Microsoft MD-100 Exam Dumps

Windows Client

Microsoft MD-100 Sample Questions

Question # 1

You have a computer named Computer1. Computer1 runs Windows 10 Pro. You have a mobile device. You use Bluetooth to pair the mobile device to Computer1.You want to enable dynamic lock on Computer1. What should you do? To complete this task, sign in to the required computer or computers. 

Show Answer

Question # 2

Note: This question is part of a series of questions that present the same scenario.Each question in the series contains a unique solution that might meet the statedgoals. Some question sets might have more than one correct solution, while othersmight not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As aresult, these questions will not appear in the review screen.A user named User1 has a computer named Computer1 that runs Windows 10. Computer1is joined to an Azure Active Directory (Azure AD) tenant named contoso.com. User1 joinsComputer1 to contoso.com by using user1@contoso.com.Computer1 contains a folder named Folder1. Folder1 is in drive C and is shared as Share1.Share1 has the permission shown in the following table.A user named User2 has a computer named Computer2 that runs Windows 10. User2 joins Computer2 to contoso.com by using user2@contoso.com. User2 attempts to access Share1 and receives the following error message: “The username or password is incorrect.” You need to ensure that User2 can connect to Share1.Solution: In Azure AD, you create a group named Group1 that contains User1 and User2. You grant Group1 Modify access to Folder1. Does this meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 3

You have a computer that runs Windows 10 Pro. The computer contains the users shown in the following table.You need to use a local Group Policy Object (GPO) to configure one group of settings for all the members of the local Administrators group and another group of settings for all nonadministrators. What should you do? 

A. Use the runas command to open Gpedit.msc as each user. 
B. Run mmc as Used and add the Group Policy Object Editor snap-in twice. 
C. Open Gpedit.msc as User1 and add two Administrative Templates. 
D. Run mmc as User1 and add the Security Templates snap-in twice. 

Show Answer

Question # 4

You have a computer that runs Windows 10 and has BitLocker Drive Encryption (BitLocker) enabled on all volumes. You start the computer from Windows Recovery Environment (WinRE).You need to read the data on the system drive. What should you do?  

A. Run cipher.exe and specify the /rekey parameter  
B. Run cipher.exe and specify the /adduser parameter  
C. Run manange-bde.exe and specify the -off parameter  
D. Run manage-bde.exe and specify the -unlock parameter  

Show Answer

Question # 5

You have a computer named Computer1 that runs Windows 10 and has an application named App1. You need to use Performance Monitor to collect data about the processor utilization of App1.Which performance object should you monitor?  

A. Process  
B. Processor Performance  
C. Processor Information  
D. Processor  

Show Answer

Question # 6

Your network contains an Active Directory domain. The domain contains a user named Admin1. All computers run Windows 10. You enable Windows PowerShell remoting on the computers.You need to ensure that Admin1 can establish remote PowerShell connections to the computers. The solution must use the principle of least privilege. To which group should you add Admin1?  

A. Access Control Assistance Operators  
B. Power Users  
C. Remote Desktop Users  
D. Remote Management Users  

Show Answer

Question # 7

You need to enable BitLocker Drive Encryption (BitLocker) on a computer named Computer1 that runs Windows 10. Computer1 has the following configurations:Contains only one 200-GB NTFS volume named C:\ Contains 50 GB of unallocated disk space Is the member of a workgroup Has TPM enabled What should you do first?  

A. Create a VHD.  
B. Disable TPM.  
C. Create an additional volume.  
D. Join Computer1 to an Azure Active Directory (Azure AD) tenant.  

Show Answer

Question # 8

Your network contains an Active Directory domain that is synced to a Microsoft Azure Active Directory (Azure AD) tenant. The company plans to purchase computers preinstalled with Windows 10 Pro for all users.The company the following requirements: The new computers must be upgraded to Windows 10 Enterprise automatically. The new computers must be joined to Azure AD automatically when the user starts the new computers for the first time. The users must not be required to accept the End User License Agreement (EULA).You need to deploy the new computers. What should you do?  

A. Make use of the wipe and load refresh deployment method.  
B. Perform in-place upgrade on the new computers.  
C. Provide provisioning packages for the new computers.  
D. Make use of Windows Autopilot.  

Show Answer

Question # 9

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named UserA. You have two computers named Computer1 and Computer2 that run Windows 10 and are joined to contoso.com. You need to ensure that UserA can connect to Computer2 from Computer1 by using Remote Desktop. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. On Computer1, modify the registry.  
B. On Computer2, modify the registry.  
C. On Computer1, modify the properties of UserA.  
D. On Computer1, enable Remote Desktop.  
E. On Computer2, modify the properties of UserA.  
F. On Computer 2, enable Remote Desktop.  
G. On Computer2, add the Everyone group to the Remote Desktop Users group.  
H. On Computer1, add the Everyone group to the Remote Desktop Users group.  

Show Answer

Question # 10

You have 20 computers that run Windows 10. The computers are in a workgroup. You need to create a local user named Admin1 on all the computers. Admin1 must be a member of the Remote Management Users group.What should you do?  

A. From Windows Configuration Designer, create a provisioning package, and then run the provisioning package on each computer.  
B. Create a script that runs the New-ADUser cmdlet and the Set-AdGroup cmdlet.  
C. Create a Group Policy object (GPO) that contains the Local User Group Policy preference. 
D. Create a script that runs the New-MsolUser cmdlet and the AddADComputerServiceAccount cmdlet.  

Show Answer

Question # 11

You have several computers that run Windows 10. The computers are in a workgroup. You need to prevent users from using Microsoft Store apps on their computer. What are two possible ways to achieve the goal? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

A. From Security Settings in the local Group Policy, configure Security Options.  
B. From Administrative Templates in the local Group Policy, configure the Store settings.  
C. From Security Settings in the local Group Policy, configure Software Restriction Policies. 
D. From Security Settings in the local Group Policy, configure Application Control Policies. 

Show Answer

Question # 12

Your network contains an Active directory domain. The domain contains 1,000 computers that run Windows 10. You need to prevent computers of the research department from appearing in network in File Explorer. What should you do? 

A. Disable the Network List Service  
B. Configure DNS to use an external provider  
C. Turn off network discovery  
D. Modify the %systemroot%system32\drivers\etc\Network ile  

Show Answer

Question # 13

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 8.1.Computer1 has apps that are compatible with Windows 10. You need to perform a Windows 10 in-place upgrade on Computer1. Solution: You copy the Windows 10 installation media to a Microsoft Deployment Toolkit (MDT) deployment share. You create a task sequence, and then you run the MDT deployment wizard on Computer1.Does this meet the goal?  

A. Yes  
B. No  

Show Answer

Question # 14

Your network contains an Active Directory domain that is synced to a Microsoft Azure Active Directory (Azure AD) tenant.Your company purchases a Microsoft 365 subscription.You need to migrate the Documents folder of users to Microsoft OneDrive for Business. What should you configure?  

A. One Drive Group Policy settings  
B. roaming user profiles  
C. Enterprise State Roaming  
D. Folder Redirection Group Policy settings  

Show Answer

Question # 15

You install Windows 10 Enterprise on a new computer. You need to force activation on the computer.Which command should you run?  

A. slmgr /upk  
B. Sec-RDLicenseConfiguration -Force  
C. Sec-MsolLicense -AddLicense  
D. slmgr /ato  

Show Answer

Question # 16

You have a public computer named Computer1 that runs Windows 10/ Computer1 contains a folder named Folder1. You need to provide a user named User1 with the ability to modify the permissions of Folder1. The solution must use the principle of least privilege.Which NTFS permission should you assign to User1?  

A. Full control  
B. Modify  
C. Write  
D. Read & execute  

Show Answer

Question # 17

You have a computer named Computer1 that runs Windows 10. Computer1 was off for one year. During that time, two feature updates and 12 quality updates were released.From the Microsoft Update Catalog website, you download the missing updates and save the updates to Computer1. You need to ensure that Computer1 runs the latest version of Windows 10 and is fully updated. The solution must minimize the amount of time required to update the computer.What should you do?  

A. Install the last feature update, and then install the last quality update.  
B. Install the last quality update, and then install both feature updates.  
C. Install the last quality update, and then install the last feature update.  
D. Install the last feature update, and then install all the quality updates released after the feature update. 
E. Install all the quality and feature updates in the order in which they were released.  

Show Answer

Question # 18

Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 10. Computer1 contains a folder named Folder1. You plan to share Folder1. Everyone will have Read share permissions, and administrators will have Full control share permission.You need to prevent the share from appearing when users browse the network. What should you do?  

A. Enable access-based enumeration.  
B. Deny the List NTFS permissions on Folded.  
C. Add Folded to a domain-based DFS namespace.  
D. Name the share Folded$.  

Show Answer

Question # 19

Your network contains an Active Directory domain. The domain contains computers that run Windows 10.You must ensure that Windows BitLocker Drive Encryption is enabled on all client computers, even though a Trusted Platform Module (TPM) chip is installed in only some of them.You need to accomplish this goal by using one Group Policy object (GPO). What should you do?  

A. Enable the Allow enhanced PINs for startup policy setting, and select the Allow BitLocker without a compatible TPM check box
B. Enable the Enable use of BitLocker authentication requiring preboot keyboard input on slates policy setting, and select the Allow BitLocker without a compatible TPM check box 
C. Enable the Require additional authentication at startup policy setting, and select the Allow BitLocker without a compatible TPM check box 
D. Enable the Control use of BitLocker on removable drives policy setting, and select the Allow BitLocker without a compatible TPM check box 

Show Answer

Question # 20

Your company has a computer named Computer1 that runs Windows 10. Computer1 is used to provide guests with access to the Internet. Computer1 is a member of a workgroup. You want to configure Computer1 to use a user account sign in automatically when the computer is started. The user must not be prompted for a user name and password.What should you do?  

A. Configure Group Policy preferences.  
B. Run the BCDBoot command.  
C. Edit the Registry.  
D. Run the MSConfig command.  

Show Answer

Question # 21

You have a computer that runs Windows 10. You use the computer to test new Windows features.You need to configure the computer to receive preview builds of Windows 10 as soon as possible.What should you configure from Update & Security in the Settings app?  

A. Windows Insider Program  
B. Windows Update  
C. Delivery Optimization  
D. For developer  

Show Answer

Question # 22

Your company has an on-premises network that contains an Active Directory domain. The domain is synced to Microsoft Azure Active Directory (Azure AD). All computers in the domain run Windows 10 Enterprise. You have a computer named Computer1 that has a folder named C:\Folder1.You want to use File History to protect C:\Folder1. Solution: You enable File History on Computer1. You then enable archiving for Folder1. Does this meet the goal?  

A. Yes  
B. No  

Show Answer

Question # 23

You have 200 computers that run Windows 10 and are joined to an Active Directory domain. You need to enable Windows Remote Management (WinRM) on all the computers by using Group Policy.Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.  

A. Set the Startup Type of the Windows Remote Management (WS-Management) service to Automatic.
B. Enable the Windows Firewall: Allow inbound remote administration exception setting.  
C. Enable the Allow remote server management through WinRM setting.  
D. Enable the Windows Firewall: Allow inbound Remote Desktop exceptions setting.  
E. Enable the Allow Remote Shell access setting.  
F. Set the Startup Type of the Remote Registry service to Automatic.  

Show Answer

Question # 24

Your network contains an Active Directory domain. The domain contains 1,000 computers that run Windows 10.You discover a known compatibility issue between a feature update and a device driver on the computers.You need to test the installation of the feature update on a test computer. Which Windows Update setting should you configure by using a Group Policy Object (GPO)?  

A. Automatic Updates detection frequency  
B. Disable safeguards for Feature Updates  
C. Select the target Feature Update version  
D. Reschedule Automatic Updates scheduled installations  

Show Answer

Question # 25

Your network contains an Active Directory domain. The domain contains 10 computers that run Windows 10.On a different computer named Computer1, you plan to create a collector-initiated subscription to gather the event logs from the Windows 10 computers.You need to configure the environment to support the event log collection.Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.   

A. Add Computer1 to the Event Log Readers group on the Windows 10 computers  
B. Add Computer1 to the Event Log Readers group on Computer1  
C. On the Windows 10 computers, change the Startup Type of Windows Event Collector to Automatic 
D. Enable Windows Remote Management (WinRM) on the Windows 10 computers  
E. Enable Windows Remote Management (WinRM) on Computer1  

Show Answer

Question # 26

Your network contains an Active Directory domain. The domain contains 1,000 computers that run Windows 10. You configure Microsoft Edge settings by using domain and local Group Policy Objects (GPOs). You need to generate a report that contains all the Microsoft Edge policy settings applied to a computer. What should you do? 

A. From PowerShell. run the Gec-GPO cmdlet.  
B. From PowerShell. run the Gec-GPOReporc cmdlet.  
C. From Microsoft Edge, open edge://policy.  
D. From the Start menu, select Group Policy Object Editor  

Show Answer