Microsoft 70-398 Study Guides 2021

NEW QUESTION 1
HOTSPOT
Overview
You need to configure email access for the Engineering department users.
What should you do? To answer, select the appropriate action from each list in the answer area.

Answer:

Explanation:

NEW QUESTION 2
DRAG DROP
You need to resolve the issue that engineering department users report regarding their Windows 10 devices.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: 1: Create a new policy using the Itune Agent Settings template 2: Configure the delay between restart prompts for 720 minutes 3: Deploy a policy to the engineering group

NEW QUESTION 3
You use a Windows 8.1 tablet. The tablet receives Windows Update updates automatically from the Internet.
The tablet has Wi-Fi and is connected to a 3G mobile broadband Wi-Fi hot spot. You need to minimize data usage while connected to this hot spot.
What should you do?

• A. Turn on Airplane Mode.
• B. Disable File and Print Sharing for mobile broadband connections.
• C. Configure the interface metric of IP settings for Wi-Fi connection as1.
• D. Edit the Inbound Rule of Windows Firewall, and then disable Internet Control Message Protocol (ICMP) traffic.
• E. Configure the broadband connection as a metered network.

Answer: E

Explanation: You can limit the bandwidth used by the broadband connection by configuring it as a metered network. A metered network is a network where data downloaded is ‘metered’(measured) and you are charged for the amount of data downloaded.
Setting a connection as metered prevents Windows from automatically using bandwidth in a number of ways including the following:
Disables automatic downloading of Windows updates: Windows won’t automatically download updates from Windows Update on metered Internet connections. You’ll get a “Download” button you can click whenever you want to install updates.
Disables automatic downloading of app updates: The Windows Store won’t automatically download updates for your installed “Store apps” on metered connections, either. Desktop apps like Chrome, Firefox, and others will continue updating themselves normally.
Tiles may not update: Microsoft says that the live tiles on your Start menu or Start screen “may” stop updating on a metered connection:

NEW QUESTION 4
HOTSPOT
A Sales department user overwrites a version of a Word document on their device. You need to implement the required Group Policy settings.
How should you configure the Group Policy Objects (GPOs)? To answer, select the appropriate option from each list in the answer area.

Answer:

Explanation:

NEW QUESTION 5
A company has Windows 10 Enterprise client computers. Client computers are connected to a corporate private network. You deploy a Remote Desktop Gateway, DirectAccess, and a VPN server at the corporate main office.
Users are currently unable to connect from their home computers to their work computers by using Remote Desktop
You need to ensure that users can remotely connect to their office computers by using Remote Desktop. Users must not be able to access any other corporate network resource from their home computers.
What should you do?

• A. Configure a Virtual Private Network connection.
• B. Configure the local resource settings of the Remote Desktop connection.
• C. Configure a DirectAccess connection.
• D. Configure the Remote Desktop Gateway IP address in the advanced Remote Desktop Connection settings on each client.

Answer: D

Explanation: The solution is to deploy Remote Desktop Gateway in the office. Remote users can then connect to their computers on the office network by using Remote Desktop client on their home computers configured with the IP address of the Remote DesktopGateway. Remote Desktop Gateway (RD Gateway) is a role service that enables authorized remote users to connect to resources on an internal corporate or private network, from any
Internet-connected device that can run the Remote Desktop Connection (RDC) client. The network resources can be Remote Desktop Session Host (RD Session Host) servers, RD Session Host servers running RemoteApp programs, or computers with Remote Desktop enabled.
RD Gateway uses the Remote Desktop Protocol (RDP) over HTTPS to establish a secure, encrypted connection between remote users on the Internet and the internal network resources on which their productivity applications run.
RD Gateway provides a comprehensive security configuration model that enables you to control access to specific internal network resources. RD Gateway provides a point-to-point RDP connection, rather than allowing remote users access to all internal network resources.

NEW QUESTION 6
Your company runs Windows 10 Enterprise on all devices. You hire a new employee and provide a device for the employee.
All drives must be encrypted.
You need to determine whether volume C in the device is encrypted. At an elevated command prompt, which command should you run?

• A. mange-bde –setidentifier C:
• B. mange-bde –on C:
• C. mange-bde –unlock C:
• D. mange-bde –status C:

Answer: D

Explanation: References:
https://technet.microsoft.com/en-us/library/jj647767(v=ws.11).aspx#BKMK_managebde

NEW QUESTION 7
A company has a policy that all data stored on a corporate mobile device must be encrypted.
You need a management solution that enforces the policy.
Which two management solutions should you use? Each correct answer presents part of the solution.

• A. Windows Server 2012 R2 Active Directory Certificate Services Server role.
• B. Microsoft Exchange ActiveSync.
• C. System Center 2012 R2 Configuration Manager.
• D. Microsoft Operations Management Suite.
• E. Microsoft Intune Mobile Device Management.

Answer: BE

NEW QUESTION 8
DRAG DROP
You manage 50 computers that run Windows 10 Enterprise. You have a Microsoft Azure RemoteApp deployment. The deployment consists of a hybrid collection named Collection1.
All computers have the Hyper-V feature installed and have a virtual machine that runs Windows 7.
You plan to install applications named App1 and App2 and make them available to all users. App1 is a 32-bit application. App2 is a 64-bit application.
You need to identify the installation method for each application. The solution needs to minimize the number of installations.
Which deployment method should you identify for each application? To answer, drag the appropriate deployment methods to the correct applications. Each deployment method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: Azure RemoteApp supports streaming 32-bit or 64-bit Windows-based applications. Therefore, we can minimize the number of installations by installing the applications on Azure and making them available as Azure RemoteApps. This would mean one installation for App1 and one installation for App2.

NEW QUESTION 9
You administer a Windows 10 Enterprise computer. The computer has File History turned on, and system protection turned on for drive C.
You accidentally delete a folder named LibrariesCustomers by using the Shift+Delete keyboard shortcut.
You need to restore the most recent version of the folder to its original location. Which approach should you use to restore the folder?

• A. Recycle Bin
• B. the latest restore point
• C. File History
• D. a manually selected restore point

Answer: C

Explanation: File History is similar to Previous Versions in previous versions of Windows. It takes regular backups of your data and saves them to a separate disk volume or external drive. When File History is enabled, it backs up all the system libraries and your custom libraries by default.
To restore a deleted folder, you can browse to the parent folder or library and select Restore Previous Versions. The Previous Versions tab will list the previous versions that can be restored to its original location or restored to an alternative location.

NEW QUESTION 10
HOTSPOT
You need to configure access to the custom inventory app for Sales department users.
Which action should you perform to complete each task? To answer, select the appropriate action for each task in the answer area.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/intune/deploy-use/create-and-deploy-mobile-app-management-policies-with-microsoft-intune

NEW QUESTION 11
DRAG DROP
You need to resolve the Security team service announcement.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: 1: In the Mandatory Updates list, filter by Needing additional approvals, and approve the update.
2: Select the Windows 10 computer device group in the Approval wizard.
3: Configure the approval settings to require install with a deadline as soon as possible.
References:
https://www.credera.com/blog/infrastructure/understanding-windows-updates-for-pcs-with-microsoft-intune/

NEW QUESTION 12
A company deploys Enterprise Mobility + Security. The company plans to use Azure Active Directory (AD) Premium to join all new Windows 10 devices.
Users must not be allowed to change the PowerSleep option.
You need to automatically apply custom power policies to all Windows 10 Azure AD joined devices.
What should you do?

• A. From the Azure AD Premium Configuration page, enable automatic device enrollment.
• B. Create a custom Poweroption Group Policy in Active Directory Domain Services (AD DS). Set the value of the PowerSleep option to False.
• C. Configure automatic enrollment into Microsoft Intun
• D. Create and deploy a custom Compliance policy to all Windows 10 devices.
• E. Configure automatic enrollment into Microsoft Intune for all Azure AD Premium joined device
• F. Apply a custom set of Open Mobile Alliance Uniform Resource Identifier (OMA- URI) settings to configure custom power settings.

Answer: B

NEW QUESTION 13
A company deploys Office 365 in a federated identity model. The environment has two Active Directory Domain Services (AD DS) servers and two Web Application Proxy servers that are not joined to the domain.
All externally published applications that use Windows Authentication and are hosted on- premises must use Active Directory Federation Services (AD FS) to log on.
You need deploy pre-authentication on the Web Application Proxy (WAP) servers. What should you do first?

• A. Enable Kerberos constrained delegation.
• B. Join the WAP servers to the AD DS domain.
• C. Remove and reinstall the AD FS role.
• D. Remove and reinstall the WAP role.

Answer: B

NEW QUESTION 14
HOTSPOT
Your company upgrades a research and development department workstation to a Windows 10 Enterprise computer. Two of the workstation’s folders need to be encrypted. The folders are named C:ProtectedFiles and C:Backups.
You attempt to encrypt the folders. The output is shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement. NOTE: Each correct selection is worth one point.

Answer:

Explanation: We can see from the image below that all files and the ProtectedFiles folder were encrypted successfully (There are no errors and there is an [OK] message for each action).

The image below shows that the folder was encrypted successfully (Setting the directory Backups to encrypt new files [OK]).
The file Backup.zip failed to encrypt because the file is read only. The other file, OldBackup.zip was encrypted successfully.

References: https://technet.microsoft.com/en-us/library/bb490878.aspx

NEW QUESTION 15
A company plans to deploy 100 new Windows 10 devices. Then pilot users are currently testing Windows 10 is not corporate network.
The pilot users report that the Hibernate option is not available. You need to enable hibernation on the Windows 10 devices. Which command should you run?

• A. Powercfg –energy
• B. Powercfg –h off
• C. Powercfg –h on
• D. Powercfg –deviseenablewake
• E. Powercfg -setactive

Answer: C

Explanation: References:
https://www.cnet.com/how-to/how-to-enable-or-disable-hibernate-in-windows-10/

NEW QUESTION 16
A company has an Office 365 E3 subscription. You deploy Enterprise Mobility + Security, Active Directory Federation Services (AD FS), and Microsoft Identity Manager.
You need to implement additional security when users remotely connect to corporate resources.
What should you implement?

• A. System Center Configuration Manager
• B. Microsoft Intune
• C. Azure Rights Management Service
• D. Azure Multi-Factor Authentication

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/intune/common-scenarios