Crystal Panek - MCA Modern Desktop Administrator Practice Tests

26 You are the administrator for your company network. You have an Active Directory Domain Services (AD DS) domain with Windows 10 Enterprise client computers. You have several laptop computers that you want to configure so that after 20 minutes of running on battery power, they will go to sleep. What actions should you perform to complete this task? (Choose two.)Configure the Power Management settings by creating a Group Policy object (GPO).Configure the Sleep Management settings by creating a Group Policy object (GPO).Configure the Power Management settings by editing the local Group Policy.Configure the Shut Down options by editing the local Group Policy.Link the Group Policy object (GPO) to the organizational unit (OU) that contains the laptop computers.

27 You are the administrator for your company network. You have an Active Directory domain that contains Windows 10 Enterprise client computers. Employees sometimes will use USB drives to store sensitive files that are stored on several computers. However, the corporate security policy states that all removable storage drives must be encrypted, and this includes the USB drives. What should you do if you need to ensure that if an employee forgets their passwords for their encrypted BitLocker to Go USB device, that the employee can resolve the situation themselves?Create a USB startup key for each computer.Implement the BitLocker Network Unlock feature. Instruct the user to open BitLocker Drive Encryption, select Back Up Recovery Key, and then select Save To A File.Instruct the user to run manage-bde -forcerecovery from an elevated command prompt.

28 You are the administrator for your company network. The network consists of an Active Directory domain that has a Windows 10 computer named Computer1. What command should you run if you want to view the settings of the Group Policy objects (GPOs) in the domain and the local Group Policies that are applied to Computer1?You should run the gpfixup command.You should run the gpresult command.You should run the gpupdate command.You should run the secedit command.

29 You are the administrator for your company network. Your network contains an Active Directory domain and Windows 10 computers. To which group would you add a user if you wanted them to be able to create and modify the shares remotely on the computers?You would add the user to the Administrators group.You would add the user to the Network Configuration Operators group.You would add the user to the Power Users group.You would add the user to the Remote Management Users group.

30 You are the administrator for your company network. The company uses an application that confirms a network connection to a server by sending a ping request to the IPv6 address of the server. If the server replies, then the application loads. An employee contacts you that they cannot open the application. You go to the user's computer and send a ping request to the server. The request fails. You go back to your computer and send a ping request, and the server replies. You need to make sure that the ping request from the user's computer works when contacting the server. What Microsoft Defender Firewall rule could be the possible cause of the problem?File and Printer Sharing (Echo Request ICMPv6-In)File and Printer Sharing (Echo request ICMPv6-Out)File and Printer Sharing (NB-Datagram-In)File and Printer Sharing (NB-Datagram-Out)

31 You are the administrator for your company network. You have a Windows 10 computer that is part of a workgroup. You run the following commands on the computer:New-LocalUser -Name NewUser -NoPassword Add-LocalGroupMember User -Member NewUserWhat does this do to the computer configuration?NewUser appears on the sign-in screen and can log in without a password.NewUser appears on the sign-in screen but must set a new password on the first login attempt. NewUser is prevented from logging in until an administrator manually sets a password for the user.NewUser is prevented from logging in until the user is assigned additional user rights.

32 You are the administrator for your company network. You have a Windows 10 computer that is joined to Azure Active Directory (Azure AD). When you try to open the Control Panel, you receive an error message that states, “This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.” What should you do if you need to be able to access the Control Panel from this computer?Check the Group policy preferences.Check the Local Group Policy.Check the PowerShell execution policy.Check the Settings app.

33 You are the administrator for your company network. You have a Windows 10 computer that contains a folder named Folder1. You need to provide a user with the ability to modify the permissions on the folder. Keeping in mind the principle of least privilege, what NTFS permissions should you assign the user?Assign the Full Control permission.Assign the Modify permission.Assign the Read & Execute permission.Assign the Write permission.

34 You are the administrator for your company network. You have an Azure Active Directory (Azure AD) tenant that contains a user named user1@mysite.com. You have a Windows 10 computer named Computer1. You join this computer to the Azure AD and enable Remote Desktop. By using Remote Desktop, user1@mysite.comtries to connect to Computer1 and receives an error message that says, “The logon attempt failed.” What should you do first to ensure that the user can connect to Computer1?Assign user1@mysite.comthe Cloud device administrator role in Azure AD.Assign user1@mysite.comthe Security administrator role in Azure AD.Create a local user and add the new user to the Remote Desktop Users group on Computer1.Modify the Allow Log On Through Remote Desktop Services user right from the local Group Policy.

35 You are the administrator for your company network. You have several Windows 10 computers that have BitLocker Drive Encryption (BitLocker) enabled. You need to update the firmware on the computers. What cmdlet should you run if you want to make sure that you are not prompted for the BitLocker recovery key when you restart the computers but you want the drives to be protected by BitLocker upon subsequent restarts?You should run Add-BitLockerKeyProtector.You should run Disable-BitLocker.You should run Unlock-BitLocker.You should run Suspend-BitLocker.

36 You are the administrator for your company network. You network contains several Windows 10 machines on which you are planning to configure some Local Group Policy objects (LGPOs). Which of the following can you not configure using LGPOs?You cannot configure administrative templates.You cannot configure Folder Redirection.You cannot configure Internet Explorer settings.You cannot configure Windows Update settings.

37 You are the administrator for your company network. You have a file that was created on a Windows 10 computer. The file is called mytext.txt. You need to change the file extension from .txt to .vbx. When you go to change the extension, you do not see the extension types. What should you do to see the extension types?Check Show Extensions For Files.Check Unhide Extensions For Files.Uncheck Hide All File Types.Uncheck Hide Extensions For Known File Types.

38 You are the administrator for your company network. Your network is made up of several Windows 10 client machines. What should you implement if you are looking to implement another form of security on these machines to prevent unauthorized users from accessing them?You should implement Windows Data Protection.You should implement Microsoft Defender Firewall.You should implement Windows Encryption Protection.You should implement Windows Secure Data Protocol.

39 You are the administrator for your company network. A new corporate security policy was issued, and you must configure the Password Must Meet Complexity Requirements policy. Since you made the change, a few users are indicating that they are having issues when changing their passwords. Given the following password options, which passwords meet the Password Must Meet Complexity Requirements policy? (Choose all that apply.)!@#$%^&*(-[]+1587365AbaBC-1ABCde!