NTFS permissions. Whichever set is most restrictive will be applied.6 You are the administrator for your company network. You have a Windows 10 computer. You need to configure User Account Control (UAC) to prompt you for your credentials. Which setting should you modify so that you will be prompted for your credentials?You should modify the Administrators Properties in Local Users And Groups.You should modify the Security Options in Local Group Policy Editor.You should modify the User Account Control Settings in Control Panel.You should modify the User Rights Assignment in Local Group Policy Editor.
7 You are the administrator for your company network. What port should you open on your firewall if you want to use Device Health Attestation on your network or in the cloud?You should open port 25.You should open port 110.You should open port 443.You should open port 995.
8 You are the administrator for your company network. You have a Windows 10 computer named Computer1 that has a service named App1, which is configured to log on as an account named Service1. You find out that a user has used the Service1 account to sign into the computer and delete some files. You need to ensure that the account that is used by App1 cannot be used by a user to sign into the computer. Using the principle of least privilege, what should you do?On Computer1, configure App1 to sign in as a Local System account and then select the Allow Service To Interact With Desktop checkbox. Then, you should delete the Service1 account.On Computer1, assign the Service1 account the Deny Log On Locally user right.On Computer1, assign the Service1 account the Deny Log On As A Service user right.On Computer1, configure App1 to sign in as a Guest account and then select the Allow Service To Interact With Desktop checkbox. Then, you should delete the Service1 account.
9 You are the administrator for your company network. You want to create a new local user account on Windows 10 by using Windows PowerShell. Which command do you use?Use Add-LocalUser.Use Add-WindowsUser.Use New-LocalUser.Use New-WindowsUser.
10 You are the administrator for your company network. Your network has an Active Directory domain that contains hundreds of Windows 10 computers. You find out that every day when users are on their Lock screen, they will see a different background image. They also see tips on using different features of Windows 10. What Group Policy setting should you change to disable the daily background image and tips from appearing on all of the Windows 10 computers?You should select Do Not Suggest Third-Party Content in Windows Spotlight.You should turn off all Windows Spotlight features.You should turn off Windows Spotlight in Settings.You should turn off the Windows Welcome Experience.
11 You are the administrator for your company network. You have a Windows 10 computer, and you'd like to prevent standard users from changing the wireless network settings on this machine. What should you use that will allow the administrator to modify the wireless settings while the standard user cannot?Use the Control Panel to go to Network And Internet Settings, then go to the Network And Sharing Center, and then click View Network Connections.Use the Local Group Policy Editor (gpedit.msc).Use the System Configuration Utility (msconfig.exe).Use the Windows Configuration Designer.
12 You are the administrator for your company network. You want to view and control all of the hardware that is attached to a computer. What tool should you use to see this?File ExplorerDevice ManagerDisk ManagementTask Manager
13 You are the administrator for your company network. You have a Windows 10 computer that you are looking to expand the disk space on. You are thinking of using spanned volumes. Which statements are true regarding spanned volumes? (Choose all that apply.)They can contain space from 2 to 24 physical drives.They can contain space from 2 to 32 physical drives.They can be formatted as FAT32 or NTFS partitions.They can be formatted only as NTFS partitions.
14 You are the administrator for your company network. You have a new computer that has been installed with the 64-bit version of Windows 10 Professional. You have a new driver for a device on this computer; however, the driver is not digitally signed. What should you do first if you want to test the installation of the driver on the computer?Configure the Driver Installation settings from Computer Configuration in Group Policy.Configure the Driver Installation settings from User Configuration in Group Policy. Restart the computer by using the advanced startup options.Run dism.exe and specify the /add-driver and /force-unsigned parameters.
15 You are the administrator for your company network. You have a Windows 10 computer that contains a folder named MyFolder. Which action(s) should you take to log any users who take ownership of the files within the folder? (Choose all that apply.)Configure the Audit File System setting from a Group Policy object (GPO).Configure the Audit Sensitive Privilege Use setting from a Group Policy object (GPO).Install the Remote Server Administration Tools (RSAT).On MyFolder, modify the Advanced Security Settings.On MyFolder, modify the folder attributes.
16 You are the administrator for your company network. You have recently hired an assistant, and you want them to perform some administrative duties. You'd like this new admin assistant to be able to restore files on Windows 10 computers, but you don't want to allow them to perform backups. What should you assign to the new admin assistant?Add the admin assistant to the Administrators group.Add the admin assistant to the Backup Operators group.Grant the admin assistant the Read right to the root of each volume to be backed up.Grant the admin assistant the user right Restore Files And Directories.
17 You are the administrator for your company network. You are worried that your network's security may have been compromised. You want to set up a policy that will not allow hackers to be able to continuously attempt user logons using different passwords. What Local Security Policy should you set to accomplish this goal?You should configure an Account Lockout Policy.You should configure an Audit Policy.You should set a Password Policy.You should set Security Options.
18 You are the administrator for your company network. You have a Windows 10 computer that needs to have security so that if the drive is stolen, the data will be prevented from being accessed. What should you to do prevent the data from being accessed from a stolen hard drive?Set the BitLocker Drive Encryption using the Device Manager icon in Control Panel.Set the BitLocker Drive Encryption using the Hardware icon in Control Panel.Set the BitLocker Drive Encryption using a Local Group Policy.Set the BitLocker Drive Encryption using the System icon in Control Panel.
19 You are the administrator for your company network. You have a computer that is configured to dual boot with 64-bit Windows 10 Enterprise installed on the local disk and 64-bit Windows 10 Professional installed in a VHDX file named Disk1.vhdx. You start the computer in Windows 10 Enterprise. What utility should you use if you want to install an unsigned driver to Windows 10 Professional when the computer starts in Windows 10 Professional?Add-Windows Imagebcdboot.exebootcfg.exebcdedit.exe
20 You are the administrator for your company network. Management has tasked you to create and implement a new security policy. You have configured password policies so that the employees must change their passwords every 30 days. You want to prevent them from reusing passwords that they have recently used. Which password policy should you implement?You should implement Enforce Password History.You should implement Passwords Must Be Advanced.You should implement Passwords Must Be Unique.You should implement Passwords Must Meet Complexity Requirements.
21 You are the administrator for your company network. You and a colleague are discussing rules that use IPsec to secure traffic while it crosses the network. These rules can be used to specify the connections between two computers that must be authenticated or encrypted. What is the name for the rules being discussed?Connection security rulesDHCP rulesFirewall rulesTCP rules
22 You are the administrator for your company network. You have several Windows 10 computers that are part of a workgroup. You want to prevent the employees from using Microsoft Store apps on their computers. How should you achieve this task?Configure the Security Options from Security Settings in the Local Group Policy.Configure the Software Restriction Policies from Security Settings in the Local Group Policy.Configure the Store settings from Administrative Templates in the Local
