Free Microsoft 70-689 Exam Dumps Questions & Answers

A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 8.
You need to minimize the amount of Trusted Platform Module (TPM) authorization information that is stored in the registry.
What should you do?

• A.  Create a Group Policy object (GPO) that sets the Configure the level of TPM owner authorization information available to operating system policy setting to None.
• B.  Create a Group Policy object (GPO) that disables the Configure the level of TPM owner authorization information available to operating system policy setting.
• C.  Create a Group Policy object (GPO) that enables the Turn on TPM Local Encryption policy setting.
• D.  Enable Platform Configuration Register indices (PCRs) 0, 2, 4, and 11 for the Configure TPM validation profile for native UEFI firmware configuration policy setting.

DRAG DROP
You administer desktop computers in your company's research department. The computers run Windows 8 Enterprise and are members of a workgroup.
A new security policy states that all traffic between computers in the research department must be encrypted and authenticated.
You need to configure the requested traffic authentication settings by using Windows Firewall with Advanced Security.
Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

Correct Answer:

You administer computers that run Windows 8 Enterprise and are members of an Active Directory domain.
Some volumes on the computers are encrypted with BitLOcker. The BitLocker recovery passwords are stored in Active Directory. A user forgets the BitLocker password to local drive E: and is unable to access the protected volume.
You need to provide a BitLocker recovery key to unlock the protected volume.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

• A.  Ask the user for his or her computer name.
• B.  Ask the user for his or her logon name.
• C.  Ask the user to run the manage-bde -protectors -disable e: command.
• D.  Ask the user for a recovery key ID for the protected drive.

HOTSPOT
Your company has a main office and two branch offices named Branch1 and Branch2. The main office contains a file server named Server1 that has BranchCache enabled. Branch1 contains a server named Server2 that is configured as a hosted cache server.
All client computers run Windows 8.1 Enterprise. All of the computers are joined to an Active Directory domain.
The BranchCache settings of all the computers are configured as shown in the following exhibit. (Click the Exhibit button.)

In the table below, identify the effective setting for the client computers in each branch office. Make one selection in each column. Each correct selection is worth one point.

Correct Answer:

You administer Windows 8.1 Enterprise computers in your company network. You provide remote employees with a Windows To Go workspace.
A remote employee informs you that his workspace requires activation.
You need to activate the workspace.
What should you do?

• A.  Give the employee a Multiple Activation Key (MAK).
• B.  Instruct the employee to run Windows Update from the workspace.
• C.  Instruct the employee to connect to the company network from the workspace by using VPN.
• D.  Instruct the employee to run the slmgr /upk command from the workspace.