Your network contains an Active Directory forest named conloso.com. The network is connected
to the Internet. You have 100 point-of-sale (POS) devices that run Windows 10. The devices cannot
access the Internet. You deploy Microsoft Operations Management Suite (OMS). You need to use
OMS to collect and analyze data from the POS devices. What should you do first?

Note: This question is part of a series of questions that use the same or similar answer
choices. An answer choice may be correct for more than one question in the series. Each
question is independent of the other questions in this series. Information and details
provided in a question apply only to that question.
Your network contains an Active Directory domain named contoso.com. The domain contains a file
server named Server1 that runs Windows Server 2016. You need to create Work Folders on
Server1. Which tool should you use?

Your network contains an Active Directory domain named contoso.com. You are deploying
Microsoft Advanced Threat Analytics (ATA) to the domain. You install the ATA Center on server
named Server1 and the ATA Gateway on a server named Served. You need to ensure that Server2

can collect NTLM authentication events. What should you configure?

Your network contains an Active Directory domain named contoso.com. The domain contains 100
servers. You deploy the Local Administrator Password Solution (LAPS) to the network. You deploy
a new server named FinanceServer5, and join FinanceServer5 to the domain. You need to ensure
that the passwords of the local administrators of FinanceServer5 are available to the LAPS
administrators. What should you do?

Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Serve1, that runs Windows Server 2016. A technician is testing the deployment of
Credential Guard on Server1. You need to verify whether Credential Guard is enabled on Server1.
What should you do?

Your network contains an Active Directory domain named contoso.com. The domain contains two
servers named Server1 and Server2 that run Windows Server 2016. Server1 is configured as a
domain controller. You configure Server1 as a Just Enough Administration (JEA) endpoint. You
configure the required JEA rights for a user named User1. You need to tell User1 how to manage
Active Directory objects from Server2. What should you tell User1 to do first on Server2?

Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution. After you answer a question in this section, you will NOT be able to return
to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. All servers run Windows
Server 2016. The forest contains 2,000 client computers that run Windows 10. All client computers
are deployed from a customized Windows image. You need to deploy 10 Pnvileged Access
Workstations (PAWs). The solution must ensure that administrators can access several client
applications used by all users.
Solution: You deploy 10 physical computers and configure them as PAWs. You deploy 10 additional
computers and configure them by using the customized Windows image.

Does this meet the goal?

Your network contains an Active Directory domain named contoso.com. The domain contains five
servers. All servers run Windows Server 2016. A new secunty policy states that you must modify
the infrastructure to meet the following requirements:
– Limit the nghts of administrators.
– Minimize the attack surface of the forest.
Support Multi-Factor authentication for administrators.
You need to recommend a solution that meets the new secunty policy requirements. What should
you recommend deploying?

Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution. After you answer a question in this section, you will NOT be able to return
to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a
computer named Computer1 that runs Windows 10. Computer1 connects to a home network and
a corporate network. The corporate network uses the 172.16.0.0/24 address space internally.
Computerl runs an application named App1 that listens to port 8080. You need to prevent
connections to App1 when Computer1 is connected to the home network.
Solution: From Windows Firewall in the Control Panel, you add an application and allow the
application to communicate through the firewall on a Private network.
Does this meet the goal?

Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server5 that has the Windows Server Update Services server role installed. You
need to configure Windows Server Update Services (WSUS) on Server5 to use SSI. You install a
certificate in the local Computer store. Which two tools should you use? Each correct answer
presents part of the solution.