It is impossible to pass Microsoft 70-680 exam without any help in the short term. Come to Ucertify soon and find the most advanced, correct and guaranteed Microsoft 70-680 practice questions. You will get a surprising result by our Leading TS:Windows 7,Configuring practice guides.
2021 Mar 70-680 exam guide
Q101. - (Topic 4)
Your company network has a single-domain Active Directory forest. The forest functionality level is set to Windows Server 2008 R2. All computers are members of the domain.
You plan to deploy Windows Bitlocker Encryption (BitLocker) on the portable computers that have Window 7 Enterprise installed.
You need to be able to automatically back up recovery passwords for BitLocker-protected disk volumes on the portable computers.
What should you do before you start encrypting the disk on volumes with BitLocker?
A. Run the cscript Add-TPMSelfWriteACE.vbs script on the portable computers
B. Run the cscript List-ACEs.vbs script on the portable computers.
C. Run the cscript Get-TPMOwnerInfo.vbs script on the client computers.
D. Select the Turn on BitLocker backup to Active Directory option in local policy on the portable computers.
Answer: D
Q102. - (Topic 3)
You have a computer that runs Windows 7 and Windows Internet Explorer 8. You have a third-party Internet Explorer toolbar installed on the computer.
You need to temporarily disable the toolbar. The solution must not affect any other installed toolbars.
What should you do?
A. Start an Inprivate Browsing session.
B. Run Msconfig.exe and enable Selective Startup.
C. From the Tools menu, select Compatibility View Settings.
D. From the Tools menu, open Manage Add-ons and modify the add-on settings.
Answer: D
Explanation:
Add-Ons and Search Providers Add-ons extend the functionality of Internet Explorer. Add-ons are usually downloaded and installed separately rather than being included with Internet Explorer. You manage add-ons through the Manage Add-Ons dialog box.
Toolbars and Extensions This area lists browser toolbars and extensions. Toolbars are additions to browsersthat add extra functionality to the browser interface. Extensions allow the browser to perform additional functions, such as playing media or opening some types of document file within the browser that the browser does not support natively.
Q103. - (Topic 3)
You have two computers named Computer1 and Computer2. Computer1 runs Windows Vista. Computer2 runs Windows 7.
You attempt to migrate the user profiles and data from Computer1 to Computer2 by using User State Migration Tool (USMT) 4.0.
During the migration, you receive the following error message: "Gather was aborted because of an EFS file."
You need to ensure that you can successfully migrate the user state from Computer 1 to Computer 2.
What should you do?
A. Add the /efs:copyraw switch to the Loadstate command.
B. Add the /efs:copyraw switch to the Scanstate command.
C. Generate a new Encrypting File System (EFS) certificate on Computer2.
D. Export the Encrypting File System (EFS) certificate from Computer1 and import the certificate to Computer2.
Answer: B
Explanation:
You run ScanState on the source computer during the migration. You must run ScanState.exe on computers running Windows Vista and Windows 7 from an administrative command prompt. When running ScanState on a source computer that has Windows XP installed, you need to run it as a user that is a member of the local administrators group. The following command creates an encrypted store named Mystore on the file share named Migration on the file server named Fileserver that uses the encryption key Mykey: scanstate \\fileserver\migration\mystore /i:migapp.xml /i:miguser.xml /o /config:config.xml /encrypt /key:"mykey"Encrypted File OptionsYou can use the following options to migrate encrypted files. In all cases, by default, USMT 4.0 fails if an encrypted file is found unless you specify an /efs option. To migrate encrypted files, you must change the default behavior. EFS certificates will be migrated automatically when migrating to Windows Vista or Windows 7. Therefore, you should specify the /efs:copyraw option with the ScanState command to migrate the encrypted files
Q104. - (Topic 4)
Your company network has a single-domain Active Directory forest. The forest functional level is set to Windows Server 2008 R2. All computers are members of the domain.
You plan to deploy Windows BitLocker Drive Encryption (BitLocker) on portable computers that have Windows 7 Enterprise installed.
You need to be able to automatically back up recovery passwords for BitLocker-protected disk volumes on the portable computers.
What should you do before you start encrypting the disk volumes with BitLocker?
A. Select the Turn on BitLocker backup to Active Directory option in Group Policy linked to the portable computers.
B. Run the cscript Get-TPMOwnerlnfo.vbs script on the client computers.
C. Run the manage-bde -on C: -RecoveryPassword command on the portable computers.
D. Run the Idifde -i -v -f BitLockerTPMSchemaExtension.ldf -c script on a domain controller.
Answer: C
Q105. - (Topic 5)
You use a computer that has Windows 7 and Internet Explorer 8 installed.
You need to block all web content providers on the Internet from collecting and sharing your information with other websites.
What should you do?
A. From Manage Add-ons, disable all ActiveX and Java extensions.
B. From Internet Options, configure Privacy Settings for third-party cookies.
C. Enable InPrivate Filtering and select Automatically Block.
D. From Internet Options, add the web content provider to Restricted Sites.
E. Start an InPrivate Browsing session.
Answer: C
Improved 70-680 exam prep:
Q106. - (Topic 1)
Your network consists of one Active Directory domain. You have two computers named Computer1 and Computer2 that run Windows 7. Both computers are members of the domain.
From Computer1, you can recover all Encrypting File System (EFS) encrypted files for users in the domain.
You need to ensure that you can recover all EFS encrypted files from Computer2.
What should you do?
A. On Computer1, back up %systemroot%\DigitalLocker. On Computer2, restore %systemroot%\DigitalLocker.
B. On Computer1, export the data recovery agent certificate. On Computer2, import the data recovery agent certificate.
C. On Computer1, run Secedit.exe and specify the /export parameter. On Computer2, run Secedit.exe and specify the /import parameter.
D. On Computer1, run Cipher.exe and specify the /removeuser parameter. On Computer2, run Cipher.exe and specify the /adduser parameter.
Answer: B
Explanation:
You can import the recovery agent to another computer running Windows 7 if you want to recover files encrypted on the first computer. You can also recover files on another computer running Windows 7 if you have exported the EFS keys from the original computer and imported them on the new computer. You can use the Certificates console to import and export EFS keys.
NOT Secedit.exe:
You can use both the Local Group Policy Editor and the Local Security Policy console to import and export security-related Group Policy settings. You can use this import and export functionality to apply the same security settings to stand-alone computers that are not part of a domain environment. Exported security files are written in Security Template .inf format. As well as using Local Group Policy Editor and the Local Security Policy console to import policies that are stored in .inf format, you can apply them using the Secedit.exe command-line utility.
NOT Cipher.exe /removeuser /adduser. NOT DigitalLocker.
Q107. - (Topic 1)
You have a computer that runs Windows 7.
You need to configure the computer to download updates from a local Windows Server Update Services (WSUS) server. What should you do?
A. From Windows Update, modify the Windows Update settings.
B. From the local Group Policy, modify the Windows Update settings.
C. From the System settings, modify the System Protection settings.
D. From the local Group Policy, modify the Location and Sensors settings.
Answer: B
Q108. - (Topic 5)
You use a desktop computer that has Windows 7 Ultimate SP1. The relevant portions of the computer configuration are shown in the following exhibits:
. The Disk Management console (Click the Exhibit button.)
. The System Properties window (Click the Exhibit button.)
. The System protection for Local Disk C window (Click the Exhibit button.)
You encrypt several files on an external USB hard disk drive by using the Encrypting File System (EFS).
You need to ensure that you can access the files from another computer.
What should you do?
A. Delete restore points.
B. Create a restore point.
C. Perform a system restore.
D. Search for the file in the Recycle Bin.
E. Increase disk space used for system protection.
F. Copy the file from a previous version of a folder.
G. Set restore settings to Only restore previous versions of files.
H. Run the cipher /x command from the elevated command prompt,
I. Run the vssadmin list volumes command from the elevated command prompt.
J. Run the vssadmin list shadows command from the elevated command prompt,
K. Run the compact /U <file_name> command from the elevated command prompt.
Answer: H
Explanation: * cipher /x[:efsfile] [<FileName>]
Backs up the EFS certificate and keys to the specified file name. If used with :efsfile, /x backs up the user's certificate(s) that were used to encrypt the file. Otherwise, the user's current EFS certificate and keys are backed up.
* Back Up Your EFS Key The first time that you use EFS to encrypt something, your system generates a random 256-bit number; that's the key that EFS uses whenever you encrypt something. To back up your EFS key, simply use the Cipher /x command. Cipher will reply with a message asking if you truly want to back up your EFS key—sadly, I haven't found a way to suppress this message. Press OK. The tool will then prompt you for the name of the file in which to store the backup. Don't specify a file extension; Cipher insists on the .pfx extension. For example, if you picked a file named mybackup, you now have a small file called mybackup.pfx. Next, the tool will prompt you to create a password with which to protect that file.
Once you've got that file created, copy it from your computer's hard disk to some offline location (e.g., a USB stick, a CD-ROM) and make a note of the password you've chosen. Now, in the event of unfortunate circumstances— for example, you lose your profile, you forget your password and a systems administrator has to reset it, the system's OS fails and you need to recover files directly from the nowdead system's hard disk—you can simply restore your EFS key by double-clicking the .pfx file and running the resulting wizard. As soon as the wizard is finished, you'll be able to get to your files again.
Q109. - (Topic 5)
You are performing a native VHD boot from Windows Vista to Windows 7 Professional. Windows 7 Professional is installed on F: \Windows7Pro.vhd.
You run the bcdedit /copy {current} /d "Windows 7 VHD" command. The boot configuration data is enumerated as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that the following requirements are met:
. Both operating systems are bootable after the Power On Self-Test (POST).
. Windows 7 VHD is selected as the default boot entry.
Which three commands should you run? (Each correct answer presents part of the solution. Choose three.)
A. Bcdedit /default {ded5a252-7077-11e0-8ac8-a2d217dce703}
B. Bcdedit /set {ded5a24e-7077-11e0-8ac8-a2d217dce703} osdevice vhd=[f:]\Windows7Pro.vhd
C. Bcdboot C:\windows /s E:
D. Bcdedit /set {ded5a24e-7077-11e0-8ac8-a2d217dce703} device vhd=[f:]\Windows7Pro.vhd
E. Bcdedit /set {ded5a252-7077-11e0-8ac8-a2d217dce703} device vhd=[f:]\Windows7Pro.vhd
F. Bcdedit /default {current}
G. Bcdedit /set {ded5a252-7077-11e0-8ac8-a2d217dce703} osdevice vhd=[f:]\Windows7Pro.vhd
Answer: A,E,G
Q110. - (Topic 1)
Your network consists of a single IPv4 subnet. The subnet contains 20 computers that run Windows 7.
You add a new computer named Computer1 to the subnet.
You discover that Computer1 has an IP address of 169.254.34.12.
You cannot connect to other computers on the network. Other computers on the network can connect to each other.
You need to ensure that you can connect to all computers on the network. What should you do?
A. Turn off Windows Firewall.
B. Run Ipconfig.exe /renew.
C. Configure a static TCP/IP address.
D. Run Netsh.exe interface ipv4 install.
Answer: C
Explanation:
[Need better justification] Configuring static IP addresses When you assign a static IP address, you need to tell the computer the IP address you want to use, the subnet mask for this IP address, and, if necessary, the default gateway to use for internetwork communications. An IP address is a numeric identifier for a computer. Ip addressing schemes vary according to how your network is configured, but they're normally assigned based on a particular network segment.