MD-100 Security and Authentication 2 — Questions and Answers
Question 1: Which Windows Hello authentication method uses facial recognition to sign in to Windows 10?
- Windows Hello Face (Correct answer)
- Windows Hello PIN
- Windows Hello Fingerprint
- Windows Hello FIDO2
Correct answer: Windows Hello Face
Windows Hello Face uses an IR camera to perform biometric facial recognition for passwordless sign-in.
Question 2: What type of attack does the Account Lockout Policy primarily protect against?
- Brute-force password attacks (Correct answer)
- Phishing attacks
- Man-in-the-middle attacks
- Replay attacks
Correct answer: Brute-force password attacks
Account lockout limits consecutive failed attempts, making automated brute-force guessing of passwords impractical.
Question 3: Where in Windows Security can you view the history of threats detected and remediated by Windows Defender?
- Virus & threat protection > Protection history (Correct answer)
- Device security > Core isolation
- App & browser control > Reputation-based protection
- Account protection
Correct answer: Virus & threat protection > Protection history
Protection history in the Virus & threat protection section shows a log of all detected threats and the actions taken.
Question 4: Which Windows 10 security feature helps prevent unsigned or untrusted drivers from loading during boot?
- Secure Boot (Correct answer)
- BitLocker
- Device Guard
- Windows Defender SmartScreen
Correct answer: Secure Boot
Secure Boot is a UEFI feature that only allows digitally signed bootloaders and OS components to execute at startup.
Question 5: A technician discovers that Windows Firewall is blocking a legitimate application. Which tool quickly creates an inbound rule exception?
- Windows Defender Firewall with Advanced Security (wf.msc)
- netsh advfirewall
- Windows Security > Firewall & network protection > Allow an app
- Either A or C (Correct answer)
Correct answer: Either A or C
Both the Windows Security app's 'Allow an app through firewall' and the advanced wf.msc console can create inbound exceptions.
Question 6: What does enabling 'Exploit protection' in Windows Security help prevent?
- Memory-based exploits such as buffer overflows and heap spraying (Correct answer)
- Network intrusions from the internet
- Unauthorized user account creation
- Malicious email attachments
Correct answer: Memory-based exploits such as buffer overflows and heap spraying
Exploit protection applies DEP, ASLR, CFG, and other memory protections to processes to block common exploit techniques.
MD-100 Security and Authentication 2
Which Windows Hello authentication method uses facial recognition to sign in to Windows 10?