Learn with Microsoft : 070-697 training material for 100% pass

You enable Hyper-V on a company's Windows 10 Enterprise client computers.
You need to configure the computers' virtual switches. You have the following requirements:
Accounting department users require that virtual machine traffic does not communicate with any client computer.
HR department users must be able to copy files only from their client computer to their virtual machines.
IT department users must be able to copy files from network servers.
Finance department virtual machines must be able to communicate only with other virtual machines on the same client computer.
Which type of virtual switch should you use in each department? To answer, drag the appropriate switch type to the corresponding department. Each switch type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

You support Windows 10 Enterprise desktop computers. Your company has a security policy that controls multiple settings of the desktops through the domain group policy.
The security policy recently was updated to require that access to several built-in Windows 10 Enterprise tools be prohibited to all local users on one of the desktop computers.
You need to implement this new policy.
What should you do?

• A. Enable BitLocker.
• B. Configure NTFS permissions.
• C. Create a Windows To Go workspace.
• D. Configure the AppLocker policy.

You administer Windows 10 Enterprise laptop and desktop computers. Your company uses Active Directory Domain Services (AD DS) and Active Directory Certificate Services (AD CS).
Your company decides that access to the company network for all users must be controlled by two-factor authentication.
You need to configure the computers to meet this requirement.
What should you do?

• A. Issue photo identification to all users. Instruct all users to create and use a picture password.
• B. Install smart card readers on all computers. Issue smart cards to all users.
• C. Enable the Password must meet complexity requirements policy setting. Instruct users to logon by typing their user principal name (UPN) and their strong password.
• D. Create an Internet Protocol security (IPsec) policy on each Windows 10 Enterprise computer to encrypt traffic to and from the domain controller

A company has Windows 10 Enterprise client computers. The company uses Windows BitLocker Drive Encryption and BitLocker Network Unlock on all client computers.
You need to collect information about BitLocker Network Unlock status.
Which command should you run?

• A. Run the BdeHdCfg command.
• B. Run the BitLockerWizard command.
• C. Run the manage-bde command.
• D. Run the bitsadmin command.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You administer devices in your corporate environment. The company allows employees to bring their own devices (BYOD). All BYOD devices must run Windows 10. For employees who elect to not use BYOD, the company provides a corporate laptop.
The company has a Microsoft Intune subscription and all BYOD devices have the Intune client installed. None of the BYOD devices are joined to the domain. All the corporate standard devices are managed by System Center Configuration Manager (SCCM).
You have an application that was developed in house that must be installed on all the BYOD devices.
The application must be installed automatically on the BYOD devices without any user intervention.
Solution: You upload the app to the Intune storage and make the app available.
Does the solution meet the goal?

• A. No
• B. Yes