Notes for Chapters 4-6

You are the IT director for a large company that has decided to move to the cloud. The company wants to use Azure Active Directory and Microsoft Intune. The company has been looking into this because users have been using multiple devices to get their job done. When your users get added to Intune and get licensed, how many devices can each user add by default?

5

You are the administrator of your organization's Active Directory domain. The owners of the company want to move to the cloud by using Azure Active Directory. You need to be able to have the on-site version of Active Directory work with the cloud-based Azure Active Directory. What do you need to install to make this happen? This

Azure Active Directory (AD) Connect tool

Denise is using a laptop computer that uses ACPI. She wants to see what percentage of the battery power is still available. She also wants to know if hibernation has been configured. Which of the following utilities should she use?

Battery meter

Which utility provides full disk-encryption protection for an operating system?

BitLocker

A new employee named Crystal has been supplied with a Windows 10 laptop computer. You have configured Crystal's computer with the Power Saver power plan, and you used the default options. Which of the following will occur after 20 minutes of inactivity on Crystal's computer?

Both the hard disk and the display will be turned off.

You want to configure power management group policy of several laptops. What settings will you configure for closing the lid action and for the computer automatically going to sleep after a certain time period? Each correct answer represents a complete solution. Choose two.

Button Settings Sleep settings

You are the network administrator for a company. You're configuring several Windows 10 computers for a group of newly hired engineers. You want to optimize the new computers to use the same desktop background pictures, window colors, and sounds. How can you accomplish these tasks through one setting?

By right-clicking an empty space of the desktop, selecting Personalize, and clicking Themes

You are administering a computer that is used by several customer-support representatives for your company. The support representatives use a custom application to report support incidents. After the application is updated, it stops functioning properly, and one of the programmers who wrote the application indicates that a Registry change needs to be made to the computer. You need to ensure that the change is applied for each user of the computer. Which Registry key should you modify?

HKEY_LOCAL_MACHINE

Which Registry key provides configuration information for all users of a computer?

HKEY_USERS

___________ simplifies the sharing of music, pictures, and documents within your small office or home network.

Homegroup

You support desktop computers and tablets that run Windows 10 Enterprise. All the computers are able to connect to your company network from the Internet by using DirectAccess. Your company wants to deploy a new application to the tablets. The deployment solution must meet the following requirements: The application can access files stored on an internal solid-state drive (SSD) on the tablets. The application is isolated from other applications. The application uses the least amount of disk space on the tablet. You need to deploy the new application to the tablets. What should you do?

Deploy the application as a published application on the Remote Desktop server. Create a remote Desktop connection on the tablets

Which Control Panel applet allows users to view and control the hardware attached to the computer?

Device Manager

Which of the following gives the flexibility to configure file access and auditing to domain-based file servers?

Dynamic Access Control

A network administrator for a large organization wants to set up a secure VPN between two of the company's locations using the Internet. Both sides of the VPN use Windows Server 2012 R2. What is the best protocol to use to set up the VPN? This

IKEv2

Which of the following tunneling protocols has the VPN Reconnect feature?

IKEv2

Which of the following information can be configured on a VPN client so that it can access a VPN server? Each correct answer represents a complete solution. Choose all that apply.

IP Address Domain Name

You are the network administrator for a large organization. You have a user who needs you to connect and help him with a Windows 10 issue. You want to use Remote Assistance for the connection. Which of the following allows you to easily set up a Remote Assistance session? This

Easy Connect

You are the IT manager for your company. You have been asked to give the Marketing group the rights to only read all the documents in the Sales folder. The following table shows the current permissions on the Sales shared folder: What will you do to give the Marketing group the rights to perform their job? Each correct answer represents a complete solution. Choose all that apply.

Change Marketing's Change permission to Read on the NTFS security. Change Marketing's Modify right to Read on the shared permissions

You work on the help desk for a large company. One of your users calls you and reports that they just accidentally deleted their C:\Documents\Timesheet.xls file. What is the easiest way to recover this file?

Click the Recycle Bin icon on the Desktop and restore the deleted file.

Will, your company's IT director, is trying to train a new IT administrator named Doug. Doug is new at his job and he has asked Will which server files are compressed. How can Will make sure that Doug knows which files on the server are compressed?

Compressed files are shown in a different color.

You are the IT manager for WillPanek.com. The company has an Active Directory domain and a cloud-based Azure Active Directory. The two are synchronized by using the Azure Active Directory Synchronization Tool. The company also uses System Center Configuration Manager. You need to use Configuration Manager to manage devices registered with Intune. What do you need to do to accomplish this? (Choose two.)

Configure the Microsoft Intune Connector role in Configuration Manager. Create the Microsoft Intune subscription in Configuration Manager

You are the network administrator for your organization. Your users use both desktops and tablets to access the network. Your tablet users use a 4G mobile broadband Wi-Fi connection. You need to watch how much data your users are using on this connection. How do you do that?

Configure the broadband connection as a metered network.

Dennis has a new display adapter and monitor. He wants to set display properties for his desktop. Which of the following options is not set through the Personalization window?

Contrast and brightness of the monitor

Kayla is dissatisfied with the configuration of her keyboard and mouse. She wants to reset the keyboard speed and the mouse pointer rate. Which utility should she use to configure the keyboard and mouse properties?

Control Panel

You're asked by your spouse to set up an easy network at home so that all the family members can choose what they want to share on the home network. What can you do using Windows 10 to accomplish this?

Create a HomeGroup.

You are hired by a friend to set up a network in their home. They have four machines in their home that are all connected by an ISP wireless router. The systems can't share documents because there is currently no network sharing in place. They want to be able to share audio and video files among their family. How can you easily set up a network? Choose two.

Create a Homegroup All audio and video files should be moved to the Homegroup libraries

Your company's network contains an Active Directory domain named uCertify.com. uCertify.com is synchronized to a Microsoft Azure Active Directory. You have a Microsoft Intune subscription. Your company plans to implement a Bring Your Own Device (BYOD) policy so that you can provide users with access to corporate data from their personal iOS devices. What should you do first to ensure that you can manage the personal iOS devices?

Enroll for an Apple Push Notification (APN) certificate.

You have a Microsoft Intune subscription. You have three security groups named Grp1, Grp2, and Grp3. Grp1 is the parent group of Grp2. Grp2 has 80 users. You need to change the parent group of Grp2 to be Grp3. What should you do first?

Delete Grp2

You're managing a Windows 10 Enterprise computer in which File History is turned on. You accidently deleted a folder named Libraries\Users permanently from the drive C on which System protection is enabled. You need to restore the most recent version of the folder. Which of the following will help you in accomplishing this?

File History

You are the network administrator for a company that has a Microsoft Intune subscription. You have decided to set up three Intune Security groups called CorpGroup, NHGroup, and Portsmouth. CorpGroup is a parent group to Portsmouth. Portsmouth has 75 users in the group. You realized that you need to make NHGroup the parent to Portsmouth. What is the first thing that you need to do?

Delete Portsmouth and then re-create the Portsmouth group under NHGroup.

Which of the following NTFS permissions is required to take ownership of files and folders?

Full Control

You are the IT manager for your company. You have been asked to give the Admin group the rights to read, change, and assign permissions to documents in the Stormwind Documents folder. The following table shows the current permissions on the Stormwind Documents shared folder: Group/UserNTFSSharedSalesReadChangeMarketingModifyChangeR&DDenyFull ControlFinanceReadReadAdminChangeChange What do you need to do to give the Admin group the rights to do their job? (Choose all that apply.)

Give Admin Full Control to shared permissions Give Admin Full Control to NTFS security

Jeff, the IT manager for Stormwind, has been asked to give Tom the rights to read and change documents in the Stormwind Documents folder. The following table shows the current permissions on the shared folder: Tom is a member of the Sales and Finance groups. When Tom accesses the Stormwind Documents folder, he can read all the files, but the system won't let him change or delete files. What do you need to do to give Tom the minimum amount of rights to do his job?

Give Tom Modify to NTFS security.

Which of the following Powercfg.exe switches shows the content of a power scheme?

-query

Which of the following ICACLS command options is used to revoke the permission?

/remove

Which MSRA command-line switch creates a file invitation to be given to an expert user to request assistance?

/saveasfile path password

You administer Windows 10 Enterprise tablets and virtual desktop computers that are joined to an Active Directory domain. Your company provides virtual desktop computers to all users. Employees in the sales department use tablets, sometimes connected to the company network and sometimes not. You want sales department employees to have the same personal data, whether they are using their virtual desktops or their tablets.To meet the requirements, click to select the three actions that you should perform to configure the network environment, and then drag them into the correct order.

1.Create a network share. 2.Enable slow-link mode for the tablets. 3.Specify the file share for which you want to enable Always Offline mode and set the value to 1.

You are the Microsoft Intune administrator for uCertify.com. You have a computer named Comp1 running Windows 10 Enterprise. You want to add a Windows Store universal app named Test_app to the Company Portal Apps list for all users. Click to select the three actions that you would perform, and then drag them in the correct order.

1.Log on to Comp1 by using your domain account. 2.On Comp1, run the Add Software - Microsoft Intune Software Publisher wizard. 3.From the Microsoft Intune administration console, manage the deployment settings of Test_app.

You are the IT director for a large school system. The school has decided that students can bring in their own devices to do school work with. Your organization uses Microsoft Azure Active Directory and Intune for all of the student's applications and network authentication. You need to be sure that students that are using IPADs as well as Windows 10 devices have full access. What do you need to do to be sure that all iOS devices can get access?

Import an Apple Push Notification service (APNs) certificate.

You've deployed several tablet PCs that run Windows 10. What should you do to minimize power usage when a user presses the sleep button?

In Power Options, configure the sleep button setting to Hibernate.

Which of the following statements is true of BitLocker?

It uses Network Unlock

The owner of your company has come to you and stated that they want all of the hardware on all systems to use BitLocker and BitLocker To Go. What utility should you install to help manage and maintain BitLocker and BitLocker To Go?

MBAM

Which of the following provides enterprise management capabilities for BitLocker and BitLocker To Go?

MBAM

A utility that gives users the capabilities of enrolling their own devices through the use of the self-service Company Portal app is known as _____.

MDM

You're trying to decide whether to use BitLocker and BitLocker To Go in your corporate environment. You have more than 300 users, and it would be a huge task to have these users use BitLocker. What utility should you use?

Microsoft BitLocker Administration and Monitoring

You're trying to decide whether to use BitLocker and BitLocker To Go in your corporate environment. You have over 300 users and it would be a huge task to have all of these users use BitLocker. What utility can you use to help you out?

Microsoft BitLocker Administration and Monitoring

Which utility is built on Microsoft Azure Active Directory and System Center?

Microsoft Intune

You administer Microsoft Intune for uCertify.com. Intune client computers run Windows 10 Enterprise. You notice that there are 25 mandatory updates listed in the Intune administration console. Which policy template should you use to prevent users from receiving prompts to restart Windows following the installation of mandatory updates?

Microsoft Intune Agent Settings

You are the administrator for Stormwind Studios. Stormwind has subscribed to Microsoft Intune. All of your client computers are running Windows 10 Enterprise. Users are complaining that they get prompted to restart their systems after mandatory updates. You need to stop the prompts from appearing on the clients Windows 10 systems following their updates. Which Intune policy template should you use?

Microsoft Intune Agent Settings.

You have a Windows 10 Enterprise computer. The computer has a shared folder named C:\Products on a NTFS volume. The share and NTFS permissions are configured as follows: User1 is a member of both the Everyone group and the Products group. User1 must access the C:\Products folder from across the network. You need to identify the effective permissions of User1 on the C:\Products folder. What permission should you identify?

Modify

Which accessibility utility is used to read aloud screen text, such as the text in dialog boxes, menus, and buttons?

Narrator

Which utility allows you to set up your desktop environment to your liking?

Personalization

Which preconfigured power plan requires a user to enter a password to wake up a computer if the computer is put into sleep mode?

Power Saver Balanced High Performance All of these

You are on a Windows 10 computer. You need to specify an alternate location for the print-spool folder directly. Which of the following can help you achieve this?

REGEDIT

The system administrator of your network wants to edit the Registry, including setting security on the Registry keys. What primary utilities that support full editing of the Windows 10 Registry should the system administrator use? (Choose all that apply.)

REGEDT32 REGEDIT

You want to speed up the resume time on your computer after it is put into hibernation mode. You have installed a hybrid hard-disk drive into your Windows 10 computer. Which technology should you use to accomplish your goal?

ReadyDrive

You are the system administrator for your company. You are configuring the services on a Windows 10 computer. You want to ensure that if a service fails to load, it will attempt to restart. Which tab of the service's Properties dialog box should you use?

Recovery

You are the network administrator for a large company. One of your users calls and states that she is getting an error every time she starts an application. You want to see what the user is doing and what the error is. How can you accomplish this?

Remote Assistance

You are a consultant for a large organization. Some employees contact you at 1 a.m. and state that one of the servers is not working properly. No one is in the office to fix the problem. What allows you to connect to the server to fix the problem?

Remote Desktop

uCertify.com has Windows 10 Enterprise client computers that are connected to a corporate private network. Users are currently unable to contact their work computers from their home computers by using Remote Desktop. You need to ensure that users can remotely connect to their office computers by using Remote Desktop. Also, users must not be able to access any other corporate network resource by using the local Windows installation from their home computers. Which setting should you configure?

Remote Desktop Gateway IP Address

You are the network administrator for a medium-sized company. Rick was the head of HR and recently resigned. John has been hired to replace Rick and has been given Rick's laptop. You want John to have access to all of the resources to which Rick had access. What is the easiest way to manage the transition?

Rename ricks account to John

You have a client Windows 10 Enterprise computer. The computer is joined to an Active Directory domain. The computer does not have a Trusted Platform Module (TPM) chip installed. You need to configure BitLocker Drive Encryption (BitLocker) on the operating system drive. Which Group Policy Object (GPO) setting should you configure? This

Require additional authentication at startup.

You are the IT manager of a large manufacturing company. Sales personnel are allowed to bring their own personal Windows 10 devices to the office. The company allows the sales people to install company software and use their devices to retrieve company mail by using the management infrastructure agent. One of your salespeople reports that their Windows 10 laptop was stolen while at the airport. You need to make sure that no one can steal any of the corporate data or access any corporate emails. Which two actions should you perform? Each correct answer presents part of the solution.

Reset the user's password Do a remote wipe on the users laptop.

You are the network administrator for a medium-size company. You support all user Desktop issues. Gary is using the default Windows 10 Desktop on his laptop computer. Gary wants to change his Desktop settings. Which of the following options should Gary use to configure the Desktop in Windows 10?

Right-click an empty space on the Desktop and choose Personalize from the context menu.

Your computer starts from the customized Windows To Go workspace using the Unattend.xml file. You want to prevent a local fixed disk from appearing in File Explorer when the computer starts from Windows To Go. Which setting should you modify in Unattend.xml?

SanPolicy

You work for uCertify.com. You are the administrator of a group of 20 Windows 10 client computers that are members of a local workgroup. Employees log on to the client computers by using their Microsoft accounts. Your company plans to use Windows BitLocker Drive Encryption. You need to back up the BitLocker recovery key. Which of the following options can you use?

Save the recovery key to OneDrive. Print the recovery key.

You are the network administrator for a midsize company. You've learned that some of the Microsoft operating systems that your company uses have loopholes that hackers can use to gain access into your network. What type of updates would you need to install to solve this problem?

Security updates

Which of the following types of updates are a collective set of all current hotfixes, security updates, critical updates, and updates?

Service Packs

You are the administrator for Stormwind Studios. You need to update all Windows 10 machines with all the current updates available for Windows 10. What type of update would you install to get everything updated in one installation?

Service pack

You are the IT director for Stormwind training studios. Your company has decided to start using Microsoft Intune for all of their software deployments. You want to set up a notification system so that you see all alerts and that your IT Manager only gets notified for Critical alerts. How do you accomplish this? (Choose all that apply.)

Set up Critical Event notifications for the IT Manager in Intune Set up all event notifications for the IT Director in Intune

You are the administrator of a company that builds its own applications. You have decided that you want to install a company application to all employees by using the Windows Store. Which term is used to refer to installing corporate apps through the Windows Store?

Sideloading

Which of the following is a power state that combines the features of hibernate and standby?

Sleep

Vincent is an instructor for Stormwind, and he is talking to Jeff, the company's IT manager. Vincent asks Jeff to implement some type of two-factor authentication. What can Jeff install to complete this request?

Smart Cards

You have an Active Directory user account on a company's network. The company's domain contains a sync share named ShareA. You have a personal computer that runs Windows 10 and is a member of a workgroup. You need to access the files in ShareA. Which Control Panel application should you use?

Sync Center

You're using a Windows 10 Enterprise computer. From where can you configure System protection to undo unwanted system changes?

System

You're configuring power plans on your Windows 10 computer. You decide to use the High Performance default power plan. Which of the following statements are true regarding this power plan? Each correct answer represents a complete solution. Choose all that apply.

The Hard disk will be turned off after 20 minutes of inactivity The monitor will be turned off after 20 minutes of inactivity.

You have a user, Rob, who uses a laptop computer running Windows 10. You have configured the laptop to enter sleep mode after 30 minutes of inactivity. What will occur when the computer enters sleep mode?

The data will be saved to memory, and the computer will be put into a power-saving state.

Jeff, an IT manager, has decided to use a Windows 10 system to store some local folders for network access. The folder will be located on a NTFS partition. Jeff has assigned both NTFS permissions and share permissions. Which of the following is true of how share permissions and NTFS permissions work together on the same folder?

The system will look at both the share permissions and the NTFS permissions, and whichever set is more restrictive will be applied to the folder.

You have a network folder that resides on an NTFS partition on a Windows 10 computer. NTFS permissions and share permissions have been applied. Which of the following statements best describes how share permissions and NTFS permissions work together if they have been applied to the same folder?

The system will look at the cumulative share permissions and the cumulative NTFS permissions. Whichever set is more restrictive will be applied.

You're configuring power settings on your laptop. You configure the laptop to enter sleep mode after a specified period of inactivity. Which of the following will occur when the computer enters sleep mode?

The user session's data will be saved to the hard disk while using very little power.

Which utility allows you to centrally manage your computer's files, hard drives, and devices with removable storage?

This PC

You are an administrator for your company's network. You want to configure additional clocks to be displayed in the notification area of your users' computer. How can you accomplish this task?

Through Control Panel > Date and Time

You sit in a busy area of the office. Sometimes you forget to log off or lock the computer when you leave your desk. How can you configure your computer so that it will become password protected if it is idle for more than 10 minutes?

Through the Screen Saver option in the Lock Screen section

You have two remote sites with Windows 10 machines. You need to share data across the slow sites. What feature can help with this?

Transparent cache

Which one of these group policies requires a reboot?

Turn off Data Execution Prevention for Windows

You are the network administrator for your organization. Your users use both tablets and cellular phones to access the corporate network. Your tablets don't have any cellular service but the phones have Internet access. How do you allow your tablets to connect to your cell phones for Internet access?

Turn on cellular tethering.

You are using Windows 10 and you have created a file named as "my text" in Notepad and has a .txt extension type. You need to change the extension type from .txt to .vbx. What setting do you need to change on the folder so that you can see the extension types?

Uncheck Hide Extension for known file types

You're using a laptop running Windows 10 Home. You want to synchronize files between your laptop and a network folder. Which of the following actions must you perform first to enable synchronization to occur between your laptop and the network folder?

Upgrade your laptop to Windows 10 Enterprise

You are the IT manager for a large communication company. Your company has decided to start using Microsoft Intune for all of their software deployments. You need to set up an update for third-party non-Microsoft software. Which tool do you use to accomplish this?

Upload Update Wizard

You are the desktop administrator for a small company that has a workgroup environment consisting of Windows 10 Enterprise computers. You want to prevent 15 help desk computers from sleeping but if the computers are not being used, the screens should shut off after a certain period of time. You need to configure and apply a standard power configuration scheme for the 15 help desk computers on your network. Which actions should you perform? Each correct answer represents a part of the solution. Choose two.

Use POWERCFG /X on one help desk computer to modify the power scheme, and export the power scheme using POWERCFG /EXPORT. Use POWERCFG /IMPORT on each of the remaining help desk computers, and configure the power scheme to Active using POWERCFG /S.

You have to work for a government contractor. The contractor needs to have security ID badges issued to all users so that the users are assigned their groups and rights through the ID badge. What will you do to fulfill the contractor's requirements?

Use Smartcards

Which editions of Windows 10 can you enable BitLocker? Choose all that apply.

Windows 10 Education Edition Windows 10 Professional Edition Windows 10 Enterprise Edition

Which of the following operating systems support BitLocker? Each correct answer represents a complete solution. Choose all that apply.

Windows 10 Education Edition Windows 10 Professional Edition Windows 8.1 Enterprise Edition

You have a user, Jan, who suspects that her Windows 10 computer has been infected with spyware. You removed the spyware from her computer and want to prevent spyware from further infecting it. Which of the following Windows 10 utilities should you configure? This

Windows Defender

Using Remote Assistance, which of the following computers can be connected to a Windows 10 computer? Each correct answer represents a complete solution. Choose all that apply.

Windows XP Professional Windows Server 2003 Windows 10

You are the network administrator for a large organization. You have a Windows 10 machine that needs to prevent any user for copying unencrypted files from the Windows 10 machine to any removable disk. How do you accomplish this task?

Within a Local Group Policy, set the BitLocker Drive encryption

Which application allows you to view Microsoft XML Paper Specification files?

XPS Viewer

The ability to limit how much bandwidth a user or department gets to use when downloading applications is known as:

software metering.