Microsoft Microsoft Certifications MD-100 Questions & Answers

• Question 101:

  HOTSPOT

  Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 10.

  The domain contains the users shown in the following table.

  

  Computer1 contains the shared folders shown in the following table.

  

  The shared folders have the permissions shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  Share1$ is a hidden share (dollar sign appended) so the share will never be visible.

  Box 2: Yes

  User2 is in Group1 and Group2. Both groups have access to Share1$. Therefore, the contents of the shared folder will be visible.

  Box 3: No

  User1 is in Group1. Group1 does not have the necessary security permission to access Share2. You need both security permissions (NTFS permissions) AND share permissions to view the contents of a shared folder. User1 has the

  necessary share permissions (Everyone: Read), but not the security permission.

• Question 102:

  HOTSPOT

  Your network contains an Active Directory domain that contains the objects shown in the following table.

  

  

  Computer1 contains the shared folders shown in the following table.

  

  The computers have the network configurations shown in the following table.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  User1 is in Group1 which has permission to access the share so the share will be visible.

  Box 2: No

  User2 is in Group2 which does not have permission to access Share1. Access-based enumeration is enabled so Share1 will not be listed as User2 does not have permission to access it.

  Box 3: No

  Share2$ is a hidden share (dollar sign appended) so the share will never be listed.

• Question 103:

  HOTSPOT

  You have 100 computers that run Windows 10 and are members of an Active Directory domain.

  Two support technicians named Tech1 and Tech2 will be responsible for monitoring the performance of the computers.

  You need to configure the computers to meet the following requirements:

  1.

  Ensure that Tech1 can create and manage Data Collector Sets (DCSs).

  2.

  Ensure that Tech2 can start and stop the DCSs.

  3.

  Use the principle of least privilege.

  To which group should you add each technician? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups

• Question 104:

  HOTSPOT

  You have a workgroup computer named Computer1 that runs Windows 10 and has the users shown in the following table.

  

  You plan to add a key named Key1 to the following three registry branches:

  1.

  HKEY_CURRENT_CONFIG\Software

  2.

  HKEY_LOCAL_MACHINES\Software

  3.

  HKEY_CURRENT_USER\Software

  You need to identify which users can add Key1.

  What user or users should you identify for each branch? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1 and Box 2.

  These are system-wide registry keys so only Administrators can modify them.

  Box 3.

  This key affects only the logged in user. Therefore, any user can modify this key.

• Question 105:

  HOTSPOT

  You have a workgroup computer named Computer1 that runs Windows 10 and has the users shown in the following table.

  

  You have a file named File1.reg that contains the following content.

  

  You need to identify what occurs when User1 and User2 double-click File1.reg.

  What should you identify? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1:

  User1 is a member of the Administrators group so has permission to add keys to both registry hives.

  Box 2:

  User2 is a standard user so does not have permission to add a key to the HKEY_LOCAL_MACHINE registry hive so Key2 will not be imported.

• Question 106:

  HOTSPOT

  You have a workgroup computer named Computer1 that runs Windows 10 and has the users shown in the following table.

  

  User Account Control (UAC) on Computer1 is configured as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode is set to Prompt for consent When an operation requires elevation of privilege, the user is prompted to select either Permit or Deny. If the user

  selects Permit, the operation continues with the user's highest available privilege.

  Box 2: Yes

  User1 is a member of Administrators group.

  User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode is set to Prompt for consent When an operation requires elevation of privilege, the user is prompted to select either Permit or Deny. If the user

  selects Permit, the operation continues with the user's highest available privilege.

  Box 3: Yes

  User Account Control: Behavior of the elevation prompt for standard users is set to Prompt for credentials (Default) When an operation requires elevation of privilege, the user is prompted to enter an administrative user name and password. If

  the user enters valid credentials, the operation continues with the applicable privilege.

  References:

  https://docs.microsoft.com/en-us/windows/security/identity-protection/user-account-control/user-account-control-security-policy-settings

• Question 107:

  HOTSPOT

  Your network contains an Active Directory domain named adatum.com. The domain contains the users shown in the following table.

  

  The domain contains a computer named Computer1 that runs Windows10. Computer1 has a file named File1.txt that has the permissions shown in the exhibit. (Click the Exhibit tab.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  User1 only has Read access to the file.

  Box 2: Yes

  User2 is in Group2 which has full control. The condition states that if the user is also a member of Group3, the permission would not apply. However, User2 is not in Group3 so the full control permission does apply.

  Box 3: No

  User3 is in Group3 which does have Read access. However, the condition states that if the user is also in Group1 or Group2 then the permission does not apply. User3 is in Group2 so the Read permission granted to Group3 does not apply

  to User3.

• Question 108:

  HOTSPOT

  Your network contains an Active Directory domain named adatum.com. The domain contains two computers named Computer1 and Computer2 that run Windows 10.

  The domain contains the user accounts shown in the following table.

  

  Computer2 contains the local groups shown in the following table.

  

  The relevant user rights assignments for Computer2 are shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  User1 is an administrator and has the Allow log on through Remote Desktop Services.

  Box 2: No

  User2 is a member of Group2 which has the Deny log on through Remote Desktop Services.

  Box 3: Yes

  User3 is a member of the administrators group and has the Allow log on through Remote Desktop Services.

  Note: Deny permissions take precedence over Allow permissions. If a user belongs to two groups, and one of them has a specific permission set to Deny, that user is not able to perform tasks that require that permission even if they belong to

  a group that has that permission set to Allow.

  References:

  https://docs.microsoft.com/en-us/azure/devops/organizations/security/about-permissions?view=azure-devopsandtabs=preview-page%2Ccurrent-page

• Question 109:

  HOTSPOT

  You have a computer named Computer1 that runs Windows 10. Computer1 is in a workgroup.

  Computer1 contains the local users shown in the following table.

  

  Computer1 contains the folders shown in the following table.

  

  The Users group has Full control permissions to Folder1, Folder2, and Folder3.

  User1 encrypts two files named File1.docx and File2.docx in Folder1 by using EFS.

  Which users can move each file? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 110:

  HOTSPOT

  You have a computer named Computer1 that runs Windows 10. Computer1 contains a registry key named Key1 that has the values shown in the exhibit. (Click the Exhibit tab.).

  

  You have a Registration Entries (.reg) file named File1.reg that contains the following text.

  Windows Registry Editor Version 5.00

  [HKEY_LOCAL_MACHINE\SOFTWARE\Key1]

  "String1"=@="2"

  You need to identify the effect of importing File1.reg to Computer1.

  What should you identify? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: String1 will be deleted.

  To delete a value, append equals and then minus to the value. For example:

  "String1"=

  Box 2: Value1 will have a value of 1

  @="2" sets the default value to 1 but Value1 already has a DWORD value.

  A DWORD (32-bit) value is a hexadecimal value. Value1 is 0x00000001 which is 1.

  References:

  https://www.computerhope.com/issues/ch000848.htm

  https://www.computerperformance.co.uk/vista/reg-create/