Online Access Free 070-398 Exam Questions

HOTSPOT
A Sales department user overwrites a version of a Word document on their device.
You need to implement the required Group Policy settings.
How should you configure the Group Policy Objects (GPOs)? To answer, select the appropriate option from each list in the answer area.

Correct Answer:

DRAG DROP
You need to resolve the Security team service announcement.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

Explanation:
1: In the Mandatory Updates list, filter by Needing additional approvals, and approve the update.
2: Select the Windows 10 computer device group in the Approval wizard.
3: Configure the approval settings to require install with a deadline as soon as possible.

References:
https://www.credera.com/blog/infrastructure/understanding-windows-updates-for-pcs-with- microsoft-intune/
Topic 4, Contoso Ltd
Overview
You are the system administrator for an insurance company named Contoso, Ltd. The company has an on-premises Active Directory Services (AD DS) domain named contoso.com, and a Microsoft Office 365 environment. You deploy the following operating systems across the enterprise:

You configure removable storage usage auditing for all Dallas devices.
Contractors
You hire 25 contractors. The contractors must use their own devices to access Microsoft SharePoint Online sites in the company's Office 365 environment. They must use Windows BitLocker and store a recovery key in Microsoft OneDrive.
User synchronization and authentication
You need to implement synchronization between the on-premises AD DS domain and the Office 365 environment. The solution must use the latest supported Microsoft technologies.
Users must be able to reset their own passwords by using the Microsoft Office 365 portal.
When a user resets their Office 365 password, the password for the user's on-premises AD DS account must also reset.
Users must be able to sign in to Office 365 by using their AD DS credentials.
Security
You must prevent all users in Seattle except Sales users from using any removable devices. Sales users must be able to fully access locally attached tape drives. Sales users must be prevented from writing to removable drives.
Technical requirements
General
You deploy a new application to the devices in Seattle. Sales department users in Seattle run an application that only works on devices that run windows 7.
You deploy a new display driver to all devices in Dallas.
Backup and Recovery
You create system images for all devices that run Windows 7. You must create a new system image each time you update these devices. You schedule file versioning for these devices to occur at 09:00 and 17:00 each day on Monday through Friday.
All devices that run Windows 10 must back up the C:\CompanyDoes folder to a network drive.
You must configure all devices that run Windows 8.1 to use a recovery drive.
Monitoring
You must review and take action on any alerts for Active Directory Federation Services (AD FS) applications. You must create detailed views of AD FS log on patterns. You must minimize the number of open firewall ports.
You must monitor audit events for all devices used by the Marketing user group.
Problem Statements
User1 makes frequent changes to a Microsoft Excel workbook each day. Today at 12:00, User1 overwrites the existing document on a device that runs Windows 7.
Users in Seattle report a variety of computer issues. You must use the quickest method to revert the devices to a working state. Users in Dallas also report issues. You must correct the issues that are interfering with existing applications or files.

A Datum Corporation plans to implement Mobile Device Management (MDM). The company uses the domain name Adatum.com. The company plans to integrate Microsoft Intune with System Center 2012 R2 Configuration Manager. Configuration Manager uses the public IP address 102.157.31.12. Domain Name System (DNS) is not configured to support MDM.You need to create a DNS record for automatically enrolling the device.Which DNS record type should you create?

• A.a PTR record named 102.157.31.12 that points to EnterpriseEnrollment.Adatum.com
• B.a CNAME record named MDMEnrollment.adatum.com that points to
  manage.microsoft.com.
• C.a CNAME record named EnterpriseEnrollment.adatum.com that points to
  manage.microsoft.com.
• D.an A resource record named autoenroll.adatum.com that points to 102.157.31.12

HOTSPOT
You upgrade 15 client devices to Windows 10 Enterprise.
You need to configure the devices.
Which Control Panel applets should you use? To answer, select the appropriate applet from each list in the answer area. Each correct answer is worth one point.

Correct Answer:

You manage an Active Directory Domain Services (AD DS) domain that has 500 devices.
All devices run Windows 7 Enterprise Edition. You deploy System Center 2012 R2 Configuration Manager SP1.
You plan to upgrade all devices to Windows 10 Enterprise and encrypt the devices by using Microsoft BitLocker Administration and Monitoring (MBAM), Data secured with BitLocker must not be stored on USB devices.
You need to ensure that existing devices are ready for the upgrade.
What should you do?

• A.Integrate MBAM with System Center Configuration Manager. Deploy the BitLocker prepare task sequence to all laptop computers.
• B.In the system BIOS, verify that all devices have a Trusted Platform Module (TPM) 1.2 or higher chip. Enable the TPM chip.
• C.From System Center Configuration Manager, create a custom deploy task sequence that enables MBAM. Deploy the task sequence to all Windows 7 devices.
• D.Implement MBAM in thedomain. Create an MBAM group policy and apply the policy to all devices.
• E.Verify that the System Center Configuration Manager agent is installed on all devices.