You have 200 computers that run Windows 10 and are joined to an Active Directory domain.
You need to enable Windows Remote Management (WinRM) on all the computers by using Group Policy.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Set the Startup Type of the Windows Remote Management (WS-Management) service to Automatic.

B. Enable the Windows Defender Firewall: Allow inbound Remote Desktop exceptions setting.

C. Enable the Allow remote server management through WinRM setting.

D. Enable the Windows Defender Firewall: Allow inbound remote administration exception setting.

E. Enable the Allow Remote Shell access setting.

F. Set the Startup Type of the Remote Registry service to Automatic.

Your network contains an Active Directory domain. The domain contains 1,000 computers that run Windows 10.
You configure Microsoft Edge settings by using domain and local Group Policy Objects (GPOs).
You need to generate a report that contains all the Microsoft Edge policy settings applied to a computer.
What should you do?

A. From Microsoft Edge, open edge://settings.

B. From a command prompt, run scanstate and specify the /genconfig parameter.

C. From Microsoft Edge, open edge://policy.

D. From the Start menu, select Group Policy Object Editor.

You need to sign in as LocalAdmin on Computer11.
What should you do first?

A. From the LAPS UI tool, view the administrator account password for the computer object of Computer11.

B. From Windows Configuration Designer, create a configuration package that sets the password of the LocalAdmin account on Computer11.

C. Use a Group Policy object (GPO) to set the local administrator password.

D. From Microsoft Intune, set the password of the LocalAdmin account on Computer11.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 8.1.
Computer1 has apps that are compatible with Windows 10.
You need to perform a Windows 10 in-place upgrade on Computer1.
Solution: You copy the Windows 10 installation media to a Microsoft Deployment Toolkit (MDT) deployment share. You create a task sequence, and then you run the MDT deployment wizard on Computer1.
Does this meet the goal?

A. Yes

B. No

HOTSPOT -
You have 20 computers that run Windows 11.
You need to enable Windows Sandbox on the computers.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
 

HOTSPOT -
You have three computers that run Windows 10 as shown in the following table.
 
All the computers have C and D volumes. The Require additional authentication at startup Group Policy settings is disabled on all the computers.
Which volumes can you encrypt by using BitLocker Drive Encryption (BitLocker)? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
 

You are troubleshooting an issue that prevents you from installing Windows 10 updates.
You discover that the issue relates to corrupt protected system files.
You need to restore the corrupt system files.
Which command should you run?

A. scanstate

B. sfc

C. chkdsk

D. chkntfs

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
A user named User1 has a computer named Computer1 that runs Windows 10. Computer1 is joined to an Azure Active Directory (Azure AD) tenant named contoso.com. User1 joins Computer1 to contoso.com by using
user1@contoso.com
.
Computer1 contains a folder named Folder1. Folder1 is in drive C and is shared as Share1. Share1 has the permission shown in the following table.
 
A user named User2 has a computer named Computer2 that runs Windows 10. User2 joins Computer2 to contoso.com by using
user2@contoso.com
.
User2 attempts to access Share1 and receives the following error message: `The username or password is incorrect.`
You need to ensure that User2 can connect to Share1.
Solution: You create a local user account on Computer1 and instruct User2 to use the local account to connect to Share1.
Does this meet the goal?

A. Yes

B. No

You have a computer named Computer1 that runs Windows 10.
You are troubleshooting connectivity issues on Computer1.
You need to view the remote addresses to which Computer1 has active TCP connections.
Which tool should you use?

A. Performance Monitor

B. Task Manager

C. Resource Monitor

D. Windows Defender Firewall with Advanced Security

You have a computer named Computer1 that runs Windows10. Computer1 is in a workgroup.
Computer1 contains the users shown in the following table.
 
You need to apply the same Group Policy settings to only User1, User2 and User3. The solution must use a minimum number of local Group Policy objects
(GPOs).
How many local GPOs should you create?

A. 1

B. 2

C. 3

You have a computer that runs Windows 10.
You need to clear the DNS client cache.
Which command should you run?

A. ipconfig.exe

B. arp.exe

C. nslookup.exe

D. netstat.exe

SIMULATION -
You have a computer named Computer1. Computer1 runs Windows 10 Pro. Computer1 has a cellular connection and a Wi-Fi connection.
You want to prevent Computer1from using the cellular connection unless a you manually connects to the cellular network.
What should you do?
To complete this task, sign in to the required computer or computers.

Your company has a main office and a branch office. The offices connect to each other by using a WAN link. Access to the Internet is provided through the main office.
The branch office contains 25 computers that run Windows 10. The computers contain small hard drives that have very little free disk space.
You need to prevent the computers in the branch office from downloading updates from peers on the network.
What should you do?

A. From the Settings app, modify the Delivery Optimizations settings.

B. Configure the network connections as metered connections.

C. Configure the computers to use BranchCache in hosted cache mode.

D. Configure the updates to use the Semi-Annual Channel (Targeted) channel.

HOTSPOT -
You have a Windows 10 unattended installation answer file named C:answer.txt. You have a bootable USB Windows 10 installation media that is mounted as drive E.
You need to perform an unattended installation of Windows 10 on a new computer.
To where should you copy the answer file, and how should you name the answer file? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
 

You need to meet the technical requirements for the San Diego office computers.
Which Windows 10 deployment method should you use?

A. wipe and load refresh

B. in-place upgrade

C. provisioning packages

D. Windows Autopilot

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer that runs Windows 10. The computer contains a folder. The folder contains sensitive data.
You need to log which user reads the contents of the folder and modifies and deletes files in the folder.
Solution: From the properties of the folder, you configure the Auditing settings and from the Audit Policy in the local Group Policy, you configure Audit privilege use.
Does this meet the goal?

A. Yes

B. No

Your company has a branch office that contains 25 workgroup computers. The computers run Windows 10 Pro.
Users report that they cannot see other computers from Network in File Explorer.
What should you do to resolve the issue?

A. Set Network profile to Private.

B. Turn off random hardware addresses for the network connection.

C. Set Network profile to Public.

D. Configure the network connection as a metered connection.

SIMULATION -
You have a computer named Computer1 that runs Windows 10.
Computer1 has a folder named C:Folder1.
You need to meet the following requirements:
✑ Provide a user named Jon Ross with the ability to modify the permissions of C:Folder1.
✑ Ensure that the principle of least privilege is maintained.
What should you do?
To complete this task, sign in to the required computer or computers.

HOTSPOT -
You have a computer named Computer1 that runs Windows 10.
Computer has the users shown in the following table.
 
User1 signs in to Computer1, creates the following files, and then signs out:
✑ File1.docx in CUsersUser1Desktop
✑ File2.docx in C:UsersPublicPublic Desktop
✑ File3.docx in C:UsersDefaultDesktop
User3 then signs in to Computer1 and creates a file named File4.docx in C:UsersUser3Desktop.
User2 has never signed in to Computer1.
How many DOCX files will appear on the desktop of each user the next time each user signs in? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
 

Which users can create a new group on Computer3?

A. User31 and User32 only

B. Admin1, User31, and User32 only

C. User31 only

D. Admin1 and User31 only

HOTSPOT -
You open System Information on a computer that runs Windows 8.1 as shown in the following exhibit.
 
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:
 

You have a computer named Computer1 that has the following configurations:
• RAM: 4 GB
• CPU: 1.6 GHz
• Hard drive: 128 GB
• Operating system: Windows 10 Pro in S mode
You need to upgrade Computer1 to Windows 11.
What should you do first?

A. Increase the amount of RAM.

B. Increase the storage capacity of the hard drive.

C. Switch out of S mode.

D. Upgrade the CPU.

You have a computer that runs Windows 10 Pro. The computer contains the users shown in the following table.
 
You need to use a local Group Policy Object (GPO) to configure one group of settings for all the members of the local Administrators group and another group of settings for all non-administrators.
What should you do?

A. Use the runas command to open Gpedit.msc as each user.

B. Run mmc as User1 and add the Group Policy Object Editor snap-in twice.

C. Open Gpedit.msc as User1 and add two Administrative Templates.

D. Run mmc as User1 and add the Security Templates snap-in twice.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer named Computer1 that runs Windows10.
A service named Application1 is configured as shown in the exhibit.
 
You discover that a user used the Service1 account to sign in to Computer1 and deleted some files.
You need to ensure that the identity used by Application1 cannot be used by a user to sign in to sign in to the desktop on Computer1. The solution must use the principle of least privilege.
Solution: On Computer1, you configure Application1 to sign in as the LocalSystem account and select the Allow service to interact with desktop check box. You delete the Service1 account.
Does this meet the goal?

A. Yes

B. No

HOTSPOT -
You have 100 computers that run Windows 10. You have no servers. All the computers are joined to Microsoft Azure Active Directory (Azure AD).
The computers have different update settings, and some computers are configured for manual updates.
You need to configure Windows Update. The solution must meet the following requirements:
✑ The configuration must be managed from a central location.
✑ Internet traffic must be minimized.
✑ Costs must be minimized.
How should you configure Windows Update? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
 

HOTSPOT -
You have a computer named Computer1 that runs Windows 10.
Computer1 has the local users shown in the following table.
 
Which users can analyze the event logs on Computer1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
 

HOTSPOT -
You have a workgroup computer named Computer1 that runs Windows 10. Computer1 has the users accounts shown in the following table:
 
Computer1 has the local Group Policy shown in the following table.
 
You create the Local ComputerAdministrators policy shown in the following table.
 
You create the Local ComputerNon-Administrators policy shown in the following table.
 
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
 

You have a Windows 10 device named Device1.
You plan purchase a wireless display device that will stream audio and video from Device1.
Which wireless feature or protocol should the display device support?

A. Wi-Fi sense

B. Miracast

C. near field communications (NFC)

D. Bluetooth

HOTSPOT -
Your network contains an Active Directory domain that contains the objects shown in the following table.
 
Computer1 contains the shared folders shown in the following table.
 
The computers have the network configurations shown in the following table.
 
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
 

Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 10.
You need to view the settings to Computer1 by Group Policy objects (GPOs) in the domain and local Group Policies.
Which command should you run?

A. gpresult

B. secedit

C. gpupdate

D. gpfixup

Your network contains an Active Directory domain. The domain contains the computers shown in the following table.
 
On which computers can you perform an in-place upgrade to Windows 10 Enterprise?

A. Computer3 only

B. Computer2 and Computer3 only

C. Computer2 only

D. Computer1, Computer2, and Computer3

HOTSPOT -
Your network contains an Active Directory domain. The domain contains the users shown in the following table.
 
The Authenticated Users group has the Add workstations to domain user right in the Default Domain Controllers Policy.
The Device Managers and Help Desk groups are granted the Create Computer objects permission for the Computers container of the domain.
You have 15 workgroup computers that run Windows 10. Each computer contains a local user account named LocalAdmin1 that is a member of the following groups:
✑ Administrators
✑ Device Owners
✑ Authenticated Users
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
 

You have a computer named Computer1 that runs Windows 10.
You complete a full back up of Computer1 to an external USB drive. You store the USB drive offsite.
You delete several files from your personal Microsoft OneDrive account by using File Explorer, and then you empty the Recycle Bin on Computer1.
You need to recover the files 60 days after you deleted them in the least amount of time possible.
What should you use?

A. the OneDrive recycle bin

B. the full backup on the external USB drive

C. Recovery in the Settings app

SIMULATION -
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may more than one lab that you must complete. You can use as much time as you would like to complete each lab.
But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
Username and password -
 
Use the following login credentials as needed:
To enter your password, place your cursor in the Enter password box and click on the password below.
Username: Contoso/Administrator -
Password: Passw0rd!
The following information is for technical support purposes only:
Lab Instance: 11145882 -
 
 
Administrators report that they cannot use Event Viewer to remotely view the event logs on Client3.
You need to ensure that the administrators can access the event logs remotely on Client3. The solution must ensure that Windows Firewall remains enabled.
To complete this task, sign in to the required computer or computers.

You have a workgroup computer that runs Windows 10.
You need to set the minimum password length to 12 characters.
What should you use?

A. Local Group Policy Editor

B. User Accounts in Control Panel

C. System Protection in System Properties

D. Sign-in options in the Settings app

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer named Computer1 that runs Windows 10.
You test Windows updates on Computer1 before you make the updates available to other computers.
You install a quality update that conflicts with a custom device driver.
You need to remove the update from Computer1.
Solution: From System Restore, you revert the system state to a restore point that was created before the update was installed.
Does this meet the goal?

A. Yes

B. No

HOTSPOT -
You have a computer named Computer1 that runs Windows 10.
On Computer1, you create a VPN connection as shown in the following exhibit.
 
The corporate network contains a single IP subnet.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:
 

HOTSPOT -
You have the source files shown in the following table.
 
You mount an image from Image1.wim to a folder named C:Mount.
You need to add the French language pack to the mounted image.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
 

You have 20 computers that run Windows 10.
You configure all the computers to forward all the events from all the logs to a computer named Computer1 that runs Windows 10.
When you sign in to Computer1, you cannot see any security events from other computers. You can see all the other forwarded events from the other computers.
You need to ensure that the security events are forwarded to Computer1.
What should you do?

A. On each computer, run wecutil qc /q.

B. On each computer, add the NETWORK SERVICE account to the Event Log Readers group.

C. On each computer, run winrm qc ג€”q.

D. On Computer1, add the account of Computer1 to the Event Log Readers group.

HOTSPOT
-
You have a workgroup computer that runs Windows 10.
You need to configure User Account Control (UAC) to meet the following requirements:
• Ensure that the local Administrator account is always be prompted to approve elevation of privilege.
• Enforce public key infrastructure (PKI) signature checks for any interactive apps that request elevation of privilege.
Which two policy settings should you modify? To answer, select the settings in the answer area.
NOTE: Each correct selection is worth one point.
 

HOTSPOT -
Your network contains an Active Directory domain. The domain contains 100 computers that run Windows 10.
You need to configure the computers to send the error events in the System log to a computer named Computer1 that runs Windows 10.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
 

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains the users shown in the following table.
 
You have a computer named Computer1 that runs Windows 10 and is in a workgroup.
A local standard user on Computer1 named User1 joins the computer to the domain and uses the credentials of User2 when prompted.
You need to ensure that you can rename Computer1 as Computer33.
Solution: You use the credentials of User1 on Computer1.
Does this meet the goal?

A. Yes

B. No

HOTSPOT -
You have computers that run Windows 10 Enterprise as shown in the following table.
 
Both computers have applications installed and contain user data.
You plan to configure both computers to run Windows 10 Enterprise LTSC 2019 and to retain all the existing applications and data.
You need to recommend a method to deploy Windows 10 Enterprise LTSC 2019 to the computers. The solution must minimize effort to install and configure the applications.
What should you include in the recommendation for each computer? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
 

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have two computers named Computer1 and Computer2 that run Windows 10.
You have an Azure Active Directory (Azure AD) user account named
admin@contoso.com
that is in the local Administrators group on each computer.
You sign in to Computer1 by using
admin@contoso.com
.
You need to ensure that you can use Event Viewer on Computer1 to connect to the event logs on Computer2.
Solution: On Computer2, you run the Enable-PSRemoting cmdlet.
Does this meet the goal?

A. Yes

B. No

A user purchases a new computer that has Windows 10 Home preinstalled. The computer has a biometric fingerprint reader.
You need to ensure that the user can use the fingerprint reader to sign in to the computer by using an Azure Active Directory (Azure AD) account.
What should you do first?

A. Register the computer to Azure AD.

B. Install the latest feature updates on the computer.

C. Upgrade the computer to Windows 10 Enterprise.

D. Upgrade the computer to Windows 10 Pro.

HOTSPOT -
You have two workgroup computers named Computer1 and Computer2 that run Windows 10. The computers contain the local security principals shown in the following table.
 
Which security principals can be members of GroupA and GroupC? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
 

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has an on-premises network that contains an Active Directory domain. The domain is synced to Microsoft Azure Active Directory (Azure AD). All computers in the domain run Windows 10 Enterprise.
You are logged on as the local administrator on a Computer named Computer1.
A user named Mia Hamm has a computer named Computer2. Mia Hamm reports that she is experiencing problems with Computer2.
You want to use Event Viewer on Computer1 to view the event logs on Computer2.
What should you do?

A. On Computer1, run the Connect-WSMan -ComputerName “Computer1” cmdlet.

B. On Computer1, run the Get-Eventlog -List -ComputerName “Computer1” cmdlet.

C. On Computer1, log on as a domain administrator, then open Event Viewer and select the Connect to another computer ג€¦ option.

D. On Computer1, open the Windows Defender Firewall and enable the Remote Event Log Management inbound rule.

You have a public computer named Computer1 that runs Windows 10. Computer1 contains a folder named Folder1.
You need to provide a user named User1 with the ability to modify the permissions of Folder1. The solution must use the principle of least privilege.
Which NTFS permission should you assign to User1?

A. Full control

B. Modify

C. Write

D. Read & execute

HOTSPOT -
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016 and a computer named Computer1 that runs Windows 10.
Server1 contains a share named Backup. All users can read and write data in Backup.
On Monday at 13:00, you configure Backup and Restore (Windows 7) on Computer1 to use the following settings:
✑ Backup Destination:Server1Backup
✑ What do you want to back up?:Local Disk (D:), Include a system image of drives: System Reserved, (C:)
✑ Schedule: Daily at 23:00
You need to identify how many backups will be available on Thursday at 17:00.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
 

Your network contains an Active Directory domain named contoso.com. The domain contains two computers named Computer1 and Computer2 that run Windows
10.
On Computer1, you need to run the Invoke-Command cmdlet to execute several PowerShell commands on Computer2.
What should you do first?

A. On Computer2, run the Enable-PSRemoting cmdlet

B. From Active Directory, configure the Trusted for Delegation setting for the computer account of Computer2

C. On Computer1, run the New-PSSession cmdlet

D. On Computer2, add Computer1 to the Remote Management Users group