Published: January 18, 2013
Languages: English, Chinese (Simplified), French, German, Japanese, Portuguese (Brazil)
Audiences: IT professionals
Technology: Windows 8.1
Credit toward certification: MCP, MCSA, MCSE
Skills measured
This exam measures your ability to accomplish the technical tasks listed below. The percentages indicate the relative weight of each major topic area on the exam. The higher the percentage, the more questions you are likely to see on that content area on the exam. View video tutorials about the variety of question types on Microsoft exams.
Please note that the questions may test on, but will not be limited to, the topics described in the bulleted text.
Do you have feedback about the relevance of the skills measured on this exam? Please send Microsoft your comments. All feedback will be reviewed and incorporated as appropriate while still maintaining the validity and reliability of the certification process. Note that Microsoft will not respond directly to your feedback. We appreciate your input in ensuring the quality of the Microsoft Certification program.
If you have concerns about specific questions on this exam, please submit an exam challenge.
If you have other questions or feedback about Microsoft Certification exams or about the certification program, registration, or promotions, please contact your Regional Service Center.
As of January 2014, this exam includes content covering Windows 8.1.
Support operating system and application installation (30–35%)
Support operating system installation
Support Windows To Go; manage boot settings, including native virtual hard disk (VHD) and multiboot; manage desktop images; customize a Windows installation by using Windows Preinstallation Environment (PE)
Support desktop apps
Desktop app compatibility using Application Compatibility Toolkit (ACT), including shims and compatibility database; desktop application co-existence using Hyper-V, RemoteApp, and App-V; installation and configuration of User Experience Virtualization (UE-V); deploy desktop apps by using Windows Intune
Support Windows Store and cloud apps
Install and manage software by using Office 365 and Windows Store apps; sideload apps by using Windows Intune; sideload apps into online and offline images; deep link apps by using Windows Intune; integrate Microsoft account, including personalization settings and Trusted PC
Preparation resources
Deployment considerations for Windows To Go
ACT deployment options
Windows upgrade and migration considerations
Support resource access (30–35%)
Support network connectivity
IPv4 and IPv6, including transition technologies; names resolution, including Peer Name Resolution Protocol (PNRP) and Domain Name System Security Extensions (DNSSECs); wireless networks and connections; network security, including Windows Firewall and IP security
Support remote access
Virtual private network (VPN), including Connection Manager Administration Kit (CMAK); Remote Desktop Protocol (RDP), including Remote Desktop Services Gateway access; DirectAccess; remote administration; Network Access Protection (NAP)
Support authentication and authorization
Multi-factor authentication, including certificates, virtual smart cards, picture passwords, and biometrics; workgroup versus domain, homegroup, computer and user authentication, including secure channel, account policies, credential caching, and Credential Manager; local account versus Microsoft account; Workplace Join
Support data storage
Distributed File System (DFS) client, including caching settings; storage spaces, including capacity and fault tolerance; optimizing data access by using BranchCache; OneDrive
Support data security
Permissions, including share, NTFS, and Dynamic Access Control (DAC); Encrypting File System (EFS), including Data Recovery Agent; access to removable media; BitLocker and BitLocker To Go, including Data Recovery Agent and Microsoft BitLocker Administration and Monitoring (MBAM)
Preparation resources
Windows authentication overview
Choosing a BranchCache design
Support Windows clients and devices (35–40%)
Support operating system and hardware
Resolve hardware and device issues, including STOP errors and Reliability Monitor; optimize performance by using Windows Performance Toolkit (WPT), including Xperf.exe, Xbootmgr.exe, XperfView.exe, and Windows Performance Recorder (WPR); monitor performance by using Data Collector Sets, Task Manager, and Resource Monitor; monitor and manage printers, including NFC Tap-to-Pair and printer sharing; remediate startup issues by using the Diagnostics and Recovery Toolkit (DaRT)
Support mobile devices
Support mobile device policies, including security policies, remote access, and remote wipe; support mobile access and data synchronization, including Work Folders and Sync Center; support broadband connectivity, including broadband tethering and metered networks; support Mobile Device Management by using Windows Intune, including Windows RT, Windows Phone 8, iOS, and Android
Support client compliance
Manage updates by using Windows Update and Windows Intune, including non-Microsoft updates; manage client security by using Windows Defender, Windows Intune Endpoint Protection, or Microsoft System Center 2012 Endpoint Protection; manage Internet Explorer 11 security; support Group Policy application, including Resultant Set of Policy (RSoP), policy processing, and Group Policy caching
Manage clients by using Windows Intune
Manage user and computer groups; configure monitoring and alerts; manage policies; manage remote computers
Preparation resources
Microsoft Virtual Academy: Endpoint protection in System Center 2012 SP1
Repair and recovery
QUESTION 1
You administer Windows 8.1 Pro tablets that are members of an Active Directory domain. Your company policy allows users to download and install only certain few Windows Store apps.
You have created a new AppLocker Packaged Apps policy to help enforce the company policy.
You need to test the new AppLocker Packaged Apps policy before you implement it for the entire company.
What should you do?
A. Open PowerShell and run the Get-AppLockerPoIicy -Effective cmdlet to retrieve the AppLocker effective policy.
B. Open Group Policy Management console and run the Group Policy Modeling Wizard.
C. Open Group Policy Management console and run the Group Policy Results Wizard.
D. Open Group Policy Management console and enforce the new AppLocker policy in Audit Only mode.
Answer: D
QUESTION 2
You have client computers that run Windows 8 Pro.
You need to recommend a solution to roll back the Windows Defender engine and the malware signature files on the computers. The solution must minimize administrative effort.
What should you include in the recommendation?
A. File History
B. the Program and Features Control Panel item
C. Windows 7 File Recovery
D. System Restore points
Answer: D
QUESTION 3
You administer Windows 8.1 Enterprise laptops. All of the computers are members of an Active Directory domain.
When traveling, users access the corporate network by using a virtual private network (VPN).
You need to implement two-factor authentication.
Which of the following should you use?
A. EAP-TLS
B. MS-CHAP v2
C. 802.1X
D. RADIUS
E. PPTP
F. L2TP/IPSEC
G. IPSEC/IKEv2
H. SSTP
Answer: D
QUESTION 4
You support desktop computers that run Windows 8 Pro and are used as guest terminals in a reception area. They are connected to the Internet and are configured with automatic logon by using a local user account.
You discover new applications on the Start screen of the computers.
You need to restrict access to Windows Store for local user accounts on the computers.
What should you do?
A. From Local Computer Policy, navigate to App Package Deployment and disable All Trusted Apps to Install.
B. From Local Computer Policy, select Store and enable Turn off the Store application.
C. From Local Computer Policy, select Store and disable Turn off Automatic Downloads for
Updates.
D. From Local Computer Policy, select Store and disable Allow Store to install apps on Windows To Go workspaces.
Answer: B
QUESTION 5
You manage client computers that run Windows 8 and are part of a workgroup.
These computers are configured to use Microsoft Update. Updates are downloaded every day at 10:00 and installed automatically.
Users report that their computers sometimes reboot without any interaction.
You need to prevent unplanned automatic reboots of the computers.
What should you do?
A. Enable the Reschedule Automatic Updates scheduled installations policy setting.
B. Disable the Re-prompt for restart with scheduled installations policy setting.
C. Enable the Automatic Updates detection frequency policy setting.
D. Enable the No auto-restart with logged on users for scheduled automatic updates installations policy setting.
Answer: D
Click here to view complete Q&A of 70-688 exam
Certkingdom Review
Best Microsoft MCTS Certification, Microsoft 70-688 Training at certkingdom.com
