Question No: 21 – (Topic 5)
Users report that it takes a long time to access resources by using DirectAccess.
You need to provide the network administrator with a network capture of DirectAccess traffic.
Which tool should you use?
Question No: 22 – (Topic 5)
Remote users report that after they renew their smart card certificates, they are unable to log on to their computers by using their smart cards.
You need to ensure that users can log on by using their smart cards.
What should you instruct the users to do?
Change their smart card PINs.
Request a new smart card certificate.
Log on by using their user names and passwords, and then lock and unlock their computers.
Establish a VPN connection from the logon screen and use their smart cards for authentication.
Question No: 23 – (Topic 5)
Your users access a third-party Web site to fulfill purchase orders. The Web site is updated.
Users receive the following error message when they access the updated Web site:
quot;Internet Explorer has blocked this site from using an ActiveX control in an unsafe manner. As a result, this page may not display correctly.quot;
You need to ensure that users can access the Web site and that the Web site content is displayed correctly.
What should you do?
Modify the Internet Explorer AJAX settings.
Modify the Internet Explorer Internet zone settings.
Add the Web site to the Internet Explorer Restricted Sites zone.
Add the Web site to the Internet Explorer Compatibility View List.
Question No: 24 – (Topic 5)
The VPN connection between Site 1 and Site 3 fails. Users in Site 3 report that their computers take a long time to start and that they are unable to access the Internet.
You need to ensure that users in Site 3 are able to access the Internet if the VPN connection between Site 1 and Site 3 fails.
What should you request an administrator to do?
Add the DHCP server role to DC3.
Add the DNS server role to Server3.
Modify the 003 Router option in the DHCP scope on Server3.
Modify the 006 DNS Servers option in the DHCP scope on Server3.
Answer: D Explanation:
Chapter 6 Lesson 1 p 223 – 239
Chapter 7 p 325
003 Router option – configured at the scope level
006 DNS Servers option – server-level options and apply to all clients served by this DHCP server
The answer is D.
The PC can#39;t get internet access because the DNS servers are at site 1.
DC3 already has the DNS service on it, you just need to change the DNS settings in DHCP.
003 Router option is for changing gateways.
Question No: 25 – (Topic 5)
The help desk reports that remote desktop connections are not enabled on the public computers in the chalets. Consequently, the help desk must instruct local staff to enable remote desktop connections on each public computer.
You need to ensure that remote desktop connections are enabled when public computers are deployed in the chalets.
What should you do?
Enable Remote Desktop Connection in the standard computer image.
Instruct the help desk to enable Windows Remote Management (WinRM) on the public
Request that a network administrator create a logon script for the domain.
Request that a network administrator create a new Group Policy to enable remote desktop connections. Link the new Group Policy to each site.
Topic 6, Fabrikam, Inc Scenario:
You are an enterprise desktop support technician for Fabrikam, Inc.
Active Directory Information
The company has a main office and a branch office. The main office hosts all of the company#39;s servers. The main office connects to the branch office by using a WAN link.
The network contains a single Active Directory domain that has 500 users. The domain contains three domain controllers and an enterprise root certification authority (CA).
All servers run Windows Server 2008 R2.
All user accounts are in an organizational unit (OU) named Employees. The computer accounts for all desktop computers are in an OU named Desktops. The computer accounts for all portable computers are in an OU named Laptops.
A startup script is deployed to all computers by using Group Policy objects (GPOs).
All client computers run Windows 7 Enterprise. All users have desktop computers. All computers are members of the domain.
All desktop computers use wired connections to connect to the network. All portable computers use wireless connections to connect to the network. The wireless network is secured by using EAP-TLS.
Company policy states that all client computers must be configured by using DHCP.
The company has an internal Web site. The Web site is configured to use SSL encryption and to require client certificates. All company users can access the internal Web site.
Question No: 26 – (Topic 6)
The help desk reports that all
newly installed desktop computers cannot access the companys file server. The help desk sends you the screen capture shown in the exhibit. (Click the Exhibit button.)
You need to resolve the network connectivity issue. The solution must adhere to the company policy. What should you instruct help desk to do?
Modify Windows Firewall and enable File and Printer Sharing in the public profile.
Modify Windows Firewall and enable File and Printer Sharing in the domain profile.
Modify the network configuration and define the IPv4 default gateway.
Modify the network configuration to automatically obtain an IP address and a DNS server address.
Question No: 27 – (Topic 6)
The help desk reports that users receive a security warning message when they try to access the internal Web site shown in the exhibit. (Click the Exhibit button.)
The help desk confirms that users never received this security warning message before.
You need to provide a solution to prevent users from receiving the security warning when they try to access the internal Web site.
What should you do?
Instruct the users to download the certificate of the Web server.
Instruct the users to download a new certificate revocation list (CRL).
Request that a domain administrator renew the Web server SSL certificate.
Request that a domain administrator renew the user authentication certificates for all users.
Question No: 28 – (Topic 6)
Users in the branch office report slow network performance when they connect to the file shares in the main office.
You need to recommend a solution to improve performance when users access the file shares from the branch office. The solution must minimize hardware costs.
What should you recommend implementing?
Distributed File System Replication (DFSR)
Universal Group Membership Caching
Answer: A Explanation:
Question No: 29 – (Topic 6)
The company hires a new desktop support technician. The technician is added to the Administrators group on all client computers and the DHCP Users group on all DHCP servers.
The new technician reports that the DHCP snap-in is unavailable on his computer.
You need to ensure that the technician can view the configurations of the DHCP servers. What should you do?
Instruct the technician to customize the Start menu to display the administrative tools.
Instruct the technician to install Remote Server Administration Tools (RSAT) and to modify the Windows Features.
Request that the technician be added to the Server Operators group in Active Directory.
Request that the technician be added to the Network Configuration Operators group in Active Directory and modify the Windows Features.
Answer: B Explanation:
Topic 7, Contoso, Ltd Scenario:
You are an enterprise desktop support technician for Contoso, Ltd.
Contoso has one office. The IP addressing for Contoso is configured as shown in the following table.
Active Directory Configuration
You have an Active Directory forest that contains one domain named contoso.com. All domain controllers run Windows Server 2008 R2.
An OU exists for each department in the company.
The MainOffice Users and Computers OU contains the OUs for each department in the company. The Users OUs contains the user accounts for each department. The Computers OUs contain the computeraccounts for each department. The Domain Controllers OU contains the computer accounts for all domain controllers. The Servers OU contains the computer accounts for all other servers.
Custom Group Policy objects (GPOs) are linked to each departmental OU, the Domain Controllers OU, and the Servers OU.
The relevant servers are configured as shown in the following table.
A year ago, a Windows Server 2008 R2 VPN server was deployed. Ten sales users participated in a pilot project to test the new VPN. The pilot project lasted two months. After the pilot project, the VPN server was put into production. The VPN server allows L2TP/IPSec-based VPN connections only. The VPN server requires certificate authentication.
Network printers are located in a single room on each floor. Users can search Active Directory to find printers that are nearby. Print1 is the print server for all printers.
Client Computer Configuration
Most users have desktop computers. Several users in the sales and management departments have portable computers because they travel frequently. All client computers run Windows 7 Enterprise.
The Windows Internet Explorer proxy settings are configured on all client computers by using a GPO named GPO-IE. GPO-IE is linked to the domain.
All users in the company use a custom application named App1. App1 is manually installed on all client computers. A new version of App1 is available. Some features in the new version of App1 are incompatible with the previous version of App1.
Question No: 30 – (Topic 7)
The help desk reports that several users use the previous version of App1, which causes some data to become corrupt.
You need to recommend a solution to prevent all users from using the previous version of App1.
What should you recommend?
that a domain administrator create a GPO linked to the domain and configure AppLocker settings in the GPO
that a domain administrator create a GPO linked to the domain and configure Software Installation settings in the GPO
that the new version of App1 be added to the Data Execution Prevention (DEP) settings on each client computer
that the previous version of App1 be added to the Data Execution Prevention (DEP) settings on each client computer
100% Ensurepass Free Download!
–Download Free Demo:70-685 Demo PDF
100% Ensurepass Free Guaranteed!
–Download 2018 EnsurePass 70-685 Full Exam PDF and VCE
|Lowest Price Guarantee||Yes||No||No|
|Free VCE Simulator||Yes||No||No|