Managing Windows Devices
Which role in Microsoft Intune grants its members the ability to make a purchase, manage subscriptions, manage support tickets, and monitor service health?
the Billing Administrator role
Which command can be used to add the EFS certificate of a user to a file?
the CIPHER command
Which command-line utility manages file encryption?
the CIPHER command-line utility
Which utility allows you to submit certificate requests to a Certificate Authority via the command line?
the CertReq utility
Which printer setting allows a salesperson to have different default printer for the different offices to which the salesperson travels?
the Change my default printer when I change networks option
Which group policy setting allows you to configure the encryption type used and the cipher strength?
the Choose drive encryption method and cipher strength setting in the Computer Configuration \ Administrative Templates \ Windows Components \ BitLocker Drive Encryption node
Which group policy setting controls when background synchronization occurs while operating in slow-link mode?
the Configure Background Sync group policy setting under Computer Configuration \ Policies \ Administrative Templates \ Network \ Offline files
Which group policy setting controls the latency and throughput thresholds so that user access to Offline Files is not degraded when connected to slower networks?
the Configure slow-link mode group policy setting under Computer Configuration \ Policies \ Administrative Templates \ Network \ Offline files
Which group policy setting configures how much TPM owner authorization information is stored in the local registry?
the Configure the level of TPM owner authorization information available to the operating system group policy setting
Which group policy setting in the Computer Configuration > Administrative Templates > System > Trusted Platform Module Services node configures how much TPM owner authorization information is stored in the local registry?
the Configure the level of TPM owner authorization information available to the operating system setting
Which wireless network setting will ensure that the computer will connect to and use the wireless network any time it is available?
the Connect automatically setting
Which two commands can be used to add an LOB application to a Windows image?
the DISM command or the Add-AppxProvisionedPackage cmdlet
Which group policy setting prevents all users from copying information to any fixed drive that is not encrypted?
the Deny write access to fixed drives not protected by BitLocker setting in the Computer Configuration \ Administrative Templates \ Windows Components \ BitLocker Drive Encryption \ Fixed Data Drives node
Which group policy setting prevents all users from copying information to any USB drive that is not encrypted?
the Deny write access to removable drives not protected by BitLocker setting in the Computer Configuration \ Administrative Templates \ Windows Components \ BitLocker Drive Encryption \ Removable Data Drives node
Which Microsoft Intune report allows you to view the applications that are installed on your devices?
the Detected Software Report
Which group policy setting in the Computer Configuration / Policies / Administrative Templates / Windows Components / Portable Operating System node controls whether a computer can enter sleep mode states S1-S3?
the Disallow standby sleep states (S1-S3) when starting from a Windows To Go workspace setting
Which group policy setting controls whether UE-V will use the Offline Files feature?
the Do not use Offline Files setting
Which group policy setting determines whether offline files are synchronized in the background when extra charges could occur on cell phone or broadband plans?
the Enable file synchronization on costed networks group policy setting under Computer Configuration \ Policies \ Administrative Templates \ Network \ Offline files
Which Microsoft Intune Agent policy enables monitoring and scanning of all files and applications that are loaded for use?
the Enable real-time protection Microsoft Intune Agent policy
Which group policy setting should you enable to ensure that the offline files that reside on the user's hard drive are encrypted?
the Encrypt the Offline Files cache setting under Computer Configuration \ Policies \ Administrative Templates \ Network \ Offline files
Which policy controls whether disk quota limits are enforced?
the Enforce disk quota limit group policy under the Computer Configuration/Administrative Templates/System/Disk Quotas node
Which feature in Windows 10 retains the file history of user files to ensure that users can recover a previous version of documents, pictures, and other user files?
the File History feature
Which role in Microsoft Intune grants its members the ability to perform all administrative tasks?
the Global Administrator role, also referred to as the Tenant Administrator
Which group policy setting in the Computer Configuration > Administrative Templates > System > Trusted Platform Module Services node controls whether certain TPM commands are blocked?
the Ignore the default list of blocked TPM commands setting
Which method of resetting a Windows 10 computer in the Recovery section on the Update and Security page section of Settings retains all of your personal files and Windows Store applications? restores it to its original factory settings, and requires the Windows product key?
the Keep My Files option
Which method of resetting a Windows 10 computer in the Recovery section on the Update and Security page section of Settings retains all of your personal files and Windows Store applications?
the Keep my files option
Which OneDrive options controls the fetching behavior of OneDrive and is enabled by default when OneDrive is installed?
the Let me use OneDrive to fetch any of my files on this PC option on the Settings tab of the Microsoft OneDrive Properties dialog box
Which group policy setting specifies the amount of total disk space that can be used by Offline Files and the amount of disk space used by auto-cached files?
the Limit disk space used by Offline Files group policy setting under Computer Configuration \ Policies \ Administrative Templates \ Network \ Offline files
Which Microsoft Intune policy template creates policies that you can use to configure the Microsoft Intune Endpoint Protection policy settings and Updates policy settings?
the Microsoft Intune Agent Settings template
Which Microsoft Intune policy template creates policies that you can use to configure the support contact information that is shown in Microsoft Intune Center?
the Microsoft Intune Center Settings template
Which Windows Firewall setting controls the Windows 10 computer's actions that occur when a new app is blocked?
the Notify me when Windows Firewall blocks a new program option for the Private network settings
Which role in Microsoft Intune grants its members the ability to reset passwords, manage service requests, and monitor service health?
the Password Administrator role
Which group policy setting disables the View Files button on the Offline Files tab?
the Prevent use of Offline Files folder setting under either the User Configuration \ Policies \ Administrative Templates \ Network \ Offline files path or the Computer Configuration \ Administrative Templates \ Network \ Offline files path
Which group policy setting prevents users from enabling, disabling, or changing the Offline Files configuration?
the Prevent user configuration of Offline Files group policy setting under Computer Configuration \ Administrative Templates \ Network \ Offline files
By default, which network profile is configured with network discovery and file and printer sharing disabled?
the Public network profile
Which settings will prevent a Windows 10 laptop from using the mobile wireless connection to download device, operating system, and application updates?
the Set as metered connection setting
Which group policy setting monitors the size of the settings package for the UE-V agent?
the Settings package size warning threshold setting
Which group policy setting configures the location where the settings package files are stored for UE-V?
the Settings storage path setting
Which group policy setting configures the location where the UE-V settings templates are stored?
the Settings template catalog path setting
Which policy configures the disk quota limit and the warning level?
the Specify the default quota limit and warning level group policy under the Computer Configuration/Administrative Templates/System/Disk Quotas node
Which group policy setting sets a threshold for the maximum number of milliseconds that a computer waits when obtaining user settings from the settings storage location when using UE-V?
the Synchronization timeout setting
Which applet in Control Panel can be used to create a restore point?
the System applet
Which power plan setting is configured for 20 minutes when plugged in and 10 minutes when on battery in the Balanced, High Performance, and Power Saver plans?
the Turn off hard disk after setting
Which group policy controls access to the entire Windows Store?
the Turn off the Store application group policy in the Computer Configuration\Administrative Templates\Windows Components\Store path
Which group policy setting will ensure that the TPM owner information is backed up to a central location?
the Turn on TPM backup to Active Directory Domain Services group policy setting
Which group policy setting in the Computer Configuration > Administrative Templates > System > Trusted Platform Module Services node will ensure that the TPM owner information is backed up to a central location?
the Turn on TPM backup to Active Directory Domain Services setting
Which option on the Security tab of the Broadband Connection Properties dialog box should you select if you need to use certificates?
the Use Extensible Authentication Protocol (EAP) option
Which group policy setting enables or disables UE-V?
the Use User Experience Virtualization (UE-V) setting
Which role in Microsoft Intune grants its members the ability to reset passwords, monitor service health, and manage user accounts, user groups, and service requests?
the User Management Administrator role
Which role in Microsoft Intune grants its members the ability to manage service requests and monitor service health?
the User management administrator role
Which Microsoft Intune policy template controls incoming and outgoing network traffic?
the Windows Firewall Settings template
Which Windows Firewall group policy allows IT technicians to connect to the computer over TCP port 3389?
the Windows Firewall: Allow inbound Remote Desktop exceptions policy in the Network\Network Connections\Windows Firewall\Domain Profile path
When a file is encrypted, who can decrypt the file and access it?
the person who encrypted the file or the person with the Recovery Certificate
Which commands should you run to activate the sideloading product key on a device running Windows 10 Pro if they are not members of a domain?
the slmgr /ipk <sideloading product key> and slmgr /ato ec67814b-30e6-4a50-bf7b-d55daf729d1e commands
Which utility is used to perform a one-time backup of a computer?
the wbadmin utility
How many gestures must a picture password include?
three gestures
What is the main purpose of Remote Assistance?
to allow a remote user to temporarily connect to your computer to complete a task or to demonstrate how to do something
What is the purpose of WiFi Direct in Windows 10?
to allow the user's devices to communicate with each other while they are in close proximity
Where can the startup key for BitLocker encryption be backed up?
to any non-operating system drive, including USB flash drives
What is the main purpose of Remote Desktop?
to connect to a computer from a remote location
What is the purpose of the Desktop Background option on the Experience tab of a remote desktop connection?
to have the desktop background of the server be displayed when you log on to the server with Remote Desktop
How many physical disks are required to create a two-way mirror space?
two or more physical disks
How many devices are supported by broadband tethering in Windows 8.1?
up to 10
When you purchase a Windows Store app for Windows 8.1, how many devices can the app be installed on?
up to 81 devices
Which PowerShell cmdlet creates a new virtual hard disk with the specified path and connects it to the new virtual machine?
-NewVHDPath <String>
With the Remote Business Data Removal (Selective Wipe) feature in Windows 10 and Window Server 2012 R2, which data will NOT be removed with a remote wipe on a corporate device?
user owned data
Which of the following technologies offer authentication protection, confidentiality of the machine and its contents, private keys for security, and encrypted card information that cant be mined or removed?
A compatible TPM chip and a virtual smart card
Which cryptographic algorithm that works with IPSec uses an encryption key of up to 256 bits?
AES
Where in Settings on a Windows 10 computer do you configure the ability to sync sign-in information for websites, networks, apps and HomeGroups across multiple devices?
Account > Sync your Settings
Which cmdlet would you use to provision an app for all users to be installed at first logon?
Add-AppxProvisionedPackage-Online-PackagePath $PackagePath-DependencyPackagePath $DependencyPackagePath-LicensePath $LicensePath
Which cmdlet would you use to configure a VPN connection that automatically connects a Windows 8.1 client to a VPN when an application is run?
Add-VpnConnectionTriggerApplication
What power shell commands can you use to manage a CA database?
Backup-CARoleService and Restore CARoleService
Which PowerShell cmdlet creates a virtual machine snapshot?
Checkpoint-VM
What should you do to ensure that your clients get critical or security updates as soon as possible using Microsoft Intune?
Configure Microsoft Intune auto-approval rules.
What steps must you take to enable the Office Deployment Tool to configure Click-to-Run for Office 365 clients?
Download the Office Deployment Tool (ODT) to the server. Prepare a configuration file Run the ODT with the configure command (setup.exe /configure)
Which authentication protocol for VPN in Windows 8.1 allows for arbitrary authentication of a remote access connection through the use of authentication schemes, and offers the strongest security of other authentication protocols?
EAP
Which IPSec protocol provides integrity, authentication, and confidentiality?
Encapsulating Security Payload (ESP)
If you want to have the Selective Wipe functionality on a Windows 10 laptop instead of a Windows 8 phone, how do you configure the Windows 10 laptop in Microsoft Intune?
Enroll the laptop as a mobile device and do not install the Intune agent
True or false: You can create a required installation for an app in Microsoft Intune, which will automatically install on devices
False
What criteria does Windows 10 use to adjust the preference of available networks?
It automatically adjusts the preference of the networks based on usage and metering settings.
Which PowerShell cmdlet configures new firewall rules?
New-NetFirewallRule
When creating a system image backup from the File History applet, what are the options for the destination location for the backup?
On a hard disk, on one or more DVDs, or a network location
Which VPN type(s) on the Security tab of the VPN Connection Properties dialog box in Windows 8 uses Microsoft Point-to-Point Encryption (MPPE) that generates keys from the MS-CHAP v2 or EAP-TLS authentication?
PPTP
What are the four types of VPNs that you can configure on the Security tab of the VPN Connection Properties dialog box in Windows 8.1?
PPTP, L2TP, SSTP, or IKEv2
Which of the following is not a type of virtual switch?
Public
Which VPN type(s) on the Security tab of the VPN Connection Properties dialog box in Windows 8.1 encrypts the message with the SSL channel of the HTTPS protocol?
SSTP
What setting ensures that all updates to Windows Store apps will be downloaded?
The Update apps automatically setting in the Apps updates section of the Windows Store, which defaults to On.
What Happens when a user who as been assigned a mandatory user profile makes changes to the desktop background and screensaver?
The changes are not saved to the user profile when the user logs off
How and where do you, as an administrator, provision mobile users for device enrollment if you don't have AD DS in your environment?
You add users manually from the Windows Intune account portal, under Admin, from the Users tab
Which parameter of the CIPHER command displays files with the hidden or system attribute?
the /H parameter
Which Microsoft Intune policy template controls mobile device security settings?
the Mobile Device Security Policy template
Can you access files on a Windows 10 computer with the OneDrive app if the computer does not have Internet connectivity?
yes, if the files are cached locally
Which of the following is true of BitLocker To Go? -BitLocker To Go enables you to protect removable USB devices with BitLocker encryption -A BitLocker To Go device can be a USB flash drive -A BitLocker To Go device can be a removable hard disk -BitLocker To Go drives can be formatted with NTFS, FAT16, FAT32, or exFat file
-BitLocker To Go enables you to protect removable USB devices with BitLocker encryption -A BitLocker To Go device can be a USB flash drive -A BitLocker To Go device can be a removable hard disk -BitLocker To Go drives can be formatted with NTFS, FAT16, FAT32, or exFat file
What steps must you use to have the Office Deployment Tool to generate a Click-to-Run for an Office 365 installation source?
-Download the Office Deployment Tool (ODT) to the server. -Prepare a configuration file -Run the ODT with the download command (setup.exe /download)
Which PowerShell cmdlet specifies the path to a virtual hard disk file?
-VHDPath <String>
What are the qualities of a storage space with the Parity resiliency type?
-You need at least three hard drives. -Data is striped across the disks with the parity information. -If a single disk fails, the data is still available.
Before updating BIOS on a computer that has BitLocker enabled, what should which switch of the manage-bde command should you use to stop encryption?
-disable
What file type is the VM checkpoint differencing file?
.avhd
What file type contains the VM memory content?
.bin
What file type is the VM saved state file?
.vsv
Which VM file types are ONLY created when a checkpoint is taken while the VM is on?
.vsv and .bin
What file type is the VM configuration file?
.xml
What are the correct steps that you should complete to ensure that a user can access files from another computer when a computer is offline?
1. On the computer that needs access to the folder, establish a sync partnership with the computer on which the files reside normally. 2. From the same computer, navigate to the folder that you need to use offline. 3. Right-click the folder, and select the Always available offline option. 4. Set up a synchronization schedule by clicking the Schedule option in the Sync Center.
On how many devices can you install a Windows Store app?
10
If a 3 GB file is compressed to 2 GB, what file size will count toward the disk quota?
3 GB will be counted toward the disk quota because compressed files are tracked based on their uncompressed sizes.
What content is restored when you restore a system image?
A complete restoration occurs. It is not possible to choose individual items to restore.
What is the difference between a soft quota and a hard quota?
A hard quota type will not allow the users to exceed the quota limit. A soft quota type will allow the user to exceed the quota limit. A soft quota type is used typically for monitoring storage use before implementing a hard quota type.
What is a trusted PC?
A trusted PC is a computer that you've added to the password reset information for your Microsoft account.
What does the term "sideloading" mean?
A way to distribute LOB apps to client computers without using the Microsoft store
Which of the following can you manage in the Office Admin 365 Center?
Active Directory Synchronization, [Valid, expired, and assigned licenses], and User password, including resetting
Which cmdlet would you use to configure a VPN connection that connects automatically to a VPN when a DNS suffix is used?
Add-VpnConnectionTriggerDns
Which group policy setting do you have to enable before you can sideload apps in Windows 10?
Allow All Trusted Apps to Install
What Windows 10 feature can be used to prevent users from installing certain Windows Store apps, without preventing the installation of all Windows Store apps?
An AppLocker Packaged app rule
Which IPSec protocol provides integrity and authentication and protects against replay attacks?
Authentication Header (AH)
What are the three pre-defined power plans in Windows 10?
Balanced, Power saver, and High performance
Which Windows 10 security feature provides data encryption for external hard drives?
BitLocker
Which Windows 10 security feature provides data encryption for portable drives?
BitLocker To Go
How can two users edit a spreadsheet in OneDrive at same time?
By simply editing the spreadsheet. OneDrive supports real time collaboration.
What should you do to prevent data from being forwarded across the VPN connection?
Clear the Use default gateway on remote network setting on the Advanced TCP/IP settings for the VPN connection.
What PowerShell cmdlet will copy a file named junk.txt from the D drive of the host to the C drive of a VM named Win10-wks ?
Copy-VMFile "Win10-wks" -SourcePath "D:\junk.txt" -DestinationPath "C:\junk.txt" -CreateFullPath -FileSource Host
What should you do to ensure that you can restore a virtual machine back to its state before an application was installed?
Create a checkpoint of the virtual machine.
Three family members share a single computer. All of their documents are saved in a single Documents folder, as is the case with their pictures, videos, and music. All of their data is mixed together and is causing problems. You determined that they are all using the same user profile. What should you do to remedy this?
Create a user account for each user
Can Credential Manager and Credential Locker be used to store passwords for Windows Store Apps? Can Credential Manager and Credential Locker be used to store passwords saved for local network resources?
Credential Manager can store Windows Store Passwords as well as passwords for local resources
Which DISM command would you use to provision an app for all users to be installed at first logon?
DISM /Online /Add-ProvisionedAppxPackage /PackagePath:C:\App1.appx /SkipLicense
Which of the following tools and technologies can help you sideload LOB apps for computers in your organization?
DISM, Windows Power Shell, Configuration Manager, Microsoft Intune
What are the three options that can be configured as part of the Roam Windows settings group policy?
Desktop Settings, Ease of access, and Themes
Which feature allows a user to restore a previous version of an updated device driver on a system?
Device Driver Rollback
What must you implement on a Windows Server 2012 R2 server to ensure that specific domain users using a specific device can access highly sensitive data?
Dynamic Access Control (DAC)
What setting must you configure in Group Policy to enable Windows 10 devices to request claims and compound authentication?
Enable the KDC support for claims, compound authentication, and Kerberos armoring policy under Computer Configuration > Administrative Templates > System > Kerberos.
What setting must you configure in Group Policy to enable Windows 10 devices to receive compound authentication?
Enable the Support compound authentication policy under Computer Configuration > Administrative Templates > System > Kerberos.
Which PowerShell cmdlet configures the computer to receive Windows PowerShell remote commands that are sent by using the WS-Management technology?
Enable-PSRemoting
Which Windows 8.1 feature allows a VPN to automatically reconnect when a network connection becomes available?
Fast Reconnect
How long can File History saved versions of files?
Forever
Where can you add multiple email address aliases for an Office365 account?
From the Office 365 portal, modify the Users settings of each user.
What are the available share permissions?
Full Control, Change, and Read
What are the available NTFS permissions?
Full Control, Modify, Write, List Folder Contents, Read & Execute, and Read
Name a template that contains the policy setting User Account Control is not configured for a Windows 10 computer?
General Configuration does contain the policy setting User Account Control Trusted Certificate Profile
You are creating a VM and need it to be backward compatible with operating systems prior to Windows Server 2012 and Windows 8. Which of the following describes the type of VM you need to create?
Generation 1
In which four ways can you view the update history in Windows Update to find a list of updates that have been applied to your computer?
Go to Settings -> Update and Security -> Advanced Options-> View your update history Go to Control Panel, select Programs and Features, and choose View Installed Updates Open Event Viewer, expand Applications and Services Logs, expand Microsoft, expand Windows, expand WindowsUpdateClient, and expand Operational. View the ReportingEvents.log file under the C:\Windows\SoftwareDistribution directory.
If your PC isn't running well, how can you refresh Windows 10 without losing your photos, music, videos, or other personal files?
Go to Settings, choose Update and Security, choose Recovery, choose Reset this PC, and choose Keep my files
What should you do to perform a push-button refresh on a Windows 10 computer?
Go to Settings, choose Update and Security, choose Recovery, choose Reset this PC, and choose Keep my files
What should you do to perform a push-button reset on a Windows 10 computer?
Go to Settings, choose Update and Security, choose Recovery, choose Reset this PC, and choose Remove everything
What integration service must be enabled to copy files to a running VM from the host without shutting the VM down?
Guest Services
Which cryptographic algorithm that works with IPSec uses a 160-bit encryption key?
HMAC
Which Windows 10 feature is used to share files over a local wired or wireless network?
HomeGroup
Which VPN protocol is used by VPN Reconnect?
IKEv2
Where can you configure a group policy that restricts the use of Microsoft accounts for a specific group of users in an Active Directory Domain
In the group Policy Management Editor window, by expanding Computer / Configuration / Policies / Windows Settings / Security Settings / Local Policies / Security Options
Where can users associate a Microsoft account with a domain account?
In the settings app, on the Accounts page
By default, what does File History back up?
It backs up important files stored in Libraries, Desktop, Favorites, and Contacts.
What is the purpose of the Roam Windows settings group policy?
It ensures that users' themes, ease of access, and desktop settings are included as part of the Microsoft User Experience Virtualization (UE-V).
What are the hard drive requirements for the File History feature?
It requires a hard drive or network location as the destination
What happens if you disable the Turn off the Store application group policy in the Computer Configuration\Administrative Templates\Windows Components\Store path?
It will allow access to the Windows Store application.
Which VPN type(s) on the Security tab of the VPN Connection Properties dialog box in Windows 8.1 encrypts the message by using AES 256, AES 192, AES 128, or 3DES encryption algorithms?
L2TP or IKEv2
You want to enable your domain users to access the same desktop background, app settings, browser history, and so on so they see on their main computers at home. What should they do?
Let users associate their Microsoft accounts with their domain accounts
Which command shows how to enable encryption and thus BitLocker on drive D on a Windows 10 computer, and add numerical and external key protectors?
Manage-bde -on D: -enable -RecoveryKey f:\ -recoverypassword and -recoverykey are both key protectors
Which component of the Microsoft Desktop Optimization Pack (MDOP) allows administrators to manage the drive encryption settings, including the encryption method and cipher strength, at the enterprise level for all computers on a network?
Microsoft BitLocker Administration and Monitoring (MBAM)
Which tool enables administrators to automate the process of encrypting volumes on client computers across the enterprise?
Microsoft BitLocker Administration and Monitoring (MBAM) 2.5
Which tool enables end users to recover encrypted devices independently by using the Self-Service Portal?
Microsoft BitLocker Administration and Monitoring (MBAM) 2.5
Which tool enables security officers to easily audit access to recover key information?
Microsoft BitLocker Administration and Monitoring (MBAM) 2.5
Which tool provides enterprise management capabilities for BitLocker and BitLocker to Go?
Microsoft BitLocker Administration and Monitoring (MBAM) 2.5
What is not supported for management using Microsoft Intune?
Microsoft Intune does not support Windows XP SP1
What PowerShell cmdlet would move a VM named AppServer to the F drive while the VM is still running?
Move-VMStorage "AppServer" DestinationStoragePath F:\AppServer
What is the first thing end users need to do before they configure sync options in Sync Center?
Navigate to a share on a different computer or file server, right click that share, and click always available offline
Which PowerShell cmdlet can add both inbound and outbound firewall rules?
New-NetFirewallRule
Which Power Shell cmdlet creates a new IPv4 address or IPv6 address when the IP address is already configured?
New-NetIPAddress
Which PowerShell cmdlet creates a virtual machine on a Windows 10 computer?
New-VM
Can encrypted files be backed up using File History?
No
What option do you choose in PC Settings on a Windows 8.1 computer to sync PC settings across all of your devices?
OneDrive > Sync Settings
What devices can you use to access files in OneDrive?
OneDrive is accessible from the Web, a desktop, mobile devices, and the Xbox One and Xbox 360 consoles
If you consider all the recovery methods with Windows 10, when should you use a recovery drive to perform a System Image Recovery?
Only if other recovery methods are unsuccessful
How many system image backups per computer can be kept at a backup location?
Only one system image per computer can be kept at a backup location
What steps should you perform to create a system image with a GUI utility in Windows 10?
Open Backup and Restore (Windows 7) in Control Panel and select Create a system image on the left-hand side.
How can you disable automatic updates to Windows Store apps on a Windows 10 computer?
Open Windows Store and navigate to Settings, then App Updates. Change the option Automatically Update My Apps to No.
Which authentication protocols do Windows 8.1 and Windows Server 2012 R2 support for VPN?
PAP, CHAP, MS-CHAPv2, EAP, and Digital Certificates
What are some advantages of using VHDX format for your VHD files (Instead of the VHD format?)
Protection against data corruption when there is a power failure, Improved performance on large sector disks, and Larger block sizes for dynamic and differencing disks to enhance performance
Which security feature in Windows 10 and Window Server 2012 R2 can you use to classify and flag corporate files, and to differentiate between these files and user files?
Remote Business Data Removal, also referred to as Selective Wipe
Which PowerShell cmdlet deletes firewall rules?
Remove-NetFirewallRule
Which cmdlet removes a physical disk from a specified storage pool?
Remove-PhysicalDisk
How do you prevent a Windows update from being shown in the Available Updates list?
Right-click the update, and select Hide update.
You want to secure communications over an untrusted network for applications that need internet access. You want to user TLS and SSL to achieve this. Which of the following technologies offer this?
Secure Channel
What should you do to ensure that licenses for Windows Store apps are synchronized between devices?
Select the Sync licenses setting in the Apps updates section of the Windows Store.
How does Selective Wipe only destroy corporate data and not personal data on a device?
Selective Wipe associates the corporate data, not personal data, with a symmetric key to an Internet domain, destroying the key that is associated with the domain revokes all access to the protected content.
What should you do to ensure that all Windows To Go implementations are able to enter hibernate mode?
Set the Allow hibernate (S4) when starting from a Windows To Go workspace setting in the Computer Configuration / Policies / Administrative Templates / Windows Components / Portable Operating System node to Enabled.
What PowerShell cmdlet would allow a user named Adele to use a Windows Store application named Moneytracker?
Set-AssignedAccess -UserName Adele -AppName Moneytracker
Which PowerShell cmdlet enables the domain, public, or private profiles?
Set-NetFirewallProfile
Which PowerShell cmdlet modifies existing firewall rules?
Set-NetFirewallRule
Which PowerShell cmdlet that changes the subnet mask or default gateway for an IPv4 or IPv6 address?
Set-NetIPAddress
Which PowerShell command sets a Windows 8.1 computer's IPv6 configuration?
Set-NetIPv6Protocol
What is the appropriate method for adding a sideloading product key?
Sideloading product keys must be first added using slmgr /ipk and then activated using slmgr /ato.
What are the three authentication factors?
Something the user knows - password, PIN, picture password, Microsoft Account Something the user has - smart card, ATM card Something the user is - biometrics
Which BIOS component is required to offer full BitLocker support in Windows 10?
TPM
In which pane of Hyper-V Manager do you configure host networking and settings, import virtual machines, and create new virtual machines?
The Actions Pane offers a list of tasks you can perform
Name an account type has the ability to enroll more than five devices?
The Device Enrollment Manager can enroll large numbers of devices, and is typically used specifically for that purpose
By default, where are the local copies of Work Folders stored on a Windows 10 device?
The Files are stored in %USERPROFILE%\Work Folders
What is the rule when combining NTFS and share permissions?
The MOST restrictive permission is the one that applies.
What utility do you use to create a recovery drive on a Windows 10 computer?
The Recovery Drive wizard
What must you configure on a client to allow the client to use applications on a Remote Desktop Web Access server in a remote location?
The connection URL in the RemoteApp and Desktop Connections applet in Control Panel
Where do you configure the folder location?
The location tab in the Properties dialog box of the default folder
You are trying to install Hyper-V and Control Panel, using the Turn Windows Feature On or Off option, on a computer running Windows 10 Professional. However, Hyper-V Platform is unavailable and can's be enabled. What is the reason for this?
The processor does not support SLAT
What command-line utility can be used with the wbadmin utility to perform full backups of a Windows 10 computer on a daily basis?
The schtasks utility
You create a homegroup on one computer and join it from another. This process goes smoothly. However, when you try to access data shared with the homegroup from the second computer, you cant. What is most likely the problem?
The time is configured incorrectly on the second computer
Which of the following describes the purpose of deep linking an app
To make specific Windows Store apps available through the company portal
Which cryptographic algorithm that works with IPSec uses an encryption key of up to 156 bits?
TripleDES
What are the four types of resiliency that can be used in Windows 10 storage spaces?
Two-way mirror resiliency type Three-way mirror resiliency type Parity resiliency type Simple (no resiliency) resiliency type
You want to ensure that a user who is signed on to a computer can control whether Windows restarts after the installation of scheduled updates deployed from Intune. Which of the following would you configure to accomplish this goal?
Update policies specify when and how updates will be deployed, including whether a signed-on user can override a restart required to complete update installation
If a Windows 10 computer does NOT support TPM version 1.2 or higher, how do you encrypt the hard drive?
Use BitLocker and store the startup key on a USB drive
How should you apply security updates to App-V packages?
Use the Open for Package Upgrade feature.
What should you do to allow a user to sync data and settings between two computers via a cloud?
Use the same Microsoft account on both computers, and configure both computers as trusted computers.
How do you enable Always Offline Mode?
User Group Policy to enable the Configure Slow-Line mode policy setting and set the latency to 1 millisecond
What action could be taken to prevent all users of a non-domain-joined computer from installing Windows Store apps?
Using Local Group Policy Editor, set the Turn off the Store application setting to Enabled
Which new feature of the Windows 8.1 Remote Access client allows you to connect automatically through VPN when applications or network locations are used that require organizational network resources?
VPN Auto-Trigger
What feature of Windows 8 and Windows 10 allows you to connect different laptops that support IEEE 802.11 without a Wi-Fi router or joining a Wi-Fi network?
Wi-Fi Direct
Which of the following devices is not supported for MDM in Microsoft Intune?
Windows 7 devices are not supported, only Windows 8 and later devices are supported by MDM in Microsoft Intune.
Which Windows operating systems support IKEv2?
Windows 7, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows 8, and Windows 8.1
What happens by default when the user is using a metered connection and is near or over their bandwidth limit or roaming on another provider's network?
Windows 8.1 will switch to Offline mode and disable background synchronization.
What operating system version(s) must your VPN server run to support VPN Reconnect in your enterprise?
Windows Server 2012 R2, Windows Server 2012, or Windows Server 2008 R2
What are limitations of Windows To Go?
Windows To Go is only available for Enterprise customers who are part of the Microsoft Software Assurance Program, TPM can't be used because it is tied to a specific computer and Windows to go drives are used on multiple computers, and the windows recovery environment is not available, and neither is refreshing or resetting. If there is a problem with Windows To Go, it needs to be reimaged
Which of the following network types is a distributed concept, in which users manage their own data sharing?
Workgroup and Homegroup
To configure broadband tethering, how must you configure the network connection from the Network item in Control Panel?
You must enable Internet Sharing for the network
You are trying to configure Group Policy to set an account lockout duration when users try and fail to authenticate their computers after a specific number of events. The options are greyed out, Why?
You must first configure the policy Account Lockout Threshold
What are the requirements to sideload LOB apps to client computers?
You must have enabled sideloading by editing GPO settings, and the LOB apps must be digitally signed
You want computers running Windows 8.1 in your organization's London branch office to install critical operating system updates automatically. Computers running Windows 8.1 in your organization's Liverpool office should install critical operating system updates only if an administrator manually approves those updates. What should you configure to accomplish this goal?
You need to configure a group for the Melbourne computers and then configure an automatic approval rule
You have noticed that updates for Windows 8 and 8.1 are present within a list of available updates in the Intune console, but updates for Windows 10 are not present. What should you configure to resolve this problem?
You need to configure update categories and classifications to ensure that updates for Windows 10 will be available to your Intune deployment.
When using Bit Locker To Go in an enterprise, how can you prevent users from copying data to USB drives that are not encrypted with BitLocker To Go?
You need to enable the Group Policy setting Deny Write Access To Removable Drives Not Protected By Bitlocker
You opted to store your startup key on a USB flash drive when you set up BitLocker. Which of the following is true?
You need to insert that drive every time you want to access the computer and enter the key If you lose the startup key, you'll need to unlock the drive using a recovery key. This is a 48 digit number that can be stored in numerous ways, including on a USB drive.
What is minimum size of a USB flash drive that can be used as recovery drive?
a 512 MB flash drive
Which file can be used to resolve the host names of servers that have an A (IPv4 host record) or AAAA (IPv6 host record) in DNS?
a HOSTS file
Which Microsoft Intune report will allow you to view information about application licenses used by your devices?
a License Report
What must you have to sign-in to a Windows 10 computer, access OneDrive, Mail, Calender and install apps from the Windows Store?
a Microsoft account
Which security rule type in Windows Firewall with Advanced Security is used to authenticate a connection between two specific computers?
a Server-to-Server connection rule
Which security rule type in Windows Firewall with Advanced Security is used to authenticate a connection between two gateway computers?
a Tunnel connection rule
What must be issued to allow a Windows 8.1 computer to be able to establish a VPN Reconnect connection?
a computer certificate
Which virtual switch connection type isolates the virtual machines, meaning that the virtual machines can only communicate with each other?
a private network connection type
What must you create as a prerequisite before performing a System Image Recovery on a Windows 10 computer?
a recovery drive
What tool can you use to run Windows RE and troubleshoot a Windows 10 installation even if the computer cannot start from the hard drive?
a recovery drive
Which type of network connection is required to use the metered/non-metered setting?
a wireless connection
Which security rule type in Windows Firewall with Advanced Security is used when you do NOT want to authenticate connections from certain computers?
an Authentication Exemption connection rule
Which Microsoft Intune report will allow you to view the status of any updates, including critical updates, security updates, definition updates, service packs, and update rollups?
an Update Report
Which virtual switch connection type allows the virtual machines to communicate over the network?
an external connection type
In Windows 10, what resource(s) are required to provide multiple copies of the system image?
an external hard drive
Which virtual switch connection type allows communication between the virtual machines and the management operating system?
an internal network connection type
Which security rule type in Windows Firewall with Advanced Security restricts connections to a Windows 10 computer based on domain membership?
an isolation connection rule
Once you have configured broadband tethering, how many characters must the wi-fi network password contain?
at least eight characters
To support static device claims, what type of tokens must a Windows 10 client or Windows Server 2012 R2 request?
compound tokens (a token that includes both user details and device details)
When can the startup key for BitLocker encryption be backed up?
during the reboot that is part of the initial BitLocker encryption process
How many physical disks are required to create a three-way mirror space?
five or more physical disks
In which type of file should you save your remote desktop settings?
in an .rdp file
Where are the UE-V group policies located after they are installed?
in the Computer Configuration > Policies > Windows Settings > Administrative Templates > Windows Components node
What are the two types of synchronization schedules that you can configure for Offline Files?
on a regular schedule or when certain events occur (such as when a user logs on or when the computer has been idle for 15 minutes)
Where should the User Experience Virtualization (UE-V) Agent be deployed?
on all the client computers
After upgrading from Windows 8 to Windows 10, how long does the Windows.old folder remain on your computer?
one month
What type of device can be used to create a recovery drive?
only a USB flash drive
When saving system images on a network location, which system image is stored?
only the latest version of the system image
Which Windows 10 authentication method requires that you input a series of gestures as part of the authentication process so the user must select the picture to use and enter the gestures at enrollment time?
picture passwords
Which Windows 10 security feature requires that you input a series of gestures as part of the authentication process so the user must select the picture to use and enter the gestures at enrollment time?
picture passwords
What command should you run from the command prompt to view a list of the hardware devices that can wake your computer?
powercfg -devicequery wake_armed
What command should you run from the command prompt to determine why your Windows 10 computer woke up?
powercfg -lastwake
You need to export a power plan you've created in the Power Options pane. What two commands do you use to achieve this?
powercfg.exe -list powercfg.exe -export power.pow GUID
Which option retains all the user files: push-button refresh or push-button reset?
push-button refresh
Which option resets to factory settings: push-button refresh or push-button reset?
push-button reset
What Group Policy action, taken at the domain level, will prevent users from installing Windows Store apps?
set the Turn off the Store application setting to Enabled
Your company has deployed a LOB application using sideloading. What command will activate a product key that has been installed? (Hint: The activation GUID will always be ec67814b-30e6-4a50-bf7b-d55daf729d1e)
slmgr /ato ec67814b-30e6-4a50-bf7b-d55daf729d1e
Your company has deployed a LOB application using sideloading. What command will install the app if it has a product key of xpw3334Polhzz?
slmgr /ipk xpw3334Polhzz
Before updating BIOS on a computer that has BitLocker enabled, what should you do?
suspend BitLocker encryption before you update the BIOS
Which parameter of the Set-NetIPAddress PowerShell cmdlet configures whether IPv4 or IPv6 is used?
the -AddressFamily<AddressFamily[]> parameter
Which parameter of the New-NetFirewallRule PowerShell cmdlet specifies whether an inbound or outbound rule is created?
the -Direction<Direction> parameter
Which parameter of the Set-NetIPv4Protocol PowerShell cmdlet disables multicast communication on a Windows 10 computer?
the -IGMPLevel<None> parameter
Which parameter of the CIPHER command encrypts specified files?
the /E parameter
Which group policy controls the installation properties of Windows Store apps on Windows To Go workspaces?
the Allow Store to install apps on Windows To Go workspaces group policy
Which group policy setting must be enabled to allow computers that are members of a domain to sideload a line of business (LOB) Windows Store app?
the Allow all trusted apps to install setting
Which option will allow a Windows 10 computer to wake when it is time for updates to occur, and is enabled by default?
the Allow scheduled maintenance to wake up my computer at the scheduled time group policy setting in the Maintenance section in Action Center
Which tab of Task Manager displays statistics for each Windows Store application?
the App History tab
Which policy allows you to enable auditing on files and registry keys?
the Audit object access group policy under the Computer Configuration/Windows Settings/Security Settings/Local Policies/Audit Policy node
Which policy audits attempts to change user rights assignment policy, audit policy, account policy, or trust policy?
the Audit policy change group policy under the Computer Configuration/Windows Settings/Security Settings/Local Policies/Audit Policy node
Which policy audits each instance of a user exercising a user right, but does not audit attempts to edit the registry?
the Audit privilege use group policy under the Computer Configuration/Windows Settings/Security Settings/Local Policies/Audit Policy node
Which Windows 10 power plans include the Require a password on wakeup setting?
the Balanced, High Performance, and Power Saver plans
