Security 6

Your employees have all been trained on end-user best practices, including locking their laptop when they walk away from it. What can be done to ensure that each employee's laptop and its data will remain with the company and not fall into someone else's hands? (Choose two.)

• Use a cable lock to secure the laptop to the desk.

• Use MDM software to wipe the laptop remotely if stolen.

• Place the laptop in a desk drawer when the employee walks away.

• Ask a stranger to watch the laptop when they use the restroom at a coffee shop.

You're setting up authentication for new users of Windows 10 and Windows 11 machines. Which of the following Windows logon methods requires specific hardware? (Choose two.)

• Username and password

• PIN

• Fingerprint

• Facial recognition

You're setting up new users on your network and have let them know that they will need to change their user password the first time they log in and that it must meet complexity requirements. Which of the following is not true about password best practices?

• Password minimum length is eight characters.

• Longer passwords are better.

• At least one of each of these should be used: upper- and lowercase letters, numbers, and special characters.

• Passwords that are four characters long are okay if they are complex.

You've just hired a new employee who will be working at a Windows workstation on your network. You're helping the user understand what their password should be like. Which of the following are best practices for passwords? (Choose two.)

• Enforce password complexity.

• Passwords should be easy to guess in case you forget, like your dog's name.

• Passwords expire after 45 days.

• Passwords expire after 180 days.

Your company has a Windows domain managed by a domain controller. Following best practices, what feature of the domain controller is used to apply permissions to users?

• Active Directory

• User accounts

• Security groups

• Home folders

You're configuring password requirements such as length and expiration for several Windows 11 Pro workstations. What utility can you use on the workstation to configure the password requirements?

• Users Accounts in Control Panel

• Local Users and Groups

• Administrative Tools

• Local Security Policy

A user of a computer that you administer on your Active Directory domain has forgotten their logon password. What can be done to get them back into the system?

• Reset the password on the local computer.

• Reset the password on the domain controller.

• Reinstall the OS and re-create their user.

• Make them a new account with a new username.

A computer user is setting up a new Windows 11 Home computer for the first time. They called you because they can't figure out how to set it up with a local account. What will you tell them?

• That option is not available. They must use a Microsoft account.

• Press F10 during bootup to create a local account.

• They must switch to the Pro edition if they want to use a local account after setup.

• Local accounts are never available in Windows 11.

When using a Microsoft account to log in to your Windows 11 computer, which of the following is not true?

• Your username is your email.

• There are more recovery options if you use a Microsoft account rather than a local account to access your computer.

• You won't be able to use your computer if your Internet access is down.

• You can access information stored on OneDrive from another computer if you log in with your Microsoft account.

Your friend wants to change the password for another user who is unable to log into the PC because they forgot their password. When they try to access User Accounts in Control Panel, they are unable to access it. What will you tell them?

• They need administrator access to change or create another user's account, and they are only a standard user.

• They can change it in Local Users and Groups.

• They need to use the command-line utility to change the user's password.

• They can't change the password but they can add a new username for the password and make that user an administrator so that they can access their data.