VUE/Prometric 考试号: 070-685
考题: Pro: Windows 7, Enterprise Desktop Support Technician
MCITP 070-685考试题库由我们专业IT认证讲师及产品专家精心打造,包括了当前最新的全真070-685考试试题,全部附有正确答案。
1. All client computers on your company network run Windows 7 and are members of an Active Directory
Domain Services domain.
The application control method was established by using Software Restriction Policies. These Software
Restriction Policies were deployed in a single Group Policy object (GPO) linked to the Organizational Unit
(OU) that contains the computers.
You plan to deploy Microsoft Office 2007 and configure AppLocker as the control within the GPO.
You need to ensure that core business applications continue to function.
What should you do?
A. Move the AppLocker rules to a different GPO.
B. Create new AppLocker rules that allow only digitally signed applications.
C. Create a new GPO. Apply the Software Restriction Policy and the AppLocker rules to the new GPO.
D. Recreate the AppLocker rules and apply them to the local security policy of each computer.
Answer: A
2. All client computers on your company network run Windows 7 and are members of a Windows Server
2008 R2 domain. The R&D department staff are local administrators on their computers and are members
of the R&D global security group.
A new version of a business software application is available on the network.
You plan to apply an AppLocker security policy to the R&D group.
You need to ensure that members of the R&D group are not allowed to upgrade the software.
What should you do?
A. Create an Audit only restriction based on the version of the software.
B. Create an Audit only restriction based on the publisher of the software.
C. Create an Enforce rule restriction based on the version of the software.
D. Create an Enforce rule restriction based on the publisher of the software.
Answer: C
3. All client computers on your company network run Windows 7 and are members of an Active Directory
Domain Services domain.
AppLocker is configured to allow only approved applications to run.
The safer , easier way to help you pass any IT exams.
Employees with standard user account permissions are able to run applications that install into the user
profile folder.
You need to prevent standard users from running unauthorized applications.
What should you do?
A. Create Executable Rules by selecting the Create Default Rules option.
B. Create Windows Installer Rules by selecting the Create Default Rules option.
C. Create the following Windows Installer Rule:
Deny Everyone - %OSDRIVE%\Users\<user name>\Downloads\*
D. Create the following Executable Rule:
Deny - Everyone - %OSDRIVE%\Users\<user name>\Documents\*
Answer: A 070-685: 免费PDF版本Demo下载