You have two servers named Setver1 and Server2 that run Windows Server 2016 and are in a workgroup.
Server1 is used as a reference computer to configure the security baseline for the other computers in the workgroup.
You need to apply the Group Policy computer settings of Server1 to Server2.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

HOTSPOT
You plan to deploy three encrypted virtual machines that use Secure Boot. The virtual machines will be configured as shown in the following table.

How should you protect each virtual machine? To answer, select the appropriate options in the answer area.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

HOTSPOT
Your network contains an Active Directory forest named contoso.com.
The forest has Microsoft Identity Manager (MIM) 2016 deployed.
You implement Privileged Access Management (PAM).
You need to request privileged access from a client computer in contoso.com by using
PAM.
How should you complete the Windows PowerShell script? To answer, select the appropriate options in the answer area.

Correct Answer:

Explanation:
$PAM = Get-PAMRoleForRequest | ? {$_,DisplayName -eq "CorpAdmins" } New-
PAMRequest -role $PAM

Comment: *

Name: *

Email: *

Verification: *

You have a server named Server1.
You need to configure Windows Defender to perform a full scan every day at 21:00.
What should you do?

• A.From Control Panel, configure the Security and Maintenance settings
• B.Run the Set-ScheduledJob cmdlet
• C.From the Setting app, modify the Windows Defender settings
• D.Run the Set-MpPreference cmdlet

Comment: *

Name: *

Email: *

Verification: *

Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your company has a marketing department.
The network contains an Active Directory domain named constoso.com. The domain contains the servers configured as shown in the following table.

All servers run Windows Server 2016. All client computers run Windows 10 and are domain members. All laptops are protected by using BitLocker Drive Encryption (BitLocker).
You have an organizational unit (OU) named OU1 that contains the computer accounts of application servers. An OU named OU2 contains the computer accounts of the computers in the marketing department. A Group Policy object (GPO) named GP1 is linked to OU1. A GPO named GP2 is linked to OU2.
All computers receive updated from Server1. You create an update rule named Update1.
End of repeated scenario.
You need to ensure that AppLocker rules will apply to the marketing department computers. What should you do?

• A.From the properties of OU2, modify the COM+ partition Set.
• B.In GP2, configure the Startup type for the Application Identity service.
• C.In GP2, configure the Startup type for the Application Management service.
• D.From the properties of OU2, modify the Security settings.

Comment: *

Name: *

Email: *

Verification: *