Question 1

An administrator is assigning Windows user accounts to user groups based on the user's role and notices the built-in Power Users group.  
What is the purpose of the Power Users group in Windows 7 and later?
A) Allows members to take ownership of files and folders.
B) Members have limited privileges and are given a temporary profile.
C) Provides a method for assigning rights to Guests who require Administrator access.
D) Backward compatibility for legacy operating systems and applications.

Accepted Answer

The Power Users group in Windows 7 and later is primarily for backward compatibility with older applications that require more permissions than a standard user but do not need full administrative rights.

Question 2

A technician wants to limit access to a group of folders and is using Group Policy to prevent the users in the sales department from accessing folders assigned to the accounting department. The technician is having difficulty achieving acceptable results.  
Which of the following is the most likely reason the technician is having difficulties?
A) The users in the sales department are in a different domain than the accounting department users.
B) The technician should be using Local Security Policy instead of Group Policy.
C) The technician is not signed in as a Domain Admin.
D) The technician should be setting NTFS permissions instead of using Group Policy.

Accepted Answer

Group Policy is not typically used to manage file and folder permissions; NTFS permissions should be used to control access to folders.

Question 3

Which of the following security policies can be implemented to prevent removable media from automatically launching potentially harmful programs?
A) Disable AutoPlay.
B) Disable AutoRun.
C) Disable the Guest account
D) Enable screen lock.

Accepted Answer

B

Question 4

A Windows 10 Home user is attempting to encrypt the contents of a folder on a volume formatted with NTFS. The user contacted you to ask why the option to encrypt the folder is disabled.  
What is the most likely reason the encryption option is disabled?
A) The user account is not a member of the Administrators group.
B) The NTFS file system is corrupt.
C) Windows Home editions do not support EFS.
D) A volume formatted with NTFS does not support EFS.

Accepted Answer

Windows Home editions do not support the Encrypting File System (EFS), which is why the option to encrypt the folder is disabled.

Question 5

A technician is using the Security tab in the Properties dialog box in an attempt to remove the inherited status from a file's permissions but cannot locate where to make the change.  
Which of the following steps should the technician take to make this change?
A) Click the Sharing tab and click Advanced Sharing.
B) Click the Administrator user name and click the Edit button.
C) Click the Advanced button to open Advanced Security Settings for the file.
D) Click the Previous Versions tab, highlight the file, and click Restore.

Accepted Answer

The technician should click the Advanced button to open Advanced Security Settings for the file, where they can manage and remove inherited permissions.

Question 6

A coworker asks your opinion about how to minimize ActiveX attacks while she browses the Internet using Internet Explorer. The coworker recalls there is a setting in the Internet Options dialog box to prompt the user before downloading ActiveX controls, but can't remember which tab to use.  
Which of the following tabs will you suggest to the coworker?
A) Security tab
B) Privacy tab
C) General tab
D) Programs tab

Accepted Answer

The Security tab in the Internet Options dialog box allows users to manage security settings for different zones, including prompting before downloading ActiveX controls.

Question 7

You recently created several new user accounts in the Sales OU and configured them with the appropriate group membership, logon scripts, and printer access. Except for one new sales employee, all employees are actively using the account. The remaining employee will be using the account within the next two weeks.  
What is best practice for the remaining unused account?
A) Leave the account active since it will be unused for only two weeks.
B) Delete the account and re-create it when the employee is ready to use it.
C) Remove the account membership to all groups.
D) Disable the account until the employee is ready to use it.

Accepted Answer

Disabling the account is a best practice as it prevents unauthorized access while keeping the configuration intact for when the employee is ready to use it.

Question 8

While performing disk and file maintenance on the company file server, you determine a user in the accounting department has been accidentally saving documents to all shared folders on the file server. The user's computer was recently passed to her from another user in the company, and according to company policy, the user should have access only to the accounting share.  
Which of the following best describes this situation?
A) The user bypassed the security of the file server.
B) The principle of least privilege was not followed.
C) The firewall on the server is disabled.
D) The firewall on the user's computer is disabled.

Accepted Answer

The principle of least privilege was not followed because the user was given more access than necessary, allowing her to save documents to all shared folders instead of just the accounting share.

Question 9

Your organization recently deployed a Windows domain controller with Active Directory. All the domain OU users need to run the same script file each time they sign in to Windows.  
How can the settings be configured with the least effort by the admin?
A) Configure Local Group Policy on each workstation to run a logon script.
B) Configure Group Policy to run a logon script.
C) Configure user account properties for each domain user in Active Directory to run a logon script.
D) Configure folder redirection in Group Policy.

Accepted Answer

Using Group Policy to run a logon script is the most efficient way to ensure all users in the domain run the same script upon signing in, as it can be applied centrally without needing to configure each workstation or user account individually.

Question 10

Which of the following is a hardware component used to hold the BitLocker encryption key and ensures encrypted data is not accessed in the event a hard drive is lost or stolen?
A) TPM
B) NIC
C) EFS
D) MFA

Accepted Answer

The TPM (Trusted Platform Module) is a hardware component used to securely store encryption keys, including those used by BitLocker, to ensure that encrypted data cannot be accessed if the hard drive is lost or stolen.

Question 11

A technician is configuring the Windows computers on a network to print to a printer that is directly connected to the network via UTP cable.  
What term best describes this method of printer connectivity?
A) Network printer
B) Shared printer
C) Network drive mapping
D) Administrative share

Accepted Answer

A network printer is directly connected to the network, allowing multiple computers to print to it without needing to be connected to a specific computer.

Question 12

A technician, who was signed in to a Windows 10 computer as local administrator, accessed the Local Security Policy console and changed the Lock Screen timeout from 10 minutes to 60 minutes. After the technician completed the change, the user signed in to AD and discovered that the setting had reverted to 10 minutes.  
What can the technician do to keep the setting from reverting from 60 minutes to 10 minutes?
A) The Lock Screen timeout of 60 minutes is not within the allowable range.
B) The technician should run the gpupdate /f command on the local computer.
C) The Lock Screen timeout setting needs to be made in the AD OU GPO.
D) The Lock Screen timeout policy does not apply to Windows 10.

Accepted Answer

The setting is likely being overridden by a Group Policy Object (GPO) applied to the Active Directory Organizational Unit (OU). The technician needs to change the setting in the AD OU GPO to ensure it persists.

Question 13

A Windows user called the help desk to request that her local user account password be reset on her computer. The help desk technician connected to the computer using RDC and reset the password using the Network Places Wizard. After the password was reset, the user lost access to all the data files on the local HDD.  
Which of the following describes the most likely reason for the lost data files?
A) The technician erased all the data files while resetting the password.
B) The user attempted to enter an incorrect password too many times.
C) The user had previously encrypted her data files and folders using EFS.
D) The user lost access to the network shared drive when her password was reset.

Accepted Answer

The user had previously encrypted her data files and folders using EFS (Encrypting File System), and resetting the password without backing up the encryption key can lead to loss of access to those files.

Question 14

Which of the following best meets the requirements of a strong password?
A) t*M&2.zY7
B) qwerty1234567890
C) p@ssw0rd
D) johndoe123

Accepted Answer

A strong password typically includes a mix of uppercase and lowercase letters, numbers, and special characters, which is the case with option A.

Question 15

A Windows 10 user is copying a file from the C:\data folder to the E:\data folder. The C: drive is formatted with NTFS, and the D: drive is formatted with FAT32.  
What happens to the permissions of the file on the D:\ drive when copied?
A) The file cannot be copied from NTFS to FAT32.
B) The file will retain its permissions.
C) The file will inherit the permissions of the destination.
D) The file will lose all permissions.

Accepted Answer

When a file is copied from an NTFS drive to a FAT32 drive, it loses all its NTFS permissions because FAT32 does not support file permissions.

Question 16

Several computers in your organization are being used from within the building after hours when the company is closed. Your manager has asked you to configure the computers to limit access to business hours.  
Which of the following steps can be taken to limit access to the computers?
A) Configure logon time restrictions.
B) Set the BIOS to automatically power off the computers at closing time.
C) Disable Microsoft account resources.
D) Change the user account passwords.

Accepted Answer

Configuring logon time restrictions allows you to specify the hours during which users can access the computers, effectively preventing access after business hours.

Question 17

The users in the sales department need a central location on the network to share data files. All the client computers in the organization are running Windows 10 and have network and Internet connectivity. The file server that hosts the network drive for the sales department is running Windows Server 2016.  
Which of the following is the first step in implementing this data share?
A) Create a system restore point on the server and all sales computers.
B) Map a network drive to the shared folder or volume on the file server on the sales computers.
C) Run a system image backup of the file server, including all data folders.
D) Share the folder or volume on the file server that will store the shared data files.

Accepted Answer

The first step in implementing a data share is to share the folder or volume on the file server that will store the shared data files, making it accessible to the sales department users.

Question 18

You need to secure your Windows 7 computer in a way that prevents access to the entire HDD even if the drive is moved to another system.  
Which solution will you implement?
A) BitLocker To Go
B) BitLocker
C) Encrypting File System
D) VPN using IPSec

Accepted Answer

BitLocker is a full disk encryption feature that can encrypt the entire hard drive, ensuring that the data remains secure even if the drive is removed and connected to another system.

Question 19

Your computer has a single HDD formatted with NTFS with the following data folders:  
C:\Documents
C:\Pictures
 
You create a new child folder under the C:\Documents folder.
 
What term describes the permissions the new folder automatically attains from the C:\Documents folder?
A) Inherited permissions
B) Explicit permissions
C) Allow permissions
D) Deny permissions

Accepted Answer

Inherited permissions are automatically passed down from a parent folder to a child folder in NTFS, meaning the new folder will inherit the permissions set on the C:\Documents folder.

Question 20

You are having difficulty changing permissions for a folder on an NTFS volume that was created by another user.  
How can you best solve this issue without losing data in the folder?
A) Take ownership of the folder and then change permissions.
B) Disable permission inheritance and explicitly assign the new permissions.
C) Enable permission inheritance so the new permissions are inherited from the parent folder.
D) Delete the folder and re-create it. Then assign the new permissions.

Accepted Answer

Taking ownership of the folder allows you to change permissions without losing any data, as the owner has the right to modify permissions.

Quiz 7: Securing and Sharing Windows Resources

An administrator is assigning Windows user accounts to user groups based on the user's role and notices the built-in Power Users group. What is the purpose of the Power Users group in Windows 7 and later?

Which of the following security policies can be implemented to prevent removable media from automatically launching potentially harmful programs?

A Windows 10 Home user is attempting to encrypt the contents of a folder on a volume formatted with NTFS. The user contacted you to ask why the option to encrypt the folder is disabled. What is the most likely reason the encryption option is disabled?

A technician is using the Security tab in the Properties dialog box in an attempt to remove the inherited status from a file's permissions but cannot locate where to make the change. Which of the following steps should the technician take to make this change?

Your organization recently deployed a Windows domain controller with Active Directory. All the domain OU users need to run the same script file each time they sign in to Windows. How can the settings be configured with the least effort by the admin?

Which of the following is a hardware component used to hold the BitLocker encryption key and ensures encrypted data is not accessed in the event a hard drive is lost or stolen?

A technician is configuring the Windows computers on a network to print to a printer that is directly connected to the network via UTP cable. What term best describes this method of printer connectivity?

Which of the following best meets the requirements of a strong password?

A Windows 10 user is copying a file from the C:\data folder to the E:\data folder. The C: drive is formatted with NTFS, and the D: drive is formatted with FAT32. What happens to the permissions of the file on the D:\ drive when copied?

Several computers in your organization are being used from within the building after hours when the company is closed. Your manager has asked you to configure the computers to limit access to business hours. Which of the following steps can be taken to limit access to the computers?

You need to secure your Windows 7 computer in a way that prevents access to the entire HDD even if the drive is moved to another system. Which solution will you implement?

Your computer has a single HDD formatted with NTFS with the following data folders: C:\Documents C:\Pictures You create a new child folder under the C:\Documents folder. What term describes the permissions the new folder automatically attains from the C:\Documents folder?

You are having difficulty changing permissions for a folder on an NTFS volume that was created by another user. How can you best solve this issue without losing data in the folder?