Microsoft Microsoft Certifications MD-100 Questions & Answers

• Question 321:

  You have 200 computers that run Windows 10 and are joined to an Active Directory domain.

  You need to enable Windows Remote Management (WinRM) on all the computers by using Group Policy.

  Which three actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Set the Startup Type of the Windows Remote Management (WS-Management) service to Automatic.

  B. Enable the Windows Firewall: Allow inbound remote administration exception setting.

  C. Enable the Allow remote server management through WinRM setting.

  D. Enable the Windows Firewall: Allow inbound Remote Desktop exceptions setting.

  E. Enable the Allow Remote Shell access setting.

  F. Set the Startup Type of the Remote Registry service to Automatic.

  Correct Answer: ABC

  References: https://support.auvik.com/hc/en-us/articles/204424994-How-to-enable-WinRM-with-domain-controller-Group-Policy-for-WMI-monitoring

• Question 322:

  Your company has an on-premises network that contains an Active Directory domain. The domain is synced to Microsoft Azure Active Directory (Azure AD). All computers in the domain run Windows 10 Enterprise.

  You have a computer named Computer1 that has a folder named C:\Folder1.

  You want to use File History to protect C:\Folder1.

  Solution: You enable File History on Computer1. You then enable archiving for Folder1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  File History only backs up copies of files that are in Libraries, and Desktop folders and the OneDrive files available offline on your PC. If you have files or folders elsewhere that you want backed up, you can add them to one of these folders. Reference: https://support.microsoft.com/en-us/help/17128/windows-8-file-history

• Question 323:

  Your network contains an Active Directory domain. The domain contains 1,000 computers that run Windows 10.

  You discover a known compatibility issue between a feature update and a device driver on the computers.

  You need to test the installation of the feature update on a test computer.

  Which Windows Update setting should you configure by using a Group Policy Object (GPO)?

  A. Automatic Updates detection frequency

  B. Disable safeguards for Feature Updates

  C. Select the target Feature Update version

  D. Reschedule Automatic Updates scheduled installations

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/windows/deployment/update/safeguard-opt-out

• Question 324:

  Your network contains an Active Directory domain. The domain contains 10 computers that run Windows 10.

  On a different computer named Computer1, you plan to create a collector-initiated subscription to gather the event logs from the Windows 10 computers.

  You need to configure the environment to support the event log collection.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Add Computer1 to the Event Log Readers group on the Windows 10 computers

  B. Add Computer1 to the Event Log Readers group on Computer1

  C. On the Windows 10 computers, change the Startup Type of Windows Event Collector to Automatic

  D. Enable Windows Remote Management (WinRM) on the Windows 10 computers

  E. Enable Windows Remote Management (WinRM) on Computer1

  Correct Answer: AD

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc748890(v=ws.11)

• Question 325:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com. The domain contains the users shown in the following table.

  

  You have a computer named Computer1 that runs Windows 10 and is in a workgroup.

  A local standard user on Computer1 named User1 joins the computer to the domain and uses the credentials of User2 when prompted.

  You need to ensure that you can rename Computer1 as Computer33.

  Solution: You use the credentials of User4 on Computer1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Renaming a domain-joined computer will also rename the computer account in the domain. To do this, you need domain administrator privileges.

  User4 is a server operator, not an administrator. Members of the Server Operators group can sign in to a server interactively, create and delete network shared resources, start and stop services, back up and restore files, format the hard disk

  drive of the computer, and shut down the computer.

  Use User3's credentials instead.

  References:

  https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups#bkmk-domainadmins

• Question 326:

  You have a computer named Computer1 that runs Windows 10. Computer1 is joined to an Active Directory domain named adatum.com. The domain contains two groups named Group1 and Group2. Computer1 contains a folder named C:\Folder1 that has the file permissions shown in the following table.

  

  You need to share C:\Folder1. The solution must ensure that the members of Group2 can access all the files in the share. What should you do?

  A. From File Explorer, use Network File and Folder Sharing. Assign the Read permission to Group2.

  B. From File Explorer, use Advanced Sharing. Assign the Read share permission to Group2.

  C. From Control Panel, use Advanced sharing settings. Configure file and printer sharing for the network profile of the domain.

  D. At a command prompt, run the nee share Share=C:\Folderl /granc:adacum\group2, read command.

  Correct Answer: D

  Reference: https://techgenix.com/net-share-command-30/

• Question 327:

  You have a computer that runs Windows 10 and is joined to Azure Active Directory (Azure AD). You attempt to open Control Panel and receive the error message shown on the following exhibit.

  

  You need to be able to access Control Panel. What should you modify?

  A. the PowerShell execution policy

  B. the Local Group Policy

  C. the Settings app

  D. a Group policy preference

  Correct Answer: B

  https://windows10skill.com/this-operation-has-been-cancelled-due-to-restrictions-in-effect-on-this-pc/

• Question 328:

  Your network contains an Active Directory domain. The domain contains 1,000 computers that run Windows 10.

  You configure Microsoft Edge settings by using domain and local Group Policy Objects (GPOs).

  You need to generate a report that contains all the Microsoft Edge policy settings applied to a computer.

  What should you do?

  A. From PowerShell. run the Gec-GPO cmdlet.

  B. From PowerShell. run the Gec-GPOReporc cmdlet.

  C. From Microsoft Edge, open edge://policy.

  D. From the Start menu, select Group Policy Object Editor

  Correct Answer: C

  The Get-GPOReport cmdlet would generate a report for all domain group policy objects. However, this would not display the settings that are applied by local group policy objects. To display the settings applied by both domain and local GPOs, you would have to open Microsoft Edge and enter edge://policy in the address bar.

• Question 329:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a computer named Computer1 that runs Windows 10.

  A service named Application1 is configured as shown in the exhibit.

  

  You discover that a user used the Service1 account to sign in to Computer1 and deleted some files.

  You need to ensure that the identity used by Application1 cannot be used by a user to sign in to sign in to the desktop on Computer1. The solution must use the principle of least privilege.

  Solution: On Computer1, you assign Service1 the deny log on locally user right.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/deny-log-on-locally

• Question 330:

  You have a computer named Computer1. Computer1 runs Windows 10 Pro.

  You attempt to start Computer1 but you receive the following error message:

  Bootmgr is missing.

  You need to be able to start Computer1.

  What should you do?

  A. Start the computer in recovery mode and run the boocrec /rebuildbcd command.

  B. Start the computer in recovery mode and run the dislcparc /repair command.

  C. Start the computer in recovery mode and run the bcdboot /s command.

  D. Start the computer in recovery mode and run the booccfg /debug command.

  Correct Answer: A

  Reference: https://neosmart.net/wiki/bootmgr-is-missing/