70-398 Premium Bundle

70-398 Premium Bundle

Planning for and Managing Devices in the Enterprise Certification Exam

4.5 
(44640 ratings)
0 QuestionsPractice Tests
0 PDFPrint version
December 3, 2024Last update

Microsoft 70-398 Free Practice Questions

are updated and are verified by experts. Once you have completely prepared with our you will be ready for the real 70-398 exam without a problem. We have . PASSED First attempt! Here What I Did.

Free 70-398 Demo Online For Microsoft Certifitcation:

NEW QUESTION 1
You have a computer named Computer1 that runs Windows 10 Enterprise. Computer1 is a member of an Active Directory domain named contoso.com.
You have a line-of-business universal app named App1. App1 is developed internally. You need to ensure that you can run App1 on Computer1. The solution must meet the
following requirements:
Minimize costs to deploy the app.
Minimize the attack surface on Computer1. What should you do?

  • A. Have App1 certified by the Windows Store.
  • B. Sign App1 with a certificate issued by a third-party certificate authority.
  • C. From the Update & Security setting on Computer1, enable the Sideload apps setting.
  • D. Run the Add–AppxProvisionedPackage cmdlet.

Answer: C

Explanation: To install the application, you need to ‘Sideload’ it. First you need to enable the Sideload apps setting.
LOBW indows Store apps that are not signed by the Windows Store can be sideloaded or added to a PC in the enterprise through scripts at runtime on a per-user basis. They can also be provisioned in an image by the enterprise so that the app is registered to each new user profile that's created on the PC. The requirements to sideload the app per-user or in the image are the same, but the Windows PowerShell cmdlets you use to add, get, and remove the apps are different.
Before you can sideload LOB Windows Store apps that are not signed by the Windows Store, you will need to configure the PC.

NEW QUESTION 2
DRAG DROP
Your organization needs to implement a Dynamic Access Control (DAC) plan that includes user and device claims.
The domain controllers have not been enabled to provide claims and compound authentication.
You need to configure the Default Domain Controller’s Group Policy Object to provide claims and compound authentication.
You decide to first enable the domain controllers to provide claims and compound authentication on request.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
70-398 dumps exhibit

    Answer:

    Explanation: 70-398 dumps exhibit

    NEW QUESTION 3
    A company plans uses Microsoft Azure to manage directory users. In Azure, you create a virtual network and a DNS record.
    You need to set up the connection between the virtual network and your on-premises
    network.
    Which two actions will achieve the goal? Each correct answer presents a complete solution.
    NOTE: Each correct selection is worth one point.

    • A. Configure the on-premises routing infrastructure to forward traffic destined for the address space of the Azure Virtual Network to the on-premises virtual private network device.
    • B. Configure the private IP address space of the Azure Virtual Network.
    • C. Manually create DNS records to point to the Azure virtual machines.
    • D. Extract the server license certificate key from the configuration data, and transfer the key to an on-premises hardware security module.

    Answer: AB

    Explanation: References:
    https://docs.microsoft.com/en-us/office365/enterprise/connect-an-on-premises-network-to-a-microsoft-azure-virtual-network

    NEW QUESTION 4
    DRAG DROP
    You need to configure the mobile devices for the Engineering department users.
    In the Microsoft Intune administration portal, which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
    70-398 dumps exhibit

      Answer:

      Explanation: References:
      https://docs.microsoft.com/en-us/intune/deploy-use/configure-intune-certificate-profiles

      NEW QUESTION 5
      A Sales department user overwrites a version of a Word document on their device.
      You need to view the events that you monitored for Marketing users. Which log file should you view?

      • A. StatusAgent Log
      • B. System Event Log
      • C. Security Event Log
      • D. PolicyAgent Log
      • E. Application Event Log

      Answer: C

      Explanation: References:
      https://docs.microsoft.com/en-us/windows/device-security/auditing/view-the-security-event- log

      NEW QUESTION 6
      DRAG DROP
      You are deploying Windows 10 clients for a small company. The environment does not have access to any network shares, and USB drives are not allowed.
      You need to determine which recovery options you can use.
      For each scenario, which recovery option should you use? To answer, drag the appropriate recovery tool to the correct scenario. Each recovery tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. Each correct answer is worth one point.
      70-398 dumps exhibit

        Answer:

        Explanation: 70-398 dumps exhibit

        NEW QUESTION 7
        HOTSPOT
        You upgrade 15 client devices to Windows 10 Enterprise. You need to configure the devices.
        Which Control Panel applets should you use? To answer, select the appropriate applet from each list in the answer area. Each correct answer is worth one point.
        70-398 dumps exhibit

          Answer:

          Explanation: 70-398 dumps exhibit

          NEW QUESTION 8
          A company deploys Outlook to all users that have iOS and Android devices. The company uses Microsoft Intune to manage mobile devices. You enforce a conditional access policy that requires users to enroll devices in Intune before they can access Exchange ActiveSync data.
          Some Android and iOS users access Exchange ActiveSync data by using unmanaged email applications.
          You need to ensure that users Exchange ActiveSync data only from Outlook. What should you do?

          • A. Create an Exchange access rul
          • B. Select Outlook family and Outlook for Android and iOS as the model.
          • C. In Intune, create a new compliance policy that forces email accounts to be managed by Intune.
          • D. Create a security group for all users that are not using Outlook as the email application
          • E. Configure Exchange Online conditional access policy to exempt members of the group.
          • F. Configure a custom Open Mobile Alliance Uniform Resource Identifier setting and deploy the setting to all users.

          Answer: A

          NEW QUESTION 9
          You have a Windows 10 Enterprise computer.
          The computer has a shared folder named C:Marketing. The shared folder is on an NTFS volume.
          The current NTFS and share permissions are configured as follows.
          70-398 dumps exhibit
          UserA is a member of both the Everyone group and the Marketing group. UserA must access C:Marketing from across the network. You need to identify the effective permissions of UserA to the C:Marketing folder.
          What permission should you identify?

          • A. Full Control
          • B. Read and Execute
          • C. Read
          • D. Modify

          Answer: D

          Explanation: UserA is a member of both the Everyone group and the Marketing group and UserA must access C:Marketing from across the network.
          When accessing a file locally, you combine the NTFS permissions granted to your account either directly or by way of group membership. The ‘least’ restrictive permission is then the permission that applies.
          In this question, the NTFS permission is the least restrictive of Read/Execute and Modify… so Modify is the effective permission.
          When accessing a folder or file across the network, you combine the effective NTFS permissions (Modify in this case) with the effective Share permissions granted to your account either directly or by way of group membership (Full Control in this case). The ‘most’ restrictive permission is then the permission that applies. Modify is more restrictive than Full Control so Modify is the effective permission.

          NEW QUESTION 10
          HOTSPOT
          You need to configure access to the custom inventory app for Sales department users.
          Which action should you perform to complete each task? To answer, select the appropriate action for each task in the answer area.
          70-398 dumps exhibit

            Answer:

            Explanation: References:
            https://docs.microsoft.com/en-us/intune/deploy-use/create-and-deploy-mobile-app-management-policies-with-microsoft-intune

            NEW QUESTION 11
            You use a Windows 8.1 tablet. The tablet receives Windows Update updates automatically from the Internet.
            The tablet has Wi-Fi and is connected to a 3G mobile broadband Wi-Fi hot spot. You need to minimize data usage while connected to this hot spot.
            What should you do?

            • A. Turn on Airplane Mode.
            • B. Disable File and Print Sharing for mobile broadband connections.
            • C. Configure the interface metric of IP settings for Wi-Fi connection as1.
            • D. Edit the Inbound Rule of Windows Firewall, and then disable Internet Control Message Protocol (ICMP) traffic.
            • E. Configure the broadband connection as a metered network.

            Answer: E

            Explanation: You can limit the bandwidth used by the broadband connection by configuring it as a metered network. A metered network is a network where data downloaded is ‘metered’(measured) and you are charged for the amount of data downloaded.
            Setting a connection as metered prevents Windows from automatically using bandwidth in a number of ways including the following:
            Disables automatic downloading of Windows updates: Windows won’t automatically download updates from Windows Update on metered Internet connections. You’ll get a “Download” button you can click whenever you want to install updates.
            Disables automatic downloading of app updates: The Windows Store won’t automatically download updates for your installed “Store apps” on metered connections, either. Desktop apps like Chrome, Firefox, and others will continue updating themselves normally.
            Tiles may not update: Microsoft says that the live tiles on your Start menu or Start screen “may” stop updating on a metered connection:

            NEW QUESTION 12
            You need to publish the ProseWare premium apps. What should you do?

            • A. Create a new storage account.
            • B. Create a new RemoteApp collection by using the Quick Create option.
            • C. Create a new RemoteAppcollection and assign the collection to an existing Azure virtualnetwork.
            • D. Create a new Traffic Manager profile.
            • E. Create and provision a new ExpressRoute circuit.

            Answer: C

            Explanation: References:
            https://azure.microsoft.com/en-gb/documentation/articles/remoteapp-create-hybrid- deployment/

            NEW QUESTION 13
            A Sales department user overwrites a version of a Word document on their device. You need to configure synchronization.
            Which option should you use?

            • A. the IdFix tool
            • B. Azure Active Directory Connect
            • C. Forefront Identity Manager 2010 R2
            • D. the Azure Active Directory Synchronization tool
            • E. the Directory Synchronization tool

            Answer: B

            NEW QUESTION 14
            HOTSPOT
            A Sales department user overwrites a version of a Word document on their device.
            You need to monitor the company’s environment according to the technical requirements.
            What should you do? To answer, select the appropriate option from each list in the answer area.
            70-398 dumps exhibit

              Answer:

              Explanation: 70-398 dumps exhibit

              NEW QUESTION 15
              HOTSPOT
              A Sales department user overwrites a version of a Word document on their device. You need to implement the required Group Policy settings.
              How should you configure the Group Policy Objects (GPOs)? To answer, select the appropriate option from each list in the answer area.
              70-398 dumps exhibit

                Answer:

                Explanation: 70-398 dumps exhibit

                NEW QUESTION 16
                HOTSPOT
                Your company upgrades a research and development department workstation to a Windows 10 Enterprise computer. Two of the workstation’s folders need to be encrypted. The folders are named C:ProtectedFiles and C:Backups.
                You attempt to encrypt the folders. The output is shown in the following exhibit.
                70-398 dumps exhibit
                Use the drop-down menus to select the answer choice that completes each statement. NOTE: Each correct selection is worth one point.
                70-398 dumps exhibit
                70-398 dumps exhibit

                  Answer:

                  Explanation: We can see from the image below that all files and the ProtectedFiles folder were encrypted successfully (There are no errors and there is an [OK] message for each action).
                  70-398 dumps exhibit
                  The image below shows that the folder was encrypted successfully (Setting the directory Backups to encrypt new files [OK]).
                  The file Backup.zip failed to encrypt because the file is read only. The other file, OldBackup.zip was encrypted successfully.
                  70-398 dumps exhibit
                  References: https://technet.microsoft.com/en-us/library/bb490878.aspx

                  NEW QUESTION 17
                  DRAG DROP
                  You manage 500 laptop devices and 250 desktop devices that run Windows 10. All devices are joined to an Active Directory Domain Services (AD DS) domain. You also manage a Windows Server 2012 R2 file server named FILE01.
                  All user document folders must be located on FILE01.
                  You need to ensure that the mobile users can access documents offline.
                  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
                  70-398 dumps exhibit

                    Answer:

                    Explanation: 70-398 dumps exhibit

                    P.S. Easily pass 70-398 Exam with 74 Q&As Surepassexam Dumps & pdf Version, Welcome to Download the Newest Surepassexam 70-398 Dumps: https://www.surepassexam.com/70-398-exam-dumps.html (74 New Questions)


                    START 70-398 EXAM