1. You have a computer named Computer1 that runs Windows10. A service named Application1 is configured as shown in the exhibit. You discover that a user used the Service1 account to sign in to Computer1 and deleted some files. You need to ensure that the identity used by Application1 cannot be used by a user to sign in to sign in to the desktop on Computer1. The solution must use the principle of least privilege. Solution: On Computer1, you configure Application1 to sign in as the LocalSystem account and select the Allow service to interact with desktop check box. You delete the Service1 account. Does this meet the goal?

2. You have a computer named Computer1 that runs Windows 10. A service named Application1 is configured as shown in the exhibit. You discover that a user used the Service1 account to sign in to Computer1 and deleted some files. You need to ensure that the identity used by Application1 cannot be used by a user to sign in to sign in to the desktop on Computer1. The solution must use the principle of least privilege. Solution: On Computer1, you assign Service1 the deny log on as a service user right. Does this meet the goal?

3. You have a computer named Computer1 that runs Windows 10. The computer contains a folder. The folder contains sensitive data. You need to log which user reads the contents of the folder and modifies and deletes files in the folder. Solution: From the properties of the folder, you configure the Auditing settings and from the Audit Policy in the local Group Policy, you configure Audit directory service access. Does this meet the goal?

4. You need to meet the technical requirement for User6. What should you do?

5. You have 100 computers that run Windows 10. The computers are in a workgroup. The computers have a low-bandwidth metered Internet connection. You need to reduce the amount of Internet bandwidth consumed to download updates. What should you configure?

6. A user named User1 has a computer named Computer1 that runs Windows 10. User1 connects to a Microsoft Azure virtual machine named VM1 by using Remote Desktop. User1 creates a VPN connection to a partner organization. When the VPN connection is established, User1 cannot connect to VM1. When User1 disconnects from the VPN, the user can connect to VM1. You need to ensure that User1 can connect to VM1 while connected to the VPN. What should you do?

7. Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 10. You need to view the settings to Computer1 by Group Policy objects (GPOs) in the domain and local Group Policies. Which command should you run?

8. Your network contains an Active Directory domain. The domain contains computers that run Windows 10. You need to provide a user with the ability to remotely create and modify shares on the computers. The solution must use the principle of least privilege. To which group should you add the user?

9. You plan to deploy Windows 10 to 100 secure computers. You need to select a version of Windows 10 that meets the following requirements: Uses Microsoft Edge as the default browser Minimizes the attack surface on the computer Supports joining Microsoft Azure Active Directory (Azure AD) Only allows the installation of applications from the Microsoft Store What is the best version to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

10. Your network contains an Active Directory domain. The domain contains 1,000 computers that run Windows 10. You discover that when users are on their lock screen, they see a different background image every day, along with tips for using different features in Windows 10. You need to disable the tips and the daily background image for all the Windows 10 computers. Which Group Policy settings should you modify?

11. You have a computer named Computer1 that runs Windows 10. Computer1 belongs to a workgroup. You run the following commands on Computer1. New-LocalUser

12. You have a computer named Computer1 that runs Windows 10. You need to configure User Account Control (UAC) to prompt administrators for their credentials. Which settings should you modify?

13. A user has a computer that runs Windows 10. When the user connects the computer to the corporate network, the user cannot access the internal corporate servers. The user can access servers on the Internet. You run the ipconfig command and receive the following output. You send a ping request and successfully ping the default gateway, the DNS servers, and the DHCP server. Which configuration on the computer causes the issue?

14. You need to meet the technical requirement for the IT department users. What should you do first?

15. Your network contains an Active Directory domain. The domain contains 10 computers that run Windows 10. Users in the finance department use the computers. You have a computer named Computer1 that runs Windows 10. From Computer1, you plan to run a script that executes Windows PowerShell commands on the finance department computers. You need to ensure that you can run the PowerShell commands on the finance department from Computer1. What should you do on the finance department computers?

16. You have several computers that run Windows 10. The computers are in a workgroup and have BitLocker Drive Encryption (BitLocker) enabled. You join the computers to Microsoft Azure Active Directory (Azure AD). You need to ensure that you can recover the BitLocker recovery key for the computers from Azure AD. What should you do first?

17. A user named User1 has a computer named Computer1 that runs Windows 10. Computer1 is joined to an Azure Active Directory (Azure AD) tenant named contoso.com. User1 joins Computer1 to contoso.com by using [email protected]. Computer1 contains a folder named Folder1. Folder1 is in drive C and is shared as Share1. Share1 has the permission shown in the following table. A user named User2 has a computer named Computer2 that runs Windows 10. User2 joins Computer2 to contoso.com by using [email protected]. User2 attempts to access Share1 and receives the following error message:

18. You need to sign in as LocalAdmin on Computer11. What should you do first?

19. You have a computer named Computer1 that runs Windows 10 and has an application named App1. You need to use Performance Monitor to collect data about the processor utilization of App1. Which performance object should you monitor?

20. You have a computer named Computer1 that runs Windows 10. A service named Application1 is configured as shown in the exhibit. You discover that a user used the Service1 account to sign in to Computer1 and deleted some files. You need to ensure that the identity used by Application1 cannot be used by a user to sign in to sign in to the desktop on Computer1. The solution must use the principle of least privilege. Solution: On Computer1, you assign Service1 the deny log on locally user right. Does this meet the goal?

21. You have a computer that runs Windows 10. You can start the computer but cannot sign in. You need to start the computer into the Windows Recovery Environment (WinRE). What should you do?

22. You have 15 computers that run Windows 10. Each computer has two network interfaces named Interface1 and Interface2. You need to ensure that network traffic uses Interface1, unless Interface1 is unavailable. What should you do?

23. You have a computer named Computer1 that runs Windows 10. On Computer1, you create the local users shown in the following table. Which three user profiles will persist after each user signs out? Each correct answer presents part of the solution.

24. You need to meet the quality update requirement for ComputerA. For how long should you defer the updates?

25. You have a computer named Computer1 that runs Windows 10. You test Windows updates on Computer1 before you make the updates available to other users at your company. You install a quality update that conflicts with a customer device driver. You need to remove the update from Computer1. Solution: From System Restore, you revert the system state to a restore point that was created before the update was installed. Does this meet the goal?