2 You are the administrator for your company network. You need to track the usage of a Windows 10 computer. You plan to record user logon and logoff events. What auditing policy should you enable?You should enable Audit Account Logon Events.You should enable Audit Account Management.You should enable Audit Process Tracking.You should enable Audit System Events.
3 You are the administrator for your company network. You have a user who needs to perform some administrative tasks. You want to require that this user enter an administrator password to perform these tasks. What type of account should you create for this user?You should create an Administrator user account.You should create an Authenticated user account.You should create a Power user account.You should create a Standard user account.
4 You are the administrator for your company network. You have several Windows 10 computers that are part of a workgroup and have BitLocker Drive Encryption (BitLocker) enabled. You add these computers to the Microsoft Azure Active Directory (Azure AD). What should you do first if you need to make sure you can recover the BitLocker recovery key for the computers from Azure AD?You should add a BitLocker key protector.You should disable BitLocker.You should disable the TMP chip.You should suspend BitLocker.
5 You are the administrator for your company network. You have a Windows 10 computer that has a network folder that resides on an NTFS partition. Both NTFS permissions and share permissions have been applied. Which statement best describes how NTFS permissions and share permissions work together when applied to the same folder?NTFS permissions will always take priority over the share permissions.Share permissions will always take priority over the NTFS permissions. The system will look at the combined share permissions and the combined NTFS permissions. Whichever set is least restrictive will be applied.The system will look at the combined share permissions and the combined NTFS permissions. Whichever set is most restrictive will be applied.
6 You are the administrator for your company network. You have a Windows 10 computer. You need to configure User Account Control (UAC) to prompt you for your credentials. Which setting should you modify so that you will be prompted for your credentials?You should modify the Administrators Properties in Local Users And Groups.You should modify the Security Options in Local Group Policy Editor.You should modify the User Account Control Settings in Control Panel.You should modify the User Rights Assignment in Local Group Policy Editor.
7 You are the administrator for your company network. What port should you open on your firewall if you want to use Device Health Attestation on your network or in the cloud?You should open port 25.You should open port 110.You should open port 443.You should open port 995.
8 You are the administrator for your company network. You have a Windows 10 computer named Computer1 that has a service named App1, which is configured to log on as an account named Service1. You find out that a user has used the Service1 account to sign into the computer and delete some files. You need to ensure that the account that is used by App1 cannot be used by a user to sign into the computer. Using the principle of least privilege, what should you do?On Computer1, configure App1 to sign in as a Local System account and then select the Allow Service To Interact With Desktop checkbox. Then, you should delete the Service1 account.On Computer1, assign the Service1 account the Deny Log On Locally user right.On Computer1, assign the Service1 account the Deny Log On As A Service user right.On Computer1, configure App1 to sign in as a Guest account and then select the Allow Service To Interact With Desktop checkbox. Then, you should delete the Service1 account.
9 You are the administrator for your company network. You want to create a new local user account on Windows 10 by using Windows PowerShell. Which command do you use?Use Add-LocalUser.Use Add-WindowsUser.Use New-LocalUser.Use New-WindowsUser.
10 You are the administrator for your company network. Your network has an Active Directory domain that contains hundreds of Windows 10 computers. You find out that every day when users are on their Lock screen, they will see a different background image. They also see tips on using different features of Windows 10. What Group Policy setting should you change to disable the daily background image and tips from appearing on all of the Windows 10 computers?You should select Do Not Suggest Third-Party Content in Windows Spotlight.You should turn off all Windows Spotlight features.You should turn off Windows Spotlight in Settings.You should turn off the Windows Welcome Experience.
11 You are the administrator for your company network. You have a Windows 10 computer, and you'd like to prevent standard users from changing the wireless network settings on this machine. What should you use that will allow the administrator to modify the wireless settings while the standard user cannot?Use the Control Panel to go to Network And Internet Settings, then go to the Network And Sharing Center, and then click View Network Connections.Use the Local Group Policy Editor (gpedit.msc).Use the System Configuration Utility (msconfig.exe).Use the Windows Configuration Designer.
12 You are the administrator for your company network. You want to view and control all of the hardware that is attached to a computer. What tool should you use to see this?File ExplorerDevice ManagerDisk ManagementTask Manager
13 You are the administrator for your company network. You have a Windows 10 computer that you are looking to expand the disk space on. You are thinking of using spanned volumes. Which statements are true regarding spanned volumes? (Choose all that apply.)They can contain space from 2 to 24 physical drives.They can contain space from 2 to 32 physical drives.They can be formatted as FAT32 or NTFS partitions.They can be formatted only as NTFS partitions.
14 You are the administrator for your company network. You have a new computer that has been installed with the 64-bit version of Windows 10 Professional. You have a new driver for a device on this computer; however, the driver is not digitally signed. What should you do first if you want to test the installation of the driver on the computer?Configure the Driver Installation settings from Computer Configuration in Group Policy.Configure the Driver Installation settings from User Configuration in Group Policy. Restart the computer by using the advanced startup options.Run dism.exe and specify the /add-driver and /force-unsigned parameters.
15 You are the administrator for your company network. You have a Windows 10 computer that contains a folder named MyFolder. Which action(s) should you take to log any users who take ownership of the files within the folder? (Choose all that apply.)Configure the Audit File System setting from a Group Policy object (GPO).Configure the Audit Sensitive Privilege Use setting from a Group Policy object (GPO).Install the Remote Server Administration Tools (RSAT).On MyFolder, modify the Advanced Security Settings.On MyFolder, modify the folder attributes.
16 You are the administrator for your company network. You have recently hired an assistant, and you want them to perform some administrative duties. You'd like this new admin assistant to be able to restore files on Windows 10 computers, but you don't want to allow them to perform backups. What should you assign to the new admin assistant?Add the admin assistant to the Administrators group.Add the admin assistant to the Backup Operators group.Grant the admin assistant the Read right to the root of each volume to be backed up.Grant the admin assistant the user right Restore Files And Directories.
17 You are the administrator for your company network. You are worried that your network's security may have been compromised. You want to set up a policy that will not allow hackers to be able to continuously attempt user logons using different passwords. What Local Security Policy should you set to accomplish this goal?You should configure an Account Lockout Policy.You should configure an Audit Policy.You should set a Password Policy.You should set Security Options.
18 You are the administrator for your company network. You have a Windows 10 computer that needs to have security so that if the drive is stolen, the data will be prevented from being accessed. What should you to do prevent the data from being accessed from a stolen hard drive?Set the BitLocker Drive Encryption using the Device Manager icon in Control Panel.Set the BitLocker