Microsoft Windows 10 (MD-100) Sample Questions
Advanced Sample Questions
You work as a system administrator at ABC Inc. The company recently purchased a new computer with Windows 10 installed on it. You need to change the name of the computer. How can you change the name of the computer in Windows 10?
- a. From Control Panel
- b. From Settings app
- c. From File Explorer
- d. From Command Prompt
Answer: B. From Settings app
Explanation: To change the name of the computer in Windows 10, you need to open the Settings app, go to System > About and click on the “Device name” option. You can then enter the new name of the computer and save the changes.
You work as a system administrator at XYZ Inc. The company recently upgraded to Windows 10 and some of the users are facing issues with the touchpad. You need to disable the touchpad on their laptops. How can you disable the touchpad in Windows 10?
- a. From Control Panel
- b. From Settings app
- c. From File Explorer
- d. From Command Prompt
Answer: A. From Control Panel
Explanation: To disable the touchpad in Windows 10, you need to go to Control Panel, select Hardware and Sound, and then click on the “Mouse” option. You can then select the touchpad option and disable it from there.
You work as a system administrator at PQR Ltd. The company has a Windows 10 computer that needs to be joined to a domain. You need to join the computer to the domain. How can you join a Windows 10 computer to a domain?
- a. From Control Panel
- b. From Settings app
- c. From File Explorer
- d. From Command Prompt
Answer: A. From Control Panel
Explanation: To join a Windows 10 computer to a domain, you need to go to Control Panel, select System and Security, and then click on the “System” option. You can then select the “Advanced system settings” option, go to the “Computer Name” tab and click on the “Change” button. You can then enter the name of the domain and join the computer to it.
You work as a system administrator at DEF Inc. The company has a Windows 10 computer that needs to be backed up. You need to backup the data on the computer. How can you backup data on a Windows 10 computer?
- a. From Control Panel
- b. From Settings app
- c. From File Explorer
- d. From Command Prompt
Answer: B. From Settings app
Explanation: To backup data on a Windows 10 computer, you need to open the Settings app, go to Update & Security > Backup and select the option to backup the data. You can then choose the type of backup, such as a local backup or a cloud backup, and follow the steps to complete the backup process.
You work as a system administrator at GHI Inc. The company has a Windows 10 computer that needs to be restarted in safe mode. You need to restart the computer in safe mode. How can you restart a Windows 10 computer in safe mode?
- a. From Control Panel
- b. From Settings app
- c. From File Explorer
- d. From Command Prompt
Answer: B. From Settings app
Explanation: To restart a Windows 10 computer in safe mode, you need to open the Settings app, go to Update & Security > Recovery and select the option to restart in safe mode. You can then follow
You work as a system administrator at JKL Corp. The company has a Windows 10 computer that needs to be updated to the latest version. You need to update the computer to the latest version of Windows 10. How can you update a Windows 10 computer to the latest version?
- a. From Control Panel
- b. From Settings app
- c. From File Explorer
- d. From Command Prompt
Answer: B. From Settings app
Explanation: To update a Windows 10 computer to the latest version, you need to open the Settings app, go to Update & Security > Windows Update and select the option to check for updates. You can then follow the steps to download and install the latest version of Windows 10.
You work as a system administrator at MNO Inc. The company has a Windows 10 computer that needs to have a password reset. You need to reset the password for the computer. How can you reset the password for a Windows 10 computer?
- a. From Control Panel
- b. From Settings app
- c. From File Explorer
- d. From Command Prompt
Answer: A. From Control Panel
Explanation: To reset the password for a Windows 10 computer, you need to go to Control Panel, select User Accounts, and then click on the “User Accounts” option. You can then select the account for which you need to reset the password and follow the steps to reset the password.
You work as a system administrator at PQR Ltd. The company has a Windows 10 computer that needs to be optimized for performance. You need to optimize the performance of the computer. How can you optimize the performance of a Windows 10 computer?
- a. From Control Panel
- b. From Settings app
- c. From File Explorer
- d. From Command Prompt
Answer: A. From Control Panel
Explanation: To optimize the performance of a Windows 10 computer, you need to go to Control Panel, select System and Security, and then click on the “System” option. You can then select the “Advanced system settings” option, go to the “Performance” tab and click on the “Settings” button. You can then select the option to optimize the performance of the computer and follow the steps to complete the optimization process.
You work as a system administrator at DEF Inc. The company has a Windows 10 computer that needs to have the screen resolution changed. You need to change the screen resolution of the computer. How can you change the screen resolution of a Windows 10 computer?
- a. From Control Panel
- b. From Settings app
- c. From File Explorer
- d. From Command Prompt
Answer: A. From Control Panel
Explanation: To change the screen resolution of a Windows 10 computer, you need to go to Control Panel, select Display, and then click on the “Adjust screen resolution” option. You can then select the desired screen resolution and apply the changes.
You work as a system administrator at GHI Inc. The company has a Windows 10 computer that needs to have a new user account created. You need to create a new user account on the computer. How can you create a new user account on a Windows 10 computer?
- a. From Control Panel
- b. From Settings app
- c. From File Explorer
- d. From Command Prompt
Answer: B. From Settings app
Basic Sample Questions
Question 1. Your plan is to deploy Windows 10 to 100 secure computers, and you select a version of Windows 10 that meets the following requirements:
- Microsoft Edge as the default browser
- Minimizes the attack surface on the computer
- Supports joining Microsoft Azure Active Directory (Azure AD)
- Only allows the installation of applications from the Microsoft Store
Which version will help achieve the goal?
- A. Windows 10 Pro in S mode
- B. Windows 10 Home in S mode
- C. Windows 10 Pro
- D. Windows 10 Enterprise
Correct Answer: A
Explanation: S mode is a streamlined version of Windows 10 for security and performance, but provides all the familiar features of the operating system. As part of its security measures, it allows only apps from the Microsoft Store, and only Microsoft Edge is needed for safe browsing.
In Windows 10 Pro and Windows 10 Enterprise, Azure AD Domain join is available, but it is not available in Windows 10 Home.
References: https://support.microsoft.com/en-gb/help/4020089/windows-10-in-s-mode-faq
Question 2. For deploying Windows 10 to new computers, your organization uses the Microsoft Deployment Toolkit (MDT). It is imperative that the Hyper-V feature be enabled on the new computers during the deployment of the 1,000 new computers the company has purchased.
What are two possible ways to achieve this goal?
- A. Adding a task sequence step that adds a provisioning package.
- B. From the Group Policy object (GPO), from Computer Configuration, configuring the Application Control Policies.
- C. Adding a custom command to the Unattend.xml file.
- D. Adding a configuration setting to Windows Deployment Services (WDS).
- E. Adding a task sequence step that runs dism.exe.
Correct Answer: CE
Explanation: Adding a feature such as Hyper-V in MDT is normally accomplished by using the Install Roles and Features task sequence action, but that’s not the option in this question.
Both valid options are adding a command to the Unattend.xml file or adding a task sequence step that runs dism.exe. If you want to add Hyper-V with dism.exe, run the following command:
DISM /Online /Enable-Feature /All /FeatureName:Microsoft-Hyper-V
References: https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image
https://docs.microsoft.com/en-us/virtualization/hyper-v-on-windows/quick-start/enable-hyper-v
Question 3. Azure Active Directory (Azure AD) is a tenant of an Active Directory domain on your network. After purchasing a Microsoft 365 subscription, your company wants to migrate Documents folders for users to OneDrive for Business.
How would you configure it?
- A. OneDrive Group Policy settings
- B. roaming user profiles
- C. Enterprise State Roaming
- D. Folder Redirection Group Policy settings
Correct Answer: A
Explanation: Group Policy Objects (GPO) need to be configured with the OneDrive settings needed to redirect each user’s Documents folder to Microsoft 365. The OneDrive template files can be imported into group policy to add OneDrive-related settings that can be configured in group policy. You can direct Known Folders to OneDrive for business via a group policy setting. Known folders are Desktop, Documents, Pictures, Screenshots, and Camera Roll.
There are two main advantages of moving or redirecting Windows known folders to OneDrive for the users in your domain:
- Users can continue using the folders, and won’t have to change habits to save files to OneDrive.
- Syncing files to OneDrive backs up your users’ data in the cloud, so they can access them anywhere and at any time.
Question 4. A user called User1 resides in a domain named Active Directory on your network. After registering for a Microsoft account, User1 needs to log into cloud resources with the Microsoft account without being asked for credentials.
Which settings would User1 configure?
- A. User Accounts in Control Panel
- B. Email & app accounts in the Settings app
- C. Users in Computer Management
- D. Users in Active Directory Users and Computers
Correct Answer: B
Explanation: Go to the Settings app, select Accounts, then select Email and accounts. You can configure the login credentials for account accounts as well as add accounts to the cloud. When you open the apps with credentials from your Microsoft account, you won’t be required to enter credentials.
References: https://support.microsoft.com/en-za/help/4028195/microsoft-account-how-to-sign-in
Question 5. There is an Azure Active Directory tenant named contoso.com, a Windows 10 workgroup computer named Computer1, and an Azure Active Directory tenant named contoso.com. In order to add Computer1 to contoso.com, what should you do?
- A. Computer Management
- B. dsregcmd.exe
- C. the Settings app
- D. netdom.exe
Correct Answer: C
Explanation: In Windows 10, the Settings panel (System->About) is where you join a computer to a domain, including an Azure AD domain
References: https://aadguide.azurewebsites.net/aadjoin/
Question 6. A Windows 10 computer needs to be configured with a password for pictures. How should you proceed?
- A. configuring the User Accounts settings from Control Panel
- B. configuring the Sign-in options. from the Settings app
- C. configuring the Account Policies settings from the Local Group Policy Editor
- D. running the Set-LocalUser cmdlet and specifying the InputObject parameter from Windows PowerShell
Correct Answer: B
Question 7. You are using a physical security key, and configure Windows Hello to sign in to Computer1 by using a workgroup computer named Computer1.
How will you proceed?
- A. USB 3.0 device that supports BitLocker Drive Encryption (BitLocker)
- B. USB device that supports FIDO2
- C. USB 3.0 device that has a certificate from a trusted certification authority (CA)
- D. USB device that supports RSA SecurID
Correct Answer: B
Reference: https://docs.microsoft.com/en-us/azure/active-directory/user-help/security-info-setup-security-key
Question 8. There is a computer named Computer1 on your network running Windows 8.1 which is part of your Active Directory domain.
- Computer1 has apps that are compatible with Windows 10.
- You need to perform a Windows 10 in-place upgrade on Computer1.
Solution: From Windows 8.1 on Computer1, run setup.exe from the network share, then copy the Windows 10 installation media to the network share.
Does this meet the goal?
- A. Yes Most Voted
- B. No
Correct Answer: B
Question 9. You have a computer named Computer1 that runs Windows 10. Several users have signed in to Computer1 and have a profile. You create a taskbar modification file named LayoutModification.xml. You need to ensure that LayoutModification.xml will apply to all users who sign in to Computer1.
To which folder should you copy LayoutModification.xml?
- A. C:\Users\Public\Public Desktop
- B. C:\Windows\ShellExperiences
- C. C:\Users\Default\AppData\Local\Microsoft\Windows\Shell\
- D. C:\Windows\System32\Configuration
Correct Answer: C
Reference: https://docs.microsoft.com/en-us/windows/configuration/start-layout-xml-desktop
Question 10. There are numerous computers that run Windows 10. It is an enterprise workgroup with BitLocker Drive Encryption (BitLocker) enabled, but the computers have been joined to Microsoft Azure Active Directory (Azure AD). You have to make sure that you are able to retrieve the BitLocker recovery key for the computers from Azure AD.
What needs to be done first?
- A. BitLocker should be disabled
- B. BitLocker key protector needs to be added
- C. Suspend BitLocker.
- D. Disabling the TMP chip.
Correct Answer: B
Question 11. There are numerous computers that run Windows 10. Your workgroup has computers and you need to prevent users from using Microsoft Store apps on their computers.
What two of the following can be used to achieve the goal?
- A. Configure Security Options from Security Settings in the Local Group Policy.
- B. Configure the Store settings from Administrative Templates in the Local Group Policy.
- C. Configure Software Restriction Policies from Security Settings in the Local Group Policy.
- D. Configure Application Control Policies from Security Settings in the Local Group Policy.
Correct Answer: BD
References: https://www.techrepublic.com/article/how-to-manage-your-organizations-microsoft-store-group-policy/
Question 12. A network has an Active Directory domain. The domain has a computer called Computer1, and you have to view the settings related to Computer1 through Group Policy objects (GPOs) in the domain and Local Group Policies.
Which command should be used?
- A. gpresult
- B. secedit
- C. gpupdate
- D. gpfixup
Correct Answer: A
References: https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/gpresult
Question 13. A network has an Active Directory domain and the domain has computers running on Windows 10.
The user should be able to remotely create and modify shares on the computers, and the solution should make use of the least privilege principle.
To which group will you add the user?
- A. Power Users
- B. Remote Management Users
- C. Administrators
- D. Network Configuration Operators
Correct Answer: C
Question 14. Your public computer is named Computer1, which runs Windows 10. This computer contains a folder named Folder1.
It is necessary to give User1 the permission to modify the permissions of Folder1. Using the least privilege principle must be the solution. Which NTFS permission should be assigned to User1?
- A. Full control
- B. Modify
- C. Write
- D. Read & execute
Correct Answer: B
Question 15. You use 10 computers with Windows 10 and BitLocker Drive Encryption (BitLocker) enabled on them.
During the next restart of the computers, you plan to update the firmware, and you should not be asked for the BitLocker recovery key. Any subsequent restarts must use BitLocker to protect the drive.
Which cmdlet would you run?
- A. Unlock-BitLocker
- B. Disable-BitLocker
- C. Add-BitLockerKeyProtector
- D. Suspend-BitLocker
Correct Answer: D
Question 16. The network you manage contains an Active Directory domain containing a computer named Computer1 running Windows 10. There is a folder named Folder1 on Computer1.
You intend to share Folder1. Share permissions will be set to Read for everyone and Full Control for administrators. To prevent users from seeing the share when browsing the network, you need to prevent the share from appearing.
How would you do it?
- A. Enabling access-based enumeration.
- B. Denying the List NTFS permissions on Folder1.
- C. Adding Folder1 to a domain-based DFS namespace.
- D. Naming the share Folder1$.
Correct Answer: D
Explanation: When a dollar sign is appended to a share name, it prevents the share from appearing in user search results.
Question 17. Your computer named Computer1 runs Windows 10. The File History option is enabled on Computer1. It is necessary to use File History to safeguard a folder named D:/Folder1.
How should you proceed?
- A. modifying the Security settings of D:\Folder1 from File Explorer
- B. modifying the backup settings from Backup and Restore (Windows 7)
- C. configuring the Backup settings from the Settings app
- D. configuring the Advanced settings from File History in Control Panel
Correct Answer: C
Explanation: File History can be configured by clicking More options on the Backup screen. File History gives you the option of setting how often a backup should be performed and how long it should be stored.
Reference: https://www.groovypost.com/howto/configure-windows-10-file-history/
Question 18. A folder named D:/Scripts exists on your computer, which runs Windows 10. A number of PowerShell scripts can be found in D:/Scripts.
In order to run the PowerShell scripts without specifying the full path, you need to ensure that you can run the scripts without specifying the full path. It is imperative that the solution persists between PowerShell sessions.
Solution: At a command prompt, you run set.exe path=d:\scripts.
Does this meet the goal?
- A. Yes
- B. No
Correct Answer: B
Question 19. A folder named D:/Scripts exists on your computer, which runs Windows 10. A number of PowerShell scripts can be found in D:/Scripts.
In order to run the PowerShell scripts without specifying the full path, you need to ensure that you can run the scripts without specifying the full path. It is imperative that the solution persists between PowerShell sessions.
Solution: From PowerShell, you run $env:Path += “;d:\scripts\”.
Does this meet the goal?
- A. Yes
- B. No
Correct Answer: A
Question 20. A Windows 10 domain in your network contains two computers named Computer1 and Computer2, both of which are running the Active Directory. By using the Registry Editor on Computer2, you need to modify the registry of Computer1.
Which two registry hives can you modify?
- A. HKEY_CURRENT_USER
- B. HKEY_LOCAL_MACHINE
- C. HKEY_USERS
- D. HKEY_CLASSES_ROOT
- E. HKEY_CURRENT_CONFIG
Correct Answer: BC
