You have a computer named Computer1 that runs Windows 10.
You complete a full back up of Computer1 to an external USB drive. You store the USB drive offsite.
You delete several files from your personal Microsoft OneDrive account by using File Explorer, and then you empty the Recycle Bin on Computer1.
You need to recover the files 60 days after you deleted them in the least amount of time possible.
What should you use?
Answer : B
https://support.office.com/en-us/article/restore-deleted-files-or-folders-in-onedrive-949ada80-0026-4db3-a953-c99083e6a84f
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
Username and password

Use the following login credentials as needed:
To enter your password, place your cursor in the Enter password box and click on the password below.
Username: Contoso/Administrator
Password: Passw0rd!
The following information is for technical support purposes only:
Lab Instance: 11145882


A web service installed on Client1 is used for testing.
You discover that users cannot connect to the web service by using HTTP.
You need to allow inbound HTTP connections to Client1.
To complete this task, sign in to the required computer or computers.
Answer : A
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-an-inbound-port-rule
https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers
Your company uses Microsoft Deployment Toolkit (MDT) to deploy Windows 10 to new computers.
The company purchases 1,000 new computers.
You need to ensure that the Hyper-V feature is enabled on the computers during the deployment.
What are two possible ways to achieve the goal? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Answer : A, E
Provisioning package works with Windows Configuration Designer to provision win10 features and runtime settings. WCD (provisioning Package) is GUI based while DISM is command line based and dose same function. Unattend.xml / answer files are used with installation media. It contains settings, definitions and values to use during Windows Setup. In an answer file, you specify various setup options. These options include how to partition disks, where to find the Windows image that will be installed, and which product key to apply.
https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image
You have a computer that runs Windows 10. The computer contains a folder. The folder contains sensitive data.
You need to log which user reads the contents of the folder and modifies and deletes files in the folder.
You need to log which user reads the contents of the folder and modifies and deletes files in the folder.
Solution: from the properties of the folder, you configure the Auditing settings and from the Audit Policy in the local Group Policy, you configure Audit system events.
Does this meet the goal?
Answer : B
Files and folders are objects and are audited through object access, not though system events.
https://www.netwrix.com/how_to_detect_who_changed_file_or_folder_owner.html
You have a computer named Computer1 that has the following configurations:
* RAM: 4 GB
* CPU: 1.6 GHz
* Hard drive: 128 GB
* Operating system: Windows 10 Pro in S mode
You need to upgrade Computer1 to Windows 11. What should you do first?
Answer : C
You have a computer that runs Windows 10.
You need to be able to recover the computer by using System Image Recovery.
What should you use to create a system image?
Answer : B
https://answers.microsoft.com/en-us/windows/forum/windows_10/how-to-create-a-system-image-in-windows-10/84fa6683-e3ac-4e93-9139-368af9267869
Your company has an isolated network used for testing. The network contains 20 computers that run Windows 10. The computers are in a workgroup. During testing, the computers must remain in the workgroup.
You discover that none of the computers are activated.
You need to recommend a solution to activate the computers without connecting the network to the Internet.
What should you include in the recommendation?
Answer : B
https://docs.microsoft.com/en-us/windows/deployment/volume-activation/introduction-vamt