MD-100 Exam Questions and Answers Latest Update 2025-2026
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user
named UserA.
You have two computers named Computer1 and Computer2 that run Windows 10 and are
joined to contoso.com.
You need to ensure that UserA can connect to Computer2 from Computer1 by using Remote
Desktop.
Which three actions should you perform? Each correct answer presents part of the solution. -
Answers - On Computer2, modify the peoperties of UserA
- On Comuter2, enable Remote Desktop
- On Computer2, add the Everyone group to the Remote Desktop Users group
You plan to deploy Windows 10 to 100 secure computers.
You need to select a version of Windows 10 that meets the following requirements:
Uses Microsoft Edge as the default browser
Minimizes the attack surface on the computer
Supports joining Microsoft Azure Active Directory (Azure AD)
Only allows the installation of applications from the Microsoft Store - Answers Windows 10 Pro
in S Mode
You discover that a user used the Service1 account to sign in to Computer1 and deleted some
files.
You need to ensure that the identity used by Application1 cannot be used by a user to sign in to
sign in to the desktop on Computer1. The solution must use the principle of least privilege.
Solution: On Computer1, you configure Application1 to sign in as the LocalSystem account and
select the Allow service to interact with desktop check box. You delete the Service1 account.
,Does this meet the goal? - Answers No
You discover that a user used the Service1 account to sign in to Computer1 and deleted some
files.
You need to ensure that the identity used by Application1 cannot be used by a user to sign in to
sign in to the desktop on Computer1. The solution must use the principle of least privilege.
Solution: On Computer1, you assign Service1 the deny log on locally user right.
Does this meet the goal? - Answers No
Your company has an isolated network used for testing. The network contains 20 computers
that run Windows 10. The computers are in a workgroup. During testing, the computers must
remain in the workgroup.
You discover that none of the computers are activated.
You need to recommend a solution to activate the computers without connecting the network to
the Internet.
What should you include in the recommendation? - Answers Volume Activation Management
Tool
Your network contains an Active Directory domain that is synced to a Microsoft Azure Active
Directory (Azure AD) tenant.
Your company purchases a Microsoft 365 subscription.
You need to migrate the Documents folder of users to Microsoft OneDrive for Business.
, What should you configure? - Answers OneDrive Group Policy settings
Your company uses Microsoft Deployment Toolkit (MDT) to deploy Windows 10 to new
computers.
The company purchases 1,000 new computers.
You need to ensure that the Hyper-V feature is enabled on the computers during the deployment.
What are two possible ways to achieve the goal? Each correct answer presents part of the
solution. - Answers - Add a task sequence step that adds a provisioning package
- Add a custom command to the Unattend.xml file
You have a computer named Computer1 that runs Windows 10. The computer contains a folder.
The folder contains sensitive data.
You need to log which user reads the contents of the folder and modifies and deletes files in the
folder.
Solution: From the properties of the folder, you configure the Auditing settings and from Audit
Policy in the local Group Policy, you configure Audit object access.
Does this meet the goal? - Answers Yes
A user named User1 has a computer named Computer1 that runs Windows 10.
User1 connects to a Microsoft Azure virtual machine named VM1 by using Remote Desktop.
User1 creates a VPN connection to a partner organization.
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user
named UserA.
You have two computers named Computer1 and Computer2 that run Windows 10 and are
joined to contoso.com.
You need to ensure that UserA can connect to Computer2 from Computer1 by using Remote
Desktop.
Which three actions should you perform? Each correct answer presents part of the solution. -
Answers - On Computer2, modify the peoperties of UserA
- On Comuter2, enable Remote Desktop
- On Computer2, add the Everyone group to the Remote Desktop Users group
You plan to deploy Windows 10 to 100 secure computers.
You need to select a version of Windows 10 that meets the following requirements:
Uses Microsoft Edge as the default browser
Minimizes the attack surface on the computer
Supports joining Microsoft Azure Active Directory (Azure AD)
Only allows the installation of applications from the Microsoft Store - Answers Windows 10 Pro
in S Mode
You discover that a user used the Service1 account to sign in to Computer1 and deleted some
files.
You need to ensure that the identity used by Application1 cannot be used by a user to sign in to
sign in to the desktop on Computer1. The solution must use the principle of least privilege.
Solution: On Computer1, you configure Application1 to sign in as the LocalSystem account and
select the Allow service to interact with desktop check box. You delete the Service1 account.
,Does this meet the goal? - Answers No
You discover that a user used the Service1 account to sign in to Computer1 and deleted some
files.
You need to ensure that the identity used by Application1 cannot be used by a user to sign in to
sign in to the desktop on Computer1. The solution must use the principle of least privilege.
Solution: On Computer1, you assign Service1 the deny log on locally user right.
Does this meet the goal? - Answers No
Your company has an isolated network used for testing. The network contains 20 computers
that run Windows 10. The computers are in a workgroup. During testing, the computers must
remain in the workgroup.
You discover that none of the computers are activated.
You need to recommend a solution to activate the computers without connecting the network to
the Internet.
What should you include in the recommendation? - Answers Volume Activation Management
Tool
Your network contains an Active Directory domain that is synced to a Microsoft Azure Active
Directory (Azure AD) tenant.
Your company purchases a Microsoft 365 subscription.
You need to migrate the Documents folder of users to Microsoft OneDrive for Business.
, What should you configure? - Answers OneDrive Group Policy settings
Your company uses Microsoft Deployment Toolkit (MDT) to deploy Windows 10 to new
computers.
The company purchases 1,000 new computers.
You need to ensure that the Hyper-V feature is enabled on the computers during the deployment.
What are two possible ways to achieve the goal? Each correct answer presents part of the
solution. - Answers - Add a task sequence step that adds a provisioning package
- Add a custom command to the Unattend.xml file
You have a computer named Computer1 that runs Windows 10. The computer contains a folder.
The folder contains sensitive data.
You need to log which user reads the contents of the folder and modifies and deletes files in the
folder.
Solution: From the properties of the folder, you configure the Auditing settings and from Audit
Policy in the local Group Policy, you configure Audit object access.
Does this meet the goal? - Answers Yes
A user named User1 has a computer named Computer1 that runs Windows 10.
User1 connects to a Microsoft Azure virtual machine named VM1 by using Remote Desktop.
User1 creates a VPN connection to a partner organization.
