Certification Practice - ITS 2023

You want to install Windows 10 on a laptop with a brand new SSD you buy a retail license for Windows 10. The previous disk had a Windows 8 installed. What is the easiest way to proceed?

•  

  A. Create a custom ISO disk with both Windows 8 and Windows 10.

• B. perform a clean installation of Windows 10

• c.  use PXE and a dedicated server.

• D. Install Windows 8 and perform upgrade in place .

What will be the cumulative permissions a user has for accesing a network folder using the settings shown below? (a)  

• Read
• Full Control
• Write
• Modify

Answer explanation

The user will have read permissions in both cases only. NTFS gives you the ability to control access to both network and local resources. When you use share and NTFS permissions simultaneously, the most restrictive permission always wins. As a result, even if you have the highest level of share permissions (Full Control) but onloy Read access for NTFS, the effective permissions will be read.

The folder D:/References is shared to the network as /RefFiles. Sam, a network user, is granted Full Control through NTFS permissions and Read Permissions through share permissions. Sam access the folder through the share.

What can Sam do with the files in this folder? Each correct answer presents a part of the solution.

• View file content

• Launch program files

• Delete files

• Rename files

• Change file permissions

Answer explanation

Sam has permission to lauch program files and view file content through the READ premission. This would also grant permission to view file and subfolder names. When a user accesses a folder with both NTFS and share permissions through a share, the most restrictive ofthose permissions apply, Because only the Read permission is granted through the share, the user is limited to those actions supported by the Read permissions.

Renaming fles, changeing data in files and deleting files would require the share Change permission.

What kind of account allows you to easily configure two-factor authentication (2FA) on a device that is not joined to a domain. (a)  

• Microsoft Account
• Local account
• Account via GPO
• Active Directory Account

Answer explanation

You should use a Microsoft account to configure 2FA on a single device that is not joined to a domain. Microsift supports authentication with a password, phone number, and a dedicated app. Enabling 2FA enhances the security of your account and device. When you install Wndows10, you can shoose between using a local or Microsoft online account. A local account requires a user name and password while a Microsoft acount uses an email address and a password.

Local accounts do not support 2FA. You need a Microsoft online account for this.

You perform a full backup of a Windows Server 2019 on Monday. On Tuesday and Wednesday, you back up files that have changed since Monday. What kind of backup is this, and how can you restore it on Thursday?

• An incremental backup is performed to restore the data you need to backup from Monday and Wednesday

• An incremental backup was performed to restore the data you need the backup from Monday Tuesday and Wednesday

• A differential backup was performed to restore the data you need the backup from Monday and Wednesday.

• A differential backup was performed period to restore the data, you need the backup from Monday, Tuesday and Wednesday.

Answer explanation

Answer:This is an example of a differential backup period to restore the data on Thursday, you need a full backup from Monday and the differential backup from Wednesday. A differential backup copies the files that have changed since the last full backup. This is not an example of an incremental backup. An incremental backup copies files that have been changed or created since the previous backup of any kind. A differential backup offers shorter restore times but it grows bigger in size compared to an incremental backup.

What should you include in an incident management policy for mobile devices? Chose 2

• How to configure a wireless network

• How to access a mapped drive

• What to do if a suspicious app is installed and

• How to react to a stolen or lost mobile device

• How to access a shared drive from a mobile device

Answer explanation

An incident management system for mobile devices should include detailed instructions on what to do about stolen and lost mobile devices and suspicious apps.

Incident management focuses on interruptions, reductions in quality of its services, and outages .

You design and enforce a set of policies to detect, investigate and respond to all kinds of IT and security incidents. An incident management system decides who gets alerted about these incidences and when.

Mapped drives and shared locations and wireless settings are not included in the incident management policy for mobile devices.

You can create a shortcut to a drive or folder shared on your network by mapping that location.

You can change wireless settings and connect to a wireless network by selecting the network or Wi-Fi icon in the notification areas in Windows 10.

DRAG DROP -Match each Microsoft Virtual desktop feature to its definition. instructions: To answer, drag the appropriate feature from the left column to its definition on the right. Each feature may be used once, more than once, or not at all. Each correct match is worth one point.

​ Select and Place:​

• Provides access to applications or full desktops from various devices and platforms

• Microsoft Remote Desktop App

• supports multi-touch, new Windows experience and Start Menu integrations

• Mutli-touch remote

• virtual application allows users to run Windows-based applications regardless of what OS running

• RemoteApp Program

Answer explanation

RemoteApp enables you to make programs accessed remotely through Remote Desktop Services appear as if they are running on the end user's local computer. These programs are referred to as RemoteApp programs. Instead of being presented to the user on the desktop of the Remote Desktop Session Host(RD Session Host) server, the RemoteApp program is integrated with the client's desktop.

Microsoft Remote Desktop App Provides access to applications or full desktops from various devices and platforms, including Windows, Windows RT, iOS, Mac OS X, and Android.

Multi-touch remote supports multi-touch, new Windows experience, Start menu/screen integration and

enables end users to use the latest devices to interact with their remote Windows 8 desktops. The fully remote touch experience supports Windows 8 touch gestures such as pinch, zoom, and rotate.

Your company uses Windows 10 Work Folders on personal devices. The devices are all registered in Microsoft Intune.

You need to enforce the following security requirements on personal devices:

"Company data can be removed if an employee is terminated."

" Company data cannot be accessed if a device is lost or stolen."

What should you do?

• A. Enable selective wipe, and enforce a lock screen and password

• B. Enable selective wipe, and secure files transfers with SSL

• C. Enable selective wipe, and enforce encryption

• D. Enforce encryption and enforce a lock screen and password

Answer explanation

Microsoft Intune provides selective wipe, full wipe, remote lock, and passcode reset capabilities. A selective wipe to remove only company data. Encryption on Mobile Devices can be managed with Configuration Manager and IntuneReference: Help protect your data with remote wipe, remote lock, or passcode reset using Microsoft Intune

https://technet.microsoft.com/en-us/library/jj676679.aspxReference: Managing Encryption on Mobile Devices with Configuration Manager and Intune http://blogs.technet.com/b/pauljones/archive/2014/08/04/managing-encryption-on-mobile-devices-with-configuration-manager-and-intune.aspx

Your university's IT department currently has no Active Directory strategy. The university needs a solution that allows you to manage users and groups to secure access to Microsoft online services such as Microsoft Office 365. Which Active Directory strategy should the university use?

• A. Active Directory Federation services

• B. Active Directory Lightweight Directory services

• C. Active Directory Certificate services

• D. Azure Active Directory

Answer explanation

Azure Active Directory is integrated with Salesforce.com, Office 365, Box, and many more.

This question requires you to evaluate the underlined text to determine if it is correct." Windows Server Active Directory" enables single sign-on, simplifying user access to thousands of cloud applications on Windows, Mac, and iOS devices. Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed." If the statement is incorrect, select the answer choice than makes the statement correct.

• A. No change is needed

• B. Microsoft Account

• C. Active Directory Rights Manager

• D. Azure Active Directory

Answer explanation

Azure Active Directory is a comprehensive identity and access management cloud solution that provides a robust set of capabilities to manage users and groups. Azure Active Directory enables single sign-on to simplify user access to thousands of cloud applications from Windows, Mac, Android and iOS devices.Reference: Identity and Access Management for the Cloudhttp://azure.microsoft.com/en-us/services/active-directory/