File Info
| Exam | Windows 10 |
| Number | MD-100 |
| File Name | Windows 10.DrunkMonk.MD-100.2022-05-08.7e.336q.vcex |
| Size | 23.7 Mb |
| Posted | May 08, 2022 |
| Downloads | 24 |
| Download | Windows 10.DrunkMonk.MD-100.2022-05-08.7e.336q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Your network contains an Active Directory domain. All users have been issued with new computers that run Windows 10 Enterprise. All users have Microsoft 365 E3 licenses.
A user named Mia Hamm has an Active Directory user account named MHamm and a computer named Computer1. Mia Hamm reports that Computer1 is not activated.
You need to ensure that Mia Hamm can activate Computer1.
What should you do?
- A: Assign a Windows 10 Enterprise license to MHamm, and then activate Computer1.
- B: From the Microsoft Deployment Toolkit (MDT), redeploy Computer1.
- C: From System Properties on Computer1, enter a Volume License Key, and then activate Computer1.
- D: Instruct Mia Hamm to perform a local AutoPilot Reset on Computer1, and then activate Computer1.
Correct Answer: D
The solution is to perform a local AutoPilot Reset on the computer. This will restore the computer settings to a fully-configured or known IT-approved state. When the user signs in to Computer1 after the reset, the computer should activate.
You can use Autopilot Reset to remove personal files, apps, and settings from your devices. The devices remain enrolled in Intune and are returned to a fully- configured or known IT-approved state. You can Autopilot Reset a device locally or remotely from the Intune for Education portal.
Incorrect Answers:
A: All users have Microsoft 365 E3 licenses. This license includes Windows 10 Enterprise so we don't need to assign a Windows 10 Enterprise license to Mia Hamm.
B: Redeploying Computer1 is not required.
C: A Volume License Key is not required.
References:
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot-requirements-licensing
https://docs.microsoft.com/en-us/intune-education/autopilot-reset
Your network contains an Active Directory domain that is synced to a Microsoft Azure Active Directory (Azure AD) tenant.
The company plans to purchase computers pre installed with Windows 10 Pro for all users.
The company the following requirements:
The new computers must be upgraded to Windows 10 Enterprise automatically.
The new computers must be joined to Azure AD automatically when the user starts the new computers for the first time.
The users must not be required to accept the End User License Agreement (EULA).
You need to deploy the new computers.
What should you do?
- A: Make use of the wipe and load refresh deployment method.
- B: Perform in-place upgrade on the new computers.
- C: Provide provisioning packages for the new computers.
- D: Make use of Windows Autopilot.
Correct Answer: D
Autopilot to reset, repurpose and recover devices.
The OEM Windows 10 installation on the new computers can be transformed into a "business-ready" state, applying settings and policies, installing apps, and even changing the edition of Windows 10 being used (e.g. from Windows 10 Pro to Windows 10 Enterprise) to support advanced features.
The only interaction required from the end user is to connect to a network and to verify their credentials.
Everything beyond that is automated.
References:
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot
Your company is not connected to the internet. The company purchases several new computers with Windows 10 Pro for its users.
None of the new computers are activated.
You need to activate the computers without connecting the network to the Internet.
What should you do?
- A: Make use of the Volume Activation Management Tool (VAMT).
- B: Make use of the Key Management Service (KMS).
- C: Make use of the Windows Process Activation Service.
- D: Run the Get-WmiObject -query cmdlet.
Correct Answer: B
Installing a KMS host key on a computer running Windows 10 allows you to activate other computers running Windows 10 against this KMS host and earlier versions of the client operating system, such as Windows 8.1 or Windows 7. Clients locate the KMS server by using resource records in DNS, so some configuration of DNS may be required. This scenario can be beneficial if your organization uses volume activation for clients and MAK-based activation for a smaller number of servers. To enable KMS functionality, a KMS key is installed on a KMS host; then, the host is activated over the Internet or by phone using Microsoft's activation services.
References:
https://docs.microsoft.com/en-us/windows/deployment/volume-activation/activate-using-key-management-service-vamt
Your network contains an Active Directory domain. All users have been issued with computers that run Windows 8.1.
A user named Mia Hamm has a computer named Computer1. You upgrade Computer1 to Windows 10 by performing a clean installation of Windows 10 without formatting the drives.
You need to migrate the settings for Mia Hamm from Windows 8.1 to Windows 10.
Which two actions should you perform?
NOTE: Each correct selection is worth one point.
- A: Run scanstate.exe and specify the C:\Users folder
- B: Run loadstate.exe and specify the C:\Windows.old folder
- C: Run usmultils.exe and specify the C:\Users folder
- D: Run scanstate.exe and specify the C:\Windows.old folder
- E: Run loadstate.exe and specify the C:\Users folder
- F: Run usmultils.exe and specify the C:\Windows.old folder
Correct Answer: DE
E: User1's Windows 10 profile will be in the C:\Users folder so we need to run loadstate.exe to apply the changes in the C:\Users folder.
References:
https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-how-it-works
https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-common-migration-scenarios#bkmk-fourpcrefresh
You have a computer named Computer1 that runs Windows 10.
You deploy an application named Application1 to Computer1.
You need to assign credentials to Application1.
You need to meet the following requirements:
Ensure that the credentials for Application1 cannot be used by any user to log on to Computer1.
Ensure that the principle of least privilege is maintained.
What should you do?
- A: Configure Application1 to sign in as the Local System account and select the Allow service to interact with desktop check box.
- B: Create a user account for Application1 and assign that user account the Deny log on locally user right
- C: Create a user account for Application1 and assign that user account the Deny log on as a service user right
- D: Configure Application1 to sign in as the Local Service account and select the Allow service to interact with desktop check box.
Correct Answer: B
However, the Service1 account could be used by a user to sign in to the desktop on the computer. To sign in to the desktop on the computer, an account needs the log on locally right which all user accounts have by default. Therefore, we can prevent this by assigning Service1 the deny log on locally user right.
Incorrect Answers:
A: Configuring Application1 to sign in as the Local System account would ensure that the identity used by Application1 cannot be used by a user to sign in to the desktop on Computer1. However, this does not use the principle of least privilege. The Local System account has full access to the system. Therefore, this solution does not meet the goal.
C: A service account needs the log on as a service user right. When you assign an account to be used by a service, that account is granted the log on as a service user right. Therefore, assigning Service1 the deny log on as a service user right would mean the service would not function.
D: The Local Service Account is a predefined local account used by the service control manager.
References:
https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/deny-log-on-locally
Your network contains an Active Directory domain that is synced to a Microsoft Azure Active Directory (Azure AD) tenant.
All users have been issued with laptop computers as well as desktop computers that run Windows 10 Enterprise. All users have Microsoft 365 E3 licenses.
A user named Mia Hamm informs you that she must perform a BitLocker recovery on her laptop but she does not have her BitLocker recovery key.
You need to ensure that Mia Hamm can perform a BitLocker recovery on her laptop.
What should you do?
- A: Instruct Mia Hamm to log on to her desktop computer and run the repair-bde.exe command.
- B: Instruct Mia Hamm to use the BitLocker Recovery Password Viewer to view the computer object of the laptop.
- C: Instruct Mia Hamm to log on to her desktop computer and go to https://account.activedirectory.windowsazure.com and view the user account profile.
- D: Instruct Mia Hamm to run the Enable-BitLocker cmdlet on her laptop.
Correct Answer: C
References:
https://celedonpartners.com/blog/storing-recovering-bitlocker-keys-azure-active-directory/
Your company has an on-premises network that contains an Active Directory domain. The domain is synced to Microsoft Azure Active Directory (Azure AD).
All computers in the domain run Windows 10 Enterprise.
You have a computer named Computer1 that has a folder named Folder1.
You must provide users in group named Group1 with the ability to view the list of files in Folder1.
Your solution must ensure that the principle of least privilege is maintained.
What should you do?
- A: Assign the Full control permissions for the Folder1 folder to Group1.
- B: Assign the Read permissions for the Folder1 folder to Group1.
- C: Assign the List folder permissions for the Folder1 folder to Group1.
- D: Assign the Take ownership permissions for the Folder1 folder to Group1.
Correct Answer: C
https://www.online-tech-tips.com/computer-tips/set-file-folder-permissions-windows/
You have a computer named Computer1 that runs Windows 10.
Computer1 has a folder named C:\Folder1.
You need to meet the following requirements:
Log users that access C:\Folder1.
Log users that modify and delete files in C:\Folder1.
Which two actions should you perform?
- A: From the properties of C:\Folder1, configure the Auditing settings.
- B: From the properties of C:\Folder1, select the Encryption contents to secure data option.
- C: From the Audit Policy in the local Group Policy, configure Audit directory service access.
- D: From the Audit Policy in the local Group Policy, you configure Audit object access.
- E: From the Audit Policy in the local Group Policy, you configure Audit system events.
Correct Answer: AD
References:
https://www.netwrix.com/how_to_detect_who_changed_file_or_folder_owner.html
Your company has a computer named Computer1 that runs Windows 10. Computer1 is used to provide guests with access to the Internet. Computer1 is a member of a workgroup.
You want to configure Computer1 to use a user account sign in automatically when the the computer is started.
The user must not be prompted for a user name and password.
What should you do?
- A: Configure Group Policy preferences.
- B: Run the BCDBoot command.
- C: Edit the Registry.
- D: Run the MSConfig command.
Correct Answer: C
References:
https://support.microsoft.com/en-us/help/324737/how-to-turn-on-automatic-logon-in-windows
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time. When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task. Labs are not timed separately, and this exam may more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
You have a computer named Computer1 that runs Windows 10.
Computer1 has a folder named C:\Folder1.
You need to meet the following requirements:
Provide a user named Jon Ross with the ability to modify the permissions of C:\Folder1.
Ensure that the principle of least privilege is maintained.
What should you do?
To complete this task, sign in to the required computer or computers.
- A: See the explanation.
Correct Answer: A
Click on the Security tab, and then click Edit.
In the Permissions dialog box, add Jon Ross.
Specify the Allow Modify permissions for the Jon Ross.
Click OK twice to close the Security dialog box.
Click OK twice to close the Properties dialog box.
References:
https://docs.microsoft.com/en-us/iis/web-hosting/configuring-servers-in-the-windows-web-platform/configuring-share-and-ntfs-permissions
