Microsoft Microsoft Certifications MD-100 Questions & Answers

• Question 171:

  A web service installed on Client1 is used for testing.

  You discover that users cannot connect to the web service by using HTTP.

  You need to allow inbound HTTP connections to Client1.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  To create an inbound port rule

  1.

  Open the Group Policy Management Console to Windows Defender Firewall with Advanced Security.

  2.

  In the navigation pane, click Inbound Rules.

  3.

  Click Action, and then click New rule.

  4.

  On the Rule Type page of the New Inbound Rule Wizard, click Custom, and then click Next.

  5.

  On the Program page, click All programs, and then click Next.

  6.

  On the Protocol and Ports page, select the protocol type that you want to allow. To restrict the rule to a specified port number, you must select either TCP or UDP. Because this is an incoming rule, you typically configure only the local port number. TCP port 80. When you have configured the protocols and ports, click Next.

  7.

  On the Scope page, you can specify that the rule applies only to network traffic to or from the IP addresses entered on this page. Configure as appropriate for your design, and then click Next.

  8.

  On the Action page, select Allow the connection, and then click Next.

  9.

  On the Profile page, select the network location types to which this rule applies, and then click Next. 10.On the Name page, type a name and description for your rule, and then click Finish.

  Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-an-inbound-port-rule https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers

• Question 172:

  You need to ensure that all the current and future users in the Active Directory domain can establish Remote Desktop connections to Client1. The solution must use the principle of least privilege.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  Step 1. Add Remote Desktop Users to the Remote Desktop Users Group.

  1.

  Open Server Manager.

  2.

  From Tools menu, select Active Directory Users and Computers

  3.

  Double click at your domain on the left and then select Builtin.

  4.

  Open Remote Desktop Users on the right pane.

  5.

  At Members tab, click Add.

  6.

  Type the AD users that you want to give Remote access to the RDS Server and click OK.

  7.

  After selecting the remote desktop users, click OK again to close the window.

  Step 2. Allow the log on through remote desktop Services.

  1. Open Group Policy Editor. To do that:

  a.

  Simultaneously press the Windows + R keys to open run command box.

  b.

  Type gpedit.msc and press Enter.

  2.

  In Group Policy Editor navigate to: Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment.

  3.

  At the right Pane: double click at Allow log on through Remote Desktop Services.

  4.

  Click Add User or Group.

  5.

  Type remote and then click Check Names.

  6.

  Select the Remote Desktop Users and click OK.

  7.

  Click OK at 'Select users, computers…' window.

  8.

  Finally click OK again and close Group Policy Editor.

  Reference: https://www.wintips.org/fix-to-sign-in-remotely-you-need-the-right-to-sign-in-through-remote-desktop-services-server-2016/

• Question 173:

  You need to prevent user names and passwords from being filled in on forms automatically when a user browses to websites from Client2.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  1.

  Open the Local Group Policy Editor.

  2.

  In the left pane of Local Group Policy Editor, navigate to Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge

  3.

  In the right pane of Microsoft Edge in Local Group Policy Editor, double click/tap on the Configure Autofill policy to edit it.

  4.

  Select Disabled, click/tap on OK.

  5.

  In the right pane of Microsoft Edge in Local Group Policy Editor, double click/tap on the

  6.

  Configure Password Manager policy to edit it.

  7.

  Select Disabled, click/tap on OK.

  8.

  You can now close the Local Group Policy Editor.

  Reference: https://docs.microsoft.com/en-us/microsoft-edge/deploy/available-policies https://www.tenforums.com/tutorials/115069-enable-disable-autofill-microsoft-edge-windows-10-a.html

• Question 174:

  You need to ensure that C:\Scripts\Configure.ps1 runs every time a user sign in to Client2.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  Go to the Start menu, type “Task Scheduler” and select it from the search results.

  

  Task Scheduler can also be accessed in the Control Panel under Administrative Tools. In the right side of the Task Scheduler menu, under Actions, select “Create Task.”

  

  On the General tab, enter a name and description for the task you’re creating. Check the box “Run with highest privileges.”

  Once you have filled out a name and description, click the “Triggers” tab, and then click “New.”

  In this menu, under “Begin the task:” select “At log on.” Choose which user you would like the task to run for at log on. For our purposes, Any user.

  Configure any of the applicable advanced settings you would like.

  After you are finished configuring the new trigger, click OK and then select the “Actions” tab. Click “New” to make a new action.

  

  Choose “Start a program” under the Action menu and then click “Browse” to point to C:\Scripts\Configure.ps1.

  Click OK to exit out of the Actions menu. The “Conditions” and “Settings” tabs can be left alone.

  Click OK on the Create Task menu, and you are finished.

  Reference:

  https://www.howtogeek.com/138159/how-to-enable-programs-and-custom-scripts-to-run-at-boot/

• Question 175:

  You need to ensure that the File History of Contoso\Administrator on Client1 is backed up automatically to \\DC1\Backups.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  How to set up and enable File History

  1.

  On Client1, go to Start > Settings > Update and Security.

  2.

  Select Backup and click “Add a drive.”

  3.

  Select the drive or network location (\\DC1\Backups) you want to use for File History's backups.

  Now click “More options.” Here you can start a backup, change when your files are backed up, select how long to keep backed up files, add or exclude a folder, or switch File History to a different drive.

  

  Click the “Back up now” button to start your first File History backup.

  Reference: https://lifehacker.com/how-to-back-up-your-computer-automatically-with-windows-1762867473

• Question 176:

  You need to create an HTML report that shows which policies and policy settings are applied to CONTOSO\User1 on Client1. You must save the output to a file named Report.html in a folder named Folder1 on the C drive of Client1.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  On Client1, log in as administrator. Open command prompt and type:

  gpresult /h CONTOSO\User1\C:\Folder1\Report.html

  Reference: https://www.google.co.za/search?biw=1366andbih=614andsxsrf=ALeKk01XD_luAn4X-bIMllUjpYBm0i7btQ%3A1592996005097andei=pTDzXqLCBaif1fAP1NODqAYandq=gpresult+%2Fh+report.html+locationandoq=gpresult+html+report +andgs_lcp=CgZwc3ktYWIQARgEMgIIADICCAAyBggAEBYQHjIGCAAQFhAeMgYIABAWEB4yBggAEBYQHjIGCAAQFhAeMgYIABAWEB4yCAgAEBYQChAeMgYIABAWEB46BAgAEEdQyOUnWMjlJ2CRhihoAHACeACAAZIDiAGSA5IBAzQtM ZgBAKABAaoBB2d3cy13aXoandsclient=psy-ab

• Question 177:

  SIMULATION

  You have a computer named Computer1 that runs Windows 10.

  Computer1 has a folder named C:\Folder1.

  You need to meet the following requirements:

  1.

  Provide a user named Jon Ross with the ability to modify the permissions of C:\Folder1.

  2.

  Ensure that the principle of least privilege is maintained. What should you do?

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.

  Correct Answer: A

  In Windows Explorer, right-click the C:\Folder1 folder, and then click Properties.

  Click on the Security tab, and then click Edit.

  In the Permissions dialog box, add Jon Ross.

  Specify the Allow Modify permissions for the Jon Ross.

  Click OK twice to close the Security dialog box.

  Click OK twice to close the Properties dialog box.

  Reference:

  https://docs.microsoft.com/en-us/iis/web-hosting/configuring-servers-in-the-windows-web-platform/configuring-share-and-ntfs-permissions

• Question 178:

  SIMULATION

  You have a computer named Computer1. Computer1 runs Windows 10 Pro.

  You have a mobile device. You use Bluetooth to pair the mobile device to Computer1.

  You want to enable dynamic lock on Computer1.

  What should you do?

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.

  Correct Answer: A

  On Computer1, select the Start button > Settings > Accounts > Sign-in options.

  Under Dynamic lock, select the Allow Windows to automatically lock your device when you're away check box.

  Reference:

  https://support.microsoft.com/en-za/help/4028111/windows-lock-your-windows-10-pc-automatically-when-you-step-away-from

• Question 179:

  Users in the Finance group report that they cannot copy files to Client1\Finance. You need to resolve the issue.

  To complete this task, sign in to the required computer or computers.

  Correct Answer: See explanation below.

  1.

  Open File Explorer.

  2.

  Browse and find the file or folder you want to have full access.

  3.

  Right-click it, and select Properties.

  4.

  Click the Security tab to access the NTFS permissions.

  5.

  Click the Advanced button.

  6.

  On the "Advanced Security Settings" page, you need to click the Change link, in the Owner's field.

  7.

  Click the Advanced button.

  8.

  On the "Select User or Group" page, click the Find Now button.

  9.

  From the search result, select your user account, and click OK.

  10.On the "Select User or Group" page, click OK.

  11.Click Apply.

  12.Click OK.

  13.Click OK again.

  14.Click OK one more time to complete this task.

  It's important to note that if you're taking ownership of a folder, you can check the Replace ownership on subcontainers and object option in the Advanced Security Settings page to take control of the subfolders inside of the folder.

  Now you'll need to grant full access control to your account, to do this use the following steps:

  1.

  Right-click the file or folder and select Properties.

  2.

  Click the Security tab to access the NTFS permissions.

  3.

  Click the Advanced button.

  4.

  Under the Permissions tab, click Add.

  5.

  Click Select a principal to add your user account.

  6.

  On the "Select User or Group" page, click the Find Now button.

  7.

  From the search result, select your user account, and click OK.

  8.

  On the "Select User or Group" page, click OK.

  9.

  On "Permission Entry", check the Full control option.

  10.Click OK.

  11.Click OK.

  12.Click Apply.

  13.Click OK.

  14.Click OK to close the file or folder properties to complete the task.

  You can now assign the necessary permissions to the Finance group.

  If you right-click on a file or folder, choose Properties and click on the Security tab, we can now try to edit some permissions. Go ahead and click the Edit button to get started.

  At this point, there are a couple of things you can do. Firstly, you’ll notice that the Allow column is probably greyed out and can't be edited. This is because of the inheritance I was talking about earlier. However, you can check items on the Deny column.

  When you click the Add button, you have to type in the user name or group name into the box and then click on Check Names to make sure it's correct. If you don't remember the user or group name, click on the Advanced button and then just click Find Now. It will show you all the users and groups.

  Click OK and the user or group will be added to the access control list. Now you can check the Allow column or Deny column.

  Reference: https://www.windowscentral.com/how-take-ownership-files-and-folders-windows-10 https://www.online-tech-tips.com/computer-tips/set-file-folder-permissions-windows/

• Question 180:

  SIMULATION

  You have a computer named Computer1. Computer1 runs Windows 10 Pro. Computer1 has a cellular connection and a Wi-Fi connection.

  You want to prevent Computer1from using the cellular connection unless a you manually connects to the cellular network.

  What should you do?

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.

  Correct Answer: A

  Select the Network icon on the lower right corner of the taskbar, and then select the cellular network icon. Clear the Let Windows manage this connection check box.

  Reference: https://support.microsoft.com/en-za/help/10739/windows-10-cellular-settings