- (Exam Topic 4)
Your network contains an Active Directory domain. The domain contains a computer named Computer! that runs Windows 10. Computer1 has a Trusted Platform Module (TPM) version 12.
The domain contains a domain controller named DC1 that has all the Remote Server Administration Tools (RSAT) installed.
BitLocker Drive Encryption (BitLodcer) recovery passwords are stored in Active Directory. You enable BitLocker on the operating system drive of Computer1.
A software update on Computer! disables the TPM. and BitLocker enters recovery mode. You need to recover your BitLocker password for Computer1.
What should you use to retrieve the recovery password?

1. A. Active Directory Users and Computers
2. B. repair-bde with he -f parameter
3. C. manage-bde with the -unlock parameter
4. D. Disk Management

Correct Answer: A

- (Exam Topic 4)
You have a computer named Computer1 that runs Windows 10 and contains the following files:
C:Folder1File1.bat
C:Folder1File1.exe
C:Folder1File1.cmd
A user named User1 is assigned Read & execute to all the files. Computer1 is configured as shown in the exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Solution:
References:
https://stackoverflow.com/questions/148968/windows-batch-files-bat-vs-cmd

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
Your network contains an Active Directory domain. The domain contains the computers shown in the following table.

On which computers can you perform an in-place upgrade to Windows 10 Enterprise?

1. A. Computer3 only
2. B. Computed and Computer3 only
3. C. Computed only
4. D. Compute
5. E. Computed, and Computer3

Correct Answer: D
References:
https://docs.microsoft.com/en-us/windows/deployment/upgrade/windows-10-upgrade-paths https://docs.microsoft.com/en-us/windows/deployment/upgrade/windows-10-edition-upgrades

- (Exam Topic 4)
You have an app named App1 that uses an on-premises Microsoft SQL Server database named DB1. You plan to migrate DB1 to an Azure SQL managed instance.
You need to enable customer-managed Transparent Data Encryption (TDE) for the instance. The solution must maximize encryption strength.
Which type of encryption algorithm and key length should you use for the TDE protector?

1. A. RSA2048
2. B. RSA4096
3. C. RSA3072
4. D. AES256

Correct Answer: D

- (Exam Topic 2)
You need to meet the technical requirements for EFS on ComputerA. What should you do?

1. A. Run certutil.exe, and then add a certificate to the local computer certificate store.
2. B. Run cipher.exe, and then add a certificate to the local computer certificate store.
3. C. Run cipher.exe, and then add a certificate to the local Group Policy.
4. D. Run certutil.exe, and then add a certificate to the local Group Policy.

Correct Answer: D
References:
https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/crea