Q186. An employee reports that she must perform a BitLocker recovery on her laptop. The employee does not have her BitLocker recovery key but does have a Windows 10 desktop computer.
What should you instruct the employee to do from the desktop computer?

Q187. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer named Computer1 that runs Windows 10.
A service named Application1 is configured as shown in the exhibit.

You discover that a user used the Service1 account to sign in to Computer1 and deleted some files.
You need to ensure that the identity used by Application1 cannot be used by a user to sign in to sign in to the desktop on Computer1. The solution must use the principle of least privilege.
Solution: On Computer1, you assign Service1 the deny log on as a service user right.
Does this meet the goal?

Q188. You need to sign in as LocalAdmin on Computer11.
What should you do first?

Q189. You have a computer that runs Windows 10.
You need to configure the local computer policy to meet the following requirements:
An event must be created in the Security log when changes are made to local users or groups.
The local administrator and guest accounts must be renamed.
Which Security Settings should you modify? To answer, select the appropriate options in the answer area.

Q190. You need to meet the technical requirement for the IT department users.
What should you do first?

Q191. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have two computers named Computer1 and Computer2 that run Windows 10.
You have an Azure Active Directory (Azure AD) user account named [email protected] that is in the local Administrators group on each computer.
You sign in to Computer1 by using [email protected].
You need to ensure that you can use Event Viewer on Computer1 to connect to the event logs on Computer2.
Solution: On Computer2, you create a Windows Defender Firewall rule that allows eventwr.exe.
Does this meet the goal?

Q192. Your network contains an Active Directory domain. The domain contains the users shown in the following table.

The Authenticated Users group has the Add workstations to domain user right in the Default Domain Controllers Policy.
The Device Managers and Help Desk groups are granted the Create Computer objects permission for the Computers container of the domain.
You have 15 workgroup computers that run Windows 10. Each computer contains a local user account named LocalAdmin1 that is a member of the following groups:
Administrators
Device Owners
Authenticated Users
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Q193. Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
Username and password

Use the following login credentials as needed:
To enter your password, place your cursor in the Enter password box and click on the password below.
Username: Contoso/Administrator
Password: Passw0rd!
The following information is for technical support purposes only:
Lab Instance: 11145882


You need to ensure that the File History of ContosoAdministrator on Client1 is backed up automatically to \DC1Backups.
To complete this task, sign in to the required computer or computers.

Q194. Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016 and a computer named Computer1 that runs Windows 10.
Server1 contains a share named Backup. All users can read and write data in Backup.
On Monday at 13:00, you configure Backup and Restore (Windows 7) on Computer1 to use the following settings:
* Backup Destination:\Server1Backup
* What do you want to back up?:Local Disk (D:), Include a system image of drives: System Reserved, (C:)
* Schedule: Daily at 23:00
You need to identify how many backups will be available on Thursday at 17:00.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q195. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer named Computer1 that runs Windows 10.
A service named Application1 is configured as shown in the exhibit.

You discover that a user used the Service1 account to sign in to Computer1 and deleted some files.
You need to ensure that the identity used by Application1 cannot be used by a user to sign in to sign in to the desktop on Computer1. The solution must use the principle of least privilege.
Solution: On Computer1, you assign Service1 the deny log on as a service user right.
Does this meet the goal?

Q196. You need to meet the technical requirement for Computer1.
What should you do? To answer, select the appropriate options in the answer area.

Q197. You have a computer named Computer1 that runs Windows 10.
On Computer1, you create the local users shown in the following table.

Which three user profiles will persist after each user signs out? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Q198. You have computers that run Windows 10. The computers are joined to an Azure Active Directory (Azure AD) tenant and enrolled in Microsoft Intune.
You need to recommend a solution for help desk administrators that meets the following requirements:
* The administrators must assist users remotely by connecting to each user’s computer.
* The remote connections must be initiated by the administrators. The users must approve the connection.
* Both the users and the administrators must be able to see the screen of the users’ computer.
* The administrators must be able to make changes that require running applications as a member of each computer’s Administrators group.
Which tool should you include in the recommendation?

Q199. Your network contains an Active Directory domain. the domain contains a computer named Computer1 that runs Windows 10. The domain contains the users shown in the following table.

Computer contains the shared folders shown in the following table.

The shared folders have the permissions shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise select No.
NOTE: Each correct selection is worth one point.

Q200. You have a computer named Computer1 that runs Windows 10. Computer1 is in a workgroup.
Computer1 contains the folders shown in the following table.

On Computer1, you create the users shown in the following table.

User1 encrypts a file named File1.txt that is in a folder named C:Folder1.
What is the effect of the configuration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q201. You are a network administrator at your company.
A user attempts to start a computer and receives the following error message: “Bootmgr is missing.” You need to resolve the issue.
You start the computer in the recovery mode.
Which command should you run next? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q202. You have a workgroup computer named Computer1 that runs Windows 10. Computer1 has the users accounts shown in the following table:

Computer1 has the local Group Policy shown in the following table.

You create the Local ComputerAdministrators policy shown in the following table.

You create the Local ComputerNon-Administrators policy shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Q203. You need to recommend a solution to monitor update deployments.
What should you include in the recommendation?

Q204. You have a workgroup computer named Computer1 that runs Windows 10 and has the users shown in the following table.

You have a file named File1.reg that contains the following content.

You need to identify what occurs when User1 and User2 double-click File1.reg.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q205. You have a computer that runs Windows 10. The computer is in a workgroup. The computer is used to provide visitors with access to the Internet.
You need to configure the computer to meet the following requirements:
* Always sign in automatically as User1.
* Start an application named App1.exe at sign-in.
What should you use to meet each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q206. You have a computer named Computer1 that runs Windows 10. Computer1 is in a workgroup.
Computer1 contains the local users shown in the following table.

Computer1 contains the folders shown in the following table.

The Users group has Full control permissions to Folder1, Folder2, and Folder3.
User1 encrypts two files named File1.docx and File2.docx in Folder1 by using EFS.
Which users can move each file? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.