NEW QUESTION 1
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
A company has a forest trust with a partner organization. Users from both organizations log on to devices that run Windows 8.1.
You plan to replace the devices with devices running Windows 10.
You need to migrate user profiles from both forests using the least amount of administrative effort.
Solution: You migrate each profile individually by using the User State Migration Tool (USMT).
Does the solution meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 2
HOTSPOT
You administer Windows 10 Enterprise computers in your company network, including a computer named Client1.
On Client1, you create a new folder named C:Folder1 and configure its NTFS permissions.
You need to ensure that only members of a group named Managers can access the folder content.
In the Advanced Security Settings for Folder1 pane, which security setting should you configure first? To answer, select the appropriate setting in the answer area.

Answer:

Explanation:

NEW QUESTION 3
DRAG DROP
You administer Windows 10 Enterprise tablets and virtual desktop computers that are joined to an Active Directory domain.
Your company provides virtual desktop computers to all users. Employees in the sales department also use tablets, sometimes connected to the company network and sometimes disconnected from the company network.
You want sales department employees to have the same personal data, whether they are using their virtual desktop or their tablets.
You need to configure the network environment to meet the requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the lust of actions to the answer area and arrange them in the correct order. More than one order to answer choices may be correct. You will receive credit for any of the correct orders you select.

Answer:

Explanation: Create a network share.
Configure offline files for the tablets.
Configure folder redirection for the employees’ domain accounts to the network share.
References: https://technet.microsoft.com/en-us/library/cc732275(v=ws.11).aspx

NEW QUESTION 4
DRAG DROP
A local printer named PRINTER1 is shared from a client computer named COMPUTER1 that run a 32-bit version of Windows 10. A workgroup contains client computers that run a 64-bit version of Windows 10.
Computers in the workgroup can't currently print to PRINTER1.
You need to ensure that the workgroup computers can print to PRINTER1.
Which three actions should you perform in sequence? To answer, move the appropriate actions to the answer area and arrange them in the correct order.

Answer:

Explanation: You can very well add a 64-bit printer driver to a local printer on a 32-bit Windows operating system.
After the 64-bit driver has been added connect the 64-bit Windows 10 computers to the printer.

NEW QUESTION 5
You support Windows 10 Enterprise desktop computers and tablets that are members of an Active Directory domain. The domain includes Active Directory Certificate Services. All users use virtual smart cards to log on to their computers.
A domain user wants to log on to both his desktop computer and his tablet computer by using the same domain user account.
You need to configure the desktop and tablet computers to support two-factor authentication for the same
domain user account. What should you do?

• A. Enroll the user for two separate certificates based on the Smartcard Logon templat
• B. Install one certificate in a virtual smart card on each of the user’s computers/
• C. After the user has logged on to one computer, disable the Trusted Platform Module (TPM) on the secondcompute
• D. Run the tpmvscmgr.exe utility on each of the computers.
• E. Issue a temporary physical smart car
• F. Use this smart card for an initial logon on each computer, thendisconnect the tablet from the office network and destroy the temporary smart card.
• G. Export the private key from the desktop compute
• H. Import the private key to the tablet.

Answer: A

NEW QUESTION 6
A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 10 Enterprise.
You are configuring security for a portable client computer that does not have a Trusted Platform Module (TPM) chip installed.
You need to configure local Group Policy to tum on Windows BitLocker Drive Encryption on the computer.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE Each correct selection is worth one point.

• A. Enable the Enforce drive encryption type on operating system drives policy setting.
• B. Enable the option to allow BitLocker without a compatible TPM.
• C. Enable the Require additional authentication at startup policy setting.
• D. Configure the TPM validation profile to enable Platform Configuration Register indices (PCRs) 0, 2, 4, and 11.

Answer: BC

Explanation: https://www.howtogeek.com/howto/6229/how-to-use-bitlocker-on-drives-without-tpm/

NEW QUESTION 7
You administer Windows 10 Enterprise client computers in your company network. The company has an Active Directory Domain Services (AD DS) domain. The network uses a DHCP server.
You want to assign a static dynamic host configuration protocol (DHCP) reservation for a client computer.
You need to identify the media access control (MAC) address of the client computer.
Which command should you use?

• A. ipconfig /allcompartments
• B. ipconfig
• C. ipconfig /flushdns
• D. ipconfig /all

Answer: D

Explanation: References:
https://docs.microsoft.com/en-us/windows-server/administration/windows- commands/ipconfig
https://ithelp.brown.edu/kb/articles/find-the-mac-address-of-a-computer-or-device

NEW QUESTION 8
You support Windows 10 Enterprise desktop computers that are members of an Active Directory domain. Standard domain user accounts are configured with mandatory user profiles.
Several users have been transferred to a different department. You need to allow the users to modify their profiles.
What should you do?

• A. Change the extension of the NTUSER file in the user profile directory to .dat
• B. Configure Folder Redirection by using Group Policy
• C. Configure the user’s document library to include folders from network shares
• D. Remove the .man extension from the user profile name

Answer: A

Explanation: References: https://msdn.microsoft.com/en- us/library/windows/desktop/bb776895(v=vs.85).aspx

NEW QUESTION 9
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details in a question apply only to that question.
Your network contains a shared folder that is located at \server1data.
On a computer, you make the shared folder available for offline use.
You need to ensure that you have the most up-to-date version of the folder cached. Which Control Panel application should you use?

• A. Credential Manager
• B. Phone and Modem
• C. Work Folders
• D. System
• E. RemoteApp and DesktopConnections
• F. Network and Sharing Center
• G. Sync Center
• H. Power Options

Answer: C

NEW QUESTION 10
You support Windows 10 Enterprise computers. Your company protects all laptops by using the BitLocker Network Unlock feature.
Some employees work from home.
You need to ensure that employees can log on to their laptops when they work from home.
What should you do?

• A. Have users run the Manage–bde.exe –unlock command before they disconnect from the company network.
• B. Ensure that the Trusted Platform Module (TPM) chips in the laptops are version 1.2 or greater.
• C. Enable BitLocker to Go.
• D. Provide employees with their BitLocker PINs.

Answer: D

NEW QUESTION 11
You purchase a new Windows 10 Enterprise desktop computer. You have six external USB hard drives.
You want to create a single volume by using the six USB drives. You want the volume to be expandable, portable, and resilient in the event of simultaneous failure of two USB hard drives.
You need to create the required volume. What should you do?

• A. From Control Panel, create a new Storage Space across 6 USB hard drive
• B. Set resiliency type to Parity.
• C. From Disk Management, create a new striped volume.
• D. From Disk Management, create a new spanned volume.
• E. From Control Panel, create a new Storage Space across 6 USB hard drive
• F. Set resiliency type to Three-way mirror.

Answer: D

NEW QUESTION 12
You administer Windows 10 Enterprise client computers in your company network.
You need to configure a backup and recovery solution that meets the following requirements:
Recovers the system if it doesn’t start.
Recovers the system if the hard drive fails.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A. Create a system repair disk.
• B. Create a storage space.
• C. Turn on File History.
• D. Configure system protection.
• E. Create a system image backup.

Answer: AE

NEW QUESTION 13
A company is setting up a new branch office. You deploy 10 new Windows 10 Enterprise 64-bit client computers in the branch office.
The computers cannot connect to the Internet. You run the ipconfig command on one computer. The following output depicts a portion of the results.

You need to ensure that the computers can connect to the Internet. What should you do?

• A. Deploy a Windows Internet Name Service (WINS) serve
• B. Configure all computers to use WINS
• C. Deploy a Domain Name System (DNS) serve
• D. Configure all computers to use DNS
• E. Deploy an Internet Information Services (IIS) serve
• F. Configure all computers to use IIS
• G. Deploy a Dynamic Host Configuration Protocol (DHCP) serve
• H. Configure all computers to use DHCP

Answer: D

Explanation: References: https://docs.microsoft.com/en-us/windows-server/networking/technologies/dhcp/dhcp-deploy-wps

NEW QUESTION 14
You administer a corporate network. Employees use docking stations for Windows 10 devices when the employees are working in their offices.
The wireless adapters of the devices are connected to a specific network. The docking stations are connected to a separate network that uses twisted pair cabling.
You need to ensure that the devices can access all resources from each network using either network adapter.
What should you do?

• A. Configure a network bridge.
• B. Configure Internet Connection Sharing (ICS).
• C. Configure VPN Reconnect.
• D. Turn on Network Discovery.

Answer: C

NEW QUESTION 15
You have a Remote Desktop Session Host (RD Session Host) server. The server is accessible from the internal network.
To access the server remotely, you must connect to a Remote Desktop Gateway (RD Gateway) server.
On a laptop, you successfully configure a Remote Desktop connection that you use to access the RD Session Host server from the internal network.
From your home, you attempt to connect to the RD Session Host server by using the Remote Desktop connection, but the connection fails.
You need to connect to the RD Session Host server. What should you configure on the laptop?

• A. the Remote Assistance settings in System Properties.
• B. the Connect from anywhere settings in Remote Desktop Connection.
• C. the Performance settings in Remote Desktop Connection.
• D. the Remote Desktop settings in System Properties.

Answer: B

Explanation: References: https://technet.microsoft.com/en-us/library/cc770601(v=ws.11).aspx

NEW QUESTION 16
HOTSPOT
You have a folder that you plan to share.
You need to configure security for the shared folder to meet the following requirements:
Members of a security group named Group1 must be able to modify permissions of files and folders.
Members of a security group named Group2 must be able to read files and folders only.
Members of a security group named Group3 must be able to take ownership of files. Which permission should you assign to each group? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 17
Group Policy is a set of rules which control the working environment of user accounts and computer accounts. Group Policy provides the centralized management and configuration of operating systems, applications and users’ settings in an Active Directory environment.
In other words, Group Policy in part controls what users can and can’t do on a computer system.
Which one of these policies requires a reboot?

• A. Turn off Windows Defender
• B. Turn off Autoplay for non-volume devices
• C. Disable Active Desktop
• D. Turn off Data Execution Prevention for Explorer

Answer: D

Explanation: A reboot is REQUIRED when turning off Data Execution Prevention (DEP) for Explorer.