You are the network administrator for Contoso, Ltd. Many users have Windows 10 Enterprise laptops, and your
IT department configures all of them to use BitLocker on all fixed drives.
Many users carry sensitive corporate data on their USB drives.
You need to enable BitLocker for these USB drives.Which key protector option should you use?
A.
TPM+PIN
B.
a smart card
C.
TPM
D.
a startup key
I have another dump who says TPM + PIN, can any1 confirm is this is the correct answeR?
0
0
I would say smart card because TPM + PIN would have to configured on the computer or the fixed drive. As where it would just be a password or a Smart Card that can only be configured for a USB drive or external hard disk.
0
0
I would say smart card because TPM + PIN would have to configured on the computer or the fixed drive. As where it would just be a password or a Smart Card that can only be configured for a USB drive or external hard disk.
0
0
2018 New Questions:
QUESTION 84
You administer computers that run Windows 8 Enterprise in an Active Directory domain in a single Active Directory Site. All user account objects in Active Directory have the Manager attribute populated. The company has purchased a subscription to Windows Intune.
The domain security groups are synchronized with the Microsoft Online directory.
You create a Windows Intune group that specifies a manager as a membership criterion.
You notice that the group has no members.
You need to ensure that users that meet the membership criteria are added to the Windows Intune group.
What should you do?
A. Force Active Directory replication within thedomain.
B. Ensure that all user accounts are identified as synchronized users.
C. Ensure that the user who is performing the search has been synchronized with the Microsoft Online directory.
D. Synchronize the Active Directory Domain Service (AD DS) with the Microsoft Online directory.
Answer: B
Explanation:
QUESTION 85
You support laptops that run Windows 8 Pro and are part of a workgroup.
An employee is unable to start Windows Mobility Center on his laptop.
You need to make it possible for the employee to use Windows Mobility Center on the laptop. What should you do?
A. Use Add features to Windows 8 to add Windows Mobility Center.
B. Use Programs and Features to repair theinstallation of Windows Mobility Center.
C. Use Local Group Policy Editor to set Turn off Windows Mobility Center to Not Configured.
D. Use Turn Windows features on or off in Programs and Features to enable Windows Mobility Center.
Answer: C
Explanation:
To Enable or Disable Windows Mobility Center using Group Policy Open the all users, specific users or groups, or all users except administrators Local Group Policy Editor for how you want this policy applied.
In the left pane, click/tap on to expand User Configuration, Administrative Templates, Windows Components, and Windows Mobility Center.
In the right pane of Windows Mobility Center, double click/tap on Turn off Windows Mobility Center to edit it.
To Enable Windows Mobility Center
– Select either Not Configured or Disabled.
– Click OK.
QUESTION 87
Your company has Windows 10 client computers. All of the computers are managed by using Windows Intune. You need to provide a user with the ability to deploy software to the computers by using Windows Intune.
The solution must minimize the number of permissions assigned to the user.
Which role should you use?
A. User management administrator from the Windows Intune account portal
B. Global administrator from the Windows Intune account portal
C. Service administrator from the Windows Intune administrator console
D. Service administrator from the Windows Intune account portal
Answer: C
Explanation:
As a service administrator, you use the Microsoft Intune administrator console to manage day-to-day tasks, such as deploying applications, forIntune.
QUESTION 88
Your company has a main office that has a connection to the Internet.
The company has 100 Windows 10 Pro client computers that run Microsoft Office 2010.
You purchase a subscription to Office 365 for each user.
You download the Office Deployment Tool for Click-to-Run.
You need to deploy Office 365 Pro Plus to the computers.
The solution must minimize the amount of traffic over the Internet connection.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. On a file server, run setup.exe and specify the /download parameter.
B. On each client computer, run setup.exe and specify the /configure parameter.
C. On a file server, run setup.exe and specify the /configure parameter.
D. On each client computer, run setup.exe and specify the /download parameter.
Answer: AB
QUESTION 89
A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 10. A local printer is shared from a client computer. The client computer user is a member of the Sales AD security group.
You need to ensure that members of the Sales security group can modify the order of documents in the print queue, but not delete the printer share.
Which permission should you grant to the Sales group?
A. Manage queue
B. Manage this printer
C. Print
D. Manage documents
E. Manage spooler
Answer: D
0
0
More New 70-697 Real Exam Questions can be checked here: https://drive.google.com/drive/folders/0B75b5xYLjSSNUnFOeVNOSmo1VlE?usp=sharing
0
0
Agree with B. You may use only password or smart-card to encrypt USB driver
http://infosec.nmsu.edu/instructions-guides/how-to-enable-bitlocker-to-go-for-external-hard-drives-and-usb-flash-drives/
0
0