Microsoft Microsoft Certifications MD-100 Questions & Answers

• Question 41:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://www.sciencedirect.com/topics/computer-science/security-event-log

• Question 42:

  You need to meet the technical requirements for the helpdesk users.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://www.itprotoday.com/compute-engines/what-group-policy-creator-owners-group

• Question 43:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 44:

  HOTSPOT

  You implement the planned changes for Computer1.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  User1 already has full control access through membership of Group1. Therefore, User1 can write to the file.

  Box 2: No

  The planned changes will grant User2 full control access to the file. However, User2 is a member of Group2 which has Deny/Write access. The Deny permission will always take precedence. Therefore, User2 will not be able to write to the

  file.

  Box 3: No

  The planned changes will grant User3 full control access to the folder. That permission will be inherited by the file. However, User3 is a member of Group2 which has Deny/Write access. The Deny permission will always take precedence.

  Therefore, User3 will not be able to write to the file.

• Question 45:

  HOTSPOT

  Which Windows 10 computers can you ping successfully from Computer1 and Computer2? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Computer3 only.

  Computer1 and Computer2 are domain joined so both will be using the Domain profile. The firewall rules on Computer1 allow outbound ICMP on all profiles so outbound ICMP will be allowed on the Domain profile.

  The firewall rules on Computer2 allow inbound ICMP on the Public profile only, so it will be blocked on the domain profile. Therefore, Computer2 cannot be pinged.

  The firewall rules on Computer3 allow inbound ICMP on all profiles. Therefore, Computer3 will not block the inbound pings.

  Box 2: No Windows 10 computers.

  The firewall rules on Computer2 allow outbound ICMP on the Private profile only, so it will be blocked on the domain profile. Therefore, Computer2 cannot ping any computers.

• Question 46:

  HOTSPOT

  You have a computer named Computer1 that runs Windows 10.

  You plan to refine the list of events that appear in the Event log.

  You create a filter as shown in the following exhibit.

  

  Hot Area:

  

  Correct Answer:

  

• Question 47:

  HOTSPOT

  You have a workgroup computer named Computer1 that runs Windows 10 and contains the users in the following table.

  

  You need to identify which users can start the Windows Recovery Environment (WinRE) command prompt on Computer1. Which user should you identify for each scenario? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  Correct Answer:

  

• Question 48:

  HOTSPOT

  You have a computer named Client1 that runs Windows 10 and has Windows Sandbox enabled.

  You create a script named Script1.cmd. On Client1, you save Script1.cmd to a folder named C:\Scripts.

  You need to ensure that when you sign in to Windows Sandbox, Script1.cmd runs automatically.

  How should you complete the configuration file? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Administrator Windows 10 LogonCommand script sandbox Sandbox, Logon command Specifies a single command that will be invoked automatically after the sandbox logs on. Apps in the sandbox are run under the container user account. The container user account should be an administrator account.

  command to be invoked

  Command: A path to an executable or script inside the container that will be executed after signing in.

  Box 2: Scripts

  Example: C:\Users\WDAGUtilityAccount\Downloads\sandbox\VSCodeInstall.cmd

  Note:

  Reference: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-sandbox/windows-sandbox-configure-using-wsb-file

• Question 49:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains two computers named Computer1 and Computer2 that run Windows 10. The domain contains the users shown in the following table.

  

  The relevant group membership on Computer1 is shown in the following table.

  

  The relevant group membership on Computer2 is shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  User1 is member of the Contoso\Event Log Readers group.

  User1 is also member of the Event Log Readers group on Computer1.

  User1 cannot read the event log on Computer2.

  Note:

  Event Log Readers group

  This group is created when you promote a Windows Server system to the role of domain controller and it's also present as a built-in group on all of the member servers in each domain of a forest. Members of this group are granted

  permissions to read the event logs on the local computer.

  Box 2: Yes

  User2 is member of the Contoso\Administrators group.

  User2 is also member of the Device Owners group on computer2.

  As Device Owner User2 can view the Security log.

  Box 3: Yes

  User1 is member of the Contoso\Event Log Readers group.

  User1 is also member of the Event Log Readers group on Computer1.

  Reference:

  https://techgenix.com/allowing-access-directory-service-event-log/

• Question 50:

  HOTSPOT

  Your network contains an Active Directory domain. The domain contains the computers shown in the following table.

  

  Microsoft Defender Application Guard is installed on the computers.

  Application Guard Group Policy settings are applied to the computers as shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: