Master 2021 Latest The Questions Windows 10 and Pass MD-100 Real Exam!
Penetration testers simulate MD-100 exam PDF
NEW QUESTION 177
Your network contains an Active Directory domain named contoso.com. The domain contains named Computer1 that runs Windows 10.
On Computer1, you create an NTFS folder and assign Full control permissions to Everyone.
You share the folder as Share1 and assign the permissions shown in the following table.
When accessing Share1, which two actions can be performed by User1 but not by User2? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Delete a file created by another user.
- B. Set the permissions for a file.
- C. Take ownership of file.
- D. Copy a file created by another user to a subfolder.
- E. Rename a file created by another user.
Answer: B,C
Explanation:
Explanation
References:
https://www.varonis.com/blog/ntfs-permissions-vs-share/
Topic 2, Fabrikam, Inc.
Overview
Existing Environment
Fabrikam, Inc. is a distribution company that has 500 employees and 100 contractors.
Active Directory
The network contains an Active Directory forest named fabrikam.com. The forest is synced to Microsoft Azure Active Directory (Azure AD). All the employees are assigned Microsoft 365 E3 licenses.
The domain contains a user account for an employee named User10.
Client Computers
All the employees have computers that run Windows 10 Enterprise. All the computers are installed without Volume License Keys. Windows 10 license keys are never issued.
All the employees register their computer to Azure AD when they first receive the computer.
User10 has a computer named Computer10.
All the contractors have their own computer that runs Windows 10. None of the computers are joined to Azure AD.
Operational Procedures
Fabrikam has the following operational procedures:
Updates are deployed by using Windows Update for Business.
When new contractors are hired, administrators must help the contactors configure the following settings on their computer:
- User certificates
- Browser security and proxy settings
- Wireless network connection settings
Security policies
The following security policies are enforced on all the client computers in the domain:
* All the computers are encrypted by using BitLocker Drive Encryption (BitLocker). BitLocker recovery
* information is stored in Active Directory and Azure AD.
* The local Administrators group on each computer contains an enabled account named LocalAdmin.
* The LocalAdmin account is managed by using Local Administrator Password Solution (LAPS).
Problem Statements
Fabrikam identifies the following issues:
* Employees in the finance department use an application named Application1. Application1 frequently crashes due to a memory error. When Application1 crashes, an event is written to the application log and an administrator runs a script to delete the temporary files and restart the application.
* When employees attempt to connect to the network from their home computer, they often cannot establish a VPN connection because of misconfigured VPN settings.
* An employee has a computer named Computer11. Computer11 has a hardware failure that prevents the computer from connecting to the network.
* User10 reports that Computer10 is not activated.
Technical requirements
Fabrikam identifies the following technical requirements for managing the client computers:
* Provide employees with a configuration file to configure their VPN connection.
* Use the minimum amount of administrative effort to implement the technical requirements.
* Identify which employees' computers are noncompliant with the Windows Update baseline of the company.
* Ensure that the service desk uses Quick Assist to take remote control of an employee's desktop during support calls.
* Automate the configuration of the contractors' computers. The solution must provide a configuration file that the contractors can open from a Microsoft SharePoint site to apply the required configurations.
NEW QUESTION 178
Your network contains an Active Directory domain. The domain contains 1,000 computers that run Windows 10.
You discover that when users are on their lock screen, they see a different background image every day, along with tips for using different features in Windows 10.
You need to disable the tips and the daily background image for all the Windows 10 computers.
Which Group Policy settings should you modify?
- A. Turn off the Windows Welcome Experience
- B. Turn off all Windows spotlight features
- C. Turn off Windows Spotlight on Settings
- D. Do not suggest third-party content in Windows spotlight
Answer: B
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/windows/configuration/windows-spotlight
Topic 1, Contoso, Ltd
Overview
Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York.
Contoso has IT, human resources (HR), and finance departments.
Contoso recently opened a new branch office in San Diego. All the users in the San Diego office work from home.
Existing environment
Contoso uses Microsoft 365.
The on-premises network contains an Active Directory domain named contoso.com. The domain is synced to Microsoft Azure Active Directory (Azure AD).
All computers run Windows 10 Enterprise.
You have four computers named Computer1, Computer2, Computer3, and ComputerA. ComputerA is in a workgroup on an isolated network segment and runs the Long Term Servicing Channel version of Windows
10. ComputerA connects to a manufacturing system and is business critical. All the other computers are joined to the domain and run the Semi-Annual Channel version of Windows 10.
In the domain, you create four groups named Group1, Group2, Group3, and Group4.
Computer2 has the local Group Policy settings shown in the following table.
The computers are updated by using Windows Update for Business.
The domain has the users shown in the following table.
Computer1 has the local users shown in the following table.
Requirements
Planned Changes
Contoso plans to purchase computers preinstalled with Windows 10 Pro for all the San Diego office users.
Technical requirements
Contoso identifies the following technical requirements:
* The computers in the San Diego office must be upgraded automatically to Windows 10 Enterprise and must be joined to Azure AD the first time a user starts each new computer. End users must not be required to accept the End User License Agreement (EULA).
* Helpdesk users must be able to troubleshoot Group Policy object (GPO) processing on the Windows 10 computers. The helpdesk users must be able to identify which Group Policies are applied to the computers.
* Users in the HR department must be able to view the list of files in a folder named D:\Reports on Computer3.
* ComputerA must be configured to have an Encrypting File System (EFS) recovery agent.
* Quality update installations must be deferred as long as possible on ComputerA.
* Users in the IT department must use dynamic look on their primary device.
* User6 must be able to connect to Computer2 by using Remote Desktop.
* The principle of least privilege must be used whenever possible.
* Administrative effort must be minimized whenever possible.
* Assigned access must be configured on Computer1.
NEW QUESTION 179
You have a computer that runs Windows 10.
You discover that Windows updates are failing to install on the computer.
You need to generate a log file that contains detailed information about the failures.
Which cmdlet should you run?
- A. Get-WindowsErrorReporting
- B. Get-LogProperties
- C. Get-WindowsUpdateLog
- D. Get-WinEvent
Answer: C
Explanation:
References:
https://docs.microsoft.com/en-us/powershell/module/windowsupdate/get-windowsupdatelog?view=win10-ps
NEW QUESTION 180
You have a computer named Computer1 that runs Windows 10.
Computer1 contains the folders shown in the following table.
You include Folder1, Folder2, and Folder3 in the Documents library.
You configure File History to run every 15 minutes, and then turn on File History.
For each of the following statements, select Yes if the statement in true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 181
HOTSPOT
You have a computer named Computer1 that runs Windows 10.
You are troubleshooting Group Policy objects (GPOs) on Computer1.
You run gpresult /user user1 /v and receive the output shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://www.windowscentral.com/how-apply-local-group-policy-settings-specific-users-windows-10
NEW QUESTION 182
You have a Microsoft 365 Enterprise E3 license.
You have a computer named Computer1 that runs Windows 10.
You need to ensure that you can access the files on Computer1 by using a web browser on another computer. What should you configure?
- A. the Microsoft OneDrive desktop app
- B. Default apps in the Settings app
- C. the File Explorer desktop app
- D. Sync your settings in the Settings app
Answer: A
NEW QUESTION 183
Your network contains an Active Directory domain. The domain contains three computers named Computer1, Computer2, and Computer3 that run Windows 10. The computers are on the same network and have network connectivity.
Windows Defender Firewall on Computer1 has the server-to-server connection security rule shown in the following table.
Windows Defender Firewall on Computer2 has the server-to-server connection security rule shown in the following table.
Windows Defender Firewall on Computer3 has the server-to-server connection security rule shown in the following table.
All the connection security rules are enabled and configured to use only the Computer (Kerberos VS) authentication method.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
References:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-an-authentication-request-rule
NEW QUESTION 184
You need to take remote control of an employee's computer to troubleshoot an issue.
What should you send to the employee to initiate a remote session?
- A. a connection file
- B. an Easy Connect request
- C. a numeric security code
- D. a password
Answer: C
Explanation:
References:
https://support.microsoft.com/en-us/help/4027243/windows-10-solve-pc-problems-with-quick-assist
Topic 2, Contoso, Ltd
Existing environment
Contoso uses Microsoft 365.
The on-premises network contains an Active Directory domain named contoso.com. The domain is synced to Microsoft Azure Active Directory (Azure AD).
All computers run Windows 10 Enterprise.
You have four computers named Computer1, Computer2, Computer3, and Computer In the domain, you create four groups named Group1, Group2, Group3, and Group4.
Computer2 has the local Group Policy settings shown in the following table.
The computers are updated by using Windows Update for Business.
The domain has the users shown in the following table.
Computer1 has the local users shown in the following table.
Requirements
Planned Changes
Contoso plans to purchase computers preinstalled with Windows 10 Pro for all the San Diego office users.
Technical Requirements
Contoso identifies the following technical requirements:
The computers in the San Diego office must be upgraded automatically to Windows 10 Enterprise and must be joined to Azure AD the first time a user starts each new computer. End users must not be required to accept the End User License Agreement (EULA).
Helpdesk users must be able to troubleshoot Group Policy object (GPO) processing on the Windows 10 computers. The helpdesk users must be able to identify which Group Policies are applied to the computers.
Users in the HR department must be able to view the list of files in a folder named D:\Reports on Computer3.
ComputerA must be configured to have an Encrypting File System (EFS) recovery agent.
Quality update installations must be deferred as long as possible on ComputerA.
Users in the IT department must use dynamic look on their primary device.
User6 must be able to connect to Computer2 by using Remote Desktop.
The principle of least privilege must be used whenever possible.
Administrative effort must be minimized whenever possible.
Assigned access must be configured on Computer1.
NEW QUESTION 185
Use the drop-down menus to select the answer choice that completes each statement based on the information presented on the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 186
Your company has an isolated network used for testing. The network contains 20 computers that run Windows 10. The computers are in a workgroup. During testing, the computers must remain in the workgroup.
You discover that none of the computers are activated.
You need to recommend a solution to activate the computers without connecting the network to the Internet.
What should you include in the recommendation?
- A. Key Management Service (KMS)
- B. the Get-WindowsDeveloperLicense
- C. Volume Activation Management Tool (VAMT)
- D. Active Directory-based activation
Answer: C
Explanation:
Explanation
https://docs.microsoft.com/en-us/windows/deployment/volume-activation/introduction-vamt
NEW QUESTION 187
You enable Windows PowerShell remoting on a computer that runs Windows 10.
You need to limit which PowerShell cmdlets can be used in a remote session.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
1. New
2. Regster
3. Enter
Read more:
https://devblogs.microsoft.com/scripting/build-constrained-powershell-endpoint-using-configuration-file/
NEW QUESTION 188
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer that runs Windows 10. The computer contains a folder named D:\Scripts. D:\Scripts contains several PowerShell scripts.
You need to ensure that you can run the PowerShell scripts without specifying the full path to the scripts. The solution must persist between PowerShell sessions.
Solution: From PowerShell, you run $env:Path += ";d:\scripts".
Does this meet the goal?
- A. No
- B. Yes
Answer: B
Explanation:
References:
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_environment_variables?view=powershell-7
NEW QUESTION 189
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that contain the users shown in the following table.
You have a computer named Computer1 that runs Windows 10.
User1 joins Computer1 to Azure AD by using [email protected].
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION 190
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 8.1.
Computer1 has apps that are compatible with Windows 10.
You need to perform a Windows 10 in-place upgrade on Computer1.
Solution: You copy the Windows 10 installation media to a Microsoft Deployment Toolkit (MDT) deployment share. You create a task sequence, and then you run the MDT deployment wizard on Computer1.
Does this meet the goal?
- A. No
- B. Yes
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit
NEW QUESTION 191
You need to meet the technical requirements for EFS on ComputerA.
What should you do?
- A. Run certutil.exe, and then add a certificate to the local computer certificate store.
- B. Run cipher.exe, and then add a certificate to the local computer certificate store.
- C. Run certutil.exe, and then add a certificate to the local Group Policy.
- D. Run cipher.exe, and then add a certificate to the local Group Policy.
Answer: B
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/crea
NEW QUESTION 192
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
Username and password
Use the following login credentials as needed:
To enter your password, place your cursor in the Enter password box and click on the password below.
Username: Contoso/Administrator
Password: Passw0rd!
The following information is for technical support purposes only:
Lab Instance: 11145882
You need to ensure that C:\Scripts\Configure.ps1 runs every time a user sign in to Client2.
To complete this task, sign in to the required computer or computers.
Answer:
Explanation:
See explanation below.
Explanation
Go to the Start menu, type "Task Scheduler" and select it from the search results.
Task Scheduler can also be accessed in the Control Panel under Administrative Tools.
In the right side of the Task Scheduler menu, under Actions, select "Create Task."
On the General tab, enter a name and description for the task you're creating. Check the box "Run with highest privileges." Once you have filled out a name and description, click the "Triggers" tab, and then click "New." In this menu, under "Begin the task:" select "At log on." Choose which user you would like the task to run for at log on. For our purposes, Any user.
Configure any of the applicable advanced settings you would like.
After you are finished configuring the new trigger, click OK and then select the "Actions" tab. Click "New" to make a new action.
Choose "Start a program" under the Action menu and then click "Browse" to point to C:\Scripts\Configure.ps1.
Click OK to exit out of the Actions menu. The "Conditions" and "Settings" tabs can be left alone.
Click OK on the Create Task menu, and you are finished.
Reference:
https://www.howtogeek.com/138159/how-to-enable-programs-and-custom-scripts-to-run-at-boot/
NEW QUESTION 193
You need to meet the technical requirements for the HR department users.
Which permissions should you assign to the HR department users for the D:\Reports folder? To answer, select the appropriate permissions in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://www.online-tech-tips.com/computer-tips/set-file-folder-permissions-windows/
NEW QUESTION 194
You have a computer named Computer1 that runs Windows 10.
You are troubleshooting Group Policy objects (GPOs) on Computer1.
You run gpresult /user user1 /v and receive the output shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
References:
https://www.windowscentral.com/how-apply-local-group-policy-settings-specific-users-windows-10
NEW QUESTION 195
......
Penetration testers simulate MD-100 exam: https://www.crampdf.com/MD-100-exam-prep-dumps.html
Bestselling On-The-Job Reference Exam Questions: https://drive.google.com/open?id=1OQ1KjoxOzHV_p-cIc6hjQbHdJ6gjHxZz