8.1-4

What does Windows 11 do when you log in with an administrator account with elevated privileges?

Assign you a user and an administrator token.

Which of the following VPN protocols was developed by Cisco and can be used to route any Layer 3 protocol across an IP network?

GRE

Which of the following must be set up before you can register a facial or fingerprint scan for your account?

PIN

Which remote access solution provides you with full remote access to the graphical desktop of a Windows system, including the ability to run programs, manipulate files, and restart or power down the computer?

Remote Desktop

What is a VPN's primary purpose?

Support secure communications over an untrusted network.

Which of the following is true of Remote Assistance?

The user initiates the session.

You have recently purchased a third-party application and installed it on your workstation. However, after doing some maintenance work on the users and groups on your Windows system, the application begins to display error messages each time you try to run it. What is the MOST likely cause of the issue?

You deleted a group that was created by the third-party application.

Which of the following actions should you take to BEST secure your video conferencing software? (Select two.)

Use waiting room features. Use strong passwords.

Drag each Group Policy setting on the left to the appropriate description of how the setting is enforced on the right.

Causes the policy to be enforced Enabled Does not change the current setting for the policy Not configured Prevents the policy from being enforced Disabled

Which of the following statements about an SSL VPN are true? (Select two.)

Encrypts the entire communication session. Uses port 443.

Which of the following protocols provides authentication and encryption services for VPN traffic?

IPsec

Which of the following protocols can your portable computer use to connect to your company's network via a virtual tunnel through the internet? (Select two.)

PPTP L2TP

Which remote access solution is built into macOS?

Screen Sharing

The Hide Programs setting is configured for a specific user as follows: Policy Setting Local Group Policy Enabled Default Domain Policy GPO Not configured GPO linked to the user's organizational unit Disabled After logging in, the user is able to see the Programs and Features option. Why did this happen?

The GPO linked to the user's organizational unit is applied last, so this setting takes precedence.

While on a business trip, an employee accesses the company's internal network and transfers files using an encrypted connection. Which of the following digital security methods is the employee MOST likely using?

VPN

Match each Active Directory definition on the left with its corresponding component on the right.

Domain A collection of network resources that share a common directory database. Organizational unit (OU) A folder-like container that organizes network resources. Built-in containers Default containers used to organize Active Directory objects that cannot be deleted. Object A resource within Active Directory. Domain controller A Windows server that holds a copy of the Active Directory database.

Which of the following Windows 11 options lets you associate your local user account with an online Microsoft account?

Sign in with a Microsoft account instead

You are the owner of a small startup company that consists of only five employees. Each employee has their own computer. Due to the type of services your company offers, you don't foresee the employee count increasing much in the next year or two. As a startup company, you want to keep costs low and facilitate easier file sharing and internet, printer, and local network resource access. Which of the following would be the BEST implementation for your business?

A workgroup

You recently installed a Windows 11 system. During the installation process, you elected to sign in to the system with a local user account. After using the system for a time, you decide to begin using an online Microsoft account to authenticate to the system instead. Click the Settings app option you would use to do this.

Accounts

A user works primarily in your organization's production area. However, she frequently needs to access data stored on the Windows 11 desktop system in her office while on the production floor. She would like to be able to use a Remote Desktop connection in the production area to remotely access her desktop system over the network. Which desktop user groups should you make her user account a member of in order to enable this Remote Desktop connection? (Select two.)

Administrators Remote Desktop Users

A salesperson in your organization spends most of her time traveling between customer sites. After a customer visit, she must complete various managerial tasks, such as updating your organization's order database. Because she rarely comes back to the home office, she usually accesses the network from her notebook computer using Wi-Fi access provided by hotels, restaurants, and airports. Many of these locations provide unencrypted public Wi-Fi access, and you are concerned that sensitive data could be exposed. To remedy this situation, you decide to configure her notebook to use a VPN when accessing the home network over an open wireless connection. Which of the following key steps should you take as you implement this configuration? (Select two. Each option is part of the complete solution.)

Configure the browser to send HTTPS requests through the VPN connection. Configure the VPN connection to use IPsec.

You want to configure User Account Control so that you see the permission prompt only when programs try to make changes to your computer (not when you make changes). You do not want the desktop to be dimmed when the prompt is shown. What should you do?

Disable the Secure Desktop

You provide desktop support for a small company. The company has two locations in the same city, but they are several miles away. You get a call from an employee who is having problems with an application. He tries to describe what he is doing in the application, but you just can't understand what might be causing the problem. Which of the following is the BEST way to provide the assistance the employee needs? (Select two.)

Establish a Quick Assist session with the employee and watch what he is doing. Establish a Remote Assistance connection and watch what the employee is doing.

You provide desktop support for a small company. The company has two locations in the same city, but they are several miles away. You get a call from a user who is having problems installing a new device. You try to tell the user how to update the device driver over the phone, but he is having a hard time understanding your directions and is becoming frustrated. What is the BEST method for resolving the user's issue?

Establish a Remote Desktop connection and update the driver.

A user has complained about not being able to remove a program that is no longer needed on a computer. The Programs option is not available in Control Panel. You suspect that a policy is enabled that hides this option from the user. But after opening the Local Group Policy Editor, you see that the policy to hide Programs is not configured. You know that other users in this domain can access the Programs option. Where should you look next to determine whether the policy is enabled?

GPOs linked to organizational units that contain this user's object.

Which of the following is true of groups on a Windows system?

Group members have the access rights that are assigned to the group.

You manage a workstation that is not part of a Windows domain. Users on this computer should not be permitted to download applications from the Windows Store. Which administrative tool can you use to enable a policy that turns off the Store application for all users on this computer?

Local Group Policy Editor

Which of the following is a valid distinguished name for the MarketSpace common domain name?

MarketSpace.org

You are your company's Active Directory system administrator. The company has branch offices in several countries, including Mexico, Argentina, Canada, and the UK. The company only has a total of 250 employees organized in the same departments in each office. However, the company is projected to expand rapidly in the next two years. You want to create a tree of organizational units (OUs) that can adapt to the rapid growth without re-organizing the OU structure in the near future. You also want to be able to easily assign rights to certain network resources based on departmental organizational roles. Which of the following solutions would BEST meet your requirements?

Organize the OUs at the top level by office (country); then use group accounts to help control resource rights.

Which of the following was developed by Microsoft as one of the first VPN protocols and supports only TCP/IP?

PPTP

You want to use a VPN tunneling protocol that can encapsulate other LAN protocols and carry the data securely over an IP network. Which of the following protocols is suitable for this task?

PPTP

You are a network administrator for a large financial institution. There are several account advisors who are constantly on the road with their Windows laptop devices. You want to be able to occasionally check on the health of these laptops, including the ability to receive automated alerts for any unusual activity that may indicate some kind of security breach. Which of the following remote management technologies would BEST help you monitor these laptops?

RMM

A new computer has been added to the sales department and needs to be joined to the CorpNet domain. Which of the following System Properties settings must you use to make the change?

System Properties > Computer Name

As a Help Desk Level 2 operator, you are attempting to use Remote Desktop to connect to an employee's Windows desktop to resolve a printing issue that has been escalated from a Level 1 operator. You know that both your Windows computer and the employee's Windows computer are configured correctly for this Remote Desktop connection. You also have the correct connection information. However, you are having problems accessing the employee's desktop. Which of the following is the MOST likely reason that you cannot connect to the desktop?

The remote session from the Level 1 operator has not been disconnected.

Your organization employs a group of traveling salespeople who need to access the corporate home network through the internet while they are on the road. You want to funnel remote access to the internal network through a single server. Which of the following solutions would be BEST to implement?

VPN concentrator

You have just installed Windows 11 on your laptop, purchased an infrared camera, and set up Windows Hello facial recognition as your login option. As part of the setup process, you enter a PIN as a backup login method. After a few weeks of using facial recognition login, your infrared camera fails, and you are asked to enter your PIN. Because it has been several weeks, you have forgotten the exact number. You attempt to enter your PIN at least 24 times, but are never locked out. What is the MOST likely reason that you have not been locked out after several failed PIN login attempts?

Your laptop does not have a TPM chip, and you have not set up BitLocker for lockout.

A user calls to report a problem. She is trying to install an application on her new Windows 11 system, but the installation will not proceed. Her user account is a member of the Users group. What is MOST likely causing the installation issue?

Her group membership does not allow her to install new software.

Administrative Templates are Registry-based settings that you can configure within a GPO to control a computer system and its overall user experience. Which of the following can you do with an Administrative Template? (Select two.)

Restrict access to Control Panel features. Control notifications.

Which Active Directory service simplifies how users log in to all the systems and applications that they need?

SSO

Rachel wants to use Screen Sharing to allow a system administrator to remotely access her Apple iMac. However, when she initiates the Screen Sharing session, the administrator is not able to access her iMac desktop from his iMac computer. What is the MOST likely reason that the administrator cannot access the Screen Sharing session?

The administrator is not included in her Specific Users Only list.