MD-100 Security and Authentication 1 — Questions and Answers
Question 1: Which Windows 10 feature provides full-disk encryption to protect data on laptops if they are lost or stolen?
- BitLocker Drive Encryption (Correct answer)
- EFS (Encrypting File System)
- Windows Defender
- Secure Boot
Correct answer: BitLocker Drive Encryption
BitLocker encrypts entire volumes to protect data at rest, requiring a PIN, USB key, or TPM for pre-boot authentication.
Question 2: What hardware component stores the BitLocker encryption keys and measures boot integrity on modern Windows 10 devices?
- TPM (Trusted Platform Module) (Correct answer)
- Secure Enclave
- UEFI Firmware
- System BIOS
Correct answer: TPM (Trusted Platform Module)
The TPM chip securely stores BitLocker keys and validates the boot environment to detect tampering.
Question 3: A user receives a UAC prompt when trying to install an application. What is the purpose of User Account Control (UAC)?
- To prevent unauthorized changes to the OS by requiring elevation approval for administrative actions (Correct answer)
- To block all installations by non-admin users
- To log user activity to Event Viewer
- To enforce BitLocker before installs
Correct answer: To prevent unauthorized changes to the OS by requiring elevation approval for administrative actions
UAC prompts users to confirm or provide admin credentials before allowing operations that could affect system integrity.
Question 4: Which Windows Defender feature monitors processes in real time and blocks known malicious code from executing?
- Real-time protection (Correct answer)
- Controlled folder access
- Cloud-delivered protection
- Exploit protection
Correct answer: Real-time protection
Real-time protection continuously scans files, programs, and processes as they run, blocking known malware immediately.
Question 5: Which Windows 10 feature restricts which applications can modify files in protected folders, defending against ransomware?
- Controlled Folder Access (Correct answer)
- Windows Sandbox
- AppLocker
- Windows Firewall
Correct answer: Controlled Folder Access
Controlled Folder Access is part of Windows Defender Exploit Guard and blocks unauthorized apps from changing files in protected folders.
Question 6: What is the primary purpose of Windows Defender Credential Guard?
- Isolates credential hashes and tokens in a virtualized container to prevent pass-the-hash attacks (Correct answer)
- Stores passwords in a local encrypted vault
- Blocks brute-force login attempts
- Encrypts the SAM database
Correct answer: Isolates credential hashes and tokens in a virtualized container to prevent pass-the-hash attacks
Credential Guard uses virtualization-based security to protect NTLM hashes and Kerberos tickets from theft.
MD-100 Security and Authentication 1
Which Windows 10 feature provides full-disk encryption to protect data on laptops if they are lost or stolen?