lab 12-1

Question 1

What is the purpose of executing the following command?
winrm quickconfig

A. It configures the WinRM services and sets it up to start automatically

B. It enables the Windows remote management traffic to pass through the firewall

C. It performs automatic configuration of WinRM without any administrator intervention

D. It enables remote registry access through another client for WinRM

Answer 1

It enables the Windows remote management traffic to pass through the firewall

Question 2

To create a subscription, you have opened the Computer Management console. What is the next step you should perform?

A. Expand Services and Applications
B. Expand Performance
C. Expand Event Viewer
D. Expand Task Scheduler

Answer 2

Expand Event Viewer

Question 3

After creating a subscription, you get the Event ID 111 in the system reports. What does this Event ID 111 indicate?

A. Description of the event cannot be found

B. Firewall is blocking the events

C. There is an issue with the event log service

D. There are no events in the event log

Answer 3

Description of the event cannot be found

Question 4

The following table lists the servers, the installed Windows versions and their roles in the Active Directory domain network:

This image shows a table listing the Name, Windows versions and Role.

There is a requirement to gather the Application, Security, System event logs of the Windows devices listed in the table above. Which of the following devices will you enable as the Windows Event Collector to start automatically? [Choose two that apply]

A. SVR02

B. SVR04

C. MWS01

D. SVR01

E. SVR03

F. MWS02

Answer 4

MWS01

MWS02

Question 5

What is the effect of running the following PowerShell command on a Windows device designated to function as a Windows Event Collector computer?
wecutil qc

[Choose two that apply]

A. Windows Event Collector service status changes to Running

B. Windows Event Collector service status changes to Automatic

C. Windows Event Collector service status changes to Automatic – (Delayed Start)

D. Windows Event Collector service status changes to Delayed- Start

Answer 5

Windows Event Collector service status changes to Running

Windows Event Collector service status changes to Automatic – (Delayed Start)