Microsoft Microsoft Certifications MD-100 Questions & Answers
Question 21:
Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 11.
You need to enable the Windows Remote Management (WinRM) service on Computer1 and perform the following configurations:
1.
For the WinRM service, set Startup type to Automatic.
2.
Create a listener that accepts requests from any IP address.
3.
Enable a firewall exception for WS-Management communications.
Which PowerShell cmdlet should you use?
A. Invoke-WSManAction
B. Enable-PSSessionConfiguration
C. Enable-PSRemoting
D. Connect-WSMan
Correct Answer: C
The Enable-PSRemoting cmdlet configures the computer to receive PowerShell remote commands that are sent by using the WS-Management technology. WS-Management based PowerShell remoting is currently supported only on Windows platform.
The Enable-PSRemoting cmdlet performs the following operations:
*
Runs the Set-WSManQuickConfig cmdlet, which performs the following tasks:
Starts the WinRM service.
Sets the startup type on the WinRM service to Automatic.
Creates a listener to accept requests on any IP address.
Enables a firewall exception for WS-Management communications.
Creates the simple and long name session endpoint configurations if needed.
Enables all session configurations.
Changes the security descriptor of all session configurations to allow remote access.
*
Restarts the WinRM service to make the preceding changes effective.
You have two computers named Computer1 and Computer2 that run Windows 10. Computer2 has Remote Desktop enabled.
From Computer1, you connect to Computer2 by using Remote Desktop Connection.
You need to ensure that you can access the local drives on Computer1 from within the Remote Desktop session.
What should you do?
A. From Windows Defender Firewall on Computer1, allow Remote Desktop.
B. From Windows Defender Firewall on Computer2, allow File and Printer Sharing.
C. From Computer2, configure the Remote Desktop settings.
D. From Computer1, configure the Remote Desktop Connection settings.
Correct Answer: D
How to gain access to local files:
You can gain access to your disk drives on the local computer during a Remote Desktop session. You can redirect the local disk drives, including the hard disk drives, CD-ROM disk drives, floppy disk drives, and mapped network disk drives
so that you can transfer files between the local host and the remote computer in the same way that you copy files from a network share. You can use Microsoft Windows Explorer to view the disk drives and files for each redirected disk drive.
Alternatively, you can view the files for each redirected disk drive in My Computer. The drives are displayed as "drive_letter on terminal_server_client_name" in both Windows Explorer and My Computer.
To view the disk drives and files for the redirected disk drive:
1.
Click Start, point to All Programs (or Programs), point to Accessories, point to Communications, and then click Remote Desktop Connection.
2.
Click Options, and then click the Local Resources tab.
You have a computer named Computer1 that runs Windows 11.
You are often prompted to restart Computer1 after Windows updates are installed.
You need to minimize disruptions caused by restarting Computer1.
What should you configure?
A. Download updates over metered connections
B. Delivery Optimization
C. Focus assist
D. Active hours
Correct Answer: D
Question 24:
Your network contains an Active Directory domain. The domain contains 100 computers that run Windows 11.
You need to defer the deployment of quality updates by using Group Policy.
What is the maximum amount of time that you can defer the updates?
A. 180 days
B. seven days
C. 30 days
D. 365 days
Correct Answer: B
Question 25:
You have a computer named Computer1 that runs Windows 11.
You plan to change a registry setting on Computer1.
You need to ensure that you can revert to the previous registry setting if the change causes an issue on Computer1. The solution must minimize administrative effort.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Create a recovery drive.
B. Create a restore point.
C. Configure a dynamic lock policy.
D. Enable system protection.
E. Enable controlled folder access.
Correct Answer: BE
B: Reset Recent Registry Changes Using System Restore System Restore is a recovery feature built into Windows. Whenever you make changes like installing an app or a major update, Windows creates a restore point. You can later use these restore points to undo the changes if they cause issues.
Using a restore point will undo any changes to app, drivers, and system updates since that point in time. This includes the tweaks that such actions make to the registry, allowing you to reset some parts of the registry that you've recently modified.
BE: Create a system restore point
1.
In the search box on the taskbar, type Create a restore point, and select it from the list of results.
2.
On the System Protection tab in System Properties, select Create.
3.
Type a description for the restore point, and then select Create > OK.
Your network contains an Active Directory domain and an intranet webpage named Intranet 1 that requires Internet Explorer 11.
You plan to deploy 100 Windows 10 devices that will be domain-joined and will use Microsoft Edge as their default browser.
You need to ensure that Internet Explorer 11 is used automatically to view Intranet1. All other webpages must be viewed by using Microsoft Edge.
Which Group Policy setting should you modify?
A. Keep favorites in sync between Internet Explorer and Microsoft Edge
B. Configure the Enterprise Mode Site List
C. Allow Microsoft Compatibility Lists
D. Configure Open Microsoft Edge With
E. Send all intranet sites to Internet Explorer 11
Correct Answer: B
Configure IE mode policies.
Redirect sites from Microsoft Edge to IE mode
There are two options for identifying which sites should open in IE mode:
(Recommended) Configure sites on the Enterprise Site list
Configure all Intranet sites
Configure sites on the Enterprise Site list
You can use the following group policies to configure specific sites to open in IE mode:
Use the Enterprise Mode IE website list (Internet Explorer)
Configure the Enterprise Mode Site List (Microsoft Edge, version 78 or later)
This policy lets you create a separate Enterprise Mode Site list for Microsoft Edge. Enabling this policy overrides the settings in the "Use the Enterprise Mode IE website list" policy, if "Configure Internet Explorer integration" is enabled.
Disabling or not configuring this policy doesn't affect the default behavior of the "Configure Internet Explorer integration" policy.
You have 10 computers that run Windows 8.1 and have the following configurations:
1.
A single MBR disk
2.
A disabled TPM chip
3.
Disabled hardware virtualization
4.
UEFI firmware running in BIOS mode
5.
Enabled Data Execution Prevention (DEP)
You plan to upgrade the computers to Windows 10.
You need to ensure that the computers can use Secure Boot.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Enable hardware virtualization.
B. Disable DEP.
C. Convert the MBR disk to a GPT disk.
D. Enable the TPM chip.
E. Convert the firmware from BIOS to UEFI.
Correct Answer: CE
C. If you plan to upgrade to Windows 11, and you enable Secure Boot, the computer won't probably start anymore because the hard drive is using the MBR (Master Boot Record) partition table instead of the GPT (GUID Partition Table), which is a requirement to use Windows in UEFI (Unified Extensible Firmware Interface) mode and enable Secure Boot.
E: Secure boot is a security standard developed by members of the PC industry to help make sure that a device boots using only software that is trusted by the Original Equipment Manufacturer (OEM). When the PC starts, the firmware checks the signature of each piece of boot software, including UEFI firmware drivers (also known as Option ROMs), EFI applications, and the operating system. If the signatures are valid, the PC boots, and the firmware gives control to the operating system.
Note: Unified Extensible Firmware Interface (UEFI) is a specification for a software program that connects a computer's firmware to its operating system (OS). UEFI is expected to eventually replace basic input/output system (BIOS) but is
compatible with it. The specification is most often pronounced by naming the letters U-E-F-I.
Incorrect:
Not D: Secure Boot does not encrypt the storage on your device and does not require a TPM.
You have a computer that runs Windows 10 and contains a user named User1 and the following local Group Policy Objects (GPOs):
1.
Local Computer Policy
2.
Local Computer\User1 Policy
3.
Local Computer\Administrators Policy
4.
Local Computer\Non-Administrators Policy
You need to ensure that User1 must use a password that is at least 10 characters.
Which GPO should you modify?
A. Local Computer Policy
B. Local Computer\Administrators Policy
C. Local Computer \Non-Administrators Policy
D. Local Computer\User1 Policy
Correct Answer: D
Apply the policy only for User1.
Question 29:
You have a computer named Computer1 that runs Windows 11.
You plan to create restore points on Computer1. The restore points must be prevented from using more than 10 percent of the system drive.
What should you do first?
A. Create a new disk volume.
B. Enable system protection.
C. Configure Storage Sense.
D. Configure a drive optimization schedule.
Correct Answer: C
Question 30:
Your network contains an on-premises Active Directory domain. The domain contains two computers named Computer1 and Computer2 that run Windows 10.
You install Windows Admin Center on Computer1.
You need to manage Computer2 from Computer1 by using Windows Admin Center.
What should you do on Computer2?
A. Add an inbound Microsoft Defender Firewall rule.
B. Allow Windows Remote Management (WinRM) through the Microsoft Defender firewall.
C. Update the TrustedHosts list.
D. Run the Enable-PSRemoting cmdlet.
Correct Answer: B
Are you connecting to a workgroup machine on a different subnet?
To connect to a workgroup machine that is not on the same subnet as the gateway, make sure the firewall port for WinRM (TCP 5985) allows inbound traffic on the target machine.
Note: Troubleshooting Windows Admin Center include:
Make sure the Windows Remote Management (WinRM) service is running on both the gateway machine and managed node
Open the run dialog with WindowsKey + R
Type services.msc and press enter
In the window that opens, look for Windows Remote Management (WinRM), make sure it is running and set to automatically start
Incorrect:
Not D: The Enable-PSRemoting cmdlet configures the computer to receive PowerShell remote commands that are sent by using the WS-Management technology. WS-Management based PowerShell remoting is currently supported only on
Windows platform.
PowerShell remoting is enabled by default on Windows Server platforms. You can use Enable-PSRemoting to enable PowerShell remoting on other supported versions of Windows and to re-enable remoting if it becomes disabled.
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Microsoft exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your MD-100 exam preparations and Microsoft certification application, do not hesitate to visit our Vcedump.com to find your solutions here.