Pass Microsoft MD-100 Exam Info and Free Practice Test [Q44-Q68]

MD-100 Microsoft

admin -

December 13, 2023

4.5/5 - (2 votes)

Pass Microsoft MD-100 Exam Info and Free Practice Test

New 2023 Latest Questions MD-100 Dumps – Use Updated Microsoft Exam

Microsoft MD-100 certification exam is a challenging exam that requires candidates to have a deep understanding of Windows 10 and its features. Candidates must also have experience in managing Windows 10 devices and implementing security and connectivity solutions. To prepare for the exam, candidates can use Microsoft’s official study materials, practice exams, and online training courses. Additionally, candidates can join study groups and attend training sessions to enhance their skills and knowledge.

QUESTION 44
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer that runs Windows 10. The computer contains a folder. The folder contains sensitive data.
You need to log which user reads the contents of the folder and modifies and deletes files in the folder.
Solution: From the properties of the folder, you configure the Auditing settings and from the Audit Policy in the local Group Policy, you configure Audit directory service access.
Does this meet the goal?

Yes

Files and folders are objects and are audited through object access, not though directory service access.
References:
https://www.netwrix.com/how_to_detect_who_changed_file_or_folder_owner.html

QUESTION 45
You have a Microsoft Azure Active Directory (Azure AD) tenant.
Some users sign in to their computer by using Windows Hello for Business.
A user named User1 purchases a new computer and joins the computer to Azure AD.
User1 attempts to configure the sign-in options and receives the error message shown in the exhibit.

You open Device Manager and confirm that all the hardware works correctly.
You need to ensure that User1 can use Windows Hello for Business facial recognition to sign in to the computer.
What should you do first?

Purchase an infrared (IR) camera.

Upgrade the computer to Windows 10 Enterprise.

Enable UEFI Secure Boot.

Install a virtual TPM driver.

Explanation
References:
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-planning-guide

QUESTION 46
You have a computer that runs Windows 10 and contains the folders shown in the following table.

You create the groups shown in the following table.

On FolderA, you remove permission inheritance. To each folder, you assign the NTFS permissions shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Explanation
YES
YES
NO

QUESTION 47
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
Username and password

Use the following login credentials as needed:
To enter your password, place your cursor in the Enter password box and click on the password below.
Username: Contoso/Administrator
Password: Passw0rd!
The following information is for technical support purposes only:
Lab Instance: 11145882

Users in the Finance group report that they cannot copy files to Client1Finance.
You need to resolve the issue.
To complete this task, sign in to the required computer or computers.

See explanation below.
Explanation
* Open File Explorer.
* Browse and find the file or folder you want to have full access.
* Right-click it, and select Properties.
* Click the Security tab to access the NTFS permissions.
* Click the Advanced button.
* On the “Advanced Security Settings” page, you need to click the Change link, in the Owner’s field.
* Click the Advanced button.
* On the “Select User or Group” page, click the
* From the search result, select your user account, and click
* On the “Select User or Group” page, click
* Click Apply.
* Click OK.
* Click OK again.
* Click OK one more time to complete this task.
It’s important to note that if you’re taking ownership of a folder, you can check the Replace ownership on subcontainers and object option in the Advanced Security Settings page to take control of the subfolders inside of the folder.
Now you’ll need to grant full access control to your account, to do this use the following steps:
* Right-click the file or folder and select
* Click the Security tab to access the NTFS permissions.
* Click the Advanced button.
* Under the Permissions tab, click Add.
* Click Select a principal to add your user account.
* On the “Select User or Group” page, click the Find Now button.
* From the search result, select your user account, and click OK.
* On the “Select User or Group” page, click OK.
* On “Permission Entry”, check the Full control option.
* Click OK.
* Click OK.
* Click Apply.
* Click OK.
* Click OK to close the file or folder properties to complete the task.
You can now assign the necessary permissions to the Finance group.
If you right-click on a file or folder, choose tab, we can now try to edit some permissions. Go ahead and click the At this point, there are a couple of things you can do. Firstly, you’ll notice that the Allow column is probably greyed out and can’t be edited. This is because of the inheritance I was talking about earlier. However, you can check items on the Deny column.
When you click the Add button, you have to type in the user name or group name into the box and then click on Check Names to make sure it’s correct. If you don’t remember the user or group name, click on the Advanced button and then just click . It will show you all the users and groups.
Click OK and the user or group will be added to the access control list. Now you can check the Allow column or Deny column.
Reference:
https://www.windowscentral.com/how-take-ownership-files-and-folders-windows-10
https://www.online-tech-tips.com/computer-tips/set-file-folder-permissions-windows/

QUESTION 48
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You deploy Windows 10 to a computer named Computer1.
Computer1 contains a folder named C:Folder1. Folder1 contains multiple documents.
You need to ensure that you can recover the files in Folder1 by using the Previous Versions tab.
Solution: You set up Backup and Restore (Windows 7) and include Folder1 in the backup.
Does this meet the goal?

Yes

Reference:
https://support.microsoft.com/en-za/help/17128/windows-8-file-history

QUESTION 49
You need to meet the technical requirements for the HR department users.
Which permissions should you assign to the HR department users for the D:Reports folder? To answer, select the appropriate permissions in the answer area.
NOTE: Each correct selection is worth one point.

References:
https://www.online-tech-tips.com/computer-tips/set-file-folder-permissions-windows/

QUESTION 50
You have 20 computers that run Windows 10.
You configure all the computers to forward all the events from all the logs to a computer named Computer1 that runs Windows 10.
When you sign in to Computer1, you cannot see any security events from other computers. You can see all the other forwarded events from the other computers.
You need to ensure that the security events are forwarded to Computer1.
What should you do?

On each computer, run wecutil ac /q.

On each computer, add the NETWORK SERVICE account to the Event Log Readers group.

On each computer, run winrm qc -q.

On Computer1, add the account of Computer1 to the Event Log Readers group.

Explanation
References:
https://docs.microsoft.com/en-us/windows/security/threat-protection/use-windows-event-forwarding-to-assistin-i

QUESTION 51
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
A user named User2 has a computer named Computer2 that runs Windows 10. User2 joins Computer2 to contoso.com by using [email protected].
Computer1 contains a folder named Folder1. Folder1 is in drive C and is shared as Share1. Share1 has the permission shown in the following table.

A user named User2 has a computer named Computer2 that runs Windows 10. User2 joins Computer2 to contoso.com by using [email protected].
User2 attempts to access Share1 and receives the following error message: “The username or password is incorrect.” You need to ensure that User2 can connect to Share1.
Solution: You create a local group on Computer1 and add the Guest account to the group. You grant the group Modify access to Share1.
Does this meet the goal?

Yes

QUESTION 52
You have a workgroup computer named Computer1 that runs Windows 10. Computer1 contains five local user accounts. You need to ensure that all users who sign in to Computer1 see a picture named image1 jpg as the desktop background.
What should you do?

Desktop.jpg and copy the picture to the C:UsersDefaultDesktop folder

From the local Group Policy Editor. modify the Desktop settings.

From the Settings app, modify the Background settings.

Rename Image1.jpg as Desktop jpg and copy the picture to the C:Windowssystem32 folder.

QUESTION 53
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that contain the users shown in the following table.

You have a computer named Computer1 that runs Windows 10.

User1 joins Computer1 to Azure AD by using [email protected].
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Explanation

QUESTION 54
Your domain contains named Computer named Computer1 that runs Windows 10. Computer1 does not have a TPM.
You need to be able to encrypt the C drive by using Bitlocker Drive Encryption (BitLocker). The solution must ensure that the recovery key is stored in Active Directory.
Which two Group Policy settings should you configure? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings#bkmk-rec1

QUESTION 55
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer named Computer1 that runs Windows 10.
A service named Application1 is configured as shown in the exhibit.

You discover that a user used the Service1 account to sign in to Computer1 and deleted some files.
You need to ensure that the identity used by Application1 cannot be used by a user to sign in to sign in to the desktop on Computer1. The solution must use the principle of least privilege.
Solution: On Computer1, you assign Service1 the deny log on as a service user right.
Does this meet the goal?

Yes

Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/deny-log-on-as-a-service

QUESTION 56
Your office has a dedicated wireless network for guests.
You plan to provide access cards that will have a QR code for guests. The QR code will link to a network configuration file stored on a publicly accessible website and provide the wireless network settings for Windows 10 devices.
Which tool should you use to create the configuration file and which file type should you use for the configuration file? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-packages

QUESTION 57
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that contain the users shown in the following table.

You have a computer named Computer1 that runs Windows 10.

User1 joins Computer1 to Azure AD by using [email protected].
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

QUESTION 58
You have four computers that run Windows 10. The computers are configured as shown in the following table.

On Computer1, you create a user named User1. In the domain, you create a user named User2.
You create the groups shown in the following table.

You need to identify to which computers User1 can sign in, and to which groups you can add User2.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

QUESTION 59
You have a computer named Computer1 that runs Windows 10 and has the users shown in the following table.

Computer1 contains the folders shown in the following table.

You move Folder1 into Folder2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

QUESTION 60
You have a computer that runs Windows 10. The computer contains a folder named C:ISOs that is shared in ISOs.
You run several commands on the computer as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Explanation

QUESTION 61
You have a computer named Computer1 that runs Windows 10 and contains the following files:
C:Folder1File1.bat
C:Folder1File1.exe
C:Folder1File1.cmd
A user named User1 is assigned Read & execute to all the files.
Computer1 is configured as shown in the exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

References:
https://stackoverflow.com/questions/148968/windows-batch-files-bat-vs-cmd

QUESTION 62
You have three computers that run Windows 10 as shown in the following table.

All the computers have C and D volumes. The Require additional authentication at startup Group Policy settings is disabled on all the computers.
Which volumes can you encrypt by using BitLocker Drive Encryption (BitLocker)? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation
Volume C on = Computer 2 and 3 only
Volume D on = C1, C2, C3
The “Require additional authentication at startup” setting is located in the Computer Configuration\ Administrative Templates\ Windows Components\ BitLocker Drive Encryption\ Operating System Drives path. If the policy is disabled and there is no TPM chip installed, operating system drives can not be encrypted using BitLocker. Additional data volumes can be protected using a password as a key protector for example.
References:
https://www.windowscentral.com/how-use-bitlocker-encryption-windows-10

QUESTION 63
You need to meet the technical requirements for the San Diego office computers.
Which Windows 10 deployment method should you use?

wipe and load refresh

in-place upgrade

provisioning packages

Windows Autopilot

The requirement states: The computers in the San Diego office must be upgraded automatically to Windows
10 Enterprise and must be joined to Azure AD the first time a user starts each new computer. End users must not be required to accept the End User License Agreement (EULA).
Windows Autopilot is a collection of technologies used to set up and pre-configure new devices, getting them ready for productive use. You can also use Windows Autopilot to reset, repurpose and recover devices.
The OEM Windows 10 installation on the new computers can be transformed into a “business-ready” state, applying settings and policies, installing apps, and even changing the edition of Windows 10 being used (e.g.
from Windows 10 Pro to Windows 10 Enterprise) to support advanced features.
The only interaction required from the end user is to connect to a network and to verify their credentials.
Everything beyond that is automated.
References:
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot Deploy Windows Question Set 3

QUESTION 64
You are a network administrator at your company.
A user attempts to start a computer and receives the following error message: “Bootmgr is missing.” You need to resolve the issue.
You start the computer in the recovery mode.
Which command should you run next? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation

References:
https://neosmart.net/wiki/bootmgr-is-missing/

QUESTION 65
You have a computer named LON-CL1.Adatum.com that runs Windows 10.
From Event Viewer, you create a custom view named View1 that has the following filter:
User: User1
Logged: Any time
Event logs: System
Computer: LON-CL1
Event IDs: 10000 – 11000
Event level: Error, Verbose
You open Event Viewer and discover the event shown in the exhibit. (Click the Exhibit tab.)

The event does not appear in View1.
You need to ensure that the event appears in View1.
What should you do?

Add a Task Category setting to the filter.

Add the computer account to the Event Log Readers group.

Create an event subscription.

Modify the Computer setting in the filter.

References:
https://www.techrepublic.com/article/how-to-use-custom-views-in-windows-10s-event-viewer/

QUESTION 66
Your network contains an Active Directory domain. The domain contains a computer named Compurter1 that runs Windows 10.
The domain contains the users shown in the following table.

Computer has the local users shown in the following table.

All users have Microsoft accounts.
Which two user can be configured to sign in by using their Microsoft account? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

User 1

User 2

User 3

User 4

User 5

QUESTION 67
You need to meet the technical requirements for the HR department users.
Which permissions should you assign to the HR department users for the D:Reports folder? To answer, select the appropriate permissions in the answer area.
NOTE: Each correct selection is worth one point.

Explanation:
References:
https://www.online-tech-tips.com/computer-tips/set-file-folder-permissions-windows/

QUESTION 68
You have 10 computers that run Windows 10 and have BitLocker Drive Encryption (BitLocker) enabled.
You plan to update the firmware of the computers.
You need to ensure that you are not prompted for the BitLocker recovery key on the next restart. The drive must be protected by BitLocker on subsequent restarts.
Which cmdlet should you run?

Unlock-BitLocker

Disable-BitLocker

Add-BitLockerKeyProtector

Suspend-BitLocker

Explanation
References:
https://support.microsoft.com/en-us/help/4057282/bitlocker-recovery-key-prompt-after-surface-uefi-tpm-firmwa

Loading …

Microsoft MD-100 exam covers a broad range of topics, including Windows 10 installation, configuration, and management, user and device management, networking, security, and maintenance. Candidates who pass the exam will be able to configure and manage Windows 10 devices and applications, troubleshoot common issues, and implement security and maintenance solutions. They will also be able to optimize Windows 10 performance and manage user profiles and data. Windows Client certification is ideal for IT professionals who want to enhance their skills in managing Windows 10 devices and applications and advance their career in the IT industry.

Latest MD-100 Exam Dumps Microsoft Exam: https://www.dumpstests.com/MD-100-latest-test-dumps.html