Lernkarten
When using Bit Locker To Go in an enterprise, how can you prevent users from copying
data to USB drives that aren’t encrypted with BitLocker To Go?
You need to enable the Control Use Of BitLocker On Removable Drives Group Policy setting.
You need to enable the Deny Write Access To Removable Drives Not Protected By BitLocker setting in Group Policy.
You need to enable the Group Policy setting Enforce Drive Encryption Type Of Removable Data Drives.
A and B
Which command shows how to enable encryption and thus BitLocker on drive D on a
Windows 10 computer, and add numerical and external key protectors?
Manage-bde –on D: -ForceRecovery –RecoveryKey f:\
Manage-bde –on D: -unlock –RecoveryKey f:\
Manage-bde –on D: -enable –RecoveryKey f:\
Manage-bde –on D: -RecoveryPassword –RecoveryKey f:\
Which of the following is true of BitLocker To Go? (Choose all that apply.)
BitLocker To Go enables you to protect removable USB devices with BitLocker encryption.
A BitLocker To Go device can be a USB flash drive.
A BitLocker To Go device can be a Secure Digital (SD) card.
BitLocker To Go drives can be formatted with NTFS, FAT16, FAT32, or exFat file systems.
All of the above
Where can you configure a Group Policy that restricts the use of Microsoft accounts for
a specific group of users in an Active Directory domain?
In the Group Policy Management Editor window, by expanding Computer Configuration/ Policies/ Windows Settings/ Security Settings/ Local Policies/ Security Options
In the Group Policy Management Editor window, by expanding Computer Configuration/ Policies/ Windows Settings/ Security Settings/ Local Policies/ User Rights Assignment
In the Local Group Policy Editor, by navigating to Computer Configuration/ Windows Settings/ Security Settings/ Local Policies/ Security Options
In the Local Group Policy Editor, by navigating to Computer Configuration/ Windows Settings/ Security Settings/ Local Policies/ User Rights Assignment
Where can users associate a Microsoft account with a domain account?
Users can’t do this. Only administrators can perform this task in Active Directory Users And Computers on a domain controller.
In the Settings app, on the Accounts page
In the Group Policy Management Editor by expanding Computer Configuration/ Policies/ Windows Settings/ Local Policies/ Security
In the Settings app, on the Personalization page.
Which of the following can you manage in the Office 365 Admin Center?
Active Directory synchronization
Valid, expired, and assigned licenses
User password, including resetting
All of the above
B and C only
Which of the following tools and technologies can help you sideload LOB apps for
computers in your organization?
DISM
Windows PowerShell
Configuration Manager
Microsoft Intune
All of the above
Which Group Policy setting do you have to enable before you can sideload apps in
Windows 10?
None
Allow All Trusted Apps To Install
Allow Development Of Windows Store Apps
Block Microsoft Accounts
