MD-100 QUESTIONS AND ANSWERS
Key Management Services (KMS) - Answer -Your company has an isolated network
used for testing. The network contains 20 computers that run Windows 10. The
computers are in a workgroup. During testing, the computers must remain in the
workgroup. You discover that none of the computers are activated. You need to
recommend a solution to activate the computers without connecting the network to the
Internet.
What should you include in the recommendation?
Windows 10 Pro in S mode - Answer -You plan to deploy Windows 10 to 100 secure
computers. You need to select a version of Windows 10 that meets the following
requirements:
*Uses Microsoft Edge as the default browser
*Minimizes the attack surface on the computer
*Supports joining Microsoft Azure Active Directory (Azure AD)
*Only allows the installation of applications from the Microsoft Store
What is the best version to achieve the goal?
Turn off all Windows spotlight features - Answer -Your network contains an Active
Directory domain. The domain contains 1,000 computers that run Windows 10. You
discover that when users are on their lock screen, they see a different background
image every day, along with tips for using different features in Windows 10. You need to
disable the tips and the daily background image for all the Windows 10 computers.
Which Group Policy settings should you modify?
Add a BitLocker key protector - Answer -You have several computers that run Windows
10. The computers are in a workgroup and have BitLocker Drive Encryption (BitLocker)
enabled. You join the computers to Microsoft Azure Active Directory (Azure AD). You
need to ensure that you can recover the BitLocker recovery key for the computers from
Azure AD. What should you do first?
Security Options in Local Group Policy Editor - Answer -You have a computer named
Computer1 that runs Windows 10. You need to configure User Account Control (UAC)
to prompt administrators for their credentials. Which settings should you modify?
From Administrative Templates in the local Group Policy, configure the Store settings
From Security Settings in the local Group Policy, configure Application Control Policies -
Answer -You have several computers that run Windows 10. The computers are in a
workgroup. You need to prevent users from using Microsoft Store apps on their
computer. What are two possible ways to achieve the goal? Each correct answer
presents part of the solution.
, Local Group Policy Editor - Answer -You have a computer named Computer1 that runs
Windows 10. You need to prevent standard users from changing the wireless network
settings on Computer1. The solution must allow administrators to modify the wireless
network settings. What should you use?
Request a passphrase - Answer -Your company has a wireless access point that uses
WPA2-Enterprise. You need to configure a computer to connect to the wireless access
point. What should you do first?
From the properties of VPN1, clear the Use default gateway on remote network check
box. - Answer -A user named User1 has a computer named Computer1 that runs
Windows 10. User1 connects to a Microsoft Azure virtual machine named VM1 by using
Remote Desktop. User1 creates a VPN connection to a partner organization. When the
VPN connection is established, User1 cannot connect to VM1. When User1 disconnects
from the VPN, the user can connect to VM1. You need to ensure that User1 can
connect to VM1 while connected to the VPN. What should you do?
Remote Management Users - Answer -Your network contains an Active Directory
domain. The domain contains a user named Admin1. All computers run Windows 10.
You enable Windows PowerShell remoting on the computers. You need to ensure that
Admin1 can establish remote PowerShell connections to the computers. The solution
must use the principle of least privilege. To which group should you add Admin1?
Set the Startup Type of the Windows Remote Management (WS-Management) service
to Automatic.
Enable the Allow remote server management through WinRM setting.
Enable the Windows Firewall: Allow inbound Remote Desktop exceptions setting -
Answer -You have 200 computers that run Windows 10 and are joined to an Active
Directory domain. You need to enable Windows Remote Management (WinRM) on all
the computers by using Group Policy. Which three actions should you perform?
Run the Set-NetIPInterface -InterfaceAlias Interface1 -InterfaceMetric 1 command -
Answer -You have 15 computers that run Windows 10. Each computer has two network
interfaces named Interface1 and Interface2. You need to ensure that network traffic
uses Interface1, unless Interface1 is unavailable. What should you do?
Request that User10 perform a local AutoPilot Reset on Computer10, and then activate
Computer10. - Answer -You need to ensure that User10 can activate Computer10.
What should you do?
From the LAPS UI tool, view the administrator account password for the computer
object of Computer11. - Answer -You need to sign in as LocalAdmin on Computer11.
What should you do first?
Key Management Services (KMS) - Answer -Your company has an isolated network
used for testing. The network contains 20 computers that run Windows 10. The
computers are in a workgroup. During testing, the computers must remain in the
workgroup. You discover that none of the computers are activated. You need to
recommend a solution to activate the computers without connecting the network to the
Internet.
What should you include in the recommendation?
Windows 10 Pro in S mode - Answer -You plan to deploy Windows 10 to 100 secure
computers. You need to select a version of Windows 10 that meets the following
requirements:
*Uses Microsoft Edge as the default browser
*Minimizes the attack surface on the computer
*Supports joining Microsoft Azure Active Directory (Azure AD)
*Only allows the installation of applications from the Microsoft Store
What is the best version to achieve the goal?
Turn off all Windows spotlight features - Answer -Your network contains an Active
Directory domain. The domain contains 1,000 computers that run Windows 10. You
discover that when users are on their lock screen, they see a different background
image every day, along with tips for using different features in Windows 10. You need to
disable the tips and the daily background image for all the Windows 10 computers.
Which Group Policy settings should you modify?
Add a BitLocker key protector - Answer -You have several computers that run Windows
10. The computers are in a workgroup and have BitLocker Drive Encryption (BitLocker)
enabled. You join the computers to Microsoft Azure Active Directory (Azure AD). You
need to ensure that you can recover the BitLocker recovery key for the computers from
Azure AD. What should you do first?
Security Options in Local Group Policy Editor - Answer -You have a computer named
Computer1 that runs Windows 10. You need to configure User Account Control (UAC)
to prompt administrators for their credentials. Which settings should you modify?
From Administrative Templates in the local Group Policy, configure the Store settings
From Security Settings in the local Group Policy, configure Application Control Policies -
Answer -You have several computers that run Windows 10. The computers are in a
workgroup. You need to prevent users from using Microsoft Store apps on their
computer. What are two possible ways to achieve the goal? Each correct answer
presents part of the solution.
, Local Group Policy Editor - Answer -You have a computer named Computer1 that runs
Windows 10. You need to prevent standard users from changing the wireless network
settings on Computer1. The solution must allow administrators to modify the wireless
network settings. What should you use?
Request a passphrase - Answer -Your company has a wireless access point that uses
WPA2-Enterprise. You need to configure a computer to connect to the wireless access
point. What should you do first?
From the properties of VPN1, clear the Use default gateway on remote network check
box. - Answer -A user named User1 has a computer named Computer1 that runs
Windows 10. User1 connects to a Microsoft Azure virtual machine named VM1 by using
Remote Desktop. User1 creates a VPN connection to a partner organization. When the
VPN connection is established, User1 cannot connect to VM1. When User1 disconnects
from the VPN, the user can connect to VM1. You need to ensure that User1 can
connect to VM1 while connected to the VPN. What should you do?
Remote Management Users - Answer -Your network contains an Active Directory
domain. The domain contains a user named Admin1. All computers run Windows 10.
You enable Windows PowerShell remoting on the computers. You need to ensure that
Admin1 can establish remote PowerShell connections to the computers. The solution
must use the principle of least privilege. To which group should you add Admin1?
Set the Startup Type of the Windows Remote Management (WS-Management) service
to Automatic.
Enable the Allow remote server management through WinRM setting.
Enable the Windows Firewall: Allow inbound Remote Desktop exceptions setting -
Answer -You have 200 computers that run Windows 10 and are joined to an Active
Directory domain. You need to enable Windows Remote Management (WinRM) on all
the computers by using Group Policy. Which three actions should you perform?
Run the Set-NetIPInterface -InterfaceAlias Interface1 -InterfaceMetric 1 command -
Answer -You have 15 computers that run Windows 10. Each computer has two network
interfaces named Interface1 and Interface2. You need to ensure that network traffic
uses Interface1, unless Interface1 is unavailable. What should you do?
Request that User10 perform a local AutoPilot Reset on Computer10, and then activate
Computer10. - Answer -You need to ensure that User10 can activate Computer10.
What should you do?
From the LAPS UI tool, view the administrator account password for the computer
object of Computer11. - Answer -You need to sign in as LocalAdmin on Computer11.
What should you do first?
