Microsoft Microsoft Certifications MD-101 Questions & Answers

• Question 281:

  You have the 64-bit computers shown in the following table.

  

  You plan to perform an in-place upgrade to the 64-bit version of Windows 10.

  Which computers can you upgrade to the 64-bit version of Windows 10 in their current state?

  A. Computer2 and Computer4 only

  B. Computer4 only

  C. Computer3 and Computer4 only

  D. Computer1, Computer2, Computer3 and Computer4

  E. Computer2, Computer3, and Computer4 only

  Correct Answer: A

  Note: Once the Windows 10 upgrade is complete the key in plain text is removed, and then BitLocker will enable again automatically. This means that the Windows 10 upgrade process on a device using BitLocker is the same to a device

  without using the security feature

  Incorrect:

  Not Computer1 or Computer3:

  Changing from Windows 7, Windows 8, or Windows 8.1 x86 to Windows 10 x64. The upgrade process cannot change from a 32-bit operating system to a 64-bit operating system, because of possible complications with installed applications

  and drivers.

  Reference:

  https://docs.microsoft.com/en-us/windows/deployment/windows-10-deployment-scenarios https://pureinfotech.com/upgrade-windows-10-bitlocker-enabled/

• Question 282:

  Your network contains an Active Directory domain. The domain contains 2,000 computers that run Windows 10.

  You implement hybrid Microsoft Azure Active Directory (Azure AD) and Microsoft Intune.

  You need to automatically register all the existing computers to Azure AD and enroll the computers in Intune. The solution must minimize administrative effort.

  What should you use?

  A. An Autodiscover address record.

  B. A Windows AutoPilot deployment profile.

  C. An Autodiscover service connection point (SCP).

  D. A Group Policy object (GPO).

  Correct Answer: B

  Hybrid Azure AD join.

  Support for Hybrid Azure AD join (on-premises AD) using Windows Autopilot user-driven mode is available with Windows 10, version 1809 (or later).

  Note: In this mode, you can use Windows Autopilot to join a device to an on-premises Active Directory domain. Configuring this feature is very similar to the

  Windows Autopilot user-driven mode process today:

  1.

  Register the device with Windows Autopilot.

  2.

  Create an Autopilot deployment profile specifying Hybrid Azure AD as the method in which you would like to join devices to Azure AD.

  3.

  Install the Intune Connector for Active Directory on a computer running Windows Server 2016 (or later).

  Reference: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-Autopilot-Hybrid-Azure-AD-join-and-automatic/ba-p/286126

• Question 283:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You need to ensure that feature and quality updates install automatically on a Windows 10 computer during a maintenance window.

  Solution: In Group policy, from the Maintenance Scheduler settings, you configure Automatic Maintenance Activation Boundary.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/sccm/sum/deploy-use/automatically-deploy-software-updates

• Question 284:

  Your company purchases new computers that run Windows 10. The computers have cameras that support Windows Hello for Business. You configure the Windows Hello for Business Group Policy settings as shown in the following exhibit.

  

  What are two valid methods a user can use to sign in? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  A. Facial recognition

  B. A smartwatch that is Bluetooth-enabled

  C. A PIN

  D. A USB key

  Correct Answer: AC

• Question 285:

  You have 10 computers that run Windows 7 and have the following configurations:

  1.

  A single MBR disk

  2.

  A disabled TPM chip

  3.

  Disabled hardware virtualization

  4.

  UEFI firmware running in BIOS mode

  5.

  Enabled Data Execution Prevention (DEP)

  You plan to upgrade the computers to Windows 10.

  You need to ensure that the computers can use Secure Boot.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Convert the MBR disk to a GPT disk

  B. Enable the TPM chip.

  C. Disable DEP

  D. Enable hardware virtualization

  E. Convert the firmware from BIOS to UEFI.

  Correct Answer: AE

  E: Need to use the UEFI mode to get the UEFI Security features.

  A: If you want to ensure that your drive boots into a certain mode, use drives that you've preformatted with the GPT file format for UEFI mode, or the MBR file format for BIOS mode. When the installation starts, if the PC is booted to the wrong mode, Windows installation will fail. To fix this, restart the PC in the correct firmware mode.

  Reference: https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/boot-to-uefi-mode-or-legacy-bios-mode

• Question 286:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You need to ensure that feature and quality updates install automatically on a Windows 10 computer during a maintenance window.

  Solution: In Group policy, from the Windows Update settings, you enable Configure Automatic Updates, select 4-Auto download and schedule the install, and then enter a time.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/sccm/sum/deploy-use/automatically-deploy-software-updates

• Question 287:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You need to ensure that feature and quality updates install automatically on a Windows 10 computer during a maintenance window.

  Solution: In Group policy, from the Maintenance Scheduler settings, you configure Automatic Maintenance Random Delay.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead. In Group policy, from the Windows Update settings, you enable Configure Automatic Updates, select 4-Auto download and schedule the install, and then enter a time.

  Note: In Group Policy, within Configure Automatic Updates, you can configure a forced restart after a specified installation time.

  To set the time, you need to go to Configure Automatic Updates, select option 4 - Auto download and schedule the install, and then enter a time in the Scheduled install time dropdown. Alternatively, you can specify that installation will occur

  during the automatic maintenance time.

  Reference:

  https://docs.microsoft.com/en-us/windows/deployment/update/waas-restart

• Question 288:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company uses Windows Autopilot to configure the computer settings of computers issued to users.

  A user named User1 has a computer named Computer1 that runs Windows 10. User1 leaves the company.

  You plan to transfer the computer to a user named User2.

  You need to ensure that when User2 first starts the computer, User2 is prompted to select the language setting and to agree to the license agreement.

  Solution: You create a new Windows AutoPilot self-deploying deployment profile.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  In Group Policy, within Configure Automatic Updates, you can configure a forced restart after a specified installation time.

  To set the time, you need to go to Configure Automatic Updates, select option 4 - Auto download and schedule the install, and then enter a time in the Scheduled install time dropdown. Alternatively, you can specify that installation will occur

  during the automatic maintenance time.

  1) Automatic Maintenance Random Delay has NOTHING to do with us achieving our goal of automatically installing updates during a maintenance window

  2) Automatic Maintenance Activation Boundary made me take a deeper dive into these specific GPOs. From my understanding, configuring Activation Boundary will install updates on devices that are not in use. If a user is currently signed in,

  the updates will not install.

  3) "Auto download and schedule the install" does what our question asks. We can decide NOT to check the option for "Automatic Maintenance", which includes Activation Boundary and Random Delay. This question is once again quite nonspecific. Activation Boundary seems to do more than what the question is asking. If we just need to auto install updates during a maintenance window, answer B achieves that goal.

  Reference:

  https://docs.microsoft.com/en-us/windows/deployment/update/waas-restart

• Question 289:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company uses Windows Autopilot to configure the computer settings of computers issued to users.

  A user named User1 has a computer named Computer1 that runs Windows 10. User1 leaves the company.

  You plan to transfer the computer to a user named User2.

  You need to ensure that when User2 first starts the computer, User2 is prompted to select the language setting and to agree to the license agreement.

  Solution: You create a new Windows AutoPilot user-driven deployment profile.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Windows Autopilot user-driven mode lets you configure new Windows devices to automatically transform them from their factory state to a ready-to-use state. This process doesn't require that IT personnel touch the device.

  The process is very simple. Devices can be shipped or distributed to the end user directly with the following instructions:

  Unbox the device, plug it in, and turn it on.

  Choose a language (only required when multiple languages are installed), locale, and keyboard.

  Connect it to a wireless or wired network with internet access. If using wireless, the user must establish the Wi-Fi link.

  Specify your e-mail address and password for your organization account.

  The rest of the process is automated. The device will:

  Join the organization.

  Enroll in Intune (or another MDM service)

  Get configured as defined by the organization.

  Reference:

  https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/user-driven

• Question 290:

  You manage 1,000 computers that run Windows 10. All the computers are enrolled in Microsoft Intune. You manage the servicing channel settings of the computers by using Intune.

  You need to review the servicing status of a computer.

  What should you do?

  A. From Device configuration - Profiles, view the device status.

  B. From Device compliance, view the device compliance.

  C. From Software updates, view the audit logs.

  D. From Software updates, view the Per update ring deployment state.

  Correct Answer: D

  Reports for Update rings for Windows 10 and later policy.

  Intune offers integrated report views for the Windows update ring policies you deploy. These views display details about the update ring deployment and status:

  1.

  Sign in to Microsoft Endpoint Manager admin center.

  2.

  Select Devices > Monitor. Then under Software updates select Per update ring deployment state and choose the deployment ring to review. Note: Windows 10 and later update rings " Use a built-in report that's ready by default when you deploy update rings to your devices.

  Reference: https://docs.microsoft.com/en-us/intune/windows-update-compliance-reports