- (Exam Topic 4)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has an on-premises network that contains an Active Directory domain. The domain is synced to Microsoft Azure Active Directory (Azure AD). All computers in the domain run Windows 10 Enterprise.
You are logged on as the local administrator on a Computer named Computer1.
A user named Mia Hamm has a computer named Computer2. Mia Hamm reports that she is experiencing problems with Computer2.
You want to use Event Viewer on Computer1 to view the event logs on Computer2. What should you do?

1. A. On Computed, run the Connect-WSMan -CompucerName "Computerl" cmdlet.
2. B. On Computer
3. C. run the Get-Eventlog -List -ComputerName "Computerl" cmdlet.
4. D. On Computer
5. E. log on as a domain administrator, then open Event Viewer and select the Connect to another computer... option.
6. F. On Computer
7. G. open the Windows Defender Firewall and enable the Remote Event Log Management inbound rule

Correct Answer: C
You are logged on as a local administrator. You need the required permissions to access Event Viewer logs on all remote Windows computers.
Reference:
https://docs.microsoft.com/en-us/windows/win32/winrm/about-windows-remote-management

- (Exam Topic 4)
You have a computer named Computer1 that runs Windows 10 and has an application named App1. You need to use Performance Monitor to collect data about the processor utilization of App1. Which performance object should you monitor?

1. A. Process
2. B. Processor Performance
3. C. Processor Information
4. D. Processor

Correct Answer: A
References:
https://www.cse.wustl.edu/~jain/cse567-06/ftp/os_monitors/index.html

- (Exam Topic 4)
Your network contains an Active Directory domain named adatum.com. The domain contains two computers named Computer1 and Computer2 that run Windows 10.
The domain contains the user accounts shown in the following table.

Computer2 contains the local groups shown in the following table.

The relevant user rights assignments for Computer2 are shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Solution:
Box 1: Yes
User1 is an administrator and has the Allow log on through Remote Desktop Services. Box 2: No
User2 is a member of Group2 which has the Deny log on through Remote Desktop Services. Box 3: Yes
User3 is a member of the administrators group and has the Allow log on through Remote Desktop Services.
Note: Deny permissions take precedence over Allow permissions. If a user belongs to two groups, and one of them has a specific permission set to Deny, that user is not able to perform tasks that require that permission even if they belong to a group that has that permission set to Allow.
References:
https://docs.microsoft.com/en-us/azure/devops/organizations/security/about-permissions?view=azure-devops&ta

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
Your network contains an Active Directory domain that is synced to a Microsoft Azure Active Directory (Azure AD) tenant. All users have been issued with laptop computers as well as desktop computers that run Windows 10 Enterprise. All users have Microsoft 365 E3 licenses.
A user named Mia Hamm informs you that she must perform a BitLocker recovery on her laptop but she does not have her BitLocker recovery key.
You need to ensure that Mia Hamm can perform a BitLocker recovery on her laptop. What should you do?

1. A. Instruct Mia Hamm to log on to her desktop computer and run the repair-bde.exe command.
2. B. Instruct Mia Hamm to use the BitLocker Recovery Password Viewer to view the computer object of the laptop.
3. C. Instruct Mia Hamm to log on to her desktop computer and go to https://account.activedirectory.windowsazure.com and view the user account profile.
4. D. Instruct Mia Hamm to run the Enable-BitLocker cmdlet on her laptop.

Correct Answer: C
The BitLocker recovery key is stored in Azure Active Directory. Reference:
https://celedonpartners.com/blog/storing-recovering-bitlocker-keys-azure-active-directory/

- (Exam Topic 4)
You have computers that run Windows 10 Enterprise as shown in the following table.

Both computers have applications installed and contain user data.
You plan to configure both computers to run Windows 10 Enterprise LTSC 2019 and to retain all the existing applications and data.
You need to recommend a method to deploy Windows 10 Enterprise LTSC 2019 to the computers. The solution must minimize effort to install and configure the applications.
What should you include in the recommendation for each computer? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Solution:
Graphical user interface, text, application, chat or text message Description automatically generated
References:
https://docs.microsoft.com/en-us/windows/deployment/upgrade/windows-10-upgrade-paths

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A