Q21. DRAG DROP 

You manage 50 computers that run Windows 10 Enterprise. You have a Microsoft Azure RemoteApp deployment. The deployment consists of a hybrid collection named Collection1. 

All computers have the Hyper-V feature installed and have a virtual machine that runs Windows 7. 

You plan to install applications named App1 and App2 and make them available to all users. App1 is a 32-bit application. App2 is a 64-bit application. 

You need to identify the installation method for each application. The solution needs to minimize the number of installations. 

Which deployment method should you identify for each application? To answer, drag the appropriate deployment methods to the correct applications. Each deployment method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. 

NOTE: Each correct selection is worth one point. 

Answer: 


Q22. A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 10 Enterprise. Some computers have a Trusted Platform Module (TPM) chip. 

You need to configure a single Group Policy object (GPO) that will allow Windows BitLocker Drive Encryption on all client computers. 

Which two actions should you perform? Each correct answer presents part of the solution. 

A. Enable the Require additional authentication at startup policy setting. 

B. Enable the Enforce drive encryption type on operating system drives policy setting. 

C. Enable the option to allow BitLocker without a compatible TPM. 

D. Configure the TPM validation profile to enable Platform Configuration Register indices (PCRs) 0, 2, 4, and 11. 

Answer: A,C 


Q23. Your network contains an Active Directory domain named contoso.com. The domain contains Windows 10 Enterprise client computers. 

Your company has a subscription to Microsoft Office 365. Each user has a mailbox that is stored in Office 365 and a user account in the contoso.com domain. Each mailbox has two email addresses. 

You need to add a third email address for each user. 

What should you do? 

A. From Active Directory Users and Computers, modify the E-mail attribute for each user. 

B. From Microsoft Azure Active Directory Module for Windows PowerShell, run the Set-Mailbox cmdlet. 

C. From Active Directory Domains and Trust, add a UPN suffix for each user. 

D. From the Office 365 portal, modify the Users settings of each user. 

Answer:


Q24. You administer Windows 10 Enterprise desktop computers that are members of an Active 

Directory domain. 

You want to create an archived copy of user profiles that are stored on the desktops. You create a standard domain user account to run a backup task. 

You need to grant the backup task user account access to the user profiles. What should you do? 

A. Add the backup task account to the Remote Management Users group on a domain controller. 

B. Add the backup task account to the Backup Operators group on every computer. 

C. Add the backup task account to the Backup Operators group on a domain controller. 

D. Set the backup task account as NTFS owner on all the profiles. 

Answer:


Q25. Your network contains an Active Directory domain named contoso.com. Contoso.com is synchronized to a Microsoft Azure Active Directory. You have a Microsoft Intune subscription. 

Your company plans to implement a Bring Your Own Device (BYOD) policy. You will provide users with access to corporate data from their personal iOS devices. 

You need to ensure that you can manage the personal iOS devices. 

What should you do first? 

A. Install the Company Portal app from the Apple App Store. 

B. Create a device enrollment manager account. 

C. Set a DNS alias for the enrollment server address. 

D. Configure the Intune Service to Service Connector for Hosted Exchange. 

E. Enroll for an Apple Push Notification (APN) certificate. 

Answer:


Q26. You have a Windows 10 Enterprise computer named Computer1. Computer1 has File History enabled. 

You create a folder named Folder1 in the root of the C: drive. 

You need to ensure that Folder1 is protected by File History. 

What are two possible ways to achieve the goal? Each correct answer presents a complete solution. 

A. From File Explorer, include Folder1 in an existing library. 

B. Modify the Advanced settings from the File History Control Panel item. 

C. From the Settings app, modify the Backup options. 

D. From File Explorer, modify the system attribute of Folder1. 

Answer: A,C 


Q27. You purchase a new Windows 10 Enterprise desktop computer. You have four external USB hard drives. 

You want to create a single volume by using the four USB drives. You want the volume to be expandable, portable and resilient in the event of failure of an individual USB hard drive. 

You need to create the required volume. 

What should you do? 

A. From Control Panel, create a new Storage Space across 4 USB hard drives. Set resiliency type to Three-way mirror. 

B. From Control Panel, create a new Storage Space across 4 USB hard drives. Set resiliency type to Parity. 

C. From Disk Management, create a new spanned volume. 

D. From Disk Management, create a new striped volume. 

Answer:


Q28. You have a computer named Computer1 that runs Windows 10 Enterprise. 

You plan to install the most recent updates to Computer1. 

You need to ensure that you can revert to the current state of Computer1 in the event that the computer becomes unresponsive after the update. 

What should you include in your solution? 

A. The Reset this PC option from the Recovery section of the Settings app 

B. The Sync your settings options from the Accounts section of the Settings app 

C. The Backup and Restore (Windows 7) control panel item 

D. The Refresh your PC option from the PC Settings 

Answer:


Q29. DRAG DROP 

You plan to deploy a Microsoft Azure RemoteApp collection by using a custom template image. The image will contain Microsoft Word and Excel Office 365 ProPlus programs. 

You need to install the Word and Excel programs. The solution must minimize the amount of Internet traffic used during installation. 

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. 

Answer: 


Q30. You manage a network that includes Windows 10 Enterprise computers. All of the computers on the network are members of an Active Directory domain. 

The company recently proposed a new security policy that prevents users from synchronizing applications settings, browsing history, favorites, and passwords from the computers with their Microsoft accounts. 

You need to enforce these security policy requirements on the computers. 

What should you do? 

A. On the Group Policy Object, configure the Accounts: Block Microsoft accounts Group Policy setting to Users can’t add Microsoft accounts. 

B. On the Group Policy Object, configure the Accounts: Block Microsoft accounts Group Policy setting to Users can’t add or log on with Microsoft accounts. 

C. From each computer, navigate to Change Sync Settings and set the Sync Your Settings options for Apps, Browser, and Passwords to Off. 

D. From each computer, navigate to Change Sync Settings and set the Sync Your Setting s option to Off. 

Answer: