Maintaining Windows Flashcards

Your network contains an Active Directory domain. The domain contains 10 computers that run Windows 10. Users in the finance department use the computers. You have a computer named Computer1 that runs Windows 10. From Computer1, you plan to run a script that executes Windows PowerShell commands on the finance department computers. You need to ensure that you can run the PowerShell commands on the finance department computers from Computer. What should you do on the finance department computers?

Answer: From Windows PowerShell, run the Enable-PSRemoting cmdlet.

To enable running PowerShell commands remotely on the finance department computers from Computer1, you must execute the `Enable-PSRemoting` cmdlet on each target finance department computer. This cmdlet configures the necessary firewall rules and starts the WinRM service, allowing PowerShell remoting connections. Without enabling PSRemoting, remote execution of PowerShell commands will not be possible.

You have a Microsoft 365 subscription that includes Microsoft Intune. The subscription contains corporate-owned, fully managed Android Enterprise devices. You plan to deploy a configuration profile that will have a device restrictions profile type named Profile1. Profile1 will assign maintenance windows for system updates. What should you configure from the Configuration settings for Profile1?

Answer: Device experience

For Android Enterprise corporate-owned, fully managed devices, settings related to system updates, including defining maintenance windows, are found under the "Device experience" category within a device restrictions configuration profile. This section allows administrators to control various aspects of the device's user experience and operational behavior, such as update policies, kiosk modes, and display settings.

You plan to deploy Windows 11 Pro to 200 new computers by using the Microsoft Deployment Toolkit (MDT) and Windows Deployment Services (WDS). The company has a Volume Licensing Agreement and uses a product key to activate Windows 11. You need to ensure that the new computers will be configured to have the correct product key during the installation. What should you configure?

Answer: an MDT task sequence

When deploying Windows with MDT, the product key for activation is configured within the MDT task sequence. The task sequence orchestrates all steps of the deployment, including operating system installation, driver injection, application installation, and crucially, the entry of the product key for volume licensing. This ensures that all 200 new computers are correctly activated during the automated deployment process.

In Azure AD, If you’re in a federated domain, you’re redirected to your on-premises Secure Token Service (STS) server.

Answer: True

In a federated Azure AD environment, user authentication is handled by an on-premises Secure Token Service (STS), typically ADFS. When a user attempts to access an Azure AD-protected resource, Azure AD redirects the authentication request to the configured on-premises STS. The STS then authenticates the user against the local Active Directory and issues a security token back to Azure AD, confirming the user's identity.

Which of the following statements NOT true about policy sets?

Answer: Policy sets will replace existing concepts or objects

Policy sets in Intune are designed to group existing configuration objects (like apps, policies, and profiles) for easier assignment and management, especially for new device deployments. They are an additive feature to streamline workflows, not a replacement for existing concepts or objects. The other options describe valid characteristics of policy sets, such as grouping objects, cross-platform assignment capabilities, and limitations on what can be included.