Store Restriction Policies from Security Settings in the Local Group Policy.23 You are the administrator for your company network. You have been tasked to implement a form of two-factor authentication. What should you implement to meet this request?Implement and install fingerprint scanners.Implement and install retina scanners. Implement passwords and usernames.Implement smart cards.
24 You are the administrator for your company network. You have about 25 Windows 10 computers. You have configured the computers to forward all events to a computer named Computer1. When you log into Computer1, you do not see any of the security events from the other computers. What should you do to ensure that the security events are forwarded to Computer1?Add the account of Computer1 to the Event Log Readers group on Computer1.Add the Network Service account to the Event Log Readers group on each computer.Run wecutil ac /q on each computer.Run winrm qc -q on each computer.
25 You are the administrator for your company network. You have several Windows 10 Enterprise desktop computers that are members of an Active Directory domain. The standard domain user accounts are configured with mandatory user profiles. What should you do if you have several users who have been transferred into a different department and you need to modify their profiles?Change the extension of the NTuser.man file in the user profile directory to NTuser.dat.Configure the user's document library to include folders from network shares.Remove the .man extension from the user profile name.Use Group Policy to configure Folder Redirection.
26 You are the administrator for your company network. You have an Active Directory Domain Services (AD DS) domain with Windows 10 Enterprise client computers. You have several laptop computers that you want to configure so that after 20 minutes of running on battery power, they will go to sleep. What actions should you perform to complete this task? (Choose two.)Configure the Power Management settings by creating a Group Policy object (GPO).Configure the Sleep Management settings by creating a Group Policy object (GPO).Configure the Power Management settings by editing the local Group Policy.Configure the Shut Down options by editing the local Group Policy.Link the Group Policy object (GPO) to the organizational unit (OU) that contains the laptop computers.
27 You are the administrator for your company network. You have an Active Directory domain that contains Windows 10 Enterprise client computers. Employees sometimes will use USB drives to store sensitive files that are stored on several computers. However, the corporate security policy states that all removable storage drives must be encrypted, and this includes the USB drives. What should you do if you need to ensure that if an employee forgets their passwords for their encrypted BitLocker to Go USB device, that the employee can resolve the situation themselves?Create a USB startup key for each computer.Implement the BitLocker Network Unlock feature. Instruct the user to open BitLocker Drive Encryption, select Back Up Recovery Key, and then select Save To A File.Instruct the user to run manage-bde -forcerecovery from an elevated command prompt.
28 You are the administrator for your company network. The network consists of an Active Directory domain that has a Windows 10 computer named Computer1. What command should you run if you want to view the settings of the Group Policy objects (GPOs) in the domain and the local Group Policies that are applied to Computer1?You should run the gpfixup command.You should run the gpresult command.You should run the gpupdate command.You should run the secedit command.
29 You are the administrator for your company network. Your network contains an Active Directory domain and Windows 10 computers. To which group would you add a user if you wanted them to be able to create and modify the shares remotely on the computers?You would add the user to the Administrators group.You would add the user to the Network Configuration Operators group.You would add the user to the Power Users group.You would add the user to the Remote Management Users group.
30 You are the administrator for your company network. The company uses an application that confirms a network connection to a server by sending a ping request to the IPv6 address of the server. If the server replies, then the application loads. An employee contacts you that they cannot open the application. You go to the user's computer and send a ping request to the server. The request fails. You go back to your computer and send a ping request, and the server replies. You need to make sure that the ping request from the user's computer works when contacting the server. What Microsoft Defender Firewall rule could be the possible cause of the problem?File and Printer Sharing (Echo Request ICMPv6-In)File and Printer Sharing (Echo request ICMPv6-Out)File and Printer Sharing (NB-Datagram-In)File and Printer Sharing (NB-Datagram-Out)
31 You are the administrator for your company network. You have a Windows 10 computer that is part of a workgroup. You run the following commands on the computer:New-LocalUser -Name NewUser -NoPassword Add-LocalGroupMember User -Member NewUserWhat does this do to the computer configuration?NewUser appears on the sign-in screen and can log in without a password.NewUser appears on the sign-in screen but must set a new password on the first login attempt. NewUser is prevented from logging in until an administrator manually sets a password for the user.NewUser is prevented from logging in until the user is assigned additional user rights.
32 You are the administrator for your company network. You have a Windows 10 computer that is joined to Azure Active Directory (Azure AD). When you try to open the Control Panel, you receive an error message that states, “This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.” What should you do if you need to be able to access the Control Panel from this computer?Check the Group policy preferences.Check the Local Group Policy.Check the PowerShell execution policy.Check the Settings app.
33 You are the administrator for your company network. You have a Windows 10 computer that contains a folder named Folder1. You need to provide a user with the ability to modify the permissions on the folder. Keeping in mind the principle of least privilege, what NTFS permissions should you assign the user?Assign the Full Control permission.Assign the Modify permission.Assign the Read & Execute permission.Assign the Write permission.
34 You are the administrator for your company network. You have an Azure Active Directory (Azure AD) tenant that contains a user named [email protected]. You have a Windows 10 computer named Computer1. You join this computer to the Azure AD and enable Remote Desktop. By using Remote Desktop, [email protected] tries to connect to Computer1 and receives an error message that says, “The logon attempt failed.” What should you do first to ensure that the user can connect to Computer1?Assign [email protected] the Cloud device administrator role in Azure AD.Assign [email protected] the Security administrator role in Azure AD.Create a local user and add the new user to the Remote Desktop Users group on Computer1.Modify the Allow Log On Through Remote Desktop Services user right from the local Group Policy.
35 You are the administrator for your company network. You have several Windows 10 computers that have BitLocker Drive Encryption (BitLocker) enabled. You need to update the firmware on the computers. What cmdlet should you run if you want to make sure that you are not prompted for the BitLocker recovery key when you restart the computers but you want the drives to be protected by BitLocker upon subsequent restarts?You should run Add-BitLockerKeyProtector.You should run Disable-BitLocker.You should run Unlock-BitLocker.You should run Suspend-BitLocker.
36 You are the administrator for your company network. You network contains several Windows 10 machines on which you are planning to configure some Local Group Policy objects (LGPOs). Which of the following can you not configure using LGPOs?You cannot configure administrative templates.You cannot configure Folder Redirection.You cannot configure Internet Explorer settings.You cannot configure Windows Update settings.
37 You are the administrator for your company network. You have a file that was created on a Windows 10 computer. The file is called mytext.txt. You need to change the file extension from .txt to .vbx. When you go to change
