NEW QUESTION 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer named Computer1 that runs Windows 10. The computer contains a folder. The folder contains sensitive data.
You need to log which user reads the contents of the folder and modifies and deletes files in the folder. Solution: From the properties of the folder, you configure the Auditing settings and from the Audit Policy in
the local Group Policy, you configure Audit directory service access.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation:
References:
https://www.netwrix.com/how_to_detect_who_changed_file_or_folder_owner.html

NEW QUESTION 2

You have a computer named Computer1 that runs Windows 10. Computer1 is in a workgroup. Computer1 contains the folders shown in the following table.

On Computer1, you create the users shown in the following table.

User1 encrypts a file named File1.txt that is in a folder named C:Folder1.
What is the effect of the configuration? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
References:
https://support.microsoft.com/en-za/help/310316/how-permissions-are-handled-when-you-copy-and-move-files-

NEW QUESTION 3
ComputerA connects to a manufacturing system and is business critical. All the other computers are joined to the domain and run the Semi-Annual Channel version of Windows 10.
In the domain, you create four groups named Group1, Group2, Group3, and Group4. Computer2 has the local Group Policy settings shown in the following table.

The computers are updated by using Windows Update for Business. The domain has the users shown in the following table.

Computer1 has the local users shown in the following table.

Requirements Planned Changes
Contoso plans to purchase computers preinstalled with Windows 10 Pro for all the San Diego office users.
Technical requirements
Contoso identifies the following technical requirements:
The computers in the San Diego office must be upgraded automatically to Windows 10 Enterprise and must be joined to Azure AD the first time a user starts each new computer. End users must not be required to accept the End User License Agreement (EULA).
Helpdesk users must be able to troubleshoot Group Policy object (GPO) processing on the Windows 10 computers. The helpdesk users must be able to identify which Group Policies are applied to the computers.
Users in the HR department must be able to view the list of files in a folder named D:Reports on Computer3.
ComputerA must be configured to have an Encrypting File System (EFS) recovery agent.
Quality update installations must be deferred as long as possible on ComputerA.
Users in the IT department must use dynamic look on their primary device.
User6 must be able to connect to Computer2 by using Remote Desktop.
The principle of least privilege must be used whenever possible.
Administrative effort must be minimized whenever possible.
Assigned access must be configured on Computer1.
6.
You need to meet the technical requirements for EFS on ComputerA. What should you do?

• A. Run certutil.exe, and then add a certificate to the local computer certificate store.
• B. Run cipher.exe, and then add a certificate to the local computer certificate store.
• C. Run cipher.exe, and then add a certificate to the local Group Policy.
• D. Run certutil.exe, and then add a certificate to the local Group Policy.

Answer: B

Explanation:
References:
https://www.online-tech-tips.com/computer-tips/set-file-folder-permissions-windows/
9. - (Exam Topic 2)
You need to meet the technical requirements for the helpdesk users.
What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

10. - (Exam Topic 2)
You need to meet the technical requirement for User6. What should you do?
A. Add User6 to the Remote Desktop Users group in the domain.
B. Remove User6 from Group2 in the domain.
C. Add User6 to the Remote Desktop Users group on Computer2.
D. And User6 to the Administrators group on Computer2.
Answer: B

NEW QUESTION 4

You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that contain the users shown in the following table.

You have a computer named Computer1 that runs Windows 10.

User1 joins Computer1 to Azure AD by using user1@contoso.com.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 5

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer named Computer1 that runs Windows 10. The computer contains a folder. The folder contains sensitive data.
You need to log which user reads the contents of the folder and modifies and deletes files in the folder.
Solution: From the properties of the folder, you configure the Auditing settings and from Audit Policy in the local Group Policy, you configure Audit object access.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

Explanation:
References:
https://www.netwrix.com/how_to_detect_who_changed_file_or_folder_owner.html

NEW QUESTION 6

You have 100 computers that run Windows 10. The computers are in a workgroup. The computers have a low-bandwidth metered Internet connection.
You need to reduce the amount of Internet bandwidth consumed to download updates. What should you configure?

• A. BranchCache in hosted mode
• B. BranchCache in distributed cache mode
• C. Delivery Optimization
• D. Background intelligent Transfer Service (BITS)

Answer: C

Explanation:
References:
https://support.microsoft.com/en-us/help/4468254/windows-update-delivery-optimization-faq

NEW QUESTION 7

You plan to deploy Windows 10 to 100 secure computers.
You need to select a version of Windows 10 that meets the following requirements:
Uses Microsoft Edge as the default browser
Minimizes the attack surface on the computer
Supports joining Microsoft Azure Active Directory (Azure AD)
Only allows the installation of applications from the Microsoft Store
What is the best version to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

• A. Windows 10 Pro in S mode
• B. Windows 10 Home in S mode
• C. Windows 10 Pro
• D. Windows 10 Enterprise

Answer: C

Explanation:
References:
https://www.microsoft.com/en-za/windows/compare

NEW QUESTION 8

You have three computers that run Windows 10 as shown in the following table.

All the computers have C and D volumes. The Require additional authentication at startup Group Policy settings is disabled on all the computers.
Which volumes can you encrypt by using BitLocker Drive Encryption (BitLocker)? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
References:
https://www.windowscentral.com/how-use-bitlocker-encryption-windows-10

NEW QUESTION 9

Your network contains an Active Directory domain named contoso.com. The domain contains named Computer1 that runs Windows 10.
On Computer1, you create an NTFS folder and assign Full control permissions to Everyone. You share the folder as Share1 and assign the permissions shown in the following table.

When accessing Share1, which two actions can be performed by User1 but not by User2? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A. Delete a file created by another user.
• B. Set the permissions for a file.
• C. Rename a file created by another user.
• D. Take ownership of file.
• E. Copy a file created by another user to a subfolder.

Answer: BD

Explanation:
References:
https://www.varonis.com/blog/ntfs-permissions-vs-share/

NEW QUESTION 10

You have a computer named LON-CL1.Adatum.com that runs Windows 10.
From Event Viewer, you create a custom view named View1 that has the following filter:
User: User1
Logged: Any time
Event logs: System
Computer: LON-CL1
Event IDs: 10000 – 11000
Event level: Error, Verbose
You open Event Viewer and discover the event shown in the exhibit. (Click the Exhibit tab.)

The event does not appear in View1.
You need to ensure that the event appears in View1. What should you do?

• A. Add a Task Category setting to the filter.
• B. Add the computer account to the Event Log Readers group.
• C. Create an event subscription.
• D. Modify the Computer setting in the filter.

Answer: A

Explanation:
References:
https://www.techrepublic.com/article/how-to-use-custom-views-in-windows-10s-event-viewer/

NEW QUESTION 11

You need to implement a solution to configure the contractors’ computers.
What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
References:
https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-install-icd

NEW QUESTION 12

You need to recommend a solution to configure the employee VPN connections. What should you include in the recommendation?

• A. Remote Access Management Console
• B. Group Policy Management Console (GPMC)
• C. Connection Manager Administration Kit (CMAK)
• D. Microsoft Intune

Answer: D

Explanation:
References:
https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/vpn-deploy-

NEW QUESTION 13

You have a computer named Computer1 that runs Windows 7. Computer1 has a local user named User1 who has a customized profile.
On Computer1, you perform a clean installation of Windows 10 without formatting the drives. You need to migrate the settings of User1 from Windows7 to Windows 10.
Which two actions should you perform? To answer, drag the appropriate actions to the correct targets. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
References:
https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-how-it-works

NEW QUESTION 14

A user named User1 has a computer named Computer1 that runs Windows 10.
User1 connects to a Microsoft Azure virtual machine named VM1 by using Remote Desktop. User1 creates a VPN connection to a partner organization.
When the VPN connection is established, User1 cannot connect to VM1. When User1 disconnects from the VPN, the user can connect to VM1.
You need to ensure that User1 can connect to VM1 while connected to the VPN. What should you do?

• A. From the proxy settings, add the IP address of VM1 to the bypass list to bypass the proxy.
• B. From the properties of VPN1, clear the Use default gateway on remote network check box.
• C. From the properties of the Remote Desktop connection to VM1, specify a Remote Desktop Gateway (RDGateway).
• D. From the properties of VPN1, configure a static default gateway address.

Answer: B

Explanation:
References:
https://www.stevejenkins.com/blog/2010/01/using-the-local-default-gateway-with-a-windows-vpn-connection/

NEW QUESTION 15

You have 200 computers that run Windows 10 and are joined to an Active Directory domain.
You need to enable Windows Remote Management (WinRM) on all the computers by using Group Policy. Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A. Set the Startup Type of the Windows Remote Management (WS-Management) service to Automatic.
• B. Enable the Windows Firewall: Allow inbound remote administration exception setting.
• C. Enable the Allow remote server management through WinRM setting.
• D. Enable the Windows Firewall: Allow inbound Remote Desktop exceptions setting.
• E. Enable the Allow Remote Shell access setting.
• F. Set the Startup Type of the Remote Registry service to Automatic.

Answer: ACD

Explanation:
References:
http://www.mustbegeek.com/how-to-enable-winrm-via-group-policy/

NEW QUESTION 16

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2021 and a computer named Computer1 that runs Windows 10.
Server1 contains a share named Backup. All users can read and write data in Backup.
On Monday at 13:00, you configure Backup and Restore (Windows 7) on Computer1 to use the following settings:
Backup Destination:\Server1Backup
What do you want to back up?:Local Disk (D:), Include a system image of drives: System Reserved, (C:)
Schedule: Daily at 23:00
You need to identify how many backups will be available on Thursday at 17:00.
What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
References:
https://www.windowscentral.com/how-make-full-backup-windows-10#create_system_image_windows10https:/

NEW QUESTION 17

You have several computers that run Windows 10. The computers are in a workgroup and have BitLocker Drive Encryption (BitLocker) enabled.
You join the computers to Microsoft Azure Active Directory (Azure AD).
You need to ensure that you can recover the BitLocker recovery key for the computers from Azure AD. What should you do first?

• A. Disable BitLocker.
• B. Add a BitLocker key protector.
• C. Suspend BitLocker.
• D. Disable the TMP chip.

Answer: B

Explanation:
References:
https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/prepare-your-organization-f

NEW QUESTION 18

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer named Computer1 that runs Windows 10.
You test Windows updates on Computer1 before you make the updates available to other users at your company.
You install a quality update that conflicts with a customer device driver. You need to remove the update from Computer1.
Solution: From an elevated command prompt, you run the wusa.exe command and specify the /uninstall
parameter.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

Explanation:
References:
https://support.microsoft.com/en-us/help/934307/description-of-the-windows-update-standalone-installer-in-win

NEW QUESTION 19

You have a computer named Computer1 that runs Windows 10 and is joined to an Active Directory domain named adatum.com.
A user named Admin1 signs in to Computer1 and runs the whoami command as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 20

A user has a computer that runs Windows 10.
When the user connects the computer to the corporate network, the user cannot access the internal corporate servers. The user can access servers on the Internet.
You run the ipconfig command and receive the following output.

You send a ping request and successfully ping the default gateway, the DNS servers, and the DHCP server. Which configuration on the computer causes the issue?

• A. the DNS servers
• B. the IPv4 address
• C. the subnet mask
• D. the default gateway address

Answer: A

NEW QUESTION 21

Your company purchases 20 laptops that use a new hardware platform. In a test environment, you deploy Windows 10 to the new laptops. Some laptops frequently generate stop errors.
You need to identify the cause of the issue. What should you use?

• A. Reliability Monitor
• B. Task Manager
• C. System Configuration
• D. Performance Monitor

Answer: A

Explanation:
References:
https://lifehacker.com/how-to-troubleshoot-windows-10-with-reliability-monitor-1745624446

NEW QUESTION 22

You have several computers that run Windows 10. The computers are in a workgroup. You need to prevent users from using Microsoft Store apps on their computer.
What are two possible ways to achieve the goal? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A. From Security Settings in the local Group Policy, configure Security Options.
• B. From Administrative Templates in the local Group Policy, configure the Store settings.
• C. From Security Settings in the local Group Policy, configure Software Restriction Policies.
• D. From Security Settings in the local Group Policy, configure Application Control Policies.

Answer: BD

Explanation:
References:
https://www.techrepublic.com/article/how-to-manage-your-organizations-microsoft-store-group-policy/

NEW QUESTION 23

You have a computer that runs Windows 10. You can start the computer but cannot sign in.
You need to start the computer into the Windows Recovery Environment (WinRE). What should you do?

• A. Turn off the compute
• B. Turn on the computer, and then press F8.
• C. Turn off the compute
• D. Turn on the computer, and then press F10.
• E. From the sign-in screen, hold the Shift key, and then click Restart.
• F. Hold Alt+Ctrl+Delete for 10 seconds.

Answer: C

Explanation:
References:
https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/windows-recovery-environment--win

NEW QUESTION 24

You have a computer named Computer1 that runs Windows 10.
On Computer1, you create the local users shown in the following table.

Which three user profiles will persist after each user signs out? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A. User1
• B. User2
• C. User3
• D. User4
• E. User5

Answer: ADE

NEW QUESTION 25
......