We never believe in second chances and Braindump2go brings you the best 70-685 Exam Preparation Materials which will make you pass in the first attempt.We guarantee all questions and answers in our 70-685 Dumps are the latest released, we check all exam dumps questions from time to time according to Microsoft Official Center, in order to guarantee you can read the latest questions!
Vendor: Microsoft
Exam Code: 70-685
Exam Name: Pro: Windows 7, Enterprise Desktop Support Technician
QUESTION 41
All client computers on your company network run Windows 7. Employees use Windows Internet Explorer 8 to access Web sites.
You discover that some computers are infected with malicious software.
Employees are able to access Web sites that might have been compromised by malicious software.
You need to configure the settings in Internet Explorer 8 to prevent malicious software from being installed on the computers.
What should you do?
A. Configure Popup Blocker.
B. Configure SmartScreen Filter.
C. Add the sites to the Local intranet zone.
D. Add company-approved Web sites to the Compatibility View List.
Answer: B
QUESTION 42
All client computers on your company network run Windows 7 and are members of a Windows Server 2008 R2 domain. The R&D department staff are local administrators on their computers and are members of the R&D global security group.
A new version of a business software application is available on the network.
You plan to apply an AppLocker security policy to the R&D group.
You need to ensure that members of the R&D group are not allowed to upgrade the software.
What should you do?
A. Create an Audit only restriction based on the version of the software.
B. Create an Audit only restriction based on the publisher of the software.
C. Create an Enforce rule restriction based on the version of the software.
D. Create an Enforce rule restriction based on the publisher of the software.
Answer: C
Explanation:
http://technet.microsoft.com/en-us/library/ee619725(WS.10).aspx http://sourcedaddy.com/windows-7/applocker-rule-types.html
QUESTION 43
A company has computers running Windows 7 Enterprise and has hardware capable of displaying Windows Aero. A user is unable to use Windows Flip 3D and does not see previews of open windows from the taskbar.
You need to ensure that the computer displays Aero.
What should you do? (Choose all that apply.)
A. Upgrade to Windows 7 Ultimate.
B. Update to the latest video driver.
C. Run the Aero troubleshooter tool.
D. Add additional RAM in the computer.
E. Change the theme to an Aero theme.
F. Re-run the assessment for the Windows Experience Index.
Answer: BCE
QUESTION 44
Your company has a main office and a branch office.
The network contains a single Active Directory domain.
All computers are members of the domain.
Five users in the branch office report that their Windows 7 computer is slow when it runs multiple applications.
From your computer, you need to identify the application that uses the most processor on the computers.
Which tool should you use?
A. Performance Monitor
B. Reliability Monitor
C. Resource Monitor
D. System Information
Answer: A
Case Study 1 – Consolidated Messenger (QUESTION 45 – QUESTION 49)
Scenario
You are an enterprise desktop support technician for Consolidated Messenger.
Network Configuration
The company has three offices named Office1, Office2, and Office3. The offices connect to each other over the Internet by using VPN connections. Each office has an 802.11g wireless access point. All wireless access points are configured to use Radius01 for authentication.
Active Directory Configuration
The network contains one Active Directory domain named consolidatedmessenger.com. The relevant organizational unit structure is shown in the following diagram:
The relevant Group Policy objects (GPOs) in the domain are configured as shown in the following table:
Applications
The relevant applications on the network are shown in the following table:
Server Configuration
The relevant servers are configured as shown in the following table:
Client Configuration
Each office has 500 desktop computers that run Windows 7 Enterprise.
There are 250 mobile users that travel regularly between all three offices.
The mobile users have laptop computers that run Windows 7 Enterprise.
To prevent the spread of malware, the company restricts the use of USB devices and only allows the use of approved USB storage devices.
Printers
The marketing group has several printers that are shared on File01. A shared printer name Printer1 is a high-performance, black-and-white printer. A shared printer named Printer2 is a high-definition, photo-quality, color printer. Printer2 should only be used to print marketing brochures.
QUESTION 45
The chief financial officer (CFO) releases new guidelines that specify that only users from Finance are allowed to run FinanceApp1.
Users in the Marketing OU report that they can run FinanceApp1.
You need to ensure that only users in the Finance OU can run FinanceApp1.
What should you do?
A. In the AllComputers GPO, create a new AppLocker executable rule.
B. In the Desktops GPO and the Laptops GPO, create a new Windows Installer rule.
C. In the AllComputers GPO, create a software restriction policy and define a new hash rule.
D. In the Desktops GPO and the Laptops GPO, create a software restriction policy and define a
new path rule.
Answer: A
Explanation:
You might want to deploy application control policies onto Windows operating systems earlier than Windows Server 2008 R2 or Windows7.
You can use AppLocker policies only on the supported editions of Windows Server 2008 R2 and Windows7, but you can use SRP on supported editions of Windows beginning with Windows Server 2003 and WindowsXP.
http://technet.microsoft.com/en-us/library/ee460955(WS.10).aspx http://technet.microsoft.com/en-us/library/dd548340(WS.10).aspx
QUESTION 46
The help desk reports that users in the Marketing OU print draft documents, e-mails, and other miscellaneous documents on Printer2.
You need to recommend a solution so that marketing users print documents to Printer1 by default.
What should you do?
A. Enable printer pooling.
B. Configure Group Policy Preferences.
C. Modify the priorities of the shared printers.
D. Modify the permissions of the shared printers.
Answer: B
Explanation:
http://technet.microsoft.com/en-us/library/cc732092.aspx
Action: This type of preference item provides a choice of four actions: Create, Replace, Update, and Delete.
The behavior of the preference item varies with the action selected and whether the printer connection already exists.
Set this printer as the default printer – Select this check box to make the shared printer connection the default Windows printer for the current user. Only if a local printer is not present – Select this check box to bypass changing the default printer if there is a local printer configured on the computer. This setting is unavailable until you select the Set this printer as the default printer check box.
Note: A local printer is any printer that is not connected to a shared network printer. This includes physical printers connected to parallel, serial, and USB ports, TCP/IP printers, and virtual printers installed through software.
To create a new Shared Printer preference item
Open the Group Policy Management Console. Right-click the Group Policy object (GPO) that should contain the new preference item, and then click Edit. In the console tree under User Configuration, expand the Preferences folder, and then expand the Control Panel Settings folder.
Right-click the Printers node, point to New, and select Shared Printer. In the New Shared Printer Properties dialog box, select an Action for Group Policy to perform. Enter shared printer settings for Group Policy to configure or remove. Click the Common tab, configure any options, and then type your comments in the Description box.
Click OK. The new preference item appears in the details pane.
QUESTION 47
Users in the ERPApp1 pilot project report intermittent application issues.
You need to consolidate all application events for the users in a central location.
What should you do?
A. Configure event subscriptions.
B. Configure the Advanced Audit Policy Configuration settings.
C. Create a custom view in Event Viewer.
D. Create a user-defined Data Collector Set.
Answer: A
Explanation:
A. Configure event subscriptions.
Event Viewer enables you to view events on a single remote computer. However, troubleshooting an issue might require you to examine a set of events stored in multiple logs on multiple computers.
Windows 7 includes the ability to collect copies of events from multiple remote computers and store them locally. To specify which events to collect, you create an event subscription. Among other details, the subscription specifies exactly which events will be collected and in which log they will be stored locally. Once a subscription is active and events are being collected, you can view and manipulate these forwarded events as you would any other locally stored events.
B. Configure the Advanced Audit Policy Configuration settings. http://technet.microsoft.com/en-us/library/dd408940(WS.10).aspx
C. Create a custom view in Event Viewer.
You can create a filter that includes events from multiple event logs that satisfy specified criteria. You can then name and save that filter as a custom view.
To apply the filter associated with a saved custom view, you navigate to the custom view in the console tree and click its name.
D. Create a user-defined Data Collector Set.
You can create a custom Data Collector Set containing performance counters and configure alert activities based on the performance counters exceeding or dropping below limits you define. After creating the Data Collector Set, you must configure the actions the system will take when the alert criteria are met.
Membership in the local Performance Log Users or Administrators group, or equivalent, is the minimum required to complete these procedures.
http://www.youtube.com/watch?v=4xxKPgT5irU
http://www.youtube.com/watch?v=fKelHBve57k
QUESTION 48
The Office1 network link is brought offline for emergency maintenance.
Users in Office2 and Office3 report that they cannot connect to the wireless network.
You need to recommend changes to ensure that users in all offices can connect to the wireless network if a WAN link fails.
What should you recommend?
A. that redundant DHCP scopes be created
B. that additional RADIUS servers be deployed
C. that universal group caching be implemented
D. that additional default gateways be configured
Answer: B
QUESTION 49
The company purchases 500 USB flash drives from a new hardware vendor and distributes them to the users.
The help desk reports that the users are unable to access the new USB flash drives.
You need to ensure that users can save data on the USB flash drives.
What should you do?
A. Instruct the help desk to modify the BitLocker settings.
B. Instruct the help desk to modify the Windows Defender settings.
C. Request that an administrator modify the driver signing policy.
D. Request that an administrator modify the device installation restriction policy.
Answer: D
Explanation:
Open Group Policy Management and edit the applicable GPO in your Active Directory.
Disable autorun:
Computer Configuration \ Administrative Templates \ Windows Components \ AutoPlay Policies Turn off Autoplay: Enabled
Limit to approved devices:
Computer Configuration \ Administrative Templates \ System > Device Installation \ Device Installation Restrictions Allow installation of devices that match any of these device IDs: (add the corporate device)
Prevent installation of devices not described by other policy settings: Enabled
Case Study 2 – City Power & Light (QUESTION 50 – QUESTION 54)
Scenario
You are an enterprise desktop support technician for City Power & Light.
City Power & Light is a utility company. The company has a main office and a branch office.
The main office is located in Toronto. The branch office is located in Boston. The main office has 1,000 employees. The branch office has 10 employees.
Active Directory Configuration
The network contains a single Active Directory domain named cpandl.com. The functional level of the forest is Windows Server 2008 R2.
Server Configuration
All servers run Windows Server 2008 R2.
The relevant servers in the main office are configured as shown in the following table:
All computers in the main office are configured to use DHCP. All computers in the branch office are configured to use static IP addresses.
User Information
– All user accounts are standard user accounts.
– All client computers run Windows 7 Enterprise.
– Each portable computer has a PPT P-based VPN connection to the internal network.
Corporate Security Guidelines
– All users must be granted the least privileges possible.
– All locally stored documents must be encrypted by using Encrypting File System (EFS).
– The hard disk drives on all port able computers must be encrypted by using Windows BitLocker Drive Encryption (BitLocker).
– All encryption certificates must be stored on smart cards.
The company is deploying a new application.
When users attempt to install the application, they receive an error message indicating that they need administrative privileges to install it.
QUESTION 50
You need to recommend a solution to ensure that users can install the application.
The solution must adhere to the corporate security guidelines.
What should you recommend?
A. Publish the application by using a Group Policy.
B. Disable User Account Control (UAC) by using a Group Policy.
C. Add all domain users to the local Power Users group by using Restricted Groups.
D. Add the current users to the local Administrators group by using Group Policy preferences.
Answer: A
Explanation:
http://magalan.co.uk/install_software_via_group_policy.html
Instant Download Braindump2go New Released Microsoft 70-685 Exam Dumps PDF & VCE! Enjoy 1 year Free Updation! 100% Exam Pass Guaranteed Or Full Money Back!
http://www.braindump2go.com/70-685.html
