NEW QUESTION 1

Your network contains an Active Directory domain. The domain contains 1,000 computers that run Windows 10.
You discover that when users are on their lock screen, they see a different background image every day, along with tips for using different features in Windows 10.
You need to disable the tips and the daily background image for all the Windows 10 computers. Which Group Policy settings should you modify?

• A. Turn off the Windows Welcome Experience
• B. Turn off Windows Spotlight on Settings
• C. Do not suggest third-party content in Windows spotlight
• D. Turn off all Windows spotlight features

Answer: D

Explanation:
References:
https://docs.microsoft.com/en-us/windows/configuration/windows-spotlight

NEW QUESTION 2

A user named User1 has a computer named Computer1 that runs Windows 10.
User1 connects to a Microsoft Azure virtual machine named VM1 by using Remote Desktop. User1 creates a VPN connection to a partner organization.
When the VPN connection is established, User1 cannot connect to VM1. When User1 disconnects from the VPN, the user can connect to VM1.
You need to ensure that User1 can connect to VM1 while connected to the VPN. What should you do?

• A. From the proxy settings, add the IP address of VM1 to the bypass list to bypass the proxy.
• B. From the properties of VPN1, clear the Use default gateway on remote network check box.
• C. From the properties of the Remote Desktop connection to VM1, specify a Remote Desktop Gateway (RDGateway).
• D. From the properties of VPN1, configure a static default gateway address.

Answer: B

Explanation:
References:
https://www.stevejenkins.com/blog/2010/01/using-the-local-default-gateway-with-a-windows-vpn-connection/

NEW QUESTION 3

You have a file named Reg1.reg that contains the following content.

What is the effect of importing the file?

• A. A key named command will be renamed as notepad.exe.
• B. In a key named Notepad, the command value will be set to @="notepad.exe".
• C. In a key named command, the default value will be set to notepad.exe.

Answer: B

NEW QUESTION 4

You need to recommend a solution to monitor update deployments. What should you include in the recommendation?

• A. Windows Server Update (WSUS)
• B. the Update Management solution in Azure Automation
• C. the Update Compliance solution in Azure Log Analytics
• D. the Azure Security Center

Answer: C

Explanation:
References:
https://docs.microsoft.com/en-us/windows/deployment/update/update-compliance-monitor

NEW QUESTION 5

You have a computer named Computer1 that runs Windows 10.
You need to configure User Account Control (UAC) to prompt administrators for their credentials. Which settings should you modify?

• A. Administrators Properties in Local Users and Groups
• B. User Account Control Settings in Control Panel
• C. Security Options in Local Group Policy Editor
• D. User Rights Assignment in Local Group Policy Editor

Answer: C

Explanation:
References:
https://docs.microsoft.com/en-us/windows/security/identity-protection/user-account-control/user-account-contro

NEW QUESTION 6

You need to recommend a solution to configure the employee VPN connections. What should you include in the recommendation?

• A. Remote Access Management Console
• B. Group Policy Management Console (GPMC)
• C. Connection Manager Administration Kit (CMAK)
• D. Microsoft Intune

Answer: D

Explanation:
References:
https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/vpn-deploy-

NEW QUESTION 7

Your network contains an Active Directory domain. The domain contains a user named Admin1. All computers run Windows 10.
You enable Windows PowerShell remoting on the computers.
You need to ensure that Admin1 can establish remote PowerShell connections to the computers. The solution must use the principle of least privilege.
To which group should you add Admin1?

• A. Access Control Assistance Operators
• B. Power Users
• C. Remote Desktop Users
• D. Remote Management Users

Answer: D

Explanation:
References:
https://4sysops.com/wiki/enable-powershell-remoting/

NEW QUESTION 8

You have 20 computers that run Windows 10.
You configure all the computers to forward all the events from all the logs to a computer named Computer1 that runs Windows 10.
When you sign in to Computer1, you cannot see any security events from other computers. You can see all the other forwarded events from the other computers.
You need to ensure that the security events are forwarded to Computer1. What should you do?

• A. On each computer, run wecutil ac /q.
• B. On each computer, add the NETWORK SERVICE account to the Event Log Readers group.
• C. On each computer, run winrm qc –q.
• D. On Computer1, add the account of Computer1 to the Event Log Readers group.

Answer: D

Explanation:
References:
https://docs.microsoft.com/en-us/windows/security/threat-protection/use-windows-event-forwarding-to-assistin-

NEW QUESTION 9

You have a computer named Computer1 that runs Windows 10.
On Computer1, you create the local users shown in the following table.

Which three user profiles will persist after each user signs out? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A. User1
• B. User2
• C. User3
• D. User4
• E. User5

Answer: ADE

NEW QUESTION 10

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer named Computer1 that runs Windows 10. The computer contains a folder. The folder contains sensitive data.
You need to log which user reads the contents of the folder and modifies and deletes files in the folder. Solution: From the properties of the folder, you configure the Auditing settings and from the Audit Policy in
the local Group Policy, you configure Audit directory service access.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation:
References:
https://www.netwrix.com/how_to_detect_who_changed_file_or_folder_owner.html

NEW QUESTION 11

You have a computer named Computer1 that runs Windows 7. Computer1 has a local user named User1 who has a customized profile.
On Computer1, you perform a clean installation of Windows 10 without formatting the drives. You need to migrate the settings of User1 from Windows7 to Windows 10.
Which two actions should you perform? To answer, drag the appropriate actions to the correct targets. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
References:
https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-how-it-works

NEW QUESTION 12

You need to ensure that User10 can activate Computer10. What should you do?

• A. Request that a Windows 10 Enterprise license be assigned to User10, and then activate Computer10.
• B. From the Microsoft Deployment Toolkit (MDT), add a Volume License Key to a task sequence, and thenredeploy Computer10.
• C. From System Properties on Computer10, enter a Volume License Key, and then activate Computer10.
• D. Request that User10 perform a local AutoPilot Reset on Computer10, and then activate Computer10.

Answer: D

Explanation:
References:
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot-requirements-lice

NEW QUESTION 13

You have a computer that runs Windows 10.
You discover that Windows updates are failing to install on the computer.
You need to generate a log file that contains detailed information about the failures. Which cmdlet should you run?

• A. Get–LogProperties
• B. Get–WindowsErrorReporting
• C. Get–WindowsUpdateLog
• D. Get–WinEvent

Answer: C

Explanation:
References:
https://docs.microsoft.com/en-us/powershell/module/windowsupdate/get-windowsupdatelog?view=win10-ps

NEW QUESTION 14

You have a computer named Computer 1 that runs Windows 10.
You turn on System Protection and create a restore point named Point1. You perform the following changes:
Add four files named File1.txt, File2.dll, File3.sys, and File4.exe to the desktop.
Run a configuration script that adds the following four registry keys:
- Key1 to HKEY_CURRENT_USER
- Key2 to HKEY_CLASSES_ROOT
- Key3 to HKEY_LOCAL_MACHINESYSTEM
- Key4 to HKEY_CURRENT_CONFIG
You restore Point1.
Which files and registry keys are removed? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
References:
https://www.maketecheasier.com/what-system-restore-can-and-cannot-do-to-your-windows-system/ https://superuser.com/questions/343112/what-does-windows-system-restore-exactly-back-up-and-restore

NEW QUESTION 15

You are planning a recovery strategy for computers that run Windows 10.
You need to create recovery procedures to roll back feature updates and quality updates.
What should you include in the procedures? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
References:
https://www.thewindowsclub.com/rollback-uninstall-windows-10-creators-update https://www.dummies.com/computers/pcs/undo-windows-update/

NEW QUESTION 16

You need to sign in as LocalAdmin on Computer11. What should you do first?

• A. From the LAPS UI tool, view the administrator account password for the computer object of Computer11.
• B. From Local Security Policy, edit the policy password settings on Computer11.
• C. From the LAPS UI tool, reset the administrator account password for the computer object of Computer11.
• D. From Microsoft Intune, edit the policy password settings on Computer11.

Answer: A

Explanation:
References:
https://technet.microsoft.com/en-us/mt227395.aspx

NEW QUESTION 17

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer named Computer1 that runs Windows 10.
You test Windows updates on Computer1 before you make the updates available to other users at your company.
You install a quality update that conflicts with a customer device driver. You need to remove the update from Computer1.
Solution: From System Restore, you revert the system state to a restore point that was created before the update was installed.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation:
References:
https://support.microsoft.com/en-us/help/934307/description-of-the-windows-update-standalone-installer-in-win

NEW QUESTION 18

Your company has an isolated network used for testing. The network contains 20 computers that run Windows 10. The computers are in a workgroup. During testing, the computers must remain in the workgroup.
You discover that none of the computers are activated.
You need to recommend a solution to activate the computers without connecting the network to the Internet. What should you include in the recommendation?

• A. Volume Activation Management Tool (VAMT)
• B. Key Management Service (KMS)
• C. Active Directory-based activation
• D. the Get-WindowsDeveloperLicense cmdlet

Answer: B

Explanation:
References:
https://docs.microsoft.com/en-us/windows/deployment/volume-activation/activate-using-key-management-servi

NEW QUESTION 19
......