Microsoft Microsoft Certifications MD-100 Questions & Answers

• Question 301:

  You have a computer that runs Windows 10 and has BitLocker Drive Encryption (BitLocker) enabled on all volumes.

  You start the computer from Windows Recovery Environment (WinRE).

  You need to read the data on the system drive.

  What should you do?

  A. Run cipher.exe and specify the /rekey parameter

  B. Run cipher.exe and specify the /adduser parameter

  C. Run manange-bde.exe and specify the-off parameter

  D. Run manage-bde.exe and specify the-unlock parameter

  Correct Answer: D

  https://www.repairwin.com/how-to-disable-bitlocker-in-windows-recovery-environment-winre/

• Question 302:

  You need to enable BitLocker Drive Encryption (BitLocker) on a computer named Computer1 that runs Windows 10. Computer1 has the following configurations:

  1.

  Contains only one 200-GB NTFS volume named C:\

  2.

  Contains 50 GB of unallocated disk space

  3.

  Is the member of a workgroup

  4.

  Has TPM enabled What should you do first?

  A. Create a VHD.

  B. Disable TPM.

  C. Create an additional volume.

  D. Join Computer1 to an Azure Active Directory (Azure AD) tenant.

  Correct Answer: C

  Two partitions are required to run BitLocker because pre-startup authentication and system integrity verification must occur on a separate partition from the encrypted operating system drive. This configuration helps protect the operating system and the information in the encrypted drive.

  Reference: https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq

• Question 303:

  Your network contains an Active Directory domain. The domain contains a user named Admin1. All computers run Windows 10.

  You enable Windows PowerShell remoting on the computers.

  You need to ensure that Admin1 can establish remote PowerShell connections to the computers. The solution must use the principle of least privilege.

  To which group should you add Admin1?

  A. Access Control Assistance Operators

  B. Power Users

  C. Remote Desktop Users

  D. Remote Management Users

  Correct Answer: D

  https://4sysops.com/wiki/enable-powershell-remoting/

• Question 304:

  You have a computer named Computer1 that runs Windows 10 and has an application named App1.

  You need to use Performance Monitor to collect data about the processor utilization of App1.

  Which performance object should you monitor?

  A. Process

  B. Processor Performance

  C. Processor Information

  D. Processor

  Correct Answer: A

  References: https://www.cse.wustl.edu/~jain/cse567-06/ftp/os_monitors/index.html

• Question 305:

  Your network contains an Active Directory domain that is synced to a Microsoft Azure Active Directory (Azure AD) tenant.

  The company plans to purchase computers preinstalled with Windows 10 Pro for all users.

  The company the following requirements:

  1.

  The new computers must be upgraded to Windows 10 Enterprise automatically.

  2.

  The new computers must be joined to Azure AD automatically when the user starts the new computers for the first time.

  3.

  The users must not be required to accept the End User License Agreement (EULA).

  4.

  You need to deploy the new computers. What should you do?

  A. Make use of the wipe and load refresh deployment method.

  B. Perform in-place upgrade on the new computers.

  C. Provide provisioning packages for the new computers.

  D. Make use of Windows Autopilot.

  Correct Answer: D

  Windows Autopilot is a collection of technologies used to set up and pre-configure new devices, getting them ready for productive use. You can also use Windows Autopilot to reset, repurpose and recover devices.

  The OEM Windows 10 installation on the new computers can be transformed into a "business-ready" state, applying settings and policies, installing apps, and even changing the edition of Windows 10 being used (e.g. from Windows 10 Pro to

  Windows 10 Enterprise) to support advanced features.

  The only interaction required from the end user is to connect to a network and to verify their credentials. Everything beyond that is automated.

  Reference:

  https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot

• Question 306:

  You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named UserA.

  You have two computers named Computer1 and Computer2 that run Windows 10 and are joined to contoso.com.

  You need to ensure that UserA can connect to Computer2 from Computer1 by using Remote Desktop.

  Which three actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. On Computer1, modify the registry.

  B. On Computer2, modify the registry.

  C. On Computer1, modify the properties of UserA.

  D. On Computer1, enable Remote Desktop.

  E. On Computer2, modify the properties of UserA.

  F. On Computer 2, enable Remote Desktop.

  G. On Computer2, add the Everyone group to the Remote Desktop Users group.

  H. On Computer1, add the Everyone group to the Remote Desktop Users group.

  Correct Answer: EFG

  Reference: https://docs.microsoft.com/en-us/windows/client-management/connect-to-remote-aadj-pc

• Question 307:

  You have 20 computers that run Windows 10. The computers are in a workgroup.

  You need to create a local user named Admin1 on all the computers. Admin1 must be a member of the Remote Management Users group.

  What should you do?

  A. From Windows Configuration Designer, create a provisioning package, and then run the provisioning package on each computer.

  B. Create a script that runs the New-ADUser cmdlet and the Set-AdGroup cmdlet.

  C. Create a Group Policy object (GPO) that contains the Local User Group Policy preference.

  D. Create a script that runs the New-MsolUser cmdlet and the Add-ADComputerServiceAccount cmdlet.

  Correct Answer: A

  https://blogs.technet.microsoft.com/askpfeplat/2017/11/06/use-group-policy-preferences-to-manage-the-local-administrator-group/

• Question 308:

  You have several computers that run Windows 10. The computers are in a workgroup.

  You need to prevent users from using Microsoft Store apps on their computer.

  What are two possible ways to achieve the goal? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. From Security Settings in the local Group Policy, configure Security Options.

  B. From Administrative Templates in the local Group Policy, configure the Store settings.

  C. From Security Settings in the local Group Policy, configure Software Restriction Policies.

  D. From Security Settings in the local Group Policy, configure Application Control Policies.

  Correct Answer: BD

  https://www.techrepublic.com/article/how-to-manage-your-organizations-microsoft-store-group-policy/

• Question 309:

  Your network contains an Active directory domain. The domain contains 1,000 computers that run Windows 10.

  You need to prevent computers of the research department from appearing in network in File Explorer.

  What should you do?

  A. Disable the Network List Service

  B. Configure DNS to use an external provider

  C. Turn off network discovery

  D. Modify the %systemroot%system32\drivers\etc\Network ile

  Correct Answer: C

• Question 310:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 8.1.

  Computer1 has apps that are compatible with Windows 10.

  You need to perform a Windows 10 in-place upgrade on Computer1.

  Solution: You copy the Windows 10 installation media to a Microsoft Deployment Toolkit (MDT) deployment share. You create a task sequence, and then you run the MDT deployment wizard on Computer1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit