Microsoft Microsoft Certifications MD-100 Questions & Answers

• Question 161:

  You need to ensure that a local user named User1 can establish a Remote Desktop connection to Client2.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  Add User to Remote Desktop Users Group via Settings App

  1.

  Open the Settings app on Client2 and go to System -> Remote Desktop. Click on the Select users that can remotely access this PC link on the right side.

  2.

  When the Remote Desktop Users dialog opens, click on Add.

  3.

  Click on Advanced.

  4.

  Click on Find Now and then select any user account you want to add to the “Remote Desktop Users” group, and click OK.

  5.

  Click OK and you’re done.

  Reference:

  https://www.top-password.com/blog/add-user-to-remote-desktop-users-group-in-windows-10/

• Question 162:

  You need to connect to your company's network and create a VPN connection on Client2 named VPN1 that meets the following requirements:

  VPN1 must connect to a server named vpn.contoso.com.

  Only traffic to your company's network must be routed through VPN1.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  1.

  On Client2, click on the Start button and go to settings.

  2.

  Select Network and Internet.

  3.

  Select VPN on the left-hand side

  4.

  Click on the Add a VPN connection button.

  5.

  Next, select the VPN provider–This will almost always be Windows (built-in).

  6.

  Name your connection and enter the server name as provided by your IT technician. (VPN1 and vpn.contoso.com).

  7.

  Add in your username and password as provided by your IT technician.

  8.

  Click Save when done.

  9.

  Closeout the PC settings windows.

  Reference: https://www.themillergroup.com/vpn-windows-10/

• Question 163:

  You need to identify the total number of events that have Event ID 63 in the Application event log. You must type the number of identified events into C:\Folder1\FileA.txt.

  To complete this task, sign in to the required computer or computers and perform the required action.

  Correct Answer: See explanation below.

  1.

  Open Event Viewer.

  2.

  Click the log that you want to filter, then click Filter Current Log from the Action pane or right-click menu. This will open the Filter Current Log dialog box.

  3.

  You can specify a time period if you know approximately when the relevant events occurred. You can specify the event level, choosing between Critical, Warning, Verbose, Error and Information. If you select none of these, all event levels will be returned. You can't modify which event log is being checked as filters apply only to a single log.

  4.

  You can choose the event sources which have generated the log entries, and search for key words, users, or computers. You can also search using specific event IDs.

  Reference: https://www.manageengine.com/products/active-directory-audit/kb/how-to/how-to-search-the-event-viewer.html

• Question 164:

  You need to enable the Prohibit User from manually redirecting Profile Folders Group Policy setting only for the administrative users of Client3.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  1.

  Open the Administrator Group Local Group Policy Editor.

  2.

  In the left pane, click on User Configuration, Administrative Templates, and Desktop.

  3.

  In the right pane, right click on Prohibit User from Manually redirecting Profile Folders and click on Properties.

  4.

  To Prevent User Profile Folders Location Change Select (dot) Enabled and click on OK.

  5.

  Close the Local Group Policy Editor window.

  

  

  References: https://www.vistax64.com/threads/user-profile-folders-prevent-or-allow-location-change.180719/

• Question 165:

  You need to create a file named Private.txt in a folder named Folder1 on the C drive of Client2.

  You need to encrypt Private.txt and ensure that a user named User1 can view the contents of Private.txt.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  1.

  After creating Private.txt and saving it Folder1, right-click on the Private.txt, and select Properties from the context menu.

  2.

  On the General tab, click Advanced. Next, check the box “Encrypt contents to secure data” and click OK.

  3.

  A window will pop up asking you whether or not you want to encrypt the file and its parent folder. Select the “Encrypt the file only” and click OK.

  4.

  Private.txt will now show its file name in green color.

  1.

  Right-click Private.txt and then select Properties.

  2.

  Click Advanced on the General tab.

  3.

  Click Details on the Advanced Attributes tab to open the User Access dialog box.

  4.

  Click Add to open the Encrypting File System dialog box and then select User1.

  5.

  Click OK to add User1 to the list of users who have access to the file.

  6.

  Click OK until you've exited out of the dialog boxes.

  Reference: https://www.top-password.com/blog/password-protect-notepad-text-files-in-windows-10/ https://sourcedaddy.com/windows-7/how-to-grant-users-access-to-an-encrypted-file.html

• Question 166:

  You need to create a file named File1.txt in a folder named Folder1 on the C drive of Client2. You need to ensure that a user named User1 can read the contents of File1.txt. The solution must prevent User1 from modifying the file.

  To complete this task, sign in to Client2 and perform the required action.

  Correct Answer: See explanation below.

  1.

  After creating File1.txt in Folder1, right-click the file and select Properties.

  2.

  Access the Security tab, click Disable inheritance

  3.

  Click on Remove all inherited permissions from this object, click Apply, and select Yes in the dialog box that appears.

  4.

  Click OK

  5.

  Back on the Security tab select Edit to change permissions.

  6.

  Click Add, then enter User1 in the Enter the object names to select section.

  7.

  Click Check Names, and then click OK.

  8.

  Check only the Read box in the Allow column.

  9.

  Click apply, Ok, and OK

• Question 167:

  You need to ensure that Windows feature updates on Client1 are deferred for 15 days when the updates become generally available.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  1.

  Select the Start button, then select Settings > Update and Security > Windows Update.

  2.

  Under Update settings, select Advanced options.

  3.

  From the boxes under Choose when updates are installed, select the number of days you would like to defer a feature update or a quality update.

  Reference: https://support.microsoft.com/en-us/help/4026834/windows-10-defer-feature-updates

• Question 168:

  Users who attempt to sign in to the domain from Client3 report that the sign-ins fail.

  You need to resolve the issue.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  1.

  Use a local administrator account to log on to the computer.

  2.

  Select Start, press and hold (or right-click) Computer > Properties.

  3.

  Select Change settings next to the computer name.

  4.

  On the Computer Name tab, select Change.

  5.

  Under the Member of heading, select Workgroup, type a workgroup name, and then select OK.

  6.

  When you are prompted to restart the computer, select OK.

  7.

  On the Computer Name tab, select Change again.

  8.

  Under the Member of heading, select Domain, and then type the domain name.

  9.

  Select OK, and then type the credentials of the user who has permissions in the domain.

  10.When you are prompted to restart the computer, select OK.

  11.Restart the computer.

  Reference: https://support.microsoft.com/en-us/help/2771040/the-trust-relationship-between-this-workstation-and-the-primary-domain

• Question 169:

  You have already prepared Client1 for remote management.

  You need to forward all events from the Application event log on Client1 to DC1.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  Configuring the event source computer

  1.

  Run the following command from an elevated privilege command prompt on the Windows Server domain controller to configure Windows Remote Management: winrm qc -q

  2.

  Start group policy by running the following command: %SYSTEMROOT%\System32\gpedit.msc

  3.

  Under the Computer Configuration node, expand the Administrative Templates node, then expand the Windows Components node, then select the Event Forwarding node.

  4.

  Right-click the SubscriptionManager setting, and select Properties. Enable the SubscriptionManager setting, and click the Show button to add a server address to the setting. Add at least one setting that specifies the event collector computer. The SubscriptionManager Properties window contains an Explain tab that describes the syntax for the setting.

  5.

  After the SubscriptionManager setting has been added, run the following command to ensure the policy is applied: gpupdate /force

  Configuring the event collector computer

  1.

  Run the following command from an elevated privilege command prompt on the Windows Server domain controller to configure Windows Remote Management: winrm qc -q

  2.

  Run the following command to configure the Event Collector service: wecutil qc /q

  3.

  Create a source initiated subscription. This can either be done programmatically, by using the Event Viewer, or by using Wecutil.exe. If you use Wecutil.exe, you must create an event subscription XML file and use the following command: wecutil cs configurationFile.xml

  Reference: https://docs.microsoft.com/en-us/windows/win32/wec/setting-up-a-source-initiated-subscription#forwarding-the-security-log

• Question 170:

  Administrators report that they cannot use Event Viewer to remotely view the event logs on Client3.

  You need to ensure that the administrators can access the event logs remotely on Client3. The solution must ensure that Windows Firewall remains enabled.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  o to Control Panel -> System and Security -> Windows Firewall.

  2. Click on the Advanced settings link in the left-hand side.

  

  3. Enable COM+ Network Access (DCOM-In).

  4. Enable all the rules in the Remote Event Log Management group.

  

  Reference: https://www.zubairalexander.com/blog/unable-to-access-event-viewer-on-a-remote-computer/