HOTSPOT -
Your network contains an Active Directory domain named adatum.com. The domain contains two computers named Computer1 and Computer2 that run Windows
10.
The domain contains the user accounts shown in the following table.
 
Computer2 contains the local groups shown in the following table.
 
The relevant user rights assignments for Computer2 are shown in the following table.
 
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
 
















 

Suggested Answer: 
    

Box 1: Yes -
User1 is an administrator and has the Allow log on through Remote Desktop Services.
Box 2: No -
User2 is a member of Group2 which has the Deny log on through Remote Desktop Services.
Box 3: Yes -
User3 is a member of the administrators group and has the Allow log on through Remote Desktop Services.
Note: Deny permissions take precedence over Allow permissions. If a user belongs to two groups, and one of them has a specific permission set to Deny, that user is not able to perform tasks that require that permission even if they belong to a group that has that permission set to Allow.
Reference:
https://docs.microsoft.com/en-us/azure/devops/organizations/security/about-permissions?view=azure-devops&tabs=preview-page%2Ccurrent-page

This question is in MD-100: Windows 10 Exam
For getting Microsoft 365 Certified: Endpoint Administrator Associate Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.