Microsoft Microsoft Certifications MD-100 Questions & Answers

• Question 351:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com. The domain contains the users shown in the following table.

  

  You have a computer named Computer1 that runs Windows 10 and is in a workgroup.

  A local standard user on Computer1 named User1 joins the computer to the domain and uses the credentials of User2 when prompted.

  You need to ensure that you can rename Computer1 as Computer33. Solution: You use the credentials of User2 on Computer1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Renaming a domain-joined computer will also rename the computer account in the domain. To do this, you need domain administrator privileges.

  User2 is a domain user, not an administrator. Use User3's credentials instead.

  References:

  https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups

• Question 352:

  Your company is not connected to the internet. The company purchases several new computers with Windows 10 Pro for its users.

  None of the new computers are activated.

  You need to activate the computers without connecting the network to the Internet.

  What should you do?

  A. Make use of the Volume Activation Management Tool (VAMT).

  B. Make use of the Key Management Service (KMS).

  C. Make use of the Windows Process Activation Service.

  D. Run the Get-WmiObject-query cmdlet.

  Correct Answer: B

  You can configure one of the computers as a Key Management Service (KMS) host and activate the KMS host by phone. The other computers in the isolated network can then activate using the KMS host.

  Installing a KMS host key on a computer running Windows 10 allows you to activate other computers running Windows 10 against this KMS host and earlier versions of the client operating system, such as Windows 8.1 or Windows 7. Clients locate the KMS server by using resource records in DNS, so some configuration of DNS may be required. This scenario can be beneficial if your organization uses volume activation for clients and MAK-based activation for a smaller number of servers. To enable KMS functionality, a KMS key is installed on a KMS host; then, the host is activated over the Internet or by phone using Microsoft's activation services.

  Reference: https://docs.microsoft.com/en-us/windows/deployment/volume-activation/activate-using-key-management-service-vamt

• Question 353:

  You have a VPN server that accepts PPTP and L2TP connections and is configured as shown in the following exhibit.

  

  A user named User1 has a computer that runs Windows 10 and has a VPN connection configured as shown in the following exhibit.

  

  User1 fails to establish a VPN connection when connected to a home network. You need to identify which VPN client setting must be modified. What should you identify?

  A. ServerAd dress

  B. TunnelType

  C. AuthenticationMethod

  D. L2tplPsecAuth

  E. EncryptionLevel

  Correct Answer: A

  The server address is a private IP address. This needs to be the public IP address of the VPN server.

• Question 354:

  You have a computer that runs Windows 10.

  The computer fails to start, and you receive the following error message: "BOOTMGR image is corrupt. The system cannot boot".

  You need to repair the system partition.

  Which command should you run from Windows Recovery Environment (WinRE)?

  A. fdisk.exe

  B. chkdsk.exe

  C. diskpart.exe

  D. bcdboot.exe

  Correct Answer: C

  DiskPart, which has replaced fdisk, is a command-line utility that provides the ability to manage disks, partitions or volumes in your computer running all versions of operating system since Windows 2000.

  References: https://www.diskpart.com/windows-10/diskpart-windows-10-1203.html

• Question 355:

  You have a workgroup computer named Computer1 that runs Windows 10.

  You need to configure Windows Hello for sign-in to Computer1 by using a physical security key.

  What should you use?

  A. a USB 3.0 device that supports BitLocker Drive Encryption (BitLocker)

  B. a USB device that supports FIDO2

  C. a USB 3.0 device that has a certificate from a trusted certification authority (CA)

  D. a USB device that supports RSA SecurID

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/user-help/security-info-setup-security-key

• Question 356:

  You have a computer named Computer1. Computer1 runs Windows 10 Pro.

  Computer1 is experiencing connectivity issues.

  You need to view the IP addresses of any remote computer that Computer1 has an active TCP connection to.

  Should you do?

  A. In Windows Administrative Tools, open Performance Monitor

  B. In the Control Panel, open Network and Internet Then select Network and Sharing Center

  C. In Windows Administrative Tools, open Resource Monitor

  D. In the Setting app. open Update and Security Then open Windows Security and select Firewall and Network protection

  Correct Answer: C

• Question 357:

  Your company has an isolated network used for testing. The network contains 20 computers that run Windows 10. The computers are in a workgroup. During testing, the computers must remain in the workgroup.

  You discover that none of the computers are activated.

  You need to recommend a solution to activate the computers without connecting the network to the Internet.

  What should you include in the recommendation?

  A. Volume Activation Management Tool (VAMT)

  B. Key Management Service (KMS)

  C. Active Directory-based activation

  D. the Get-WindowsDeveloperLicense cmdlet

  Correct Answer: A

  KMS requires a minimum 25 computers.

  "KMS volume activation requires a minimum threshold of 25 computers before activation requests will be processed. The verification process described here will increment the activation count each time a client computer contacts the KMS host, but unless the activation threshold is reached, the verification will take the form of an error message rather than a confirmation message." https://docs.microsoft.com/en-us/windows/deployment/volume-activation/activate-using-key-management-service-vamt#verifying-the-configuration-of-key-management-service https://docs.microsoft.com/en-us/windows/deployment/volume-activation/introduction-vamt

• Question 358:

  You have a computer that runs Windows 10 Home.

  You need to upgrade the computer to Windows 10 Enterprise as quickly as possible. The solution must retain the user settings.

  What should you do first?

  A. Run the scanscace command.

  B. Perform an in-place upgrade to Windows Pro.

  C. Install the latest feature updates.

  D. Run the sysprep command.

  Correct Answer: B

  References: https://docs.microsoft.com/en-us/windows/deployment/upgrade/windows-10-upgrade-paths

• Question 359:

  You have a Microsoft 365 tenant that contains 70 remote users.

  The remote users work from various locations.

  Recently, each remote user purchased a personal computer that runs Windows 10 Home.

  You need to configure the VPN settings on the computers automatically by using the least amount of administrative effort.

  What should you use?

  A. an unattend answer file

  B. a Group Policy Object (GPO)

  C. Windows Autopilot

  D. a provisioning package

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-packages

• Question 360:

  You have a computer that runs Windows 10. You need to configure a picture password. What should you do?

  A. From Control Panel, configure the User Accounts settings.

  B. From the Settings app, configure the Sign-in options.

  C. From the Local Group Policy Editor, configure the Account Policies settings.

  D. From Windows PowerShell, run the Set-LocalUser cmdlet and specify the InputObject parameter.

  Correct Answer: B