We never believe in second chances and Braindump2go brings you the best 70-686 Exam Preparation Materials which will make you pass in the first attempt.We guarantee all questions and answers in our 70-686 Dumps are the latest released, we check all exam dumps questions from time to time according to Microsoft Official Center, in order to guarantee you can read the latest questions!
Vendor: Microsoft
Exam Code: 70-686
Exam Name: Pro: Windows 7, Enterprise Desktop Administrator
QUESTION 141
You have an AD DS security group named Toronto Users and another named Toronto Computers.
You are planning the deployment of a new browser by using Group Policy.
You need to ensure that the computers in each office comply with company requirements.
What should you recommend? (Choose all that apply.)
A. Download the Internet Explorer 9 Administrative Kit.
B. Deploy the Internet Explorer 9 Blocker to the Toronto Users group.
C. Add all Toronto computers to the Toronto Computers security group.
D. Deploy the Internet Explorer 9 Admin Kit to the Toronto Users group.
E. Add all Toronto users to the Toronto Users security group.
F. Download the Internet Explorer 9 Blocker Toolkit.
G. Deploy the Internet Explorer 9 Admin Kit to the Toronto Computers group.
H. Deploy the Internet Explorer 9 Blocker to the Toronto Computers group.
Answer: CFH
QUESTION 142
You need to recommend a Microsoft Enterprise Desktop Visualization (MED-V) image update
strategy to meet company requirements.
What should you recommend?
A. windows Update
B. Windows Intune
C. ConfigMgr
D. Windows Deployment Services (WDS)
Answer: C
QUESTION 143
You need to ensure that the company’s remote computers receive Windows updates at the same time as the internal computers.
What should you do?
A. Implement System Center Operations Manager (OpsMgr)
B. Install the Windows Deployment Services (WDS) role.
C. Install BranchCache in distnbuted mode.
D. Deploy DirectAccess
Answer: D
QUESTION 144
You are designing a Windows 7 deployment image.
You plan to partition the hard disk of each client computer during deployment.
You need to modify the unattended answer file by using a text editor.
Where should you add the disk information?
A. to the Generalize configuration pass
B. to the AuditSystem configuration pass
C. to the WindowsPE configuration pass
D. to the Specialize configuration pass
Answer: C
Explanation:
http://technet.microsoft.com/en-us/library/dd744551(v=ws.10).aspx
The windowsPE configuration pass also enables you to specify Windows Setup-related settings, including:
– Partition and format a hard disk.
– Select a specific Windows image to install, the path of that image, and any credentials required to access that image.
– Select a partition on the destination computer where you install Windows.
– Apply a product key and administrator password.
– Run specific commands during Windows Setup.
QUESTION 145
You are planning to deploy Windows 7 Enterprise and several custom applications.
You create a custom Windows 7 Enterprise image.
You need to validate that the custom applications will run after the deployment.
What should you do?
A. Use ImageX with the check option to mount the image.
B. Mount the custom image by using the Deployment Image Servicing and Management (DISM)
tool.
C. Deploy the custom image, and then run the sigverif.exe command.
D. Deploy the custom image to a Virtual Hard Disk (VHD), and then boot from the VHD.
Answer: D
Explanation:
The only way to check custom application is C in question, as need to load image to VHD or real PC, then boot from VHD or PC to windows, then run the customer application in windows.
QUESTION 146
Your company has an Active Directory Domain Services (AD DS) forest with a single domain.
The domain, organizational unit (OU), and Group Policy object (GPO) design is shown in the following diagram.
You deploy a Microsoft Windows Server Update Services (WSUS) server.
You need to ensure that only client computers that are members of the NY Computers OU use the WSUS server for updates.
Where should you define Windows Update settings?
A. in the User Configuration settings of the New York Computers GPO
B. in the Computer Configuration settings of the New York Baseline GPO
C. in the User Configuration settings of the New York Baseline GPO
D. in the Computer Configuration settings of the New York Computers GPO
Answer: D
Explanation:
To specify how and when computers are updated through Group Policy
In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.
In the details pane of Group Policy Object Editor, configure the appropriate policies.
See the following table for examples of the policies you might want to set..
refer to http://technet.microsoft.com/en-us/library/cc708536(v=WS.10).aspx
QUESTION 147
Your company has a main office and 5 branch offices.
Each office contains 200 client computers.
Each office has a direct connection to the Internet.
The branch offices are connected to the main office through dedicated connections.
You plan to deploy an update solution for all client computers by using Windows Server Update Services (WSUS).
You need to recommend a WSUS deployment solution.
The solution must minimize traffic over the dedicated connections.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Configure WSUS to download updates from an upstream server.
B. Deploy BranchCache in distributed cache mode in each office.
C. Deploy a WSUS server in each office.
D. Configure WSUS to download updates from Microsoft Update.
E. Deploy a WSUS server in the main office only.
Answer: CD
Explanation:
hints:
Each office has a direct connection to the Internet.
The branch offices are connected to the main office through dedicated connections.
QUESTION 148
Your company has client computers that run Windows Vista and client computers that run Windows 7.
The client computers connect directly to the Microsoft Update Web site once per week and automatically install all available security updates.
Microsoft releases a security update for Windows 7.
You have the following requirements:
– Create a report of all Windows 7 computers that are currently connected to the network and that do not have the security update installed.
– Use the least amount of administrative effort.
You need to manage the software update process to meet the requirements.
What should you do?
A. Deploy Microsoft Windows Server Update Services (WSUS).
Approve the security update for installation, and force a detection cycle on the client
computers.
B. Deploy Microsoft Windows Server Update Services (WSUS).
Approve the security update for detection, and force a detection cycle on the client
computers.
C. Use the Microsoft Baseline Configuration Analyzer (MBCA) to scan the client computers.
D. Use the Microsoft Baseline Security Analyzer (MBSA) to scan the client computers.
Configure MBSA to use the Microsoft Update site catalog.
Answer: D
Explanation:
Microsoft Baseline Security Analyzer
Microsoft Baseline Security Analyzer (MBSA) is an easy-to-use tool designed for the IT professional that helps small-and medium-sized businesses determine their security state in accordance with Microsoft security recommendations and offers specific remediation guidance. Improve your security management process by using MBSA to detect common security misconfigurations and missing security updates on your computer systems.
http://technet.microsoft.com/en-us/security/cc184924
QUESTION 149
Your company’s network is shown in the following diagram.
All client computers are members of the contoso.com Active Directory Domain Services (AD DS) domain. Each network segment is represented by an AD DS site object that is named to match the network segment.
Your company plans to deploy Windows 7 to all client computers.
You need to manage the deployment to ensure that client computers in branch office C can activate Windows.
What should you do?
A. Create a DNS service (SRV) resource record named
_vlmcs._udp.BranchOfficeC._sites.contoso.com.
B. Deploy the Multiple Activation Key (MAK) in branch office C.
C. Deploy the Key Management Service (KMS) in branch office C.
D. Create a DNS service (SRV) resource record named
_vlmcs._tcp.BranchOfficeC._sites.contoso.com.
Answer: B
Explanation:
Key Management Service (KMS) requires a count of 25 or higher from the KMS host to activate itself.
refer to http://technet.microsoft.com/en-us/library/ee939272.aspx
QUESTION 150
Your company has client computers that run Windows 7 Enterprise.
You need to provide 10 users with an additional operating system boot option.
What should you do?
A. Use the DiskPart tool in Windows PE to attach a Virtual Hard Drive (VHD).
B. Use BCDedit to add a native-boot Virtual Hard Drive (VHD) entry to the boot menu.
C. Use Bootcfg to modify the boot parameters.
D. Use BCDboot to modify the system partition.
Answer: B
Explanation:
BCDEdit is the primary tool for editing the boot configuration of Windows Vista and later versions of Windows.
It is included with the Windows Vista distribution in the %WINDIR%\System32 folder.
http://technet.microsoft.com/library/cc731662.aspx
Latest 70-686 Questions and Answers from Microsoft Exam Center Offered by Braindump2go for Free Share Now! Read and remember all Real Questions Answers, Guaranteed Pass 70-686 Real Test 100% Or Full Money Back!
