MD-100試験問題集でPDF問題とテストエンジン [Q117-Q137]

MD-100試験問題集でPDF問題とテストエンジン

MD-100問題集で必ず試験合格させる

質問 # 117
You have a computer named Computer1 that runs Windows 10.
You are troubleshooting Group Policy objects (GPOs) on Computer1.
You run gpresult /user user1 /v and receive the output shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation

References:
https://www.windowscentral.com/how-apply-local-group-policy-settings-specific-users-windows-10

質問 # 118
You have 15 computers that run Windows 10. Each computer has two network interfaces named Interface1 and Interface2.
You need to ensure that network traffic uses Interface1, unless Interface1 is unavailable.
What should you do?

A. Run the Set-NetAdapterBinding -Name Interface2 -Enabled $true -ComponentID ms_tcpip - ThrottleLimit 0 command.
B. Set a static IP address on Interface 1.
C. From Network Connections in Control Pane, modify the Provider Order.
D. Run the Set-NetIPInterface -InterfaceAlias Interface1 -InterfaceMetric 1 command.

正解：D

解説：
Explanation
References:
https://tradingtechnologies.atlassian.net/wiki/spaces/KB/pages/27439127/How+to+Change+Network+Adapter+P
https://docs.microsoft.com/en-us/powershell/module/nettcpip/set-netipinterface?view=win10-ps

質問 # 119
Your company has several mobile devices that run Windows 10.
You need configure the mobile devices to meet the following requirements:
Windows updates may only be download when mobile devices are connect to Wi-Fi.
Access to email and the Internet must be possible at all times.
What should you do?

A. Open the Setting app and select Network & Internet. Then select Change connection properties, and set the Metered connection option for cellular network connections to On.
B. Open the Setting app and select Update & Security. Then select and configure Change active hours.
C. Open the Setting app and select Update & Security. Then select and configure Delivery Optimization.
D. Open the Setting app and select Network & Internet Then select Data Usage and set a data limit.

正解：A

解説：
Reference:
https://www.makeuseof.com/tag/5-ways-temporarily-turn-off-windows-update-windows-10/

質問 # 120
You enable controlled folder access in audit mode for several computers that run Windows 10.
You need to review the events audited by controlled folder access.
Which Event Viewer log should you view?

A. Windows\Security
B. Applications and Services\Microsoft\Windows\Windows Defender\Operational
C. Applications and Services\Microsoft\Windows\Known Folders\Operational

正解：C

質問 # 121
You have a computer named Computer1 that runs Windows 10.
Computer1 contains the folders shown in the following table.

You include Folder1, Folder2, and Folder3 in the Documents library.
You configure File History to run every 15 minutes, and then turn on File History.
For each of the following statements, select Yes if the statement in true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation

質問 # 122
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer named Computer1 that runs Windows 10.
A service named Application1 is configured as shown in the exhibit.

You discover that a user used the Service1 account to sign in to Computer1 and deleted some files.
You need to ensure that the identity used by Application1 cannot be used by a user to sign in to sign in to the desktop on Computer1. The solution must use the principle of least privilege.
Solution: On Computer1, you assign Service1 the deny log on locally user right.
Does this meet the goal?

A. No
B. Yes

正解：B

解説：
Explanation
References:
https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/deny-log-on-locally

質問 # 123
Your company has an isolated network used for testing. The network contains 20 computers that run Windows
10. The computers are in a workgroup. During testing, the computers must remain in the workgroup.
You discover that none of the computers are activated.
You need to recommend a solution to activate the computers without connecting the network to the Internet.
What should you include in the recommendation?

A. the Get-WindowsDeveloperLicense cmdlet
B. Active Directory-based activation
C. Key Management Service (KMS)
D. Volume Activation Management Tool (VAMT)

正解：C

解説：
You can configure one of the computers as a Key Management Service (KMS) host and activate the KMS host by phone. The other computers in the isolated network can then activate using the KMS host.
Installing a KMS host key on a computer running Windows 10 allows you to activate other computers running Windows 10 against this KMS host and earlier versions of the client operating system, such as Windows 8.1 or Windows 7. Clients locate the KMS server by using resource records in DNS, so some configuration of DNS may be required. This scenario can be beneficial if your organization uses volume activation for clients and MAK-based activation for a smaller number of servers. To enable KMS functionality, a KMS key is installed on a KMS host; then, the host is activated over the Internet or by phone using Microsoft's activation services.
References:
https://docs.microsoft.com/en-us/windows/deployment/volume-activation/activate-using-key-management- service-vamt

質問 # 124
You deploy Windows 10 to a new computer named Computer1.
You sign in to Computer1 and create a user named User1.
You create a file named LayoutModification.xml in the C:\Users\Default\AppData\Local\Microsoft\Windows\Shell\folder. LayoutModification.xml contains the following markup.

What is the effect of the configuration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Reference:
https://docs.microsoft.com/en-us/windows/configuration/configure-windows-10-taskbar

質問 # 125
You have a computer named Computer1 that runs Windows 10.
Computer1 contains the folders shown in the following table.

You include Folder1, Folder2, and Folder3 in the Documents library.
You configure File History to run every 15 minutes, and then turn on File History.
For each of the following statements, select Yes if the statement in true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

正解：

解説：

質問 # 126
Your network contains an Active Directory domain that is synced to a Microsoft Azure Active Directory (Azure AD) tenant.
The company plans to purchase computers preinstalled with Windows 10 Pro for all users.
The company the following requirements:
* The new computers must be upgraded to Windows 10 Enterprise automatically.
* The new computers must be joined to Azure AD automatically when the user starts the new computers for the first time.
* The users must not be required to accept the End User License Agreement (EULA).
You need to deploy the new computers.
What should you do?

A. Perform in-place upgrade on the new computers.
B. Provide provisioning packages for the new computers.
C. Make use of Windows Autopilot.
D. Make use of the wipe and load refresh deployment method.

正解：C

解説：
Explanation
Windows Autopilot is a collection of technologies used to set up and pre-configure new devices, getting them ready for productive use. You can also use Windows Autopilot to reset, repurpose and recover devices.
The OEM Windows 10 installation on the new computers can be transformed into a "business-ready" state, applying settings and policies, installing apps, and even changing the edition of Windows 10 being used (e.g.
from Windows 10 Pro to Windows 10 Enterprise) to support advanced features.
The only interaction required from the end user is to connect to a network and to verify their credentials.
Everything beyond that is automated.
Reference:
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot

質問 # 127
You need to meet the technical requirements for EFS on ComputerA.
What should you do?

A. Run cipher.exe, and then add a certificate to the local Group Policy.
B. Run cipher.exe, and then add a certificate to the local computer certificate store.
C. Run certutil.exe, and then add a certificate to the local computer certificate store.
D. Run certutil.exe, and then add a certificate to the local Group Policy.

正解：D

解説：
Explanation
References:
https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/crea
Topic 1, Contoso, Ltd
Overview
Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York.
Contoso has IT, human resources (HR), and finance departments.
Contoso recently opened a new branch office in San Diego. All the users in the San Diego office work from home.
Existing environment
Contoso uses Microsoft 365.
The on-premises network contains an Active Directory domain named contoso.com. The domain is synced to Microsoft Azure Active Directory (Azure AD).
All computers run Windows 10 Enterprise.
You have four computers named Computer1, Computer2, Computer3, and ComputerA. ComputerA is in a workgroup on an isolated network segment and runs the Long Term Servicing Channel version of Windows
10. ComputerA connects to a manufacturing system and is business critical. All the other computers are joined to the domain and run the Semi-Annual Channel version of Windows 10.
In the domain, you create four groups named Group1, Group2, Group3, and Group4.
Computer2 has the local Group Policy settings shown in the following table.

The computers are updated by using Windows Update for Business.
The domain has the users shown in the following table.

Computer1 has the local users shown in the following table.

Requirements
Planned Changes
Contoso plans to purchase computers preinstalled with Windows 10 Pro for all the San Diego office users.
Technical requirements
Contoso identifies the following technical requirements:
* The computers in the San Diego office must be upgraded automatically to Windows 10 Enterprise and must be joined to Azure AD the first time a user starts each new computer. End users must not be required to accept the End User License Agreement (EULA).
* Helpdesk users must be able to troubleshoot Group Policy object (GPO) processing on the Windows 10 computers. The helpdesk users must be able to identify which Group Policies are applied to the computers.
* Users in the HR department must be able to view the list of files in a folder named D:\Reports on Computer3.
* ComputerA must be configured to have an Encrypting File System (EFS) recovery agent.
* Quality update installations must be deferred as long as possible on ComputerA.
* Users in the IT department must use dynamic look on their primary device.
* User6 must be able to connect to Computer2 by using Remote Desktop.
* The principle of least privilege must be used whenever possible.
* Administrative effort must be minimized whenever possible.
* Assigned access must be configured on Computer1.

質問 # 128
You have a computer named Client1 that runs Windows 11 Home.
You need to ensure that you can create virtual machines on Client1.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

正解：

解説：

Explanation
Graphical user interface, application Description automatically generated

質問 # 129
You have a Microsoft Azure Active Directory (Azure AD) tenant.
Some users signs in to that computer by using Windows hello for Business.
A user User1 purchases a new computer and joins the computer to Azure AD.
User1 attempts to configure the sign-in options and receives the error message shown in the exhibit. (Click the Exhibit tab.)

You open device Manager and confirmed that all the hardware works correctly.
You need to ensure that user1 can use Windows Hello for Business facial recognition to sign in to the computer.
What should you do first.

A. Install a virtual TPM driver.
B. Purchase an infrared (IR) camera.
C. Upgrade the computer to windows 10 Enterprise.
D. Enable UEF Secure Boot.

正解：C

質問 # 130
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a workgroup computer that runs Windows 10. The computer contains the local user accounts shown in the following table.

You need to configure the desktop background for User1 and User2 only.
Solution: From the local computer policy, you configure the Filter Options settings for the user policy. At a command prompt, you run the gpupdate.exe/Target:usercommand.
Does this meet the goal?

A. No
B. Yes

正解：A

質問 # 131
You enable Windows PowerShell remoting on a computer that runs Windows 10.
You need to limit which PowerShell cmdlets can be used in a remote session.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

正解：

解説：

Explanation:
References:
https://www.petri.com/powershell-remoting-restricting-user-commands

質問 # 132
You have a workgroup computer named Computer1 that runs Windows 10. Computer1 has the users accounts shown in the following table:

Computer1 has the local Group Policy shown in the following table.

You create the Local Computer\Administrators policy shown in the following table.

You create the Local Computer\Non-Administrators policy shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

正解：

解説：

Explanation

Reference:
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-vista/cc766291(v=ws.10)

質問 # 133
Your network contains an Active Directory domain. The domain contains a group named Group1.
All the computers in the domain run Windows 10. Each computer contains a folder named C:\Documents that has the default NTFS permissions set.
You add a folder named C:\Documents\Templates to each computer.
You need to configure the NTFS permissions to meet the following requirements:
All domain users must be able to open the files in the Templates folder.
Only the members of Group1 must be allowed to edit the files in the Templates folder.
How should you configure the NTFS settings on the Templates folder? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

質問 # 134
You have a public computer named Computer1 that runs Windows 10/ Computer1 contains a folder named Folder1.
You need to provide a user named User1 with the ability to modify the permissions of Folder1. The solution must use the principle of least privilege.
Which NTFS permission should you assign to User1?

A. Read & execute
B. Full control
C. Modify
D. Write

正解：B

解説：
Reference:
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc732880%28v%3dws.10%29
http://www.mdmarra.com/2013/11/full-control-v-modify-why-you-should-be.html

質問 # 135
Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 10.
The domain contains the users shown in the following table.

Computer1 has the local users shown in the following table.

All users have Microsoft accounts.
Which two users can be configured to sign in by using their Microsoft account? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. User1
B. User5
C. User2
D. User4
E. User3

正解：B、D

質問 # 136
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
A user named User1 has a computer named Computer1 that runs Windows 10. Computer1 is joined to an Azure Active Directory (Azure AD) tenant named contoso.com. User1 joins Computer1 to contoso.com by using [email protected].
Computer1 contains a folder named Folder1. Folder1 is in drive C and is shared as Share1. Share1 has the permission shown in the following table.

A user named User2 has a computer named Computer2 that runs Windows 10. User2 joins Computer2 to contoso.com by using [email protected].
User2 attempts to access Share1 and receives the following error message: "The username or password is incorrect." You need to ensure that User2 can connect to Share1.
Solution: In Azure AD, you create a group named Group1 that contains User1 and User2. You grant Group1 Change access to Share1.
Does this meet the goal?