70-688 Microsoft Windows 8.1 - Final Exam

B. When will the mobile devices be allowed to connect? When creating a BYOD policy, your questions usually revolve around how the mobile devices are protected, what users can and cannot access, and what happens when they leave the company.

B. Exchange ActiveSync Exchange ActiveSync is natively provided by Microsoft Exchange Server. EAS enables you to manage which mobile devices are allowed to connect to your network, as well as to control encryption, password, and access requirements. You can also remotely wipe a device if it is lost or stolen.

A. Subscriber Identity Module A subscriber identity module (SIM) is an integrated circuit on a small silicon chip. The SIM is embedded into a removable SIM card, which is used to identify and authenticate the user on mobile devices.

B. Sync Center Sync Center enables you to sync certain mobile devices as well as files stored in folders on network servers (offline files). When working with mobile devices, Microsoft recommends using the software that comes with your device (mobile phone, music device, and so on) to perform synchronization.

D. Sync when you restart Windows By selecting the When an event occurs option, you can additionally select from the following even trigger options: 1. You log on to your computer 2. Your computer is idle for x minutes/hours 3. You lock Windows 4. You unlock Windows

B. You are prompted to choose a way to resolve the conflict A sync conflict occurs when you have two copies of a file stored in different locations (for example, locally and in a network folder) that have both changed since the last sync. A conflict can also occur if one user deletes a file (located in a shared folder) while another user makes a change to the same file while that user is offline. In either case, Sync Center will ask you how you want to address the conflict. You typically will overwrite the older file, but if you choose to keep both, Sync Center will rename one version and make a copy of both files in both locations. At this point, the files are no longer synchronized.

A. An Apple Push Notification Service certificate To enroll iOS devices, you need to obtain an Apple Push Notification Service certificate, which enables Windows Intune to securely communicate with the Apple Push Notification Service. To obtain an Apple Push Notification, you must download the Certificate Signing Request from Windows Intune and then request an Apple Push Notification Service certificate from the Apple website.

B. Daily at 3:00 AM Windows runs automatic maintenance daily at 3:00AM (this is the default, but it can be changed) to perform tasks such as system diagnostics, security scanning, and software updates. Automatic maintenance occurs only if your computer is idle.

B. wuauclt /detectnow You can use wuauclt /detectnow to force Windows client computers to contact and check-in with the WSUS server immediately.

D. The update is removed from the console When you decline an update, the following happens: 1. All approvals for the update are removed. 2. The update is hidden in default views in the Update console. 3. Any associated reported data is lost.

A. according to precedence If a site, domain, or OU has multiple GPOs, group policies are processed in order as stated by its precedence. A GPO with higher precedence (lower number) prevails over a GPO with lower precedence (higher number).

C. Group Policy Management Editor The loopback policy is enabled using the Group Policy Management Editor, specifically the Computer ConfigurationAdministrative TemplatesSystemGroup PolicyConfigure user Group Policy Loopback processing mode.

D. Custom scan A Custom scan is designed to check only locations and files you specify.

B. Quick scan A Quick scan checks the areas that malicious software, including viruses, spyware, and unwanted software are most likely to infect.

A. Windows Intune Stand-Alone Cloud Configuration With the Windows Intune Stand-Alone Cloud configuration, you have to administer your computers and devices (Windows 8, Windows RT, Windows Phone 8, and Apple iOS) through the Administrator console. Although this configuration allows you to create and manage policies, inventory your devices, and upload and publish software, it does not support the discovery of mobile devices.

B. Windows Intune Groups To make the process of deploying Windows Intune policies, software packages, and software updates more efficient, consider using Windows Intune Groups.

D. Use Group Policy or Windows Intune Policy, but not both Since Group Policy can be used to set many of the same settings, when you deploy Windows Intune client software and establish Windows Intune policies; you need to ensure that the clients do not receive GPOs with similar and/or conflicting settings.

B. Update Reports Update Reports provide information about software updates that succeeded, failed, and are currently pending, or those that are needed on computers in your organization.

D. License Installation Reports License Installation Reports compare installed software with your current licensing agreement.

A. Detected Software Reports Detected Software Reports provide information about software installed on computers in your organization.

D. VHDX files, up to 64 TB VHD images are limited to a maximum size of 2 TB (terabytes) and are compatible with all versions of Hyper-V, as well as Microsoft's Type 2 hypervisor products, such as Virtual Server and Virtual PC. Windows Server 2012 R2 introduced an updated version of the format, which uses a VHDX filename extension. VHDX image files can be as large as 64 TB.

D. Bcdedit /timeout Bcdedit /timeout can be used to configure the length of time the computer waits until the default operating system loads.

B. It removes a system's name and SID. The Microsoft System Preparation Utility (Sysprep.exe) prepares a Windows computer for cloning by removing specific computer information such as the computer name and Security Identifier (SID).

A. Snapshot When you are testing an application and want to troubleshoot compatibility issues or test a new application update before rolling it out to production machines, you can use the Hyper-V snapshot feature (right-click the machine and choose Snapshot). By taking a snapshot, you can return to a known state on the VM (for example, the state before you installed the application).

B. Application Compatibility Toolkit (ACT) The ACT Application Compatibility Toolkit (ACT) kit is used to determine whether or not applications, devices, and computers will work with a new operating system. Use it to gather inventory and assess your current environment in preparation for upgrades and migrations.

C. Standard User Analyzer (SUA) The Standard User Analyzer (SUA) tool allows you to test your application and monitor for Application Program Interface (API) calls to detect issues related to the User Account Control (UAC) feature in Windows. It will monitor and report many issues including issues related to files, registry keys, initialization (.ini) files, tokens, privileges, namespaces, and processes. After you identify potential problems, you can use the SUA to apply the recommended fixes by creating and deploying an .msi file.

C. User Experience Virtualization (UE-V) With UE-V, a user can make changes to his personal settings (operating system or applications) and then log into a Windows 7 or Windows 8 computer without having to reconfigure them each time. It does this by roaming the operating system settings. Although the V infers virtualization, UE-V does not virtualize system and application settings; instead, it monitors those changes using XML templates and then saves them to a file.

B. 14 days By default, users will begin to receive notifications of an upcoming account password expiration 14 days before the expiry date.

A. Deploying directly from the Office 365 portal When you select to deploy directly from the Office 365 portal, you likely are an organization that does not have IT resources or you wish to provide a self-service approach.

C. Collaboration Using SharePoint as a document repository and collaboration workspace, you can connect and work with a geographically dispersed workforce.

B. microsoft.com Second-level domains include a top-level domain (.com, .org, etc.) and a unique name within that top-level domain (microsoft.com, consoto.org, etc.).

D. Teredo Teredo enables devices behind non-IPv6 NAT routers to function as tunnel endpoints. To do this, Teredo encapsulates IPv6 packets within Transport-layer User Datagram Protocol (UDP) datagrams rather than Network-layer IPv4 datagrams, as 6to4 does.

A. 802.11i 802.11i provides improved encryption for networks using the 802.11a, 802.11b, and 802.11g standards; introduces new encryption key protocols: Temporal Key Integrity Protocol (TKIP) and Advanced Encryption Standard (AES).

D. DirectAccess DirectAccess allows remote users to connect automatically whenever their clients detect an Internet connection.

C. You must provide a text listing of VPN servers If you select the option Allow the user to choose a VPN server before connecting, you are required provide a text file that lists the VPN servers from which the user can choose.

B. Remote Assistance To request a Remote Assistance session, a client must issue an invitation and send it to a particular expert. The client can send the invitation using email or save it as a file to be sent to the expert in some other manner.

D. Authentication Authentication represents the way that security principals (users, computers, and processes) prove their identity before they are allowed to connect to your network. In the past, authentication was handled through the use of passwords. Today, additional authentication tools, including digital certificates, smart cards, picture passwords, and biometrics, are used.

B. Global Catalog When you implement multiple domains, a feature called the Global Catalog is used to find users, computers, and resources throughout the other domains.

C. Homegroup sharing The type of sharing method you elect to use depends on the size and formality of the network to which the computer is connected. For home users, homegroup networking is simple to set up and use. For small business networkers, Public folder sharing is often the easiest method, one that users can easily maintain for themselves on a day-to-day basis. For larger networks, Windows domain networks, or any network with more elaborate security requirements, any folder sharing is preferable.

D. Confidentiality Confidentiality is about preventing people from reading information they are not authorized to read. Confidentiality is handled through the use of encryption technologies.

C. External SATA (eSATA) Serial Advanced Technology Attachment (SATA) is a serial interface that transfers data in bursts instead of parallel. It comes in three varieties: 1.5 Gbps (SATA-1.0), 3 Gbps (SATA-2.0), and 6 Gbps (SATA 3.0). These have maximum throughputs of 150 Mbps, 300 Mbps and 600 Mbps. External SATA (eSATA) extends the SATA bus to external devices.

A. Install-WindowsFeature BranchCache You will use the Install-WindowsFeature BranchCache cmdlet to enable BranchCache on a Web or application server.

D. 5,000 When you create a namespace, the Windows Server 2008 mode is selected by default, which supports up to 50,000 folders with targets per namespace and access-based enumeration. If you deselect the Windows Server 2008 mode, you will use the Windows 2000 Server mode, which supports only up to 5,000 folders.

B. Members of the Sales group will be able to edit content and delete files The Full Control share permission would normally allow users to take ownership of files, but lacking the corresponding NTFS permissions to do so, the more restrictive scenario wins and the users are only to edit and delete files, but not otherwise modify permissions or ownership.

B. Prevent installation of removable devices The Prevent installation of removable devices setting prevents Windows from installing removable devices. A device is considered removable when the driver for the device to which it is connected indicates the device is removable.

D. Write The Write permission enables a user/group to create files and folders. Write is going to need to be paired up with Read or Read & Execute, however.

C. TPM-Startup Key mode TPM-Startup Key mode validates boot files, operating system files, and any BitLocker-encrypted volumes. The user must use a USB flash drive with the keys before the computer can boot into Windows.

B. Stability Index The Reliability Monitor provides a stability index that ranges from 1 (the least stable) to 10 (the most stable). You can use the index to help evaluate the reliability of your computer.

D. 2.5 GB To run DaRT on a Windows 8 x64 PC, you need at least 2.5 GB of memory.

C. Add more RAM. One of the most common bottlenecks is the amount of memory the system has. By increasing the memory, you can often increase the overall performance of a system-up to a point.