Microsoft Microsoft Certifications MD-100 Questions & Answers

• Question 201:

  You have a workgroup computer that runs Windows 10.

  You create a local user named User1.

  User1 needs to be able to share and manage folders located in a folder named C:\Share by using the Shared Folders snap-in. The solution must use the principle of least privilege.

  To which group should you add User1?

  A. Device Owners

  B. Users

  C. Power Users

  D. Administrators

  Correct Answer: D

• Question 202:

  You enable controlled folder access in audit mode for several computers that run Windows 10.

  You need to review the events audited by controlled folder access.

  Which Event Viewer log should you view?

  A. Applications and Services\Microsoft\Windows\Windows Defender\Operational

  B. Applications and Services\Microsoft\Windows\Known Folders\Operational

  C. Windows\Security

  Correct Answer: A

  Controlled folder access events appear in Windows Event Viewer: Microsoft/Windows/Windows Defender/Operational folder.

  Event ID Description 5007 Event when settings are changed 1124 Audited controlled folder access event 1123 Blocked controlled folder access event

  https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/evaluate-controlled-folder-access?view=o365-worldwide

• Question 203:

  You have a computer named Computer1 that runs Windows 11.

  You need to ensure that you can use the ping command to validate network connectivity to Computer 1.

  How should you configure Windows Defender Firewall on Computer1?

  A. Enable the Core Networking - Teredo (UDP-ln) inbound rule.

  B. Create a new connection security rule.

  C. Enable the File and Printer Sharing (Echo Request - ICMPv4-ln) inbound rule.

  D. Add a new port rule to allow ports 80 and 443.

  Correct Answer: C

• Question 204:

  You have a Windows 10 device that contains the users shown in the following table.

  

  User1 runs the Resultant Set of Policy Wizard as shown in the following exhibit.

  

  You need to ensure that User1 can perform a Resultant Set of Policy (RSoP) analysis for User2. The solution must use the principle of least privilege. What should you do first?

  A. Add User1 to the local Administrators group.

  B. Add User2 to the local Performance Monitor Users group.

  C. Run RSoP from an elevated-privilege account.

  D. Add User1 to the local Performance Monitor Users group.

  Correct Answer: A

  Administrator have this permission. Other roles don't.

• Question 205:

  You deploy Windows 10 to a computer named Computer1.

  Computer1 contains a folder named Folder1 contains multiple documents.

  You need to ensure that you can recover the files in Folder1 by using the Previous Versions tab.

  What are three possible ways to achieve the goal? Each correct answer presents a complete the solution.

  NOTE: Each correct selection is worth one point.

  A. Enable File History and include Folder1 in the Documents library.

  B. Enable File History and add Folder1 to File History.

  C. Select Folder is ready for archiving from the properties of Folder1.

  D. Select Allow files in this folder to have contents indexed in addition to file properties from the properties of Folder1.

  E. Set up Backup and Restore (Windows 7) and include Folder1 in the backup.

  Correct Answer: ABE

• Question 206:

  Your company has a branch office that contains 25 workgroup computers. The computers run Windows 10 Pro.

  Users report that they cannot see other computers from Network in File Explorer.

  What should you do to resolve the issue?

  A. Set Network profile to Private.

  B. Turn off random hardware addresses for the network connection.

  C. Set Network profile to Public.

  D. Configure the network connection as a metered connection.

  Correct Answer: A

• Question 207:

  You have a computer that runs Windows 10.

  You need to view the Windows Update diagnostic log.

  What should you do first?

  A. From File Explorer, go to the C:\Windows\Logs\WindowsUpdate folder and select Show hidden files, folders, and drives.

  B. From Windows Update in the Settings app, configure Advanced options.

  C. From Event Viewer, modify the properties of the WindowsUpdateClient operational log.

  D. From Windows PowerShell, run the Get-WindowsUpdateLogcmdlet.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/powershell/module/windowsupdate/get-windowsupdatelog?view=windowsserver2022-ps

• Question 208:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a computer that runs Windows 10. The computer contains a folder. The folder contains sensitive data.

  You need to log which user reads the contents of the folder and modifies and deletes files in the folder.

  Solution: From the properties of the folder, you configure the Auditing settings and from the Audit Policy in the local Group Policy, you configure Audit privilege use.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Files and folders are objects and are audited through object access, not though privilege use.

  Reference: https://www.netwrix.com/how_to_detect_who_changed_file_or_folder_owner.html

• Question 209:

  You have 10 new Windows 10 devices.

  You plan to deploy a provisioning package that will configure a wireless network profile.

  You need to ensure that a support technician can install the provisioning package on the devices. The solution must use the principle of least privilege.

  To which group should you add the support technician?

  A. Users

  B. Power Users

  C. Network Configuration Operators

  D. Administrators

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-apply-package

• Question 210:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a computer that runs Windows 10. The computer contains a folder named D:\Scripts. D:\Scripts contains several PowerShell scripts.

  You need to ensure that you can run the PowerShell scripts without specifying the full path to the scripts. The solution must persist between PowerShell sessions.

  Solution: From PowerShell, you run $env:Path += ";d:\scripts".

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  References:

  https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_environment_variables?view =powershell-7