this feature called?Credential GuardDevice GuardLocal Security Authority (LSA)Virtualization-Based Security (VBS)71 You are the administrator for your company network. You are planning on using Device Guard. You'd like to use Windows PowerShell to set it up. Which PowerShell command should you use if you'd like to allow an administrator to create a Code Integrity policy as an XML file?Get-GIPolicyMerge-CIPolicyNew-CIPolicySet-GIPolicy
72 You are the administrator for your company network. You want to protect your systems from common malware hacks that use executable files and scripts that attack applications such as Microsoft 365. Which Microsoft tool should you use to accomplish this goal?You should use Microsoft Defender Application Control.You should use Microsoft Defender Credential Guard.You should use Microsoft Defender Exploit Guard.You should use Microsoft Defender Firewall with Advanced Security.
73 You are the administrator for your company network. You are attempting to set up Microsoft Defender Firewall to allow FTP traffic. What two port numbers should you set up?You should set up ports 20 and 21.You should set up ports 25 and 53.You should set up ports 53 and 80.You should set up ports 80 and 443.
74 You are the administrator for your company network. You are considering upgrading a basic disk to a dynamic disk on a Windows 10 computer. A colleague has asked you to describe the function of a dynamic disk. Which statement best describes this?Dynamic disks are the only hard drive configuration used by Windows 10.Dynamic disks support features such as simple partitions, extended partitions, spanned partitions, and striped partitions.Dynamic disks can be recognized by older, legacy operating systems such as Windows NT 4.Dynamic disks support features such as simple volumes, extended volumes, spanned volumes, mirrored volumes, and striped volumes.
75 You are the administrator for your company network. An employee with a Windows 10 computer informs you that they have been noticing that the larger a file gets, the longer it takes to access it. They have been having issues with a lot of their larger files. You suspect that the problem is possibly related to the files being spread across the disk. What utility can you use to store the file sequentially across the disk?You should utilize Disk Administrator.You should utilize Disk Cleanup.You should utilize Disk Defragmenter.You should utilize Disk Manager.
76 You are the administrator for your company network. You are attempting to set up Microsoft Defender Firewall to allow SMTP inbound and outbound rules. What port number should you set up?You should set up port 20.You should set up port 25.You should set up port 53.You should set up port 80.
77 You are the administrator for your company network. All of your system computers are running Windows 10. You want to make sure that all of the applications that are installed on the computers have been company approved. What should you use to ensure this?You should use Microsoft Defender Antivirus.You should use Microsoft Defender Application Control.You should use Microsoft Defender Credential Guard.You should use Microsoft Defender Exploit Guard.
78 You are the administrator for your company network. You are planning on setting up inbound and outbound rules on your Windows 10 machines. What should you use to accomplish this?You should implement Microsoft Defender Application Control.You should implement Microsoft Defender Credential Guard.You should implement Microsoft Defender Exploit Guard.You should implement Microsoft Defender Firewall with Advanced Security.
79 You are the administrator for your company network. You are attempting to set up Microsoft Defender Firewall to allow DNS inbound and outbound rules. What port number should you set up?You should set up port 20.You should set up port 25.You should set up port 53.You should set up port 80.
80 You are the administrator for your company network. You have a Windows 10 Enterprise computer. This computer does not have a Trusted Platform Module (TPM) chip installed. You want to configure BitLocker Drive Encryption (BitLocker) on this machine. What Group Policy object (GPO) setting should you configure?You should configure the Allow Access To BitLocker-Protected Fixed Data Drives From Earlier Version Of Windows setting.You should configure the Allow Network Unlock At Startup setting.You should configure the Require Additional Authentication At Startup setting.You should configure the Use Of Hardware-Based Encryption For Operating System Drives setting.
81 You are the administrator for your company network. You have been tasked with assigning a user, User1, the rights to Read and Change a document in the C:\Documents folder. Here are the current permissions on the shared folder:Group/UserNTFS PermissionShared PermissionSalesReadChangeMarketingModifyChangeResearchDenyFull ControlFinanceReadReadUser1ReadChangeUser1 is also a member of the Sales and Finance groups. When accessing the C:\Documents folder, User1 can read all the files but is unable to change or delete files. What should you do to give User1 the minimum amount of rights to perform their job?You should assign Finance Change Shared permission.You should assign Finance Modify NTFS permission.You should assign Sales Full Control Shared permission.You should assign User1 Full Control NTFS permission.You should assign User1 Modify NTFS permission.
82 You are the administrator for your company network. Your network contains an Active Directory domain that contains a group called Group1. All of the computers in this domain are running Windows 10. Every computer has a folder named C:\Documents that has the default NTFS permissions assigned. You add a folder named Templates to the C:\Documents directory on all of the computers. You have to configure the NTFS permissions to meet the requirements for a new company policy, which states that all domain users must be able to open the files within the Templates folder but that only the members of Group1 can edit the files within it. How should you configure the NTFS settings on the Templates folder with regard to inheritance?You should disable inheritance and copy explicit permissions.You should disable inheritance and remove permissions. You should enable inheritance.You should enable inheritance and remove permissions.
83 You are the administrator for your company network. Your network contains an Active Directory domain that contains a group called Group1. All of the computers in this domain are running Windows 10. Every computer has a folder named C:\Documents that has the default NTFS permissions assigned. You add a folder named Templates to the C:\Documents directory on all of the computers. You have to configure the NTFS permissions to meet the requirements for a new company policy. The requirements are that all domain users must be able to open the files within the Templates folder but that only the members of Group1 can edit the files within the Templates folder. How should you configure the NTFS settings for the Templates folder in regard to permissions for the domain users?You should assign the Allow Modify permission.You should assign the Allow Read & Execute permission.You should assign the Deny Modify permission.You should assign the Deny Read & Execute permission.
84 You are the administrator for your company network. Your network contains an Active Directory domain that includes a group called Group1. All of the computers in this domain are running Windows 10. Every computer has a folder named C:\Documents that has the default NTFS permissions assigned. You add a folder named Templates to the C:\Documents directory on all of the computers. You have to configure the NTFS permissions to meet the requirements for a new company policy. The requirements are that all domain users must be able to open the files within the Templates folder but that only the members of Group1 can edit the files within the Templates folder. How should you configure the NTFS settings on the Templates folder in regard to permissions for Group1?You should assign the Allow Modify permission.You should assign the Allow Read & Execute permission.You should assign the Deny Modify permission.You should assign the Deny Read & Execute permission.
85 You are the administrator for your company network. You have a Windows 10 Enterprise computer. Using the Microsoft Defender Firewall with Advanced Security tool, you change settings on a reference computer. You want to apply the same settings to all of the other company computers. You want to save the Microsoft Defender Firewall with Advanced Security configuration settings from the reference computer and import the configuration settings into a Group Policy object (GPO) at a later time. What should you do to implement this?You should open Local Group Policy Editor, select the Windows Firewall with Advanced Security node,
