MD 100 Review

Your network contains an Active Directory domain that is synced to a Microsoft Azure Active Directory (Azure AD) tenant.

Your company purchases a Microsoft 365 subscription.

You need to migrate the Documents folder of users to Microsoft OneDrive for Business.

What should you configure?

• A. One Drive Group Policy settings

• B. roaming user profiles

• C. Enterprise State Roaming

• D. Folder Redirection Group Policy settings

Answer explanation

Explanation:

You need to configure a Group Policy Object (GPO) with the OneDrive settings required to redirect the Documents folder of each user to Microsoft 365.

Importing the OneDrive group policy template files into Group Policy adds OneDrive related settings that you can configure in your Group Policy.

One of the group policy settings enables you to redirect ג€Known Folders ג€ to OneDrive for business. Known folders are Desktop, Documents, Pictures,

Screenshots, and Camera Roll.

There are two primary advantages of moving or redirecting Windows known folders to OneDrive for the users in your domain:

✑ Your users can continue using the folders they're familiar with. They don't have to change their daily work habits to save files to OneDrive.

✑ Saving files to OneDrive backs up your users' data in the cloud and gives them access to their files from any device.

Reference:

https://docs.microsoft.com/en-us/onedrive/redirect-known-folders?redirectSourcePath=%252fen-us%252farticle%252fredirect-windows-known-folders-to- onedrive

You have an Azure Active Directory (Azure AD) tenant named contoso.com.

You have a workgroup computer named Computer1 that runs Windows 10.

You need to add Computer1 to contoso.com.

What should you use?

• A. Computer Management

• B. dsregcmd.exe

• C. the Settings app

• D. netdom.exe

Answer explanation

Explanation:

You join a computer to a domain, including an Azure AD domain in the Settings panel in Windows 10, under System->About

Reference:

https://aadguide.azurewebsites.net/aadjoin/

You have a computer that runs Windows 10.

You need to configure a picture password.

What should you do?

• A. From Control Panel, configure the User Accounts settings.

• B. From the Settings app, configure the Sign-in options.

• C. From the Local Group Policy Editor, configure the Account Policies settings.

• D. From Windows PowerShell, run the Set-LocalUser cmdlet and specify the InputObject parameter.

You have a workgroup computer named Computer1 that runs Windows 10.

You need to configure Windows Hello for sign-in to Computer1 by using a physical security key.

What should you use?

• A. a USB 3.0 device that supports BitLocker Drive Encryption (BitLocker)

• B. a USB device that supports FIDO2

• C. a USB 3.0 device that has a certificate from a trusted certification authority (CA)

• D. a USB device that supports RSA SecurID

Answer explanation

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/user-help/security-info-setup-security-key

You have a computer named Computer1 that runs Windows 10.

Several users have signed in to Computer1 and have a profile.

You create a taskbar modification file named LayoutModification.xml.

You need to ensure that LayoutModification.xml will apply to all users who sign in to Computer1.

To which folder should you copy LayoutModification.xml?

• A. C:\Users\Public\Public Desktop

• B. C:\Windows\ShellExperiences

• C. C:\Users\Default\AppData\Local\Microsoft\Windows\Shell\

• D. C:\Windows\System32\Configuration

Answer explanation

Reference:

https://docs.microsoft.com/en-us/windows/configuration/start-layout-xml-desktop

You are preparing to deploy Windows 10.

You download and install the Windows Assessment and Deployment Kit (Windows ADK).

You need to create a bootable WinPE USB drive.

What should you do first?

• A. Run the MakeWinPEMedia command.

• B. Download and install Windows Configuration Designer.

• C. Run the WPEUtil command.

• D. Download and install the WinPE add-on.

Answer explanation

Explanation:

WinPE used to be included in the Windows ADK. However, it is now provided as an add-on so the first step is to download and install the add-on.

Reference:

https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/winpe-create-usb-bootable-drive https://docs.microsoft.com/en-us/windows-hardware

You install Windows 10 Enterprise on a new computer.

You need to force activation on the computer.

Which command should you run?

• A. slmgr /upk

• B. Set-RDLicenseConfiguration -Force

• C. Set-MsolLicense -AddLicense

• D. slmgr /ato

Answer explanation

Reference:

https://docs.microsoft.com/en-us/windows/deployment/volume-activation/activate-using-key-management-service-vamt

You install Windows 10 Pro on a computer named CLIENT1 and join the device to an Active Directory domain.

You need to ensure that all per-user services are disabled on CLIENT1. The solution must minimize administrative effort.

What should you use?

• A. a Group Policy administrative template

• B. the sfc command

• C. Services

• D. Group Policy preferences

Answer explanation

Reference:

https://docs.microsoft.com/en-us/windows/application-management/per-user-services-in-windows

You have a computer that runs Windows 10 and is joined to Azure Active Directory (Azure AD).

You attempt to open Control Panel and receive the error message shown on the following exhibit.

You need to be able to access Control Panel.

What should you modify?

• A. the PowerShell execution policy

• B. the local Group Policy

• C. the Settings app

• D. a Group Policy preference

Answer explanation

Reference:

https://windows10skill.com/this-operation-has-been-cancelled-due-to-restrictions-in-effect-on-this-pc/

You have a public computer named Computer1 that runs Windows 10. Computer1 contains a folder named Folder1.

You need to provide a user named User1 with the ability to modify the permissions of Folder1. The solution must use the principle of least privilege.

Which NTFS permission should you assign to User1?

• A. Full control

• B. Modify

• C. Write

• D. Read & execute

Answer explanation

Explanation:

The NTFS Full control permission is required to change permissions.

Reference:

https://www.ntfs.com/ntfs-permissions-file-folder.htm