You need to meet the requirements

2018.Jan.10 New Added 70-697 Real Exam Questions:

QUESTION 90
You have a computer that runs Windows 10.
You have an application control policy on the computer.
You discover that the policy is not enforced on the computer.
You open the Services snap-in as shown in the exhibit. (Click the Exhibit button.)

You need to enforce the application control policy on the computer.
What should you do?

A. Set the Application Identity service Startup Type to Automatic and start theservice.
B. Set the Application Information service Startup Type to Automatic and start the service.
C. Set the Application Management service Startup Type to Automatic and start the service.
D. Set the Application Experience service Startup Type toAutomatic and start the service.

Answer: A
Explanation:
AppLocker, and its applications control policies,relies upon the Application Identity Service being active.
Note:When you install Windows 7, the startup type ofthApplication Identity Service is set to Manual. When testing AppLocker, you should keep the startup type as Manual in case you configure rules incorrectly. In that event, you can just reboot the computer and the AppLocker rules will no longer be in effect. Only when you are sure that your policies are applied correctly should you set the startup type of the Application Identity Service to Automatic.

QUESTION 94
You administer Windows 10 Enterprise client computers in your company network.
You change settings on a reference computer by using the Windows Firewall with Advanced Security tool.
You want to apply the same settings to other computers.
You need to save the windows Firewall with Advanced Security configuration settings from the reference computer.
You also need to be able to import the configuration settings into a Group Policy object later.
What should you do?

A. Open Local Group Policy Editor, select the Windows Firewall with Advanced Security node, and the select the Export Policy action.
B. Run the netsh advfirewall export c:\settings.wfw command.
C. Run the netsh firewall export c:\settings.xml command.
D. Run the netsh advfirewall export c:\settings.xml command.

Answer: A

QUESTION 95
A company has Windows 10 Enterprise computers in an Active Directory Domain Services (AD DS) domain.
A computer named COMPUTER1 has a shared printer named PRINTER1 installed and has Remote Desktop enabled. A user named Intern is a member of a security group named Sales. The Sales group is a member of the Remote Desktop Users group on COMPUTER1.
Only the Sales group has access to PRINTER1.
You need to configure COMPUTER1 to meet the following requirements:
– Allow only Intern to establish Remote Desktop connections to COMPUTERS1.
– Allow Intern to print to PRINTER1.
What should you do?

A. Assign Intern the Deny log on user right by using the Remote Desktop Services user right.
B. Assign Intern the Deny access to this computer from the network user right.
Assign the Sales group the Allow log on locally user right.
C. Remove Intern from the sales group.
D. Remove the Sales group from the Remote Desktop Users group and add Intern to the Remote Desktop Users group.

Answer: D

QUESTION 96
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
You have an application named app1 installed on computer named Computer1. Computer1 runs Windows10. App1 saves data to %UserProfile% \App1\Data.
You need to ensure that you can recover the App1 data if Computer1 fails.
What should you configure?

A. share permissions
B. application control policies
C. Encrypting File System (EFS) settings
D. NTFS permissions
E. HomeGroup settings
F. Microsoft OneDrive
G. Software restriction policies
H. Account policies

Answer: F

QUESTION 97
You are the network administrator for Contoso, Ltd. Many users have Windows 10 Enterprise laptops, and your IT department configures all of the to use BitLocker on all fixed drives.
Many users carry sensitive corporate data on their USB drives.
You need to enable BitLocker for these USB drives.
Which key protector option should you use?

A. a smartcard
B. a startup key
C. TPM+PIN
D. TPM+Password

Answer: D
Explanation:

please Reya send to [email protected].