Passed Microsoft 70-685 Exam with Pass4sure and Lead2pass PDF & VCE (91-100)

Topic 11, Baldwin Museum of Science
QUESTION 91
Twenty new laptop computers are joined to the domain.
Users of the new laptops report that they can access the Exchange server, but they cannot access file shares or internal Web sites when they are outside of the office.
Other remote users can access file shares and internal Web sites when they are outside of the office.
You need to ensure that users of the new laptops can access file shares and Web sites on the internal network when they are outside of the office.
What should you request?

A.    new user certificates for the laptop users
B.    new computer certificates for the laptops
C.    the user accounts for the laptop users be added to the Baldwin\Direct Access group
D.    the computer accounts for the laptops be added to the Baldwin\Direct Access group

Answer: D

Topic 11, Baldwin Museum of Science
QUESTION 92
The help desk technicians discover that Windows Defender definitions are not up-to-date on client computers. The help desk technicians report that other critical updates are applied to the client computers.
You need to ensure that all client computers have the latest Windows Defender definitions. Your solution must comply with the corporate security policy.
What should you request?

A.    a firewall exception be added for msascui.exe
B.    the WSUS server be configured to download and automatically approve Windows Defender definition updates
C.    the Remove access to use all Windows update features setting in the WSUS Policy GPO be set to disabled
D.    the Windows Defender\Turn on definition updates through both WSUS and Windows Update setting
in the WSUS Policy GPO be set to enabled

Answer: B

Topic 11, Baldwin Museum of Science
QUESTION 93
The help desk technicians discover that some computers have not installed the latest updates for Windows. The Windows Update log files on the computers show that to complete the installation of several updates the computers must be restarted.
You need to ensure that future updates are successfully installed on all computers.
What should you request?

A.    the logon hours for all user accounts be set from 06:00 to 22:00
B.    the Delay Restart for scheduled installations setting in the WSUS Policy GPO be set to disabled
C.    the Allow Automatic Updates immediate installation setting in the WSUS Policy GPO be set to enabled
D.    the No auto-restart with logged on users for scheduled automatic updates installations setting in the
WSUS Policy GPO be set to disabled

Answer: D

Topic 11, Baldwin Museum of Science
QUESTION 94
A new printer is installed on FP1 and is shared as Printer1.
Users report that they receive an error when they try to connect to \\FP1\Printer1, and that after they click OK they are prompted for a printer driver.
The server administrator confirms that the printer is functioning correctly and that he can print a test page.
You need to ensure that users are able to connect to the new printer successfully. Your solution must minimize administrative effort.
What should you request?

A.    an x86 printer driver be installed on FP1
B.    the permissions be changed on the shared printer
C.    a new Group Policy object (GPO) be created that includes a printer mapping for \\FP1\Printer1
D.    the Devices: Prevent users from installing printer drivers setting in the Default Domain Policy be set to
disabled

Answer: A

Topic 12, Tailspin Toys
QUESTION 95
This question is the first in a series of questions that all present the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Scenario::
Background
You are the desktop support technician for Tailspin Toys. Tailspin Toys manufacturers and distributes children’s toys. The network environment includes a server infrastructure running on Windows Server 2003 Service Pack (SP) 2 and Windows Server 2008 R2, Active Directory with the forest and domain levels set at Windows Server 2003, and Active Directory Certificate Services (AD CS) running on Windows Server 2008 R2. The company has a Microsoft Enterprise Agreement (EA) with Software Assurance (SA).
The company sites, network connectivity, and site technologies are shown in the following table:

image
The company’s domain controller layout and details are shown in the following table:

image
The company’s client computer configuration details are shown in the following table:

image
The company uses Microsoft SharePoint 2010 as the company intranet and as a document repository for company-related Microsoft Office documents. The URL for the intranet is intranet.tailspintoys.com . There is a Group Policy object (GPO) that applies to all client computers that allows employees who are connected to the corporate network to go to the intranet site without having to enter authentication information.
All users are using Microsoft Internet Explorer 8. All users have enabled the Internet Explorer SmartScreen Filter and the Internet Explorer phishing filter. All of the desktop support technicians are members of a security group named Desktop Admins. The Desktop Admins group is a member of the local Administrators group on all client computers. The desktop support technicians use the Microsoft Diagnostics and Recovery Toolset to perform various troubleshooting and repairs.
All Windows 7 client computers have a directory named tailspintoys\scripts in the root of the operating system drive. The directory contains four unique .vbs files named scriptl.vbs, script2.vbs, script3.vbs, and script4.vbs.
Software Environment
An existing GPO named AppLockdown applies to Windows 7 machines and uses AppLocker to ensure that:
No .bat files are allowed to be run by users and rules are enforced
An existing GPO named RestrictApps applies to Windows XP client computers and uses a Software Restriction Policy to ensure that:
No .bat files are allowed to be run by users and rules are enforced
Data Protection Environment
Some users at the Manufacturing site use EFS to encrypt data.
A user account named EFSAdmin has been designated as the Data Recovery Agent (DRA).
The DRA certificate and private key are stored on a portable USB hard drive.
As part of the yearly security compliance audits, a vendor is due to arrive at Tailspin Toys in a month to perform the yearly audit. To prepare for the audit, management has asked you to participate in an internal review of the company’s existing security configurations related to network security and data security. The management team has issued the following requirements:
New software requirements
All installation programs must be digitally signed.
Minimum permissions must be granted for installation of programs.
Internet Explorer requirements
Users must not be able to bypass certificate warnings.
Users must not be able to add Internet Explorer add-ons unless the add-ons are approved by IT.
Data protection requirements
All portable storage devices must use a data encryption technology.
The solution must meet the following requirements:
Allow all users a minimum of read access to the encrypted data while working from their company client computers. Encrypt entire contents of portable storage devices. Minimize administrative overhead for users as files and folders are added to the portable storage devices.
Recovery information for client computer hard drives must be centrally stored and protected with data encryption.
Users at the Manufacturing site must have a secondary method of decrypting their existing files if they lose access to their certificate and private key or if the EFS Admin’s certificate is not available.
You need to recommend a solution to ensure that a secondary method is available to users. The solution must not require accessing or altering the existing encrypted files before decrypting them.
What should you recommend that the users do?

A.    From the command line, run the cipher.exe /e command.
B.    From the command line, run the certutil.exe /backupKey command.
C.    Enroll for a secondary EFS certificate.
D.    Export their EFS certificates with private keys to an external location.

Answer: D

Topic 12, Tailspin Toys
QUESTION 96
You need to recommend a solution to back up BitLocker recovery information based on the company’s existing data protection requirements. The solution must include the backup destination and the solution prerequisites.
What should you recommend? (Choose all that apply.)

A.    Upgrade all Windows XP client computers to Windows 7.
B.    Store the BitLocker recovery information in Active Directory.
C.    Create a GPO to enroll users for a Basic EFS certificate automatically.
D.    Raise the forest functional level to Windows Server 2008 R2.
E.    Store each user’s BitLocker recovery information on USB keychain drives.
F.    Import the BitLockerTPMSchemaExtension.ldf file to Active Directory.

Answer: BF

Topic 12, Tailspin Toys
QUESTION 97
A user at the Headquarters site is able to run .bat files on LAPTOP01. However, you notice that the AppLockdown GPO was successfully applied to the computer.
You need to ensure that the user’s computer complies with the existing AppLockdown GPO
settings.
Which service should you start on LAPTOP01?

A.    Application Experience
B.    Application Identity
C.    Application Management
D.    Application Information

Answer: B

Topic 12, Tailspin Toys
QUESTION 98
Users are prompted for authentication credentials when they browse to the intranet from the company’s servers.
You need to ensure that users can access the intranet from the company’s servers without having to enter their authentication information.
What should you do?

A.    Add the intranet fully qualified domain name to the local intranet zone.
B.    Enable the Automatic logon only in Intranet zone option in the Microsoft Internet Explorer settings
in the GPO.
C.    Reset the local intranet zone custom settings to Low.
D.    Disable the Allow websites to prompt for information using scripted windows setting in the Microsoft
Internet Explorer settings in the GPO.

Answer: B

Topic 12, Tailspin Toys
QUESTION 99
When visiting certain websites, users receive a message in Internet Explorer.
The message is shown in the exhibit:

image
You need to ensure that the Internet Explorer settings for all client computers follow company requirements.
What should you modify in Group Policy?

image

A.    Enable the Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Turn on Protected
Mode setting.
B.    Disable the Internet Explorer\Internet Control Panel\Prevent ignoring certificate errors setting.
C.    Enable the Internet Explorer\Internet Control Panel\Prevent ignoring certificate errors setting.
D.    Disable the Windows Components\Windows Error Reporting\Disable Windows Error Reporting setting.
E.    Enable the Windows Components\Windows Error Reporting\Disable Windows Error Reporting setting.
F.    Enable the Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Do not prompt for
client certificate selection when no certificate or only one certificate setting.

Answer: C

QUESTION 100
Existing Internet Explorer security settings and GPOs are applied throughout the company. However, users are visiting websites known by Internet Explorer to host malicious content.
You need to ensure that users cannot visit those websites.
Which setting in the GPO should you enable to achieve this goal?

A.    Turn off Managing SmartScreen Filter for Internet Explorer 8
B.    Prevent Bypassing SmartScreen Filter Warnings
C.    Turn on ActiveX Filtering
D.    Prevent ignoring certificate errors
E.    Turn off Managing Phishing filter

Answer: B

If you want to pass Microsoft 70-685 successfully, do not missing to read latest lead2pass Microsoft 70-685 practice tests.
If you can master all lead2pass questions you will able to pass 100% guaranteed.

http://www.lead2pass.com/70-685.html

         

Why Choose Lead2pass?

If you want to pass the exam successfully in first attempt you have to choose the best IT study material provider, in my opinion, Lead2pass is one of the best way to prepare for the exam.

Lead2pass Testking Pass4sure Actualtests Others
$99.99 $124.99 $125.99 $189 $29.99-$49.99
Up-to-Dated
Real Questions
Error Correction
Printable PDF
Premium VCE
VCE Simulator
One Time Purchase
Instant Download
Unlimited Install
100% Pass Guarantee
100% Money Back

Comments are closed.