fig":null,"exhibitText":"\n \n \n \n \n\n\n \n \n \n","options":[{"id":"52825d24-356e-493b-9a22-0f7049ca881a","label":null,"text":"The file will be allowed because the 'Allow Signed' rule uses a wildcard for the FileName.","isCorrect":false},{"id":"de7d1132-d782-4bc2-acf7-a79c7b31888a","label":null,"text":"The file will be allowed if it is digitally signed by a trusted Windows publisher.","isCorrect":false},{"id":"94de46de-1f63-411c-99a8-63dfac116962","label":null,"text":"The file will be blocked regardless of its signature or version.","isCorrect":true},{"id":"4990c12f-63e8-445c-bc59-2bd76870330b","label":null,"text":"The file will be allowed but an audit event will be generated in the event log.","isCorrect":false}],"domainName":"Secure Windows Server Infrastructure","domainSlug":"secure-windows-server-infrastructure"},{"id":"4411c015-f0d8-48a1-b6b6-04bfbd8a0bdf","slug":"you-have-configured-a-windows-server-to-forward-events-to-a-n2jjb","questionText":"You have configured a Windows Server to forward events to a centralized collector. You notice that the collector is not receiving events from a specific source server. You verify that the 'Windows Event Collector' service is running on the collector and the 'Windows Remote Management' service is running on the source. What should you check next to troubleshoot the connectivity?","explanation":"Event forwarding relies on WinRM for transport. If the services are running, the issue is often related to the WinRM listener configuration or the network path between the nodes. Verifying that the WinRM listener is active and listening on the correct port (default 5985/5986) is the logical next step to ensure the transport layer is capable of passing the subscription information between the source and the collector.","domainId":"6b0aeece-dd55-42d2-a6c8-0b57244c89e3","difficulty":"medium","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"81f8beb3-5857-40a0-91dc-a433fb7b09eb","label":null,"text":"Verify the Event Log size configuration on the source server.","isCorrect":false},{"id":"b2cd4c85-ef62-425e-b73a-536365b385f9","label":null,"text":"Check the WinRM listener status and configuration on both servers.","isCorrect":true},{"id":"fde6b96b-d810-4755-9b84-d5da01e327a3","label":null,"text":"Restart the Task Scheduler service on the source server.","isCorrect":false},{"id":"f722bddd-8fe7-4903-be81-c39dd3100f78","label":null,"text":"Reinstall the Windows Event Collector feature.","isCorrect":false}],"domainName":"Monitor and Troubleshoot Windows Server Environments","domainSlug":"monitor-troubleshoot-windows-server"},{"id":"8e2caf10-c3b0-49c0-afda-2028e455f56c","slug":"your-company-is-merging-with-another-firm-you-need-to-allow-l7czh","questionText":"Your company is merging with another firm. You need to allow users in the 'contoso.com' forest to access resources in the 'fabrikam.com' forest. The solution must ensure that users from Fabrikam cannot access any resources in Contoso unless specifically granted permission on each individual resource. What should you configure?","explanation":"A one-way forest trust with selective authentication is the most secure way to connect two forests. The 'one-way' aspect limits the direction of trust, while 'selective authentication' prevents trusted users from automatically being part of the 'Authenticated Users' group on resources in the trusting domain.","domainId":"f8359607-92c6-40bb-b237-eb843c37161a","difficulty":"hard","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"11d303f6-0826-43fd-83d3-d23c3ab87a2c","label":null,"text":"A