MCA Modern Desktop Administrator Practice Tests. Crystal Panek

the Hardware icon in Control Panel.Set the BitLocker Drive Encryption using a Local Group Policy.Set the BitLocker Drive Encryption using the System icon in Control Panel.

      19 You are the administrator for your company network. You have a computer that is configured to dual boot with 64-bit Windows 10 Enterprise installed on the local disk and 64-bit Windows 10 Professional installed in a VHDX file named Disk1.vhdx. You start the computer in Windows 10 Enterprise. What utility should you use if you want to install an unsigned driver to Windows 10 Professional when the computer starts in Windows 10 Professional?Add-Windows Imagebcdboot.exebootcfg.exebcdedit.exe

      20 You are the administrator for your company network. Management has tasked you to create and implement a new security policy. You have configured password policies so that the employees must change their passwords every 30 days. You want to prevent them from reusing passwords that they have recently used. Which password policy should you implement?You should implement Enforce Password History.You should implement Passwords Must Be Advanced.You should implement Passwords Must Be Unique.You should implement Passwords Must Meet Complexity Requirements.

      21 You are the administrator for your company network. You and a colleague are discussing rules that use IPsec to secure traffic while it crosses the network. These rules can be used to specify the connections between two computers that must be authenticated or encrypted. What is the name for the rules being discussed?Connection security rulesDHCP rulesFirewall rulesTCP rules

      22 You are the administrator for your company network. You have several Windows 10 computers that are part of a workgroup. You want to prevent the employees from using Microsoft Store apps on their computers. How should you achieve this task?Configure the Security Options from Security Settings in the Local Group Policy.Configure the Software Restriction Policies from Security Settings in the Local Group Policy.Configure the Store settings from Administrative Templates in the Local Group Policy.Configure the Store Restriction Policies from Security Settings in the Local Group Policy.

      23 You are the administrator for your company network. You have been tasked to implement a form of two-factor authentication. What should you implement to meet this request?Implement and install fingerprint scanners.Implement and install retina scanners. Implement passwords and usernames.Implement smart cards.

      24 You are the administrator for your company network. You have about 25 Windows 10 computers. You have configured the computers to forward all events to a computer named Computer1. When you log into Computer1, you do not see any of the security events from the other computers. What should you do to ensure that the security events are forwarded to Computer1?Add the account of Computer1 to the Event Log Readers group on Computer1.Add the Network Service account to the Event Log Readers group on each computer.Run wecutil ac /q on each computer.Run winrm qc -q on each computer.

      25 You are the administrator for your company network. You have several Windows 10 Enterprise desktop computers that are members of an Active Directory domain. The standard domain user accounts are configured with mandatory user profiles. What should you do if you have several users who have been transferred into a different department and you need to modify their profiles?Change the extension of the NTuser.man file in the user profile directory to NTuser.dat.Configure the user's document library to include folders from network shares.Remove the .man extension from the user profile name.Use Group Policy to configure Folder Redirection.

      26 You are the administrator for your company network. You have an Active Directory Domain Services (AD DS) domain with Windows 10 Enterprise client computers. You have several laptop computers that you want to configure so that after 20 minutes of running on battery power, they will go to sleep. What actions should you perform to complete this task? (Choose two.)Configure the Power Management settings by creating a Group Policy object (GPO).Configure the Sleep Management settings by creating a Group Policy object (GPO).Configure the Power Management settings by editing the local Group Policy.Configure the Shut Down options by editing the local Group Policy.Link the Group Policy object (GPO) to the organizational unit (OU) that contains the laptop computers.

      27 You are the administrator for your company network. You have an Active Directory domain that contains Windows 10 Enterprise client computers. Employees sometimes will use USB drives to store sensitive files that are stored on several computers. However, the corporate security policy states that all removable storage drives must be encrypted, and this includes the USB drives. What should you do if you need to ensure that if an employee forgets their passwords for their encrypted BitLocker to Go USB device, that the employee can resolve the situation themselves?Create a USB startup key for each computer.Implement the BitLocker Network Unlock feature. Instruct the user to open BitLocker Drive Encryption, select Back Up Recovery Key, and then select Save To A File.Instruct the user to run manage-bde -forcerecovery from an elevated command prompt.

      28 You are the administrator for your company network. The network consists of an Active Directory domain that has a Windows 10 computer named Computer1. What command should you run if you want to view the settings of the Group Policy objects (GPOs) in the domain and the local Group Policies that are applied to Computer1?You should run the gpfixup command.You should run the gpresult command.You should run the gpupdate command.You should run the secedit command.

      29 You are the administrator for your company network. Your network contains an Active Directory domain and Windows 10 computers. To which group would you add a user if you wanted them to be able to create and modify the shares remotely on the computers?You would add the user to the Administrators group.You would add the user to the Network Configuration Operators group.You would add the user to the Power Users group.You would add the user to the Remote Management Users group.

      30 You are the administrator for your company network. The company uses an application that confirms a network connection to a server by sending a ping request to the IPv6 address of the server. If the server replies, then the application loads. An employee contacts you that they cannot open the application. You go to the user's computer and send a ping request to the server. The request fails. You go back to your computer and send a ping request, and the server replies. You need to make sure that the ping request from the user's computer works when contacting the server. What Microsoft Defender Firewall rule could be the possible cause of the problem?File and Printer Sharing (Echo Request ICMPv6-In)File and Printer Sharing (Echo request ICMPv6-Out)File and Printer Sharing (NB-Datagram-In)File and Printer Sharing (NB-Datagram-Out)

      31 You are the administrator for your company network. You have a Windows 10 computer that is part of a workgroup. You run the following commands on the computer:New-LocalUser -Name NewUser -NoPassword Add-LocalGroupMember User -Member NewUserWhat does this do to the computer configuration?NewUser appears on the sign-in screen and can log in without a password.NewUser appears on the sign-in screen but must set a new password on the first login attempt. NewUser is prevented from logging in until an administrator manually sets a password for the user.NewUser is prevented from logging in until the user is assigned additional user rights.

      32 You are the administrator for your company network. You have a Windows 10 computer that is joined to Azure Active Directory (Azure AD). When you try to open the Control Panel, you receive an error message that states, “This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.” What should you do if you need to be able to access the Control Panel from this computer?Check the Group policy preferences.Check the Local Group Policy.Check the PowerShell execution policy.Check the Settings app.

      33 You are the administrator for your company network. You have a Windows 10 computer that contains a folder named Folder1. You need to provide a user with the ability to modify the permissions on the folder. Keeping in mind the principle of least privilege, what NTFS permissions should you assign the user?Assign the Full Control permission.Assign the Modify permission.Assign the Read & Execute permission.Assign the Write permission.

      34 You are the administrator for your company network. You have an Azure Active Directory (Azure AD) tenant that contains a user named [email protected]. You have a Windows 10 computer named Computer1. You join this computer to the Azure AD and enable Remote Desktop. By using Remote Desktop, [email protected] tries to connect to Computer1 and receives