Microsoft Microsoft Certifications MD-100 Questions & Answers

• Question 401:

  You need to sign in as LocalAdmin on Computer11. What should you do first?

  A. From the LAPS UI tool, view the administrator account password for the computer object of Computer11.

  B. From Local Security Policy, edit the policy password settings on Computer11.

  C. From the LAPS UI tool, reset the administrator account password for the computer object of Computer11.

  D. From Microsoft Intune, edit the policy password settings on Computer11.

  Correct Answer: A

  References: https://technet.microsoft.com/en-us/mt227395.aspx

• Question 402:

  You need to sign in as LocalAdmin on Computer11. What should you do first?

  A. From the LAPS UI tool, view the administrator account password for the computer object of Computer11.

  B. From Windows Configuration Designer, create a configuration package that sets the password of the LocalAdmin account on Computer11.

  C. Use a Group Policy object (GPO) to set the local administrator password.

  D. From Microsoft Intune, set the password of the LocalAdmin account on Computer11.

  Correct Answer: A

  References: https://technet.microsoft.com/en-us/mt227395.aspx

• Question 403:

  An employee reports that she must perform a BitLocker recovery on her laptop. The employee does not have her BitLocker recovery key but does have a Windows 10 desktop computer. What should you instruct the employee to do from the desktop computer?

  A. Run the manage-bde.exe –status command

  B. From BitLocker Recovery Password Viewer, view the computer object of the laptop

  C. Go to https://account.activedirectory.windowsazure.com and view the user account profile

  D. Run the Enable-BitLockerAutoUnlock cmdlet

  Correct Answer: C

  The BitLocker recovery key is stored in Azure Active Directory.

  References: https://celedonpartners.com/blog/storing-recovering-bitlocker-keys-azure-active-directory/

• Question 404:

  You need to recommend a solution to configure the employee VPN connections. What should you include in the recommendation?

  A. Remote Access Management Console

  B. Group Policy Management Console (GPMC)

  C. Connection Manager Administration Kit (CMAK)

  D. Microsoft Intune

  Correct Answer: D

  References: https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/vpn-deploy-client-vpn-connections#bkmk_ProfileXML Testlet 2

• Question 405:

  You need to take remote control of an employee's computer to troubleshoot an issue. What should you send to the employee to initiate a remote session?

  A. a numeric security code

  B. a connection file

  C. an Easy Connect request

  D. a password

  Correct Answer: A

  References: https://support.microsoft.com/en-us/help/4027243/windows-10-solve-pc-problems-with-quick-assist

• Question 406:

  You need to recommend a solution to monitor update deployments. What should you include in the recommendation?

  A. Windows Server Update (WSUS)

  B. the Update Management solution in Azure Automation

  C. the Update Compliance solution in Azure Log Analytics

  D. the Azure Security Center

  Correct Answer: C

  References: https://docs.microsoft.com/en-us/windows/deployment/update/update-compliance-monitor