Download Microsoft.MD-100.DrunkMonk.2021-07-12.184q.tqb

A. Volume Activation Management Tool (VAMT) (correct) B. Key Management Service (KMS) (needs more than 25 computers) C. Active Directory-based activation (needs to be domain member) D. the Get-WindowsDeveloperLicense cmdlet (shows developer license) Reference:https://docs.microsoft.com/en-us/windows/deployment/volume-activation/introduction-vamt

Windows 10 in S mode is a version of Windows 10 that's streamlined for security and performance, while providing a familiar Windows experience. To increase security, it allows only apps from the Microsoft Store, and requires Microsoft Edge for safe browsing. Azure AD Domain join is available for Windows 10 Pro in S mode and Windows 10 Enterprise in S mode. It's not available in Windows 10 Home in S mode. References:https://docs.microsoft.com/es-es/windows/deployment/s-modehttps://support.microsoft.com/en-gb/help/4020089/windows-10-in-s-mode-faq

Configuring Application1 to sign in as the LocalSystem account would ensure that the identity used by Application1 cannot be used by a user to sign in to the desktop on Computer1. However, this does not use the principle of least privilege. The LocalSystem account has full access to the system. Therefore, this solution does not meet the goal. References:https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/deny-log-on-locally

By using the Service1 account as the identity used by Application1, we are applying the principle of least privilege as required in this question. However, the Service1 account could be used by a user to sign in to the desktop on the computer. To sign in to the desktop on the computer, an account needs the log on locally right which all user accounts have by default. Therefore, we can prevent this by assigning Service1 the deny log on locally user right. References:https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/deny-log-on-as-a-service

Windows Hello facial recognition requires an infrared (IR) camera. If your device does not have an infrared camera (or any other biometric device such as a fingerprint scanner), you will see the message shown in the exhibit. The question states that Device Manager shows all hardware is working properly. Therefore, it is not the case that the computer has an IR camera but it isn't working properly. The problem must be that the computer does not have an IR camera. Incorrect Answers:B: Windows 10 Enterprise is not required for Windows Hello. Windows Hello also works on Windows 10 Pro. C: UEFI Secure Boot is not required for Windows Hello.D: A virtual TPM driver is not required for Windows Hello.References:https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-planning-guide

A common way to add a feature such as Hyper-V in MDT is to use the Install Roles and Features task sequence action. However, that is not an option in this question. The two valid options are to a command to the Unattend.xml file or to add a task sequence step that runs dism.exe. To add Hyper-V using dism.exe, you would run the following dism command:DISM /Online /Enable-Feature /All /FeatureName:Microsoft-Hyper-VReferences:https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image  https://mdtguy.wordpress.com/2016/09/14/mdt-fundamentals-adding-features-using-dism-from-within-the-task-sequence/  https://docs.microsoft.com/en-us/virtualization/hyper-v-on-windows/quick-start/enable-hyper-v

You need to configure a Group Policy Object (GPO) with the OneDrive settings required to redirect the Documents folder of each user to Microsoft 365. Importing the OneDrive group policy template files into Group Policy adds OneDrive related settings that you can configure in your Group Policy. One of the group policy settings enables you to redirect 'Known Folders' to OneDrive for business. Known folders are Desktop, Documents, Pictures, Screenshots, and Camera Roll. There are two primary advantages of moving or redirecting Windows known folders to OneDrive for the users in your domain:Your users can continue using the folders they're familiar with. They don't have to change their daily work habits to save files to OneDrive. Saving files to OneDrive backs up your users' data in the cloud and gives them access to their files from any device. References:https://docs.microsoft.com/en-us/onedrive/redirect-known-folders?redirectSourcePath=%252fen-us%252farticle%252fredirect-windows-known-folders-to-onedrive-e1b3963c-7c6c-4694-9f2f-fb8005d9ef12

Open the Setting app, select Accounts then select Email and accounts. Here you can add accounts for the cloud resources and configure the login credentials for the accounts. If you configure the accounts with the login credentials of the Microsoft account, you won't be prompted for credentials when you open the apps. References:https://support.microsoft.com/en-za/help/4028195/microsoft-account-how-to-sign-in

You join a computer to a domain, including an Azure AD domain in the Settings panel in Windows 10, under System->About References:https://aadguide.azurewebsites.net/aadjoin/

Reference:https://www.iolo.com/resources/articles/how-to-use-picture-passwords-in-windows-10/