Your network contains an on-premises Active Directory forest named contoso.com. The forest contains a user named User1 and two computers named Computer1 and Computer2 that run Windows 10.
User1 is configured as shown in the following exhibit.

You rename file \\Server1\Profiles\User1.V6\NTUSER.DAT as NTUSER.MAN.
For each of the fallowing statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Your network contains an Active Directory domain. The domain contains a computer named Computer! that runs Windows 10. Computer1 has a Trusted Platform Module (TPM) version 12.
The domain contains a domain controller named DC1 that has all the Remote Server Administration Tools (RSAT) installed.
BitLocker Drive Encryption (BitLodcer) recovery passwords are stored in Active Directory.
You enable BitLocker on the operating system drive of Computer1.
A software update on Computer! disables the TPM. and BitLocker enters recovery mode.
You need to recover your BitLocker password for Computer1.
What should you use to retrieve the recovery password?

You need to ensure that User10 can activate Computer10.
What should you do?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer named Computer1 that runs Windows 10.
A service named Application1 is configured as shown in the exhibit.

You discover that a user used the Service1 account to sign in to Computer1 and deleted some files.
You need to ensure that the identity used by Application1 cannot be used by a user to sign in to sign in to the desktop on Computer1. The solution must use the principle of least privilege.
Solution: On Computer1, you assign Service1 the deny log on locally user right.
Does this meet the goal?

You have a computer that runs Windows 10 and is joined to Azure Active Directory (Azure AD).
You attempt to open Control Panel and receive the error message shown on the following exhibit.

You need to be able to access Control Panel.
What should you modify?