You manage an Active Directory Domain Services (AD DS) domain that has 500 devices. All devices run
Windows 7 Enterprise Edition. You deploy System Center 2012 R2 Configuration Manager SP1.
You plan to upgrade all devices to Windows 10 Enterprise and encrypt the devices by using Microsoft BitLocker
Administration and Monitoring (MBAM), Data secured with BitLocker must not be stored on USB devices.
You need to ensure that existing devices are ready for the upgrade.
What should you do?

DRAG DROP
Your organization needs to implement a Dynamic Access Control (DAC) plan that includes user and device
claims.
The domain controllers have not been enabled to provide claims and compound authentication.
You need to configure the Default Domain Controller’s Group Policy Object to provide claims and compound
authentication.
You decide to first enable the domain controllers to provide claims and compound authentication on request.
In which order should you perform the actions? To answer, move all actions from the list of actions to the
answer area and arrange them in the correct order.
Select and Place:

A company has an Active Directory Domain Services (AD DS) domain named global.fabrikam.com, and an onpremises Microsoft Exchange Server 2010 server. The company has an Office 365 E3 subscription. You have
not assigned any licenses to users. You deploy Enterprise Mobility Suite (EMS). All client devices run Windows
7 and Office 2010.
You must protect emails that contain sensitive information from unauthorized access.
You need to ensure that users can easily protect sensitive emails as messages are sent.
Which three actions should you perform? Each correct answer presents part of the solution.

A company deploys Office 365 in a federated identity model. The environment has two Active Directory Domain
Services (AD DS) servers and two Web Application Proxy servers that are not joined to the domain.
All externally published applications that use Windows Authentication and are hosted on-premises must use
Active Directory Federation Services (AD FS) to log on.
You need deploy pre-authentication on the Web Application Proxy (WAP) servers.
What should you do first?

DRAG DROP
Your organization is deploying new Windows 10 devices. You create a new organizational unit that contains all
Windows 10 devices.
You are preparing a new security policy for Windows 10 devices. Your organization requires audits on the use
of removable storage devices on personal devices.
You need to enable audits of removable storage.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of
actions to the answer area and arrange them in the correct order.
Select and Place:

A company has tablet devices that run Windows 10. You configure auditing for devices.
You need to determine which audit policies are configured on the devices.
What should you do?

A company implements offline files for all Windows 10 devices.
A user reports that they are running low on free disk space.
You need to determine the amount of disk space being used by offline files on the user’s device.
What should you do?

HOTSPOT
You upgrade 15 client devices to Windows 10 Enterprise.
You need to configure the devices.
Which Control Panel applets should you use? To answer, select the appropriate applet from each list in the
answer area. Each correct answer is worth one point.
Hot Area:

DRAG DROP
You manage 500 laptop devices and 250 desktop devices that run Windows 10. All devices are joined to an
Active Directory Domain Services (AD DS) domain. You also manage a Windows Server 2012 R2 file server
named FILE01.
All user document folders must be located on FILE01.
You need to ensure that the mobile users can access documents offline.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of
actions to the answer area and arrange them in the correct order.
Select and Place:

DRAG DROP
A company plans to upgrade all devices from Windows 7 to Windows 10. All Windows 10 devices belong to an
organizational unit (OU) named Desktops. All devices for users in the sales department are enrolled in Azure
Active Directory (AD). All users belong to an OU named Employees.
Users in the finance department must not be able to modify the power policy settings.
You need to apply the power policy.
What should you do? To answer, drag the appropriate option to the correct item. Each option may be used
once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Select and Place: