TestOut Labs 8-11

8.1.5 Configure Automatic Updates You need to customize how Windows Update checks for and installs updates on the ITAdmin desktop system. In this lab, your task is to:  Configure Windows Update to: o Install updates for other Microsoft products when Windows is updated. o Allow the installation of feature updates to be deferred 60 days. o Allow quality updates to be deferred 30 days.  Configure Windows to automatically download manufacturers' apps and custom icons for devices. Complete this lab as follows: 1. Configure the Windows Update settings. a. Right-click Start and then select Settings . b. Maximize the window for better viewing. c. Select Update & Security . d. From the right pane, select Advanced options . e. Under Update Options, turn on Receive updates for other Microsoft products when you update Windows by sliding the switch to On . f. Under Choose when updates are installed , configure each option as follows:  A feature update includes new capabilities and improvements. It can be deferred for 60 days.  A quality update includes security improvements. It can be deferred for this many days: 30

2. Configure Windows to automatically download the manufacturer's apps and custom icons. a. In the upper left of the Settings app, select the Home icon to return to the home page. b. Select System . c. From the left pane, select About . d. From the right, under Related settings , select Advanced system settings . e. Select the Hardware tab. f. Select Device Installation Settings . g. Select Yes and then select Save Changes . h. Select OK . 8.1.7 Configure Microsoft Defender Firewall You have a new laptop that is running Windows 10. You notice a security message that indicates that Windows Firewall has been disabled. The laptop is currently connected to your organization's network, and the Domain network profile settings are in effect. You plan to travel this week and

connect the laptop to various airport Wi-Fi hotspots. You need to enable Windows Firewall for any public network. In this lab, your task is to configure Windows Firewall as follows:  Turn on the Windows Firewall for the Public network profile.  In addition to the programs and ports currently allowed, allow the following service and programs through the firewall for only the Public network profile: o A service named  Key Management Service o An application named  Arch98 o An application named  Apconf Complete this lab as follows: 1. Turn on the firewall for the public network. a. Right-click Start and then select Settings . b. Select Network & Internet . c. From the right pane, scroll down and select Windows Firewall . d. From the Firewall & network protection dialog, under Public network, select Turn on . 2. Allow applications to communicate through the firewall for the Public network only. a. Select Allow an app through firewall . b. Select Change settings . c. For Key Management Service, clear Domain and Private , and then select Public . d. Select Allow another app to configure an exception for an application not currently allowed through the firewall. e. Select the application from the list and then select Add . f. For the newly added application, clear Domain and Private , and then select Public . g. Repeat steps 3d - 3f for the remaining application . h. Select OK . 8.2.5 Configure NTFS Permissions

There are two groups of users who access the CorpFiles server: Marketing and Research. Each group has a corresponding folder:  D:\Marketing Data  D:\Research Data In this lab, your task is to:  Disable permissions inheritance for  D:\Marketing Data  and  D:\Research Data  and convert the existing permissions to explicit permissions.  For each of the above folders, remove the  Users  group from the access control list (ACL).  Add the  Marketing  group to the Marketing Data folder ACL.  Add the  Research  group to the Research Data folder ACL.  Assign the groups  Full Control  to their respective folders.  Do not change any other permissions assigned to other users or groups. Complete this lab as follows: 1. Open the Data (D:) drive. a. From the Windows taskbar, select File Explorer .

b. From the left pane, expand and select This PC > Data (D:) . 2. Disable inheritance and convert inherited permissions to explicit permissions. a. From the right pane, right-click the applicable folder and then select Properties . b. Select the Security tab. c. Select Advanced to modify inherited permissions. d. Select Disable inheritance to prevent inherited permissions. e. Select Convert inherited permissions into explicit permissions on this object . 3. Remove the Users group from the access control list. a. Under Permission entries , select Users . b. Select Remove to remove the group from the access control list. c. Select OK . 4. Add a new group to the access control list and allow Full Control. a. From the Properties dialog, select Edit to add a group to the access control list. b. Select Add . c. Enter the name of the group you want to add and then select Check Names . d. Select OK . e. With the newly added group selected, under the Allow column, select Full control and then select OK . f. Select OK to close the properties dialog. 5. Repeat steps 2 - 4 to modify the permissions for the additional folder. 8.2.6 Disable Inheritance