Hotspot Question
You plan to deploy three encrypted virtual machines that use Secure Boot. The virtual machines
will be configured as shown in the following table.

How should you protect each virtual machine? To answer, select the appropriate options in the
answer area.

Hotspot Question
Note: This question is part of a series of questions that use the same scenario. For your
convenience, the scenario is repeated in each question. Each question presents a different
goal and answer choices, but the text of the scenario is exactly the same in each question
in this series.
Start of repeated scenario
Your network contains an Active Directory domain named contoso.com. The functional level of the
forest and the domain is Windows Server 2008 R2. The domain contains the servers configured as
shown in the following table.

All servers run Windows Server 2016. All client computers run Windows 10. You have an
organizational unit (OU) named Marketing that contains the computers in the marketing department.
You have an OU named Finance that contains the computers in the finance department. You have
an OU named AppServers that contains application servers. A Group Policy object (GPO) named
GP1 is linked to the Marketing OU. A GPO named GP2 is linked to the AppServers OU. You install
Windows Defender on Nano1.
End of repeated scenario
You need to ensure that you can implement the Local Administrator Password Solution (LAPS) (or
the finance department computers. What should you do in the contoso.com forest? To answer,
select the appropriate options in the answer area.

Hotspot Question
Your network contains an Active Directory forest named contoso.com. The forest has Microsoft
Identity Manager (MIM) 2016 deployed. You implement Privileged Access Management (PAM).
You need to request privileged access from a client computer in contoso.com by using PAM. How
should you complete the Windows PowerShell script? To answer, select the appropriate options in
the answer area.

Hotspot Question
Your network contains an Active Directory domain named adatum.com. The domain contains a file
server named Server1 that runs Windows Server 2016. You have an organizational unit (OU)
named OU1 that contains Server1. You create a Group Policy object (GPO) named GPO1 and link
GPO1 to OU1. A user named User1 is a member of group named Group1. The properties of User1
are shown in the User1 exhibit (Click the Exhibit button).

User1 has permissions to two files on Server1 configured as shown in the following table.

From Auditing Entry for Global File SACL, you configure the advanced audit policy settings in GPO1
as shown in the SACL exhibit (Click the Exhibit button).

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Hotspot Question
Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server1 that runs Windows Server 2016. The services on Server1 are shown in the
following output.

Server1 has the AppLocker rules configured as shown in the exhibit (Click the Exhibit button).

Rule1 and Rule2 are configured a$ shown in the following table.

F g lect No.

Hotspot Question
Your network contains an Active Directory domain named contoso.com. You have an
organizational unit (OU) named Secure that contains all servers. You install Microsoft Security
Compliance Manager (SCM) 4.0 on a server named Server1. You need to export the SCM Pnnt
Server Secunty baseline and to deploy the baseline to a server named Server2. What should you
do? To answer, select the appropnate options in the answer area.

Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution. After you answer a question in this section, you will NOT be able to return
to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains
multiple Hyper-V hosts. You need to deploy several critical line-to-business applications to the
network to meet the following requirements:
– The resources of the applications must be isolated (rom the physical
host.
– Each application must be prevented from accessing the resources of the
other applications.
– The configurations of the applications must be accessible only from the
operating system that hosts the application.
Solution: You deploy a separate Hyper-V container for each application.
Does this meet the goal?

Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server1. Server1 is configured as shown in the following table.

You plan to create a pilot deployment of Microsoft Advanced Threat Analytics (ATA). You need to
install the ATA Center on Server1. What should you do first?

Your network contains an Active Directory forest named conloso.com. The network is connected
to the Internet. You have 100 point-of-sale (POS) devices that run Windows 10. The devices cannot
access the Internet. You deploy Microsoft Operations Management Suite (OMS). You need to use
OMS to collect and analyze data from the POS devices. What should you do first?

Note: This question is part of a series of questions that use the same or similar answer
choices. An answer choice may be correct for more than one question in the series. Each
question is independent of the other questions in this series. Information and details
provided in a question apply only to that question.
Your network contains an Active Directory domain named contoso.com. The domain contains a file
server named Server1 that runs Windows Server 2016. You need to create Work Folders on
Server1. Which tool should you use?