- (Exam Topic 4)
You have several computers that run Windows 10.
All users have Microsoft OneDrive for Business installed. Users frequently save files to their desktop.
You need to ensure that all the users can recover the files on their desktop from OneDrive for Business. Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

1. A. Copy ADMX and ADML files to C:\Users\PublicDesktop\
2. B. From Backup in the Settings app, add a drive
3. C. Configure the Silently move Windows known folders to OneDrive settings
4. D. Copy ADMX and ADML files to C:\Windows\PolicyDefinitions
5. E. Configure the Save documents to OneDrive by default setting

Correct Answer: CD
References:
https://docs.microsoft.com/en-us/onedrive/plan-onedrive-enterprise https://docs.microsoft.com/en-us/onedrive/use-group-policy#KFMOptInNoWizard

- (Exam Topic 4)
You have a computer that runs Windows 10 and is joined to Azure Active Directory (Azure AD). You attempt to open Control Panel and receive the error message shown on the following exhibit.

You need to be able to access Control Panel.
What should you modify?

1. A. the PowerShell execution policy
2. B. the Local Group Policy
3. C. the Settings app
4. D. a Group policy preference

Correct Answer: B

References:
https://windows10skill.com/this-operation-has-been-cancelled-due-to-restrictions-in-effect-on-this-pc/

- (Exam Topic 4)
You have a Microsoft Azure Active Directory (Azure AD) tenant.
Some users sign in to their computer by using Windows Hello for Business.
A user named User1 purchases a new computer and joins the computer to Azure AD.
User1 attempts to configure the sign-in options and receives the error message shown in the exhibit.

You open Device Manager and confirm that all the hardware works correctly.
You need to ensure that User1 can use Windows Hello for Business facial recognition to sign in to the computer.
What should you do first?

1. A. Purchase an infrared (IR) camera.
2. B. Upgrade the computer to Windows 10 Enterprise.
3. C. Enable UEFI Secure Boot.
4. D. Install a virtual TPM driver.

Correct Answer: B

References:
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-planning-guide

- (Exam Topic 4)
Your network contains an Active Directory domain. The domain contains the users shown in the following table.

The domain contains a computer named Computer1 that runs Windows 10. Computer1 contains a folder named Folder1 that has the following permissions:
User2: Deny Write
Group1: Allow Read
Group2: Allow Modify
Folder1 is shared as Share1$. Share1$ has the following configurations:
Everyone: Allow Full control
Access-based enumeration: Enabled
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Solution:
YES, YES, NO
References:
https://www.varonis.com/blog/ntfs-permissions-vs-share/
http://www.ntfs.com/ntfs-permissions-file-advanced.htm
https://docs.microsoft.com/en-us/windows-server/storage/dfs-namespaces/enable-access-based-enumeration-on

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
You have the source files shown in the following table.

You mount an image from Image1.wim to a folder named C:Mount. You need to add the French language pack to the mounted image.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Solution:
Note: The referenced document has the mount directory as C:MountWindows. In this question, the mount directory is C:Mount.
Reference:
https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/add-language-packs-to-windows

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A