windows Store. You need to ensure that only approved apps can be installed from Windows Store. What should you do?
A. Enable Windows SmartScreen and select the Get administrator approval before running an unrecognized app from the Internet option.
B. Configure a Software Restriction Policy Certificate rule.
C. Configure an AppLocker Packaged app rule.
D. Configure an AppLocker Publisher rule.
Answer: C
QUESTION 314
You support computers that run Windows 8 Enterprise. Your company protects all laptops by using the BitLocker Network Unlock feature. Some employees work from home. You need to ensure that employees can log on to their laptops when they work from home. What should you do?
A. Have users run the Manage-bde.exe -unlock command before they disconnect from the company network.
B. Enable BitLocker To Go.
C. Provide employees their BitLocker PINs.
D. Ensure that the Trusted Platform Module (TPM) chips in the laptops are version 1.2 or greater.
Answer: C
QUESTION 315
You administer a company network that includes computers that run Windows 8 Enterprise in an Active Directory domain. The company has purchased a subscription to Windows Intune. Corporate security policy requires that computers in the accounting department have file and program activity logged. A user in the accounting department uses a computer that is managed by Windows Intune. You need to ensure that file and program activity is always monitored on this computer. What should you do?
A. Create a new Windows Firewall Setting policy in the Windows Intune Admin Console.
B. Create a new Windows Intune Mobile Security policy in the Windows Intune Admin Console.
C. Create and deploy a custom policy in the Windows Intune Center Settings template.
D. In the Windows Intune Admin Console, create a new Windows Intune Agent Settings policy that uses the recommended settings.
Answer: D
QUESTION 316
You have computers that run Windows 8 Enterprise. Microsoft BitLocker Administration and Monitoring (MBAM) is deployed on your network on a server named MBAM1. Company policy requires that within 2 hours of being started, computers that have the MBAM client installed prompt users to enable BitLocker. You need to make changes to the Configure MBAM Services Group Policy settings. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Set MBAM Recovery and Hardware service endpoint to MBAM1.
B. Set Select Bitlocker Recovery Information to store to Recovery password only.
C. Set Enter status reporting frequency (in minutes) to 120.
D. Set Select Bitlocker Recovery Information to store to Recovery password and key package.
E. Set Enter client checking status frequency (in minutes) to 120.
F. Set MBAM Status reporting endpoint to MBAM1.
Answer: AE
QUESTION 317
Your company has purchased a subscription to Windows Intune. You use Windows Intune to automatically deploy Windows updates. You create an automatic approval rule in Windows Intune but notice that previously existing updates are not deployed. You need to ensure that all previously existing updates are automatically approved. What should you do?
A. Create and deploy a policy that uses the recommended settings in the Windows Intune Center Settings template.
B. Edit the schedule for the automatic approval rule.
C. Create and deploy a custom policy in the Windows Intune Center Settings template.
D. Run the approval rule.
Answer: D
QUESTION 318
At home, you use a desktop computer that runs Windows 8. At work, you use a laptop that runs Windows 8 and is connected to a corporate network. You use the same Microsoft account to log on to both computers. You have a folder with some personal documents on your desktop computer. The folder must be available and synced between both computers. You need to ensure that the latest version of these files is available. What should you do?
A. Move the folder to the Documents folder.
Go to PC Settings. Under Homegroup, select Documents to be Shared.
B. Move the folder to the Documents folder.
Go to PC Settings. Under Sync your settings, enable Other windows settings.
C. Create a folder by using SkyDrive for Windows. Move all of the personal documents to the new folder.
D. Right-click the folder and select Share With, and then select Homegroup (view and edit).
Answer: A
QUESTION 319
Drag and Drop Question
You support computers that run Windows 8 Pro. Your company recently purchased 200 new desktop computers. Company policy requires that the desktop computers include a recovery partition. The partition must contain a bootable image that includes support for incoming Remote Desktop connections. You need to configure the desktop computers to comply with company policy. Which four actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
Answer: 
QUESTION 320
You administer client computers that run Windows 8 Enterprise deployed by using Windows Deployment Services (WDS). Your company recently purchased 25 new tablets that run Windows 8 Pro. For all 25 new tablets, you want to replace the existing Windows 8 Pro installation with Windows 8 Enterprise. You need to deploy the Windows 8 Enterprise image to all 25 tablets simultaneously by using the existing WDS infrastructure. What should you do?
A. Start the tablets from a USB flash drive with a customized Windows Preinstallation Environment (WinPE).
B. Start the tablets normally. Map the Windows Image (WIM) file from a WDS network share.
C. Start the tablets in Windows Recovery mode.
D. Start the tablets from the Windows To Go workspace.
Answer: A
Free Download Pass4sure Microsoft 70-689 VCE Test Engine Full Version
