Question 1

Tobias, a system administrator at a pharmaceutical company, uses BitLocker Drive Encryption to encrypt all Windows 10 computers in the organization. Because the computers contain sensitive information, users must enter a PIN to start the system. While this is a useful security feature when the computers are disconnected from the organization's network, this becomes a hindrance in performing remote maintenance because Tobias cannot start these computers without entering the PIN.
Which of the following tools can Tobias use to overcome this issue?

Accepted Answer

A)  BitLocker Network Unlock 
B)  BitLocker To Go 
C)  Trusted Platform Module (TPM) 
D)  Windows Defender Smartscreen

Question 2

Sharon recently lost an encryption certificate that rendered some of her EFS-encrypted files unrecoverable. To prevent a similar situation from arising in the future, she wants to create a recovery certificate for recently encrypted files. She creates the recovery certificate.
What should Sharon do next?

Accepted Answer

A)  Run cipher with the /r:filename option, where filename is the name of the recovery certificate 
B)  Use the public key of the recovery certificate to encrypt the symmetric key 
C)  Run cipher with the /u option to update the existing encrypted files 
D)  Import the recovery certificate into the local security policy as a data recovery agent

Question 3

Winona has set up AppLocker rules to protect computers on the company network from being infected by malware. Despite this, one of the computers is infected by malware. She identifies that the malware infected the computer when a user ran a malicious .exe file.
Which of the following prevented the AppLocker rules from being evaluated?

Accepted Answer

A)  The Executable rules are enforced and not audited. 
B)  The Application Identity service is configured for Manual startup. 
C)  The Windows Installer rules are not configured. 
D)  A Path rule does not allow software to run from C:\Program Files\.

Question 4

Which of the following is true of BitLocker Drive Encryption?

Accepted Answer

A)  It uses asymmetric encryption to secure data. 
B)  EFS and BitLocker Drive Encryption use the same method to secure the encryption key. 
C)  To use BitLocker Drive Encryption, a hard drive cannot be divided into partitions. 
D)  When you use BitLocker Drive Encryption, an entire volume is encrypted.

Question 5

Alex, a system administrator, wants to uninstall a Windows update that was recently installed on around 200 Windows 10 computers in the organization.
Which of the following options is best suited to this scenario?

Accepted Answer

A)  Using Windows Server Update Services 
B)  Using a batch script with wusa.exe 
C)  Using the Get-HotFix cmdlet on command prompt 
D)  Using the graphical interface

Question 6

Diego has the Windows 10 Home edition installed on his personal laptop. As an avid gamer, he prefers having his computer update with the latest feature updates from Microsoft. He usually plays games at specific times, and he wants to prevent his computer from restarting to install an update during these time slots.
Which of the following Windows Update settings should Diego modify?

Accepted Answer

A)  View update history 
B)  Pause updates for 7 days 
C)  Change active hours 
D)  Download updates over metered connections

Question 7

Esmeralda creates a rule with the Deny permission for photo.exe in the Executable Rules collection for a group with all users.
Which of the following is true in this scenario?

Accepted Answer

A)  This rule is not enabled by default due to negative performance impact. 
B)  This rule can also be applied to multiple users or groups. 
C)  Users will not be able to run other applications that do not have an Allow rule. 
D)  Users who have the Allow permission for photo.exe will be able to run the executable.

Question 8

Mahima is configuring advanced audit policies for Windows 10 clients. She decides to configure the Privilege Use category.
Which of the following justifies Mahima's decision to configure the settings under this category?

Accepted Answer

A)  Mahima wants to track when system events occur, such as restarting the system. 
B)  Mahima wants to track instances where users change the time zone on their systems. 
C)  Mahima wants to change the categories of privilege use that are audited by default. 
D)  Mahima wants to disable auditing for success and failure events for log off and account lockout.

Question 9

Percy is configuring Advanced Audit Policy settings for Windows 10 clients in his organization.
Which of the following event categories is Percy least likely to configure for these systems?

Accepted Answer

A)  Account Logon 
B)  Logon/Logoff 
C)  DS Access 
D)  Privilege Use

Question 10

What type of encryption algorithm uses two related, but unique, keys to encrypt and decrypt data?

Accepted Answer

A)  Symmetric 
B)  Asymmetric 
C)  Hashing 
D)  Signing

Question 11

Orson is trying to open an encrypted file on his Windows 10 system. The file was encrypted using EFS, and he opened this as recently as last week.
Which of the following is most likely the reason that Orson is unable to open the file?

Accepted Answer

A)  Orson moved the file from its original folder to a different folder. 
B)  Orson reset the password of his Windows user account. 
C)  Orson failed to back up the EFS certificate on a smart card. 
D)  Orson created a duplicate copy of the file on another partition.

Exam 6: Windows 10 Security Features

Which of the following is true of BitLocker Drive Encryption?

Alex, a system administrator, wants to uninstall a Windows update that was recently installed on around 200 Windows 10 computers in the organization. Which of the following options is best suited to this scenario?

Esmeralda creates a rule with the Deny permission for photo.exe in the Executable Rules collection for a group with all users. Which of the following is true in this scenario?

Mahima is configuring advanced audit policies for Windows 10 clients. She decides to configure the Privilege Use category. Which of the following justifies Mahima's decision to configure the settings under this category?

Percy is configuring Advanced Audit Policy settings for Windows 10 clients in his organization. Which of the following event categories is Percy least likely to configure for these systems?

What type of encryption algorithm uses two related, but unique, keys to encrypt and decrypt data?

Orson is trying to open an encrypted file on his Windows 10 system. The file was encrypted using EFS, and he opened this as recently as last week. Which of the following is most likely the reason that Orson is unable to open the file?