Microsoft Microsoft Certifications MD-100 Questions & Answers

• Question 151:

  DRAG DROP

  You have a computer named Computer1 that runs Windows 11.

  You receive a notification that Computer1 is running low on disk space. You need to remove the following files from Computer1:

  1.

  Unused apps

  2.

  Unused Microsoft OneDrive content

  3.

  Non-critical files for Microsoft Defender Antivirus

  The solution must minimize administrative effort.

  Which tool should you use to remove each type of file? To answer, drag the appropriate tools to the correct file types. Each tool may be used once, more not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  Correct Answer:

  

• Question 152:

  DRAG DROP

  Your network contains an Active Directory domain named contoso.com. The domain contains the objects shown in the following table.

  

  BitLocker Drive Encryption (BitLocker) recovery passwords are stored in Active Directory. User1 enables the following on Computer 1:

  1.

  BitLocker on drive C

  2.

  BitLocker on a removable drive named E

  Which object stores the BitLocker recovery passwords for each drive? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

• Question 153:

  DRAG DROP

  You have a computer that runs Windows 10 and has the Windows Assessment and Deployment Kit (Windows ADK) installed.

  You need to perform the following tasks:

  1.

  Prepare a Windows PE (WinPE) working directory.

  2.

  Add scripting support to a WinPE image.

  3.

  Mount and unmount a WinPE image.

  Which command should you use for each task? To answer, drag the appropriate commands to the correct tasks. Each command may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to

  view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/winpe-mount-and-customize?view=windows-11 https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/winpe-adding-powershell-support-to-windows-pe?view=windows-11

• Question 154:

  DRAG DROP

  Your network contains an Active Directory domain. The domain contains 100 computers that run Windows 10.

  You need to create a Start menu layout file. The solution must meet the following requirements:

  1.

  Contain an app group named Contoso Apps that has several pinned items. Contoso Apps must be locked from user modification.

  2.

  Ensure that users can customize other parts of the Start screen.

  3.

  Minimize administrative effort.

  Which four actions should you perform in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  1.

  On a reference computer, customize the Start menu

  2.

  Export the start layout to a file

  3.

  Modify the Defaultlayoutoveride XML element

  4.

  Deploy the start layout

  References: https://docs.microsoft.com/en-us/windows/configuration/customize-and-export-start-layout

• Question 155:

  DRAG DROP

  You have a computer named Computer1 that runs Windows 7. Computer1 has a local user named User1 who has a customized profile.

  On Computer1, you perform a clean installation of Windows 10 without formatting the drives.

  You need to migrate the settings of User1 from Windows7 to Windows 10.

  Which two actions should you perform? To answer, drag the appropriate actions to the correct targets. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  The User State Migration Tool (USMT) includes two tools that migrate settings and data: ScanState and LoadState. ScanState collects information from the source computer, and LoadState applies that information to the destination computer. In this case the source and destination will be the same computer.

  As we have performed a clean installation of Windows 10 without formatting the drives, User1's customized Windows 8.1 user profile will be located in the \Windows.old folder. Therefore, we need to run scanstate.exe on the \Windows.old

  folder.

  User1's Windows 10 profile will be in the C:\Users folder so we need to run loadstate.exe to apply the changes in the C:\Users folder.

  Reference:

  https://docs.microsoft.com/en-us/windows/deployment/usmt/offline-migration-reference

  https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-how-it-works

  https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-common-migration-scenarios#bkmk-fourpcrefresh

• Question 156:

  DRAG DROP

  You enable Windows PowerShell remoting on a computer that runs Windows 10.

  You need to limit which PowerShell cmdlets can be used in a remote session.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  1.

  New

  2.

  Regster

  3.

  Enter https://devblogs.microsoft.com/scripting/build-constrained-powershell-endpoint-using-configuration-file/

• Question 157:

  You need to ensure that Client3 starts in safe mode automatically the next time the computer restarts. After completing the task, you must NOT restart Client3.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  1.

  From Client3, open the System Configuration utility by pressing the Windows and R keys simultaneously to display the Run box .

  2.

  Type “msconfig” into the box, and then click OK.

  3.

  In the “System Configuration” window, switch to the “Boot” tab.

  4.

  Enable the “Safe Boot” check box, and then make sure the “Minimal” option below that is selected. Click the “OK” button when you’re done.

  5.

  You will be prompted to Restart or Exit without restart. Click Exit without restart.

  

  

  

  Reference: https://www.howtogeek.com/howto/windows-vista/force-windows-to-boot-into-safe-mode-without-using-the-f8-key/

• Question 158:

  You need to create a user account named User5 on Client2. The solution must meet the following requirements:

  1.

  Prevent User5 from changing the password of the account.

  2.

  Ensure that User5 can perform backups.

  3.

  Use the principle of least privilege.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  1.

  On Client2, press the Win + X keys on your keyboard. Then, click or tap the Computer Management option from the menu.

  2.

  Expand the Local Users and Groups from the left side of the window, and select Users.

  3.

  Right-click somewhere on the blank space found in the middle section of the window, and click or tap on New User. This opens the New User window, where you can enter all the details about the new user account.

  4.

  Type the user name and, optionally, its full name and description.

  5.

  Type the password to be used for that user and confirm it.

  6.

  Select the User cannot change password check box.

  7.

  Click Create and Windows immediately creates the user account. When you are done creating user accounts, click Close in the New User window.

  1.

  Press the Win + R keys to open Run, type secpol.msc into Run, and click/tap on OK to open Local Security Policy.

  2.

  Expand open Local Policies in the left pane of Local Security Policy, click/tap on User Rights Assignment, and double click/tap on the Back up files and directories policy in the right pane.

  3.

  Click/tap on the Add User or Group button.

  4.

  Click/tap on the Object Types button.

  5.

  Check all the boxes for Object types, and click/tap on the OK.

  6.

  Click/tap on the Advanced button.

  7.

  Click/tap on the Find Now button, select the name of the user or group

  8.

  Click/tap on OK.

  9.

  Click/tap on OK.

  10.When finished, you can close Local Users and Groups.

  Reference: https://www.digitalcitizen.life/geeks-way-creating-user-accounts-and-groups https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-rights-assignment

• Question 159:

  You need to create a group named Group2 on Client2. The members of Group2 must be able to change the system time. The solution must use the principle of least privilege.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  1.

  On Client2, Press Windows+R

  2.

  Type lusrmgr.msc

  3.

  Right click Groups and click New Group.

  4.

  Type in the Group name and a description.

  5.

  Click Add to add members to this group. Specify the name of the user or group or computer to be added.

  6.

  Click Create and Close.

  1.

  Press the Win + R keys to open Run, type secpol.msc into Run, and click/tap on OK to open Local Security Policy.

  2.

  Expand open Local Policies in the left pane of Local Security Policy, click/tap on User Rights Assignment, and double click/tap on the Change the system time policy in the right pane.

  3.

  Click/tap on the Add User or Group button.

  4.

  Click/tap on the Object Types button.

  5.

  Check all the boxes for Object types, and click/tap on the OK.

  6.

  Click/tap on the Advanced button.

  7.

  Click/tap on the Find Now button, select the name of the user or group

  8.

  Click/tap on OK.

  9.

  Click/tap on OK.

  10.When finished, you can close Local Users and Groups.

  Reference: https://www.windows-active-directory.com/local-user-management.html https://www.tenforums.com/tutorials/92910-allow-prevent-users-groups-change-time-windows-10-a.html#option1

• Question 160:

  You need to ensure that you can successfully ping DC1 from Client3 by using the IP4 address of DC1.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  1.

  On Client3, press Windows+R to access Run.

  2.

  Type cmd and click OK to access the command prompt.

  3.

  Type ipconfig and press Enter to check that you have a valid IP address.

  1.

  On Client3, press Windows+R to access Run.

  2.

  Type cmd and click OK to access the command prompt.

  3.

  Type "ping" and the IP address of the Domain Controller (e.g. "ping 172.16.1.43").

  Reference: http://www.turn-n-burn.com/DestinyNetworks/Downloads/WebHelp3-1-1/Ping_the_Domain_Controller.htm