70-685 Exam Questions - Online Test

70-685 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Testking offers free demo for 70-685 exam. "Pro: Windows 7, Enterprise Desktop Support Technician", also known as 70-685 exam, is a Microsoft Certification. This set of posts, Passing the Microsoft 70-685 exam, will help you answer those questions. The 70-685 Questions & Answers covers all the knowledge points of the real exam. 100% real Microsoft 70-685 exams and revised by experts!

Q11. This is the first in a series of questions that all present the same scenario. For your convenience, the scenario is repeated in each question. Each presents a different goal and answer choices, but the text of the scenario is exactly the same in each in this series.

Topic 12, Tailspin Toys

Scenario::

Background

You are the desktop support technician for Tailspin Toys. Tailspin Toys manufacturers and distributes children's toys. The network environment includes a server infrastructure running on Windows Server 2003 Service Pack (SP) 2 and Windows Server 2008 R2, Active Directory with the forest and domain levels set at Windows Server 2003, and Active Directory Certificate Services (AD CS) running on Windows Server 2008 R2. The company has a Microsoft Enterprise Agreement (EA) with Software Assurance (SA).

The company sites, network connectivity, and site technologies are shown in the following table:

The company uses Microsoft SharePoint 2010 as the company intranet and as a document repository for company-related Microsoft Office documents. The URL for the intranet is intranet.tailspintoys.com . There is a Group Policy object (GPO) that applies to all client computers that allows employees who are connected to the corporate network to go to the intranet site without having to enter authentication information.

All users are using Microsoft Internet Explorer 8. All users have enabled the Internet Explorer SmartScreen Filter and the Internet Explorer phishing filter. All of the desktop support technicians are members of a security group named Desktop Admins. The Desktop Admins group is a member of the local Administrators group on all client computers. The desktop support technicians use the Microsoft Diagnostics and Recovery Toolset to perform various troubleshooting and repairs.

All Windows 7 client computers have a directory named tailspintoys\scripts in the root of the operating system drive. The directory contains four unique .vbs files named scriptl.vbs, script2.vbs, script3.vbs, and script4.vbs.

Software Environment

An existing GPO named AppLockdown applies to Windows 7 machines and uses AppLocker to ensure that:

   No .bat files are allowed to be run by users and rules are enforced

An existing GPO named RestrictApps applies to Windows XP client computers and uses a Software Restriction Policy to ensure that:

   No .bat files are allowed to be run by users and rules are enforced

Data Protection Environment

Some users at the Manufacturing site use EFS to encrypt data.

A user account named EFSAdmin has been designated as the Data Recovery Agent (DRA).

The DRA certificate and private key are stored on a portable USB hard drive.

As part of the yearly security compliance audits, a vendor is due to arrive at Tailspin Toys in a month to perform the yearly audit. To prepare for the audit, management has asked you to participate in an internal review of the company's existing security configurations related to network security and data security. The management team has issued the following requirements:

New software requirements

All installation programs must be digitally signed.

Minimum permissions must be granted for installation of programs.

Internet Explorer requirements

Users must not be able to bypass certificate warnings.

Users must not be able to add Internet Explorer add-ons unless the add-ons are approved by IT.

Data protection requirements

All portable storage devices must use a data encryption technology. 

The solution must meet the following requirements: 

Allow all users a minimum of read access to the encrypted data while working from their company client computers. Encrypt entire contents of portable storage devices. Minimize administrative overhead for users as files and folders are added to the portable storage devices.

Recovery information for client computer hard drives must be centrally stored and protected with data encryption.

Users at the Manufacturing site must have a secondary method of decrypting their existing files if they lose access to their certificate and private key or if the EFS Admin's certificate is not available.

You need to recommend a solution to ensure that a secondary method is available to users. The solution must not require accessing or altering the existing encrypted files before decrypting them.

What should you recommend that the users do?

A. From the command line, run the cipher.exe /e command.

B. From the command line, run the certutil.exe /backupKey command.

C. Enroll for a secondary EFS certificate.

D. Export their EFS certificates with private keys to an external location.

Answer: D

Q12. The help desk technicians discover that some computers have not installed the latest updates for Windows. The Windows Update log files on the computers show that to complete the installation of several updates the computers must be restarted.

You need to ensure that future updates are successfully installed on all computers.

What should you request?

A. the logon hours for all user accounts be set from 06:00 to 22:00

B. the Delay Restart for scheduled installations setting in the WSUS Policy GPO be set to disabled

C. the Allow Automatic Updates immediate installation setting in the WSUS Policy GPO be set to enabled

D. the No auto-restart with logged on users for scheduled automatic updates installations setting in the WSUS Policy GPO be set to disabled

Answer: D

Q13. Your company has a branch office. The office has two 48-port network switches named Switch1 and Switch2.

The company purchases several new computers that have identical hardware. The new computers run Windows 7.The help desk reports that the new computers that connect to Switch1 are unable to connect to network resources and do not receive IP configurations from the DHCP server.

Existing computers that connect to Switch1 can access network resources. The new computers that connect to Switch2 can also access network resources.

You need to ensure that all computers can connect to network resources.

What should you do?

A. Re-install the network card driver.

B. Disable IPv6 on the network interface.

C. Disable and then enable the network interface.

D. Disable the AutoNegotiation setting on the network interface.

Answer: D

Q14. You have an Active Directory domain. All client computers run Windows 7 and are joined to the domain. All administrators have laptop computers that have integrated smart card readers. All administrator accounts are configured to require the smart cards to log on to the domain.

A smart card reader fails on your laptop. You order a replacement smart card reader. The new reader will be delivered next week.

You need to ensure that you can log on to the domain by using your administrative user account.

You request that a domain administrator modify the properties of your user account.

What else should you request the domain administrator to do?

A. Reset your computer account.

B. Reset your user account password.

C. Disable and enable your user account.

D. Remove your computer from the domain, and then join your computer to the domain.

Answer: B

Q15. A user at the Headquarters site is able to run .bat files on LAPTOP01. However, you notice that the AppLockdown GPO was successfully applied to the computer.

You need to ensure that the user's computer complies with the existing AppLockdown GPO settings.

Which service should you start on LAPTOP01?

A. Application Experience

B. Application Identity

C. Application Management

D. Application Information

Answer: B

Q16. All client computers on your company network run Windows 7.

An application has stopped working. The application is dependent on a service that runs automatically and logs on to the domain by using a dedicated service account. You also discover that an entry in the event log has the following message:

"Logon failure: unknown user name or bad password."

You need to ensure that the service runs successfully.

What should you do?

A. Add the dedicated account to the local Administrators group.

B. Add the employee user account to the local Administrators group.

C. Reset the employee password and configure it to never expire.

D. Reset the service account password and configure it to never expire.

Answer: D

Q17. A company has a main office and a branch office. The network contains a single Active Directory domain. All computers are members of the domain.

Five users in the branch office report that their Windows 7 computer is slow when it runs multiple applications.

From your computer, you need to identify the application that consumes the most processor resources on the computers.

Which tool should you use?

A. Event Viewer

B. Performance Monitor

C. CPU Meter gadget

D. Task Manager

Answer: B

Q18. The help desk reports that they receive many calls from remote users who cannot access Internet Web sites while they are connected to the VPN. The help desk instructs the users to manually configure the VPN connection so that the users can access Internet Web sites while connected to the VPN.

You need to provide a recommendation to reduce the number of calls to the help desk regarding this issue.

What should you recommend?

A. Deploy a Network Policy Server (NPS).

B. Replace the SSTP-based VPN with a PPTP-based VPN.

C. Issue computer certificates from a trusted root certification authority (CA) to all remote users.

D. Create and distribute Connection Manager Administration Kit (CMAK) profiles to all remote users.

Answer: D

Q19. The users on your network have portable computers that run Windows 7 Ultimate.

Some users report that the batteries on their computers lose their charge faster than before.

You need to identify which batteries to replace.

What should you do?

A. From each computer, run Powercfg.exe.

B. From each computer, run Windows Resource Monitor.

C. From a network server, run MSConfig.exe.

D. From a network server, run System Information.

Answer: A

Q20. A company has computers running Windows 7 Enterprise and has hardware capable of displaying Windows Aero. A user is unable to use Windows Flip 3D and does not see previews of open windows from the taskbar. You need to ensure that the computer displays Aero. 

What should you do? (Choose all that apply.)

A. Upgrade to Windows 7 Ultimate.

B. Update to the latest video driver.

C. Run the Aero troubleshooter tool.

D. Add additional RAM in the computer.

E. Change the theme to an Aero theme.

F. Re-run the assessment for the Windows Experience Index.

Answer: BCE