Microsoft Microsoft Certifications MD-100 Questions & Answers

• Question 311:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a computer named Computer1 that runs Windows 10.

  A service named Application1 is configured as shown in the exhibit.

  

  You discover that a user used the Service1 account to sign in to Computer1 and deleted some files.

  You need to ensure that the identity used by Application1 cannot be used by a user to sign in to sign in to the desktop on Computer1. The solution must use the principle of least privilege.

  Solution: On Computer1, you assign Service1 the deny log on as a service user right.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/deny-log-on-as-a-service

• Question 312:

  You install Windows 10 Enterprise on a new computer.

  You need to force activation on the computer.

  Which command should you run?

  A. slmgr /upk

  B. Sec-RDLicenseConfiguration-Force

  C. Sec-MsolLicense-AddLicense

  D. slmgr /ato

  Correct Answer: D

  References: https://docs.microsoft.com/en-us/windows/deployment/volume-activation/activate-using-key-management-service-vamt

• Question 313:

  Your network contains an Active Directory domain that is synced to a Microsoft Azure Active Directory (Azure AD) tenant.

  Your company purchases a Microsoft 365 subscription.

  You need to migrate the Documents folder of users to Microsoft OneDrive for Business.

  What should you configure?

  A. One Drive Group Policy settings

  B. roaming user profiles

  C. Enterprise State Roaming

  D. Folder Redirection Group Policy settings

  Correct Answer: A

  https://docs.microsoft.com/en-us/onedrive/redirect-known-folders?redirectSourcePath=%252fen-us%252farticle%252fredirect-windows-known-folders-to-onedrive-e1b3963c-7c6c-4694-9f2f-fb8005d9ef12

• Question 314:

  Your network contains an Active Directory domain. The domain contains the computers shown in the following table.

  

  On which computers can you perform an in-place upgrade to Windows 10 Enterprise?

  A. Computer3 only

  B. Computed and Computer3 only

  C. Computed only

  D. Computed. Computed, and Computer3

  Correct Answer: D

  https://docs.microsoft.com/en-us/windows/deployment/upgrade/windows-10-upgrade-paths https://docs.microsoft.com/en-us/windows/deployment/upgrade/windows-10-edition-upgrades

• Question 315:

  You have a public computer named Computer1 that runs Windows 10/ Computer1 contains a folder named Folder1.

  You need to provide a user named User1 with the ability to modify the permissions of Folder1. The solution must use the principle of least privilege.

  Which NTFS permission should you assign to User1?

  A. Full control

  B. Modify

  C. Write

  D. Read and execute

  Correct Answer: A

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc732880%28v%3dws.10%29 http://www.mdmarra.com/2013/11/full-control-v-modify-why-you-should-be.html

• Question 316:

  Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 10. Computer1 contains a folder named Folder1.

  You plan to share Folder1. Everyone will have Read share permissions, and administrators will have Full control share permission.

  You need to prevent the share from appearing when users browse the network.

  What should you do?

  A. Enable access-based enumeration.

  B. Deny the List NTFS permissions on Folded.

  C. Add Folded to a domain-based DFS namespace.

  D. Name the share Folded$.

  Correct Answer: D

  Appending a dollar sign to share name prevents a share from appearing when users browse the network.

• Question 317:

  You have a computer named Computer1 that runs Windows 10.

  Computer1 was off for one year. During that time, two feature updates and 12 quality updates were released.

  From the Microsoft Update Catalog website, you download the missing updates and save the updates to Computer1.

  You need to ensure that Computer1 runs the latest version of Windows 10 and is fully updated. The solution must minimize the amount of time required to update the computer.

  What should you do?

  A. Install the last feature update, and then install the last quality update.

  B. Install the last quality update, and then install both feature updates.

  C. Install the last quality update, and then install the last feature update.

  D. Install the last feature update, and then install all the quality updates released after the feature update.

  E. Install all the quality and feature updates in the order in which they were released.

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/windows/deployment/update/get-started-updates-channels-tools

• Question 318:

  Your network contains an Active Directory domain. The domain contains computers that run Windows 10.

  You must ensure that Windows BitLocker Drive Encryption is enabled on all client computers, even though a Trusted Platform Module (TPM) chip is installed in only some of them.

  You need to accomplish this goal by using one Group Policy object (GPO).

  What should you do?

  A. Enable the Allow enhanced PINs for startup policy setting, and select the Allow BitLocker without a compatible TPM check box

  B. Enable the Enable use of BitLocker authentication requiring preboot keyboard input on slates policy setting, and select the Allow BitLocker without a compatible TPM check box

  C. Enable the Require additional authentication at startup policy setting, and select the Allow BitLocker without a compatible TPM check box

  D. Enable the Control use of BitLocker on removable drives policy setting, and select the Allow BitLocker without a compatible TPM check box

  Correct Answer: C

  We need to allow Windows BitLocker Drive Encryption on all client computers (including client computers that do not have Trusted Platform Module (TPM) chip). We can do this by enabling the option to allow BitLocker without a compatible TPM in the group policy. The "Allow BitLocker without a compatible TPM" option is a checkbox in the "Require additional authentication at startup" group policy setting. To access the "Allow BitLocker without a compatible TPM" checkbox, you need to first select Enabled on the "Require additional authentication at startup" policy setting.

  Reference: https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings#bkmk-unlockpol4

• Question 319:

  You have a computer that runs Windows 10. You use the computer to test new Windows features. You need to configure the computer to receive preview builds of Windows 10 as soon as possible. What should you configure from Update and Security in the Settings app?

  A. Windows Insider Program

  B. Windows Update

  C. Delivery Optimization

  D. For developer

  Correct Answer: A

  Reference: https://insider.windows.com/en-us/getting-started/

• Question 320:

  Your company has a computer named Computer1 that runs Windows 10. Computer1 is used to provide guests with access to the Internet. Computer1 is a member of a workgroup.

  You want to configure Computer1 to use a user account sign in automatically when the computer is started. The user must not be prompted for a user name and password.

  What should you do?

  A. Configure Group Policy preferences.

  B. Run the BCDBoot command.

  C. Edit the Registry.

  D. Run the MSConfig command.

  Correct Answer: C

  In the registry, add a default user name and a default password in the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon sbukey.

  Reference: https://support.microsoft.com/en-us/help/324737/how-to-turn-on-automatic-logon-in-windows