NEW QUESTION 1
A company plans to deploy Outlook as a managed app to all users. You deploy Microsoft Intune.
You must deploy an internally developed iOS line of business (LOB) app to all users in the sales department. These users must only be able to share data between Outlook and the internally developed LOB app.
You need to configure the environment for sales department users. What should you do?

• A. Configure a security policy that forces encryption.
• B. Use the Intune App Wrapping Tool to repackage the internally developed LOB application.
• C. Upload the internally developed LOB app to the Apple App Stor
• D. Deploy the app to all users in the sales department.
• E. Use the Intune App Wrapping Tool to repackage the Outlook applicatio
• F. Set the value for the App ID to match to Application ID of the internally developed LOB application.

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/intune/app-wrapper-prepare-ios

NEW QUESTION 2
A company has tablet devices that run Windows 10. You configure auditing for devices. You need to determine which audit policies are configured on the devices.
What should you do?

• A. At a command prompt, run the following command:auditpol
• B. Run the following Windows PowerShell cmdlet:Get-AdminAuditLogConfig
• C. At a command prompt, run the following command:Dsget
• D. At a command prompt, run the following command:Winrm
• E. Run the following Windows PowerShell cmdlet:Get-AuditLogSearch

Answer: A

NEW QUESTION 3
You need to create the policy for the Tokyo branch office. What should you use?

• A. Azure Active Directory Device Registration Service
• B. System Center 2012 R2 Configuration Manager SP1
• C. Intune
• D. Azure Active Directory
• E. Azure Active Directory Domain Services

Answer: C

Explanation: References:
https://docs.microsoft.com/en-us/intune/deploy-use/introduction-to-device-compliance-policies-in-microsoft-intune

NEW QUESTION 4
HOTSPOT
A company runs Windows 10 Enterprise on all devices and has a single Active Directory Domain Services (AD DS) domain. The company uses Microsoft Intune to manage Windows Phones and iOS devices.
Security updates must be installed as quickly as possible. The update management solution must be able to automatically uninstall updates. You must not deploy any additional development or custom tools.
You need to implement a solution.
In the table below, identify the feature that each solution supports.
NOTE: Make only one selection in each column. Each correct answer is worth one point.

Answer:

Explanation:

NEW QUESTION 5
HOTSPOT
A Sales department user overwrites a version of a Word document on their device. You need to implement the required Group Policy settings.
How should you configure the Group Policy Objects (GPOs)? To answer, select the appropriate option from each list in the answer area.

Answer:

Explanation:

NEW QUESTION 6
DRAG DROP
You plan to deploy a Microsoft Azure RemoteApp collection by using a custom template image. The image will contain Microsoft Word and Excel Office 365 ProPlus programs.
You need to install the Word and Excel programs. The solution must minimize the amount of Internet traffic used during installation.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: The first step is to download the Office Deployment Tool.
You then need to modify the configuration file. This will be used to specify the installation options for Word and Excel.
You then run Setup.exe from the Office Deployment Tool with the /download option to download the required software based on the options in the configuration file.
The final step is to install Word and Excel by running Setup.exe from the Office Deployment Tool with the /configure option to install the required software based on the options in the configuration file.

NEW QUESTION 7
You need to import RemApp1 into the Azure RemoteApp Template Image Library. Which tool should you run first?

• A. Disk2VHD
• B. System Preparation Tool
• C. Application Compatibility Toolkit
• D. Azure Mobile Apps Software Development Kit installer.

Answer: B

NEW QUESTION 8
A company plans to deploy 100 new Windows 10 devices. Then pilot users are currently testing Windows 10 is not corporate network.
The pilot users report that the Hibernate option is not available. You need to enable hibernation on the Windows 10 devices. Which command should you run?

• A. Powercfg –energy
• B. Powercfg –h off
• C. Powercfg –h on
• D. Powercfg –deviseenablewake
• E. Powercfg -setactive

Answer: C

Explanation: References:
https://www.cnet.com/how-to/how-to-enable-or-disable-hibernate-in-windows-10/

NEW QUESTION 9
You have a computer named Computer1 that runs Windows 10 Enterprise. Computer1 is a member of an Active Directory domain named contoso.com.
You have a line-of-business universal app named App1. App1 is developed internally. You need to ensure that you can run App1 on Computer1. The solution must meet the
following requirements:
Minimize costs to deploy the app.
Minimize the attack surface on Computer1. What should you do?

• A. Have App1 certified by the Windows Store.
• B. Sign App1 with a certificate issued by a third-party certificate authority.
• C. From the Update & Security setting on Computer1, enable the Sideload apps setting.
• D. Run the Add–AppxProvisionedPackage cmdlet.

Answer: C

Explanation: To install the application, you need to ‘Sideload’ it. First you need to enable the Sideload apps setting.
LOBW indows Store apps that are not signed by the Windows Store can be sideloaded or added to a PC in the enterprise through scripts at runtime on a per-user basis. They can also be provisioned in an image by the enterprise so that the app is registered to each new user profile that's created on the PC. The requirements to sideload the app per-user or in the image are the same, but the Windows PowerShell cmdlets you use to add, get, and remove the apps are different.
Before you can sideload LOB Windows Store apps that are not signed by the Windows Store, you will need to configure the PC.

NEW QUESTION 10
A Sales department user overwrites a version of a Word document on their device. You need to configure synchronization.
Which actions should you perform?

• A. Install Azure AD Connect
• B. On Server2, install the Azure Active Directory Synchronization tool with password sync.
• C. On Server1, install Active Directory Federation Services (AD FS). On Server2, install an Active Directory Federation Services (AD FS) Proxy Server.
• D. On Server1, install the Azure Active Directory Synchronization tool with password sync.
• E. On Server1, install an Active Directory Federation Services (AD FS) Proxy serve
• F. On Server2, install Active Directory Federation Services (AD FS).

Answer: AE

Explanation: From case study: You need to implement synchronization between the on-premises AD DS domain and the Office 365 environment. The solution must use the latest supported
Microsoft technologies.
Incorrect ANswers
B, D: Azure Active Directory Synchronization tool is the old tool. It has been replaced with Azure AD Connect.
C: AD FS proxy goes on the server with Internet access.

NEW QUESTION 11
You are a system administrator for a department that has Windows 10 Enterprise computers in a domain configuration.
You deploy an application to all computers in the domain.
You need to use group policy to restrict certain groups from running the application. What should you do?

• A. Set up DirectAccess.
• B. Configure AppLocker.
• C. Disable BitLocker.
• D. Run the User State Management Tool.

Answer: B

Explanation: AppLocker is a feature in Windows Server 2012, Windows Server 2008 R2, Windows 8, and Windows 7 that advances the functionality of the Software Restriction Policies feature. AppLocker contains new capabilities and extensions that reduce administrative overhead and help administrators control how users can access and use files, such as executable files, scripts, Windows Installer files, and DLLs.
AppLocker rules can be applied to security groups. We can use a group policy to apply AppLocker rules to the security groups to prevent them from running the application.

NEW QUESTION 12
A company plans to actively manage mobile devices.
You need to create a list of all jailbroken devices after they are enrolled. What should you use?

• A. Azure Active Directory
• B. System Center 2012 R2 Configuration Manager SP1
• C. Intune
• D. Azure Active Directory Domain Services
• E. Azure Active Directory Device Registration Service

Answer: B

NEW QUESTION 13
You have a computer named Computer1 that runs Windows 10 Enterprise. Computer1 is configured to receive Windows updates from the Internet.
If a user is logged on to Computer1, you need to prevent Computer1 from automatically restarting without the logged on user’s consent after the installation of the Windows updates.
What should you do?

• A. Enable the Defer upgrades setting.
• B. Edit the Automatic App Update scheduled task.
• C. Configure the Choose how updates are delivered setting.
• D. Configure the Choose how updates are installed setting.

Answer: D

Explanation: In the Choose how updates are installed setting, you can use the drop-down menu to choose an option:
The Schedule a restart option will allow the user to choose when the computer is restarted. Of the answers given, this is the only way to prevent Computer1 from automatically restarting without the logged on user’s consent after the installation of the Windows updates.

NEW QUESTION 14
The company apps need to be made available to all mobile devices. You recently
published the new applications in Azure. What should you do?

• A. In the Microsoft Azure admin portal, add users to the app collection for the apps.
• B. In the MicrosoftAzure admin portal, enable multi-factor authentication.
• C. Instruct users to download the Remote Desktop app from the appropriate vendor app store.
• D. Run the following Windows PowerShell cmdlet:Update-AzureRemoteAppCollection

Answer: D

NEW QUESTION 15
HOTSPOT
You upgrade 15 client devices to Windows 10 Enterprise. You need to configure the devices.
Which Control Panel applets should you use? To answer, select the appropriate applet from each list in the answer area. Each correct answer is worth one point.

Answer:

Explanation:

NEW QUESTION 16
You configure Windows Remote Desktop to allow remote connections. You are testing the remote desktop connection.
When users that are not administrators sign in to the Remote Desktop Connection, the following error message displays: “To sign in remotely, you need the right to sign in through Remote Desktop Services.”
You need to ensure that all employees can access resources by using Remote Desktop Connection.
What should you do?

• A. In the local group policy, configure the Remote Desktop Connection Client to prompt for credentials on the client.
• B. Create a Group Policy Object that enables the Windows Firewall to allow inbound Remote Desktop Exceptions.
• C. Ensure that the employee’s device is joined to the domain.
• D. In Computer Management, add the Authenticated Users group to the Remote Users group.

Answer: D

NEW QUESTION 17
Your company runs Windows 10 Enterprise on all devices. You hire a new employee and provide a device for the employee.
All drives must be encrypted.
You need to determine whether volume C in the device is encrypted. At an elevated command prompt, which command should you run?

• A. mange-bde –setidentifier C:
• B. mange-bde –on C:
• C. mange-bde –unlock C:
• D. mange-bde –status C:

Answer: D

Explanation: References:
https://technet.microsoft.com/en-us/library/jj647767(v=ws.11).aspx#BKMK_managebde