DRAG DROP
You have a computer that runs Windows 10 Enterprise that contains the following folders. Each folder has its
own access list and does not inherit permissions from the parent folder.

You have a local user named User1. User1 has read and execute permission to Folder1.
You need to ensure that User1 can perform the following tasks:
Set the permissions on files in Folder2.
Create new files in Folder5.
Edit all files in Folder3.
The solution must use the principle of least privilege.
Which permissions should you assign to User1 on each folder? To answer, drag the appropriate permissions to
the correct folders. Each permission may be used once, more than once, or not at all. You may need to drag
the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

A company has Windows 10 Enterprise client computers. All user data is stored locally. Each data file has a
system access control list (SACL).
You need to ensure that an event is generated when a user modifies a local file.
Which audit policy setting should you configure?

HOTSPOT
You are a consultant at a small company. The company’s employees use Windows 10 Enterprise computers.
An employee wants to share his printer with only selected users.
You need to enable the correct settings.
Which two tab settings should you modify? To answer, select the appropriate tab settings in the answer area.Hot Area:

A company has Windows 10 Enterprise client computers. The company uses Windows BitLocker Drive
Encryption with the data-only option on all client computers.
You delete a file containing highly confidential information from your computer.
You need to clear the free space on the hard drive to minimize the chance of the confidential information being
recovered.
Which command should you run on the client computer?

You configure VPN auto trigger for five Windows 10 Enterprise computers. When you test the computers, they
trigger the VPN all the time, even in the office.
You need to configure VPN auto trigger to function only when VPN is required.
Which command should you use?

You support Windows 10 Enterprise desktop computers and tablets that are members of an Active Directory
domain. The domain includes Active Directory Certificate Services. All users use virtual smart cards to log on to
their computers.
A domain user wants to log on to both his desktop computer and his tablet computer by using the same domain
user account.
You need to configure the desktop and tablet computers to support two-factor authentication for the same
domain user account.
What should you do?

You are a systems administrator for your company. The company has employees who work remotely by using a
virtual private network (VPN) connection from their computers, which run Windows 10 Enterprise.
These employees use an application to access the company intranet database servers. The company recently
decided to distribute the latest version of the application through using a public cloud.
Some users report that every time they try to download the application by using Internet Explorer, they receive a
warning message that indicates the application could harm their computer.
You need to recommend a solution that prevents this warning message from appearing, without compromising
the security protection of the computers.
What should you do?

Your network contains an Active Directory domain. The domain contains 100 computers that run Windows 10.
You plan to develop a line-of-business application and to deploy the application by using Windows Store for
Business.
You need to ensure that users can see the private store of your company when they sign in to the Windows
Store for Business.
What should you do first?

Your network contains an Active Directory domain. All client computers run Windows 10 Enterprise.
Your company uses virtual smart cards.
A user named User1 requires a virtual smart card on a new client computer named Computer1.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

You have a computer that runs Windows 10.
You need to ensure that the next time the computer restarts, the computer starts in safe mode.
What should you use?