MD-100 QUESTIONS AND ANSWERS
"You plan to deploy Windows 10 to 100 secure computers.
You need to select a version of Windows 10 that meets the following requirements:
Uses Microsoft Edge as the default browser
Minimizes the attack surface on the computer
Supports joining Microsoft Azure Active Directory (Azure AD)
Only allows the installation of applications from the Microsoft Store
What is the best version to achieve the goal? More than one answer choice may
achieve the goal. Select the BEST answer.
A. Windows 10 Pro in S mode
B. Windows 10 Home in S mode
C. Windows 10 Pro
D. Windows 10 Enterprise" - Answer -A
"You discover that a user used the Service1 account to sign in to Computer1 and
deleted some files.
You need to ensure that the identity used by Application1 cannot be used by a user to
sign in to sign in to the desktop on Computer1. The solution must use the principle of
least privilege.
Solution: On Computer1, you configure Application1 to sign in as the LocalSystem
account and select the Allow service to interact with desktop check box. You delete the
Service1 account.
Does this meet the goal?
A. Yes
B. No" - Answer -B
"You discover that a user used the Service1 account to sign in to Computer1 and
deleted some files.
You need to ensure that the identity used by Application1 cannot be used by a user to
sign in to sign in to the desktop on Computer1. The solution must use the principle of
least privilege.
Solution: On Computer1, you assign Service1 the deny log on locally user right.
Does this meet the goal?
,A. Yes
B. No" - Answer -B
"You discover that a user used the Service1 account to sign in to Computer1 and
deleted some files.
You need to ensure that the identity used by Application1 cannot be used by a user to
sign in to sign in to the desktop on Computer1. The solution must use the principle of
least privilege.
Solution: On Computer1, you assign Service1 the deny log on as a service user right.
Does this meet the goal?
A. Yes
B. No" - Answer -A
"You have a Microsoft Azure Active Directory (Azure AD) tenant.
Some users sign in to their computer by using Windows Hello for Business.
A user named User1 purchases a new computer and joins the computer to Azure AD.
User1 attempts to configure the sign-in options and receives the error message shown
in the exhibit.
You open Device Manager and confirm that all the hardware works correctly.
You need to ensure that User1 can use Windows Hello for Business facial recognition to
sign in to the computer.
What should you do first?
A. Purchase an infrared (IR) camera.
B. Upgrade the computer to Windows 10 Enterprise.
C. Enable UEFI Secure Boot.
D. Install a virtual TPM driver." - Answer -B
, "Your company uses Microsoft Deployment Toolkit (MDT) to deploy Windows 10 to new
computers.
The company purchases 1,000 new computers.
You need to ensure that the Hyper-V feature is enabled on the computers during the
deployment.
What are two possible ways to achieve the goal? Each answer presents part of the
solution.
NOTE: Each selection is worth one point.
A. Add a task sequence step that adds a provisioning package.
B. In a Group Policy object (GPO), from Computer Configuration, configure Application
Control Policies.
C. Add a custom command to the Unattend.xml file.
D. Add a configuration setting to Windows Deployment Services (WDS).
E. Add a task sequence step that runs dism.exe." - Answer -AC
"Your network contains an Active Directory domain that is synced to a Microsoft Azure
Active Directory (Azure AD) tenant.
Your company purchases a Microsoft 365 subscription.
You need to migrate the Documents folder of users to Microsoft OneDrive for Business.
What should you configure?
A. One Drive Group Policy settings
B. roaming user profiles
C. Enterprise State Roaming
D. Folder Redirection Group Policy settings" - Answer -A
"Your network contains an Active Directory domain. The domain contains a user named
User1.
User1 creates a Microsoft account.
User1 needs to sign in to cloud resources by using the Microsoft account without being
prompted for credentials.
Which settings should User1 configure?
A. User Accounts in Control Panel
B. Email app accounts in the Settings app
"You plan to deploy Windows 10 to 100 secure computers.
You need to select a version of Windows 10 that meets the following requirements:
Uses Microsoft Edge as the default browser
Minimizes the attack surface on the computer
Supports joining Microsoft Azure Active Directory (Azure AD)
Only allows the installation of applications from the Microsoft Store
What is the best version to achieve the goal? More than one answer choice may
achieve the goal. Select the BEST answer.
A. Windows 10 Pro in S mode
B. Windows 10 Home in S mode
C. Windows 10 Pro
D. Windows 10 Enterprise" - Answer -A
"You discover that a user used the Service1 account to sign in to Computer1 and
deleted some files.
You need to ensure that the identity used by Application1 cannot be used by a user to
sign in to sign in to the desktop on Computer1. The solution must use the principle of
least privilege.
Solution: On Computer1, you configure Application1 to sign in as the LocalSystem
account and select the Allow service to interact with desktop check box. You delete the
Service1 account.
Does this meet the goal?
A. Yes
B. No" - Answer -B
"You discover that a user used the Service1 account to sign in to Computer1 and
deleted some files.
You need to ensure that the identity used by Application1 cannot be used by a user to
sign in to sign in to the desktop on Computer1. The solution must use the principle of
least privilege.
Solution: On Computer1, you assign Service1 the deny log on locally user right.
Does this meet the goal?
,A. Yes
B. No" - Answer -B
"You discover that a user used the Service1 account to sign in to Computer1 and
deleted some files.
You need to ensure that the identity used by Application1 cannot be used by a user to
sign in to sign in to the desktop on Computer1. The solution must use the principle of
least privilege.
Solution: On Computer1, you assign Service1 the deny log on as a service user right.
Does this meet the goal?
A. Yes
B. No" - Answer -A
"You have a Microsoft Azure Active Directory (Azure AD) tenant.
Some users sign in to their computer by using Windows Hello for Business.
A user named User1 purchases a new computer and joins the computer to Azure AD.
User1 attempts to configure the sign-in options and receives the error message shown
in the exhibit.
You open Device Manager and confirm that all the hardware works correctly.
You need to ensure that User1 can use Windows Hello for Business facial recognition to
sign in to the computer.
What should you do first?
A. Purchase an infrared (IR) camera.
B. Upgrade the computer to Windows 10 Enterprise.
C. Enable UEFI Secure Boot.
D. Install a virtual TPM driver." - Answer -B
, "Your company uses Microsoft Deployment Toolkit (MDT) to deploy Windows 10 to new
computers.
The company purchases 1,000 new computers.
You need to ensure that the Hyper-V feature is enabled on the computers during the
deployment.
What are two possible ways to achieve the goal? Each answer presents part of the
solution.
NOTE: Each selection is worth one point.
A. Add a task sequence step that adds a provisioning package.
B. In a Group Policy object (GPO), from Computer Configuration, configure Application
Control Policies.
C. Add a custom command to the Unattend.xml file.
D. Add a configuration setting to Windows Deployment Services (WDS).
E. Add a task sequence step that runs dism.exe." - Answer -AC
"Your network contains an Active Directory domain that is synced to a Microsoft Azure
Active Directory (Azure AD) tenant.
Your company purchases a Microsoft 365 subscription.
You need to migrate the Documents folder of users to Microsoft OneDrive for Business.
What should you configure?
A. One Drive Group Policy settings
B. roaming user profiles
C. Enterprise State Roaming
D. Folder Redirection Group Policy settings" - Answer -A
"Your network contains an Active Directory domain. The domain contains a user named
User1.
User1 creates a Microsoft account.
User1 needs to sign in to cloud resources by using the Microsoft account without being
prompted for credentials.
Which settings should User1 configure?
A. User Accounts in Control Panel
B. Email app accounts in the Settings app
