Microsoft Microsoft Certifications MD-100 Questions & Answers

• Question 391:

  Which users can create a new group on Computer3?

  A. User31 and User32 only

  B. Admin1, User31, and User32 only

  C. User31 only

  D. Admin1 and User31 only

  Correct Answer: D

  Reference: https://ss64.com/nt/syntax-security_groups.html

• Question 392:

  You need to configure Delivery Optimization to meet the technical requirements. Which download mode should you use?

  A. Simple (99)

  B. Group (2)

  C. Internet (3)

  D. HTTP Only (0)

  E. Bypass (100)

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/windows/deployment/update/waas-delivery-optimization-reference#download-mode

• Question 393:

  Which users can sign in to Computer2 by using Remote Desktop?

  A. User2 only

  B. Admin1 only

  C. User1 only

  D. Admin1 and User2 only

  E. Admin1, User1, User2, and User3

  Correct Answer: D

  Reference: https://4sysops.com/archives/user-rights-assignment-in-windows-server-2016/

• Question 394:

  Which users can create a new group on Computer3?

  A. User31 only

  B. User1 and User32 only

  C. Admin1 and User31 only

  D. Admin1, User31, and User32 only

  Correct Answer: A

  Reference: https://ss64.com/nt/syntax-security_groups.html

• Question 395:

  You need to meet the technical requirement for User6. What should you do?

  A. Add User6 to the Remote Desktop Users group in the domain.

  B. Remove User6 from Group2 in the domain.

  C. Add User6 to the Remote Desktop Users group on Computer2.

  D. And User6 to the Administrators group on Computer2.

  Correct Answer: B

• Question 396:

  You need to meet the technical requirement for the IT department users. What should you do first?

  A. Issue computer certificates

  B. Distribute USB keys to the IT department users.

  C. Enable screen saver and configure a timeout.

  D. Turn on Bluetooth.

  Correct Answer: D

  References: https://support.microsoft.com/en-za/help/4028111/windows-lock-your-windows-10-pc-automatically-when-you-step-away-from

• Question 397:

  You need to meet the technical requirements for the San Diego office computers. Which Windows 10 deployment method should you use?

  A. wipe and load refresh

  B. in-place upgrade

  C. provisioning packages

  D. Windows Autopilot

  Correct Answer: D

  The requirement states: The computers in the San Diego office must be upgraded automatically to Windows 10 Enterprise and must be joined to Azure AD the first time a user starts each new computer. End users must not be required to accept the End User License Agreement (EULA).

  Windows Autopilot is a collection of technologies used to set up and pre-configure new devices, getting them ready for productive use. You can also use Windows Autopilot to reset, repurpose and recover devices.

  The OEM Windows 10 installation on the new computers can be transformed into a “business-ready” state, applying settings and policies, installing apps, and even changing the edition of Windows 10 being used (e.g. from Windows 10 Pro to

  Windows 10 Enterprise) to support advanced features.

  The only interaction required from the end user is to connect to a network and to verify their credentials. Everything beyond that is automated.

  References:

  https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot

• Question 398:

  You need to meet the quality update requirement for ComputerA. For how long should you defer the updates?

  A. 14 days

  B. 10 years

  C. 5 years

  D. 180 days

  E. 30 days

  Correct Answer: E

  References: https://docs.microsoft.com/en-us/windows/deployment/update/waas-overview

• Question 399:

  You need to meet the technical requirements for EFS on ComputerA. What should you do?

  A. Run certutil.exe, and then add a certificate to the local computer certificate store.

  B. Run cipher.exe, and then add a certificate to the local computer certificate store.

  C. Run cipher.exe, and then add a certificate to the local Group Policy.

  D. Run certutil.exe, and then add a certificate to the local Group Policy.

  Correct Answer: D

  References: https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate

• Question 400:

  You need to ensure that User10 can activate Computer10. What should you do?

  A. Request that a Windows 10 Enterprise license be assigned to User10, and then activate Computer10.

  B. From the Microsoft Deployment Toolkit (MDT), add a Volume License Key to a task sequence, and then redeploy Computer10.

  C. From System Properties on Computer10, enter a Volume License Key, and then activate Computer10.

  D. Request that User10 perform a local AutoPilot Reset on Computer10, and then activate Computer10.

  Correct Answer: D

  The case study states: User10 reports that Computer10 is not activated.

  The solution is to perform a local AutoPilot Reset on the computer. This will restore the computer settings to a fully-configured or known IT-approved state. When User10 signs in to the computer after the reset, the computer should activate.

  You can use Autopilot Reset to remove personal files, apps, and settings from your devices. The devices remain enrolled in Intune and are returned to a fully-configured or known IT-approved state. You can Autopilot Reset a device locally or

  remotely from the Intune for Education portal.

  Incorrect Answers:

  A: All users have Microsoft 365 E3 licenses. This license includes Windows 10 Enterprise so we don't need to assign a Windows 10 Enterprise license to User10.

  B: Volume License Keys aren't required.

  C: Volume License Keys aren't required.

  References: https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot-requirements-licensing https://docs.microsoft.com/en-us/intune-education/autopilot-resets/deployment/windows-autopilot/windows-autopilot-requirements-licensing