MD-100 Security and Authentication

Question 1

Which Windows 10 feature provides full-disk encryption to protect data on laptops if they are lost or stolen?

Accepted Answer

BitLocker Drive Encryption

Answer

EFS (Encrypting File System)

Answer

Windows Defender

Answer

Secure Boot

Question 2

What hardware component stores the BitLocker encryption keys and measures boot integrity on modern Windows 10 devices?

Accepted Answer

TPM (Trusted Platform Module)

Answer

Secure Enclave

Answer

UEFI Firmware

Answer

System BIOS

Question 3

A user receives a UAC prompt when trying to install an application. What is the purpose of User Account Control (UAC)?

Accepted Answer

To prevent unauthorized changes to the OS by requiring elevation approval for administrative actions

Answer

To block all installations by non-admin users

Answer

To log user activity to Event Viewer

Answer

To enforce BitLocker before installs

Question 4

Which Windows Defender feature monitors processes in real time and blocks known malicious code from executing?

Accepted Answer

Real-time protection

Answer

Controlled folder access

Answer

Cloud-delivered protection

Answer

Exploit protection

Question 5

Which Windows 10 feature restricts which applications can modify files in protected folders, defending against ransomware?

Accepted Answer

Controlled Folder Access

Answer

Windows Sandbox

Answer

AppLocker

Answer

Windows Firewall

Question 6

What is the primary purpose of Windows Defender Credential Guard?

Accepted Answer

Isolates credential hashes and tokens in a virtualized container to prevent pass-the-hash attacks

Answer

Stores passwords in a local encrypted vault

Answer

Blocks brute-force login attempts

Answer

Encrypts the SAM database