QUESTION 21
You administer Windows 8 Enterprise client computers in your company network.
You change settings on a reference computer by using the Windows Firewall with Advanced Security tool. You want to apply the same settings to other computers.
You need to save the Windows Firewall with Advanced Security configuration settings from the reference computer. You also need to be able to import the configuration settings into a Group Policy object later.
What should you do?

A.    Run the netsh advfirewall export c:\settings.xrnl command.
B.    Run the netsh advfirewall export c:\settings.txt command.
C.    Run the netsh advfirewall export c:\settinqs.wfw command.
D.    Run the netsh firewall export c:\settings.xml command.

Answer: C
Explanation:
*Netsh advfirewall is a command-line tool for Windows Firewall with Advanced Security that helps with the creation, administration, and monitoring of Windows Firewall and IPsec settings and provides an alternative to console-based management. T
* Export subcommand
Exports the Windows Firewall with Advanced Security configuration in the current store to a file. This file can be used with the import command to restore the Windows Firewall with Advanced Security service configuration to a store on the same or to a different computer.
Syntax
export [ Path ] FileName
Parameters
[ Path ] FileName
Required. Specifies, by name, the file where the Windows Firewall with Advanced Security configuration will be written. If the path, file name, or both contain spaces, quotation marks must be used. If you do not specify Path then the command places the file in your current folder. The recommended file name extension is .wfw.
Example
In the following example, the command exports the complete Windows Firewall with Advanced Security service configuration to the file C:\temp\wfas.wfw.
export c:\temp\wfas.wfw
Reference:Netsh Commands for Windows Firewall with Advanced Security

QUESTION 22
You administer Windows 8 Pro computers in your company network. A server named Server1 runs Windows Server 2012. Server1 allows incoming VPN and Remote Desktop connections.
A remote user requires access to files on Server1.
You need to prevent the user from downloading any files from Server1 to his local computer. Your solution must ensure that the user can read the files on Server1.
What should you do?

A.    Create a new VPN connection. Disable local drive mappings.
B.    Create a new Remote Desktop connection.
C.    Set the Local Computer policy to Disable drives redirection for Remote Desktop Services.
D.    Create a new Remote Desktop connection. Set the Local Computer policy to Disable clipboard redirection
for Remote Desktop Services.

Answer: C

QUESTION 23
A company has 10 client computers that run Windows 8.
An employee updates a device driver on her computer and then restarts the computer. Windows does not start successfully. You start the computer in Safe Mode.
You need to identify the most recently installed driver and gather the maximum amount of information about the driver installation.
What should you do?

A.    In Device Manager, run a scan for hardware changes.
B.    In the Event Viewer console, display the Hardware Events log.
C.    In the Programs and Features Control Panel item, display the installed updates.
D.    Display the contents of the Windows\inf\setupapi.dev.log file.

Answer: D

QUESTION 24
Employees are permitted to bring personally owned portable computers that run Windows 8 to the office. They are permitted to install corporate applications by using the management infrastructure agent and access corporate email by using Windows Mail.
An employee’s personally owned portable computer is stolen.
You need to protect the corporate applications and email messages on the computer.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

A.    Prevent the computer from connecting to the corporate wireless network.
B.    Disconnect the computer from the management infrastructure.
C.    Change the user’s password.
D.    Initiate a remote wipe.

Answer: CD
Explanation:
D: A Remote Wipe is the process where a device is selected from a central Microsoft Exchange or management console and chosen to be wiped, for example if the device has been lost by the owner. The Remote Wipe command is then sent to the device via ActiveSync.
For a device such as a Windows Phone, all data is deleted, including email, contacts, calendar for all accounts and other data on the device such as documents and picture.
However, when ActiveSync Remote Wipe is performed against a Windows 8 or Windows RT device, the scope of the wipe is more limited. Only the email, contacts, and calendar for information stored in thebuiltin Mail applicationare deleted. Other data on the system is not deleted, including information from the Microsoft Office Outlook client.

QUESTION 25
A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 8. Portable client computers connect to the corporate wireless network.
You have the following requirements:
– Prevent users from configuring a wireless network by using settings from a USB flash drive.
– Do not affect the use of other USB devices.
You need to create a Group Policy object (GPO) to meet the requirements.
Which GPO should you create?

A.    A GPO that disables the Allow only USB root hub connected Enhanced Storage Features policy setting.
B.    A GPO that enables wireless policy processing.
C.    A GPO that prohibits connections to mobile broadband networks when roaming.
D.    A GPO that configures Windows Connect Now settings.

Answer: D
Explanation:
Computer Configuration\Policies\Administrative Templates\Network\Windows Connect Now
Turn Off Ability To Configure Using A USB Flash Drive setting:
Prevents Windows from being able to store a Windows Connect Now configuration to a UFD. Because the Windows Connect Now information stored on a UFD contains information that can allow computers to access your protected wireless network, you might choose to disable this setting to improve the security of your wireless networks.
http://sourcedaddy.com/windows-7/windows-connect-now-in-windows-7.html

QUESTION 26
A company has an Active Directory Domain Services (AD DS) domain with one physical domain controller. All client computers run Windows 8. A client computer hosts a Windows 8 virtual machine (VM) test environment.
The VMs are connected to a private virtual switch that is configured as shown in the Virtual Switch Manager exhibit:

You have the following requirements:
– Configure the test environment to allow VMs to communicate with the host machine.
– Minimize impact on the host machine.
You need to meet the requirements.
What should you do?

A.    Create a new virtual switch with a Private Network [CP1] connection type.
B.    Create a new virtual switch with an ExternalNetwork connection type.
C.    Change the VLAN ID of the private virtual switch to Enable Virtual LAN identification.
D.    Create a new virtual switch with an Internal Network connection type.

Answer: D
Explanation:
http://technet.microsoft.com/en-us/library/cc816585(v=ws.10).aspx

Private will not allow communication with the host machine. External will allow communication with the host machine but also allow access to other machines on the host machine’s network which is not a requirement.

QUESTION 27
A portable computer that runs Windows 8 uses a mobile broadband connection for the corporate wireless network. The computer also has a wired corporate network connection. The computer successfully downloads Windows updates when connected to either network.
You need to ensure that the computer automatically downloads updates by using Windows Update only while connected to the wired corporate network connection.
What should you do?

A.    Set the corporate wireless network to metered.
B.    Set the corporate wireless network to non-metered.
C.    Configure the Specify intranet Microsoft update service location local Group Policy setting.
D.    Configure a Windows Firewall connection security rule.

Answer: A
Explanation:
http://www.windowsnetworking.com/articles_tutorials/Using-Wireless-Networks-Windows-8.html
You can also set particular networks as a metered connection, which will then disable Windows Update from downloading updates (except for critical security patches) and possibly disable or reduce data usage from other Microsoft and non-Microsoft applications as well.

QUESTION 28
A company has an Active Directory Domain Services (AD DS) domain with one physical domain controller. All client computers run Windows 8. A client computer hosts a Windows 8 virtual machine (VM) test environment.
The VMs are connected to a private virtual switch that is configured as shown in the Virtual Switch Manager exhibit:

The VMS are unable to connect to the domain controller.
You have the following requirements:
– Configure the test environment to allow VMs to communicate with the domain controller.
– Ensure that the VMs can communicate with other VMS fl the test environment when the domain controller is unavailable.
You need to meet the requirements.
What should you do first?

A.    Create a new virtual switch with an Internal Network connection type.
B.    Create a new virtual switch with a Private Network connection type.
C.    Create a new virtual switch with an External Network connection type.
D.    Change the connection type of the private virtual switch to Internal only.

Answer: C

QUESTION 29
A portable computer that runs Windows 8 uses a mobile broadband connection for the corporate wireless network. The computer also has a wired corporate network connection. The computer successfully downloads Windows updates when connected to either network.
You need to ensure that the computer automatically downloads updates by using Windows Update while also connected to the wireless corporate network connection. What should you do?

A.    Set the corporate wireless network to metered.
B.    Set the corporate wireless network to non-metered.
C.    Configure the Specify intranet Microsoft update service location local Group Policy setting.
D.    Configure a Windows Firewall connection security rule.

Answer: B
Explanation:
Setting a Wireless network to METERED allows only critical Windows Updates using that connection. Setting a Wireless network to NON-METERED allows all Windows Updates using that connection.
Source: http://windows.microsoft.com/en-US/windows-8/metered-internet-connections-frequently-asked-questions

QUESTION 30
A company has an Active Directory Domain Services domain. All client computers run Windows 8 and are joined to the domain. You run the ipconfiq command on a client computer.
The following output depicts the results.
Ethernet adapter Local Area Connection 3:

You need to ensure that you can establish a DirectAccess connection from the client computer to the network. What should you do?

A.    Create a new VPN connection.
B.    Remove the computer from the domain.
C.    Enable IPv6 on the network adapter.
D.    Configure a static IPv4 address.

Answer: C

If you want to pass Microsoft 70-689 successfully, donot missing to read latest lead2pass Microsoft 70-689 practice tests.
If you can master all lead2pass questions you will able to pass 100% guaranteed.

http://www.lead2pass.com/70-689.html