Microsoft 70-398 Exam Questions 2021

NEW QUESTION 1
HOTSPOT
A Sales department user overwrites a version of a Word document on their device. You need to implement the required Group Policy settings.
How should you configure the Group Policy Objects (GPOs)? To answer, select the appropriate option from each list in the answer area.

Answer:

Explanation:

NEW QUESTION 2
HOTSPOT
A company runs Windows 10 Enterprise on all devices and has a single Active Directory Domain Services (AD DS) domain. The company uses Microsoft Intune to manage Windows Phones and iOS devices.
Security updates must be installed as quickly as possible. The update management solution must be able to automatically uninstall updates. You must not deploy any additional development or custom tools.
You need to implement a solution.
In the table below, identify the feature that each solution supports.
NOTE: Make only one selection in each column. Each correct answer is worth one point.

Answer:

Explanation:

NEW QUESTION 3
A company deploys Enterprise Mobility + Security. The company plans to use Azure Active Directory (AD) Premium to join all new Windows 10 devices.
Users must not be allowed to change the PowerSleep option.
You need to automatically apply custom power policies to all Windows 10 Azure AD joined devices.
What should you do?

• A. From the Azure AD Premium Configuration page, enable automatic device enrollment.
• B. Create a custom Poweroption Group Policy in Active Directory Domain Services (AD DS). Set the value of the PowerSleep option to False.
• C. Configure automatic enrollment into Microsoft Intun
• D. Create and deploy a custom Compliance policy to all Windows 10 devices.
• E. Configure automatic enrollment into Microsoft Intune for all Azure AD Premium joined device
• F. Apply a custom set of Open Mobile Alliance Uniform Resource Identifier (OMA- URI) settings to configure custom power settings.

Answer: B

NEW QUESTION 4
You have a Windows 10 Enterprise computer named Computer1. Computer1 has File History enabled.
You create a folder named Folder1 in the root of the C: drive. You need to ensure that Folder1 is protected by File History.
What are two possible ways to achieve the goal? Each correct answer presents a complete solution.

• A. From File Explorer, include Folder1 in an existing library.
• B. Modify the Advanced settings from the FileHistory Control Panel item.
• C. From the Settings app, modify the Backup options.
• D. From File Explorer, modify the system attribute of Folder1.

Answer: AC

Explanation: By default, File History backs up all libraries. We can therefore ensure that Folder1 is protected by File History by adding the folder to a library.
The second method of ensuring that Folder1 is protected by File History is to add the folder location to File History. You do this by modifying the Backup options, not the File History Control Panel item as you might expect. In the Settings app, select Update & Security then Backup. Under the Back up using File History heading, select the Add a drive option.

NEW QUESTION 5
You manage a network that includes Windows 10 Enterprise computers. All of the computers on the network are members of an Active Directory domain.
The company recently proposed a new security policy that prevents users from synchronizing applications settings, browsing history, favorites, and passwords from the computers with their Microsoft accounts.
You need to enforce these security policy requirements on the computers. What should you do?

• A. On the Group Policy Object, configure the Accounts: Block Microsoft accounts Group Policy setting to Users can’t add Microsoft accounts.
• B. On the Group Policy Object, configure the Accounts: Block Microsoft accounts Group Policy setting to Users can’t add or log on with Microsoft accounts.
• C. From each computer, navigate to Change Sync Settings and set the Sync Your Settings options for Apps, Browser, and Passwords to Off.
• D. From each computer, navigate to Change Sync Settings and set the Sync Your Settings option to Off.

Answer: B

Explanation: The computers are members of a domain so the users should be using domain user accounts. We need to block the use of Microsoft accounts.
We could use the Users can’t add Microsoft accounts setting which would mean that users will not be able to create new Microsoft accounts on a computer, switch a local account to a Microsoft account, or connect a domain account to a Microsoft account.
Alternatively, we can also deny the ability to log on to a domain computer with a Microsoft account (and sync computer settings) by using the Users can’t add or log on with Microsoft accounts. This will ensure that the company policy is enforced.

NEW QUESTION 6
A company uses Office 365. The company has an on-premises Active Directory Domain Services (AD DS) domain and Azure Active Directory Connect. The company runs an on- premises installation of System Center Configuration Manager. All devices are joined to the domain. All users have AD DS accounts and use their AD DS credentials to access the Office 365 resources.
You plan to use Cloud App Discovery. You need to deploy a solution.
Which three will achieve the goal? Each correct answer presents a complete solution.

• A. Install the agent by using System Center Operations Manager.
• B. Install the agent by using SystemCenter Configuration Manager.
• C. Install the agent by using Group Policy.
• D. Install the agent manually.
• E. Install the agent by using the Office 365 portal.

Answer: BCD

NEW QUESTION 7
HOTSPOT
Your company upgrades a research and development department workstation to a Windows 10 Enterprise computer. Two of the workstation’s folders need to be encrypted. The folders are named C:ProtectedFiles and C:Backups.
You attempt to encrypt the folders. The output is shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement. NOTE: Each correct selection is worth one point.

Answer:

Explanation: We can see from the image below that all files and the ProtectedFiles folder were encrypted successfully (There are no errors and there is an [OK] message for each action).

The image below shows that the folder was encrypted successfully (Setting the directory Backups to encrypt new files [OK]).
The file Backup.zip failed to encrypt because the file is read only. The other file, OldBackup.zip was encrypted successfully.

References: https://technet.microsoft.com/en-us/library/bb490878.aspx

NEW QUESTION 8
HOTSPOT
A company integrates Microsoft Intune with System Center 2012 R2 Configuration Manager. The company uses Intune to manage Windows 7 and Windows 10 devices along with mobile devices. Users access company data by using iOS, OS X, Windows Phone, and Android devices.
The company plans to use features of the Microsoft Enterprise Mobility Suite to increase
user mobility and ensure data protection. All users must be able to run a custom 32-bit Windows app. The app cannot be migrated.
You need to ensure that the app is accessible from all devices.
In the table below, for each technology, identify which feature to implement.
NOTE: Make only one selection in each column. Each correct answer is worth one point.

Answer:

Explanation:

NEW QUESTION 9
DRAG DROP
You need to configure the mobile devices for the Engineering department users.
In the Microsoft Intune administration portal, which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/intune/deploy-use/configure-intune-certificate-profiles

NEW QUESTION 10
HOTSPOT
You administer Windows 10 Enterprise computers in your company network, including a computer named Wst1. Wst1 is configured with multiple shared printer queues.
Wst1 indicates hardware errors. You decide to migrate the printer queues from Wst1 to a new computer named Client1.
You export the printers on Wst1 to a file. You need to import printers from the file to Client1.
From the Print Management console, which Print Management node should you select? To answer, select the appropriate node in the answer area.

Answer:

Explanation: We have exported the printers on Wst1 to a file. To import printers from the file to Client1, we use the Printer Migration Wizard.
Right-click Print Management, and then click Migrate Printers to open the Printer Migration Wizard. Select Import printer queues and printer drivers from a file, and select the export file. Then complete the wizard.
References: http://blogs.technet.com/b/canitpro/archive/2013/06/17/step-by-step-install-use-and-remove-windows-server-migration-tools.aspx

NEW QUESTION 11
HOTSPOT
You upgrade 15 client devices to Windows 10 Enterprise. You need to configure the devices.
Which Control Panel applets should you use? To answer, select the appropriate applet from each list in the answer area. Each correct answer is worth one point.

Answer:

Explanation:

NEW QUESTION 12
A Sales department user overwrites a version of a Word document on their device. You need to configure Azure Active Directory (AD) Connect Health.
Which additional port should you open?

• A. 389
• B. 1433
• C. 3268
• D. 5671
• E. 9350

Answer: D

Explanation: References:
https://azure.microsoft.com/en-gb/documentation/articles/active-directory-aadconnect- health-agent-install/

NEW QUESTION 13
DRAG DROP
You have a desktop computer and a tablet that both run Windows 10 Enterprise.
The desktop computer is located at your workplace and is a member of an Active Directory domain. The network contains an Application Virtualization (App-V) infrastructure. Several App-V applications are deployed to all desktop computers.
The tablet is located at your home and is a member of a workgroup. Both locations have Internet connectivity.
You need to be able to access all applications that run on the desktop computer from you tablet.
Which actions should you perform on each computer? To answer, drag the appropriate action to the correct computer. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: You can connect to your work computer by using Remote Desktop. You first need to enable Remote Desktop on the work computer. You then run the Remote Desktop Client on the home computer to connect to the work computer.
With Remote Desktop Connection, you can connect to a computer running Windows from another computer running Windows that's connected to the same network or to the Internet. For example, you can use all of your work computer's programs, files, and network resources from your home computer, and it's just like you're sitting in front of your computer at work.
To connect to a remote computer, that computer must be turned on, it must have a network connection, Remote Desktop must be enabled, you must have network access to the remote computer (this could be through the Internet), and you must have permission to connect. For permission to connect, you must be on the list of users. Before you start a connection, it's a good idea to look up the name of the computer you're connecting to and to make sure Remote Desktop connections are allowed through its firewall.

NEW QUESTION 14
A Datum Corporation plans to implement Mobile Device Management (MDM). The company uses the domain name Adatum.com. The company plans to integrate Microsoft Intune with System Center 2012 R2 Configuration Manager. Configuration Manager uses the public IP address 102.157.31.12. Domain Name System (DNS) is not configured to support MDM.You need to create a DNS record for automatically enrolling the device.Which DNS record type should you create?

• A. a CNAME record named EnterpriseEnrollment.adatum.com that points to manage.microsoft.com.
• B. a CNAME record named MDMEnrollment.adatum.com that points to manage.microsoft.com.
• C. a PTR record named 102.157.31.12 that points to EnterpriseEnrollment.Adatum.com
• D. an A resource record named autoenroll.adatum.com that points to 102.157.31.12

Answer: A

Explanation: References:
https://docs.microsoft.com/en-us/intune/windows-enroll

NEW QUESTION 15
DRAG DROP
Your organization needs to implement a Dynamic Access Control (DAC) plan that includes user and device claims.
The domain controllers have not been enabled to provide claims and compound authentication.
You need to configure the Default Domain Controller’s Group Policy Object to provide claims and compound authentication.
You decide to first enable the domain controllers to provide claims and compound authentication on request.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 16
HOTSPOT
A Sales department user overwrites a version of a Word document on their device. You need to implement the password requirements for the Office 365 portal.
Which three actions should you perform? To answer, select the appropriate option from each list in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://technet.microsoft.com/en-us/library/office-365-user-account-management.aspx