Key Management Services (KMS) - ANSWER Your company has an isolated
network used for testing. The network contains 20 computers that run Windows
10. The computers are in a workgroup. During testing, the computers must
remain in the workgroup. You discover that none of the computers are
activated. You need to recommend a solution to activate the computers without
connecting the network to the Internet.
What should you include in the recommendation?
Windows 10 Pro in S mode - ANSWER You plan to deploy Windows 10 to
100 secure computers. You need to select a version of Windows 10 that meets
the following requirements:
*Uses Microsoft Edge as the default browser
*Minimizes the attack surface on the computer
*Supports joining Microsoft Azure Active Directory (Azure AD)
*Only allows the installation of applications from the Microsoft Store
What is the best version to achieve the goal?
Turn off all Windows spotlight features - ANSWER Your network contains an
Active Directory domain. The domain contains 1,000 computers that run
Windows 10. You discover that when users are on their lock screen, they see a
different background image every day, along with tips for using different
features in Windows 10. You need to disable the tips and the daily background
image for all the Windows 10 computers. Which Group Policy settings should
you modify?
Add a BitLocker key protector - ANSWER You have several computers that
run Windows 10. The computers are in a workgroup and have BitLocker Drive
Encryption (BitLocker) enabled. You join the computers to Microsoft Azure
Active Directory (Azure AD). You need to ensure that you can recover the
BitLocker recovery key for the computers from Azure AD. What should you do
first?
, Security Options in Local Group Policy Editor - ANSWER You have a
computer named Computer1 that runs Windows 10. You need to configure User
Account Control (UAC) to prompt administrators for their credentials. Which
settings should you modify?
From Administrative Templates in the local Group Policy, configure the Store
settings
From Security Settings in the local Group Policy, configure Application Control
Policies - ANSWER You have several computers that run Windows 10. The
computers are in a workgroup. You need to prevent users from using Microsoft
Store apps on their computer. What are two possible ways to achieve the goal?
Each correct answer presents part of the solution.
Local Group Policy Editor - ANSWER You have a computer named
Computer1 that runs Windows 10. You need to prevent standard users from
changing the wireless network settings on Computer1. The solution must allow
administrators to modify the wireless network settings. What should you use?
Request a passphrase - ANSWER Your company has a wireless access point
that uses WPA2-Enterprise. You need to configure a computer to connect to the
wireless access point. What should you do first?
From the properties of VPN1, clear the Use default gateway on remote network
check box. - ANSWER A user named User1 has a computer named
Computer1 that runs Windows 10. User1 connects to a Microsoft Azure virtual
machine named VM1 by using Remote Desktop. User1 creates a VPN
connection to a partner organization. When the VPN connection is established,
User1 cannot connect to VM1. When User1 disconnects from the VPN, the user
can connect to VM1. You need to ensure that User1 can connect to VM1 while
connected to the VPN. What should you do?
Remote Management Users - ANSWER Your network contains an Active
Directory domain. The domain contains a user named Admin1. All computers
run Windows 10. You enable Windows PowerShell remoting on the computers.
You need to ensure that Admin1 can establish remote PowerShell connections
to the computers. The solution must use the principle of least privilege. To
which group should you add Admin1?
network used for testing. The network contains 20 computers that run Windows
10. The computers are in a workgroup. During testing, the computers must
remain in the workgroup. You discover that none of the computers are
activated. You need to recommend a solution to activate the computers without
connecting the network to the Internet.
What should you include in the recommendation?
Windows 10 Pro in S mode - ANSWER You plan to deploy Windows 10 to
100 secure computers. You need to select a version of Windows 10 that meets
the following requirements:
*Uses Microsoft Edge as the default browser
*Minimizes the attack surface on the computer
*Supports joining Microsoft Azure Active Directory (Azure AD)
*Only allows the installation of applications from the Microsoft Store
What is the best version to achieve the goal?
Turn off all Windows spotlight features - ANSWER Your network contains an
Active Directory domain. The domain contains 1,000 computers that run
Windows 10. You discover that when users are on their lock screen, they see a
different background image every day, along with tips for using different
features in Windows 10. You need to disable the tips and the daily background
image for all the Windows 10 computers. Which Group Policy settings should
you modify?
Add a BitLocker key protector - ANSWER You have several computers that
run Windows 10. The computers are in a workgroup and have BitLocker Drive
Encryption (BitLocker) enabled. You join the computers to Microsoft Azure
Active Directory (Azure AD). You need to ensure that you can recover the
BitLocker recovery key for the computers from Azure AD. What should you do
first?
, Security Options in Local Group Policy Editor - ANSWER You have a
computer named Computer1 that runs Windows 10. You need to configure User
Account Control (UAC) to prompt administrators for their credentials. Which
settings should you modify?
From Administrative Templates in the local Group Policy, configure the Store
settings
From Security Settings in the local Group Policy, configure Application Control
Policies - ANSWER You have several computers that run Windows 10. The
computers are in a workgroup. You need to prevent users from using Microsoft
Store apps on their computer. What are two possible ways to achieve the goal?
Each correct answer presents part of the solution.
Local Group Policy Editor - ANSWER You have a computer named
Computer1 that runs Windows 10. You need to prevent standard users from
changing the wireless network settings on Computer1. The solution must allow
administrators to modify the wireless network settings. What should you use?
Request a passphrase - ANSWER Your company has a wireless access point
that uses WPA2-Enterprise. You need to configure a computer to connect to the
wireless access point. What should you do first?
From the properties of VPN1, clear the Use default gateway on remote network
check box. - ANSWER A user named User1 has a computer named
Computer1 that runs Windows 10. User1 connects to a Microsoft Azure virtual
machine named VM1 by using Remote Desktop. User1 creates a VPN
connection to a partner organization. When the VPN connection is established,
User1 cannot connect to VM1. When User1 disconnects from the VPN, the user
can connect to VM1. You need to ensure that User1 can connect to VM1 while
connected to the VPN. What should you do?
Remote Management Users - ANSWER Your network contains an Active
Directory domain. The domain contains a user named Admin1. All computers
run Windows 10. You enable Windows PowerShell remoting on the computers.
You need to ensure that Admin1 can establish remote PowerShell connections
to the computers. The solution must use the principle of least privilege. To
which group should you add Admin1?
