Your network contains an Active Directory domain named contoso.com. All servers in the domain run Windows Server 2016.All client computers run Windows 10.
Your company has deployed the Local Administrator Password Solution (LAPS).
Client computers in the finance department are located in an organizational unit (OU) named Finance.
Each finance computer has a custom administrative account named FinAdmin.
You discover that the FinAdmin accounts are not managed by LAPS.
You need to ensure that the FinAdmin accounts are managed by LAPS. What should you do?

• A.On the finance computers, register the AdmPwd.ps Windows PowerShell module and then run the ResetAdmPwdPassword cmdlet
• B.Modify the Password Policy in a Group Policy object (GPO).
• C.Modify the LAPS settings in a Group Policy object (GPO).
• D.On the finance computers. rename the FinAdmin accounts to Administrator.

Correct Answer: C

Use the GPO Setting "Name of administrator account to manage" for LAPS to manage secondary administrative accounts which is not named as "Administrator"

Comment: *

Name: *

Email: *

Verification: *

Your network contains an Active Directory domain named contoso.com. The functional level of the forest and the domain is Windows Server 2008 R2.
The domain contains the servers configured as shown in the following table.

All servers run Windows Server 2016. All client computers run Windows 10.
You have an organizational unit (OU) named Marketing that contains the computers in the marketing department You have an OU named Finance that contains the computers in the finance department You have an OU named AppServers that contains application servers. A Group Policy object (GPO) named
GP1 is linked to the Marketing OU. A GPO named GP2 is linked to the AppServers OU.
You install Windows Defender on Nano1.
You need to disable SMB 1.0 on Server2.
What should you do?

• A.From the properties of each network adapter on Server2. modify the bindings.
• B.From Windows PowerShell, run the Set -SmbClientConfiguration cmdlet.
• C.From Server Manager, remove a Windows feature.
• D.From File Server Resource Manager, create a classification rule.

Comment: *

Name: *

Email: *

Verification: *

Your network contains an Active Directory domain named contoso.com.
You are deploying Microsoft Advanced Threat Analytics (ATA).
You create a user named User1.
You need to configure the user account of User1 as a Honeytoken account.
Which information must you use to configure the Honeytoken account?

• A.the SAM account name of User1
• B.the Globally Unique Identifier (GUID) of User1
• C.the SID of User1
• D.the UPN of User1

Correct Answer: C

Explanation
https://docs.microsoft.com/en-us/advanced-threat-analytics/ata-prerequisitesA user account of a user who has no network activities.This account is configured as the ATA Honeytoken user.To configure the Honeytoken user you need the SID of the user accoun

https://docs.microsoft.com/en-us/advanced-threat-analytics/install-ata-step7ATA also enables the configuration of a Honeytoken user, which is used as a trap for malicious actors - anyauthentication associated with this (normally dormant)account will trigger an alert.

Comment: *

Name: *

Email: *

Verification: *

HOTSPOT
Your network contains an Active Directory forest named contoso.com.
The forest has Microsoft Identity Manager (MIM) 2016 deployed.
You implement Privileged Access Management (PAM).
You need to request privileged access from a client computer in contoso.com by using PAM.
How should you complete the Windows PowerShell script? To answer, select the appropriate options in the answer area.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

Your network contains an Active Directory forest named contoso.com. The forest contains three domains. All domain controllers run Windows Server 2016.
You deploy a second Active Directory forest named admin.contoso.com.
The forest contains a domain member server named Server1. Server1 has Microsoft Identity Manager (MIM)
2016 deployed.
You need to implement Privileged Access Management (PAM) and to use admin.contoso.com as an administrative forest.
Which two actions should you perform? Each correct answers presents part of the solution.

• A.From a domain controller in contoso.com. run the New-PAMTrust cmdlet.
• B.From Server1, run the New-PAMDomainConfiguration cmdlet
• C.From a domain controller in admin.contoso.com, run the New-PAMTrust cmdlet.
• D.From a domain controller in contoso.com, run the New-PAMDomainConfiguration cmdlet.
• E.From a domain controller in admin.contoso.com, run the New-PAMDomainConfiguration cmdlet
• F.From Server1, run the New-PAMTrust cmdlet

Correct Answer: B,F

Explanation
https://docs.microsoft.com/en-us/microsoft-identity-manager/pam/configuring-mim-environment-for-pam
https://docs.microsoft.com/en-us/microsoft-identity-manager/pam/step-5-establish-trust-between-priv-corpforest

Comment: *

Name: *

Email: *

Verification: *