Practice Windows 10 MD-100 exam. Online Exam Practice Tests with detailed explanations! Pass MD-100 with confidence!
MD-100 - Windows 10 Practice Tests 2021 | PassSureExam
NEW QUESTION 178
You have a computer that runs Windows 8.1.
When you attempt to perform an in-place upgrade to Windows 10, the computer fails to start after the first restart.
You need to view the setup logs on the computer.
Which folder contains the logs?
- A. \$Windows.~BT\Sources\Panther\
- B. \$Windows.~BT\Inf
- C. \Windows\Temp
- D. \Windows\Logs
Answer: A
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/windows-setup-log-files-and-eventlog
NEW QUESTION 179
Your network contains an Active Directory domain. The domain contains a computer named Computer! that runs Windows 10. Computer1 has a Trusted Platform Module (TPM) version 12.
The domain contains a domain controller named DC1 that has all the Remote Server Administration Tools (RSAT) installed.
BitLocker Drive Encryption (BitLodcer) recovery passwords are stored in Active Directory.
You enable BitLocker on the operating system drive of Computer1.
A software update on Computer! disables the TPM. and BitLocker enters recovery mode.
You need to recover your BitLocker password for Computer1.
What should you use to retrieve the recovery password?
- A. Disk Management
- B. manage-bde with the -unlock parameter
- C. Active Directory Users and Computers
- D. repair-bde with he -f parameter
Answer: C
NEW QUESTION 180
You enable Windows PowerShell remoting on a computer that runs Windows 10.
You need to limit which PowerShell cmdlets can be used in a remote session.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
References:
https://www.petri.com/powershell-remoting-restricting-user-commands
NEW QUESTION 181
You have a computer that runs Windows 10. The computer contains a folder. The folder contains sensitive data.
You need to log which user reads the contents of the folder and modifies and deletes files in the folder.
You need to log which user reads the contents of the folder and modifies and deletes files in the folder.
Solution: from the properties of the folder, you configure the Auditing settings and from the Audit Policy in the local Group Policy, you configure Audit system events.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Explanation
Files and folders are objects and are audited through object access, not though system events.
References:
https://www.netwrix.com/how_to_detect_who_changed_file_or_folder_owner.html
NEW QUESTION 182
Your network contains an Active Directory domain. The domain contains 1,000 computers that run Windows 10.
You discover that when users are on their lock screen, they see a different background image every day, along with tips for using different features in Windows 10.
You need to disable the tips and the daily background image for all the Windows 10 computers.
Which Group Policy settings should you modify?
- A. Turn off the Windows Welcome Experience
- B. Turn off all Windows spotlight features
- C. Turn off Windows Spotlight on Settings
- D. Do not suggest third-party content in Windows spotlight
Answer: B
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/windows/configuration/windows-spotlight
Topic 1, Contoso, Ltd
Overview
Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York.
Contoso has IT, human resources (HR), and finance departments.
Contoso recently opened a new branch office in San Diego. All the users in the San Diego office work from home.
Existing environment
Contoso uses Microsoft 365.
The on-premises network contains an Active Directory domain named contoso.com. The domain is synced to Microsoft Azure Active Directory (Azure AD).
All computers run Windows 10 Enterprise.
You have four computers named Computer1, Computer2, Computer3, and ComputerA. ComputerA is in a workgroup on an isolated network segment and runs the Long Term Servicing Channel version of Windows
10. ComputerA connects to a manufacturing system and is business critical. All the other computers are joined to the domain and run the Semi-Annual Channel version of Windows 10.
In the domain, you create four groups named Group1, Group2, Group3, and Group4.
Computer2 has the local Group Policy settings shown in the following table.
The computers are updated by using Windows Update for Business.
The domain has the users shown in the following table.
Computer1 has the local users shown in the following table.
Requirements
Planned Changes
Contoso plans to purchase computers preinstalled with Windows 10 Pro for all the San Diego office users.
Technical requirements
Contoso identifies the following technical requirements:
* The computers in the San Diego office must be upgraded automatically to Windows 10 Enterprise and must be joined to Azure AD the first time a user starts each new computer. End users must not be required to accept the End User License Agreement (EULA).
* Helpdesk users must be able to troubleshoot Group Policy object (GPO) processing on the Windows 10 computers. The helpdesk users must be able to identify which Group Policies are applied to the computers.
* Users in the HR department must be able to view the list of files in a folder named D:\Reports on Computer3.
* ComputerA must be configured to have an Encrypting File System (EFS) recovery agent.
* Quality update installations must be deferred as long as possible on ComputerA.
* Users in the IT department must use dynamic look on their primary device.
* User6 must be able to connect to Computer2 by using Remote Desktop.
* The principle of least privilege must be used whenever possible.
* Administrative effort must be minimized whenever possible.
* Assigned access must be configured on Computer1.
NEW QUESTION 183
You have a workgroup computer named Computer1 that runs Windows 10. Computer1 has the user accounts shown in the following table.
User3, User4, and Administrator sign in and sign out on Computer1. User1 and User2 have never signed in to Computer1.
You are troubleshooting policy issues on Computer1. You sign in to Computer1 as Administrator.
You add the Resultant Set of Policy (RsoP) snap-in to an MMC console.
Which users will be able to sign in on Computer1?
- A. User1, User2, User3, User4, and Administrator
- B. User1, User3, and User4 only
- C. User3, User4, and Administrator only
- D. Administrator only
Answer: C
Explanation:
The Interactive logon: Number of previous logons to cache (in case domain controller is not available) policy setting determines whether a user can log on to a Windows domain by using cached account information.
Logon information for domain accounts can be cached locally so that, if a domain controller cannot be contacted on subsequent logons, a user can still log on.
References:
https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon- number-of-previous-logons-to-cache-in-case-domain-controller-is-not-available
NEW QUESTION 184
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains the users shown in the following table.
You have a computer named Computer1 that runs Windows 10 and is in a workgroup.
A local standard user on Computer1 named User1 joins the computer to the domain and uses the credentials of User2 when prompted.
You need to ensure that you can rename Computer1 as Computer33.
Solution: You use the credentials of User3 on Computer1.
Does this meet the goal?
- A. No
- B. Yes
Answer: B
Explanation:
Renaming a domain-joined computer will also rename the computer account in the domain. To do this, you need domain administrator privileges.
User3 is a domain administrator.
References:
https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security- groups#bkmk-domainadmins
NEW QUESTION 185
Your network contains an Active Directory domain named contoso.com. The domain contains two computers named Computer1 and Computer2 that run Windows 10 and are joined to the domain.
On Computer1, you create an event subscription named Subscription1 for Computer2 as shown in the Subscription1 exhibit. (Click the Subcription1 tab.)
Subscription1 is configured to use forwarded events as the destination log.
On Computer1, you create a custom view named View1 as shown in the View1 exhibit. (Click the View1 tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 186
You have an Azure Active Directory (Azure AD) tenant that contains a user named [email protected].
You have a computer named Computer1 that runs Windows 10.
You join Computer1 to Azure AD. You enable Remote Desktop on Computer1.
[email protected] attempts to connect to Computer1 by using Remote Desktop and receives the following error message: "The logon attempt failed." You need to ensure that the user can connect to Computer1 by using Remote Desktop.
What should you do first?
- A. From the local Group Policy, modify the Allow log on through Remote Desktop Services user right.
- B. On Computer1, create a local user and add the new user to the Remote Desktop Users group.
- C. In Azure AD, assign [email protected] the Cloud device administrator role.
- D. In Azure AD, assign [email protected] the Security administrator role.
Answer: A
Explanation:
References:
https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/allow-log-onthrough-remote-desktop-services
NEW QUESTION 187
You have three computers that run Windows 10 as shown in the following table.
All the computers have C and D volumes. The Require additional authentication at startup Group Policy settings is disabled on all the computers.
Which volumes can you encrypt by using BitLocker Drive Encryption (BitLocker)? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Volume C on = Computer 2 and 3 only
Volume D on = C1, C2, C3
The "Require additional authentication at startup" setting is located in the Computer Configuration\ Administrative Templates\ Windows Components\ BitLocker Drive Encryption\ Operating System Drives path. If the policy is disabled and there is no TPM chip installed, operating system drives can not be encrypted using BitLocker. Additional data volumes can be protected using a password as a key protector for example.
References:
https://www.windowscentral.com/how-use-bitlocker-encryption-windows-10
NEW QUESTION 188
You have a computer named Computer 1 that runs Windows 10.
You turn on System Protection and create a restore point named Point1.
You perform the following changes:
* Add four files named File1.txt, File2.dll, File3.sys, and File4.exe to the desktop.
Run a configuration script that adds the following four registry keys:
- Key1 to HKEY_CURRENT_USER
- Key2 to HKEY_CLASSES_ROOT
- Key3 to HKEY_LOCAL_MACHINE\SYSTEM
- Key4 to HKEY_CURRENT_CONFIG
You restore Point1.
Which files and registry keys are removed? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://www.maketecheasier.com/what-system-restore-can-and-cannot-do-to-your-windows-system/
https://superuser.com/questions/343112/what-does-windows-system-restore-exactly-back-up-and-restore
NEW QUESTION 189
You have an Azure Active Directory (Azure AD) tenant that contains a user named [email protected].
You have a computer named Computer1 that runs Windows 10.
You join Computer1 to Azure AD. You enable Remote Desktop on Computer1.
[email protected] attempts to connect to Computer1 by using Remote Desktop and receives the following error message: "The logon attempt failed." You need to ensure that the user can connect to Computer1 by using Remote Desktop.
What should you do first?
- A. On Computer1, create a local user and add the new user to the Remote Desktop Users group.
- B. In Azure AD, assign [email protected] the Cloud device administrator role.
- C. In Azure AD, assign [email protected] the Security administrator role.
- D. From the local Group Policy, modify the Allow log on through Remote Desktop Services user right.
Answer: A
Explanation:
References:
https://docs.microsoft.com/en-us/windows/client-management/connect-to-remote-aadj-pc
NEW QUESTION 190
You have a computer named Computer1 that runs Windows 10. Computer1 contains a folder named Data on drive C.
The Advanced Security Settings for the Data folder are shown in the exhibit. (Click the Exhibit tab.) You share C:\Data as shown in the following table.
User1 is a member of the Users group.
Administrators are assigned Full control NTFS permissions to C:\Data.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION 191
Your network contains an Active Directory domain. The domain contains the users shown in the following table.
The domain contains a computer named Computer1 that runs Windows 10. Computer1 contains a folder named Folder1 that has the following permissions:
* User2: Deny Write
* Group1: Allow Read
* Group2: Allow Modify
Folder1 is shared as Share1$. Share1$ has the following configurations:
* Everyone: Allow Full control
* Access-based enumeration: Enabled
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://www.varonis.com/blog/ntfs-permissions-vs-share/
http://www.ntfs.com/ntfs-permissions-file-advanced.htm
https://docs.microsoft.com/en-us/windows-server/storage/dfs-namespaces/enable-access-based-enumeration-on-a
NEW QUESTION 192
You have a computer that runs Windows 10. You view the domain services status as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
References:
https://docs.microsoft.com/en-us/azure/active-directory/devices/troubleshoot-device-dsregcmd
https://github.com/MicrosoftLearning/MD-101T00-ManagingModernDesktops/blob/master/Instructions/Labs/0403-Enrolling%20devices%20in%20Intune.md
NEW QUESTION 193
......
Get instant access to MD-100 practice exam questions: https://drive.google.com/open?id=1Ctd42vGyShuoRORMpUEY4EYzSHwO-Bkd
The best MD-100 exam study material and preparation tool is here: https://www.passsureexam.com/MD-100-pass4sure-exam-dumps.html