70-685 考試是 Microsoft 公司的 Pro: Windows 7, Enterprise Desktop Support Technician 認證考試官方代號，Killtest的70-685權威考試題庫軟件是Microsoft認證廠商的授權產品,Killtest絕對保證第壹次參加 70-685 考試的考生即可順利通過，否則承諾全額退款
1. All client computers on your company network run Windows 7 and are members of an Active Directory
Domain Services domain.
The application control method was established by using Software Restriction Policies. These Software
Restriction Policies were deployed in a single Group Policy object (GPO) linked to the Organizational Unit
(OU) that contains the computers.
You plan to deploy Microsoft Office 2007 and configure AppLocker as the control within the GPO.
You need to ensure that core business applications continue to function.
What should you do?
A. Move the AppLocker rules to a different GPO.
B. Create new AppLocker rules that allow only digitally signed applications.
C. Create a new GPO. Apply the Software Restriction Policy and the AppLocker rules to the new GPO.
D. Recreate the AppLocker rules and apply them to the local security policy of each computer.
Answer: A
2. All client computers on your company network run Windows 7 and are members of a Windows Server
2008 R2 domain. The R&D department staff are local administrators on their computers and are members
of the R&D global security group.
A new version of a business software application is available on the network.
You plan to apply an AppLocker security policy to the R&D group.
You need to ensure that members of the R&D group are not allowed to upgrade the software.
What should you do?
A. Create an Audit only restriction based on the version of the software.
B. Create an Audit only restriction based on the publisher of the software.
C. Create an Enforce rule restriction based on the version of the software.
D. Create an Enforce rule restriction based on the publisher of the software.
Answer: C