MD-100 Security and Authentication

Question 1

Which Windows 10 feature provides full-disk encryption to protect data on laptops if they are lost or stolen?

Accepted Answer

BitLocker Drive Encryption

Answer

BitLocker encrypts entire volumes to protect data at rest, requiring a PIN, USB key, or TPM for pre-boot authentication.

Question 2

What hardware component stores the BitLocker encryption keys and measures boot integrity on modern Windows 10 devices?

Accepted Answer

TPM (Trusted Platform Module)

Answer

The TPM chip securely stores BitLocker keys and validates the boot environment to detect tampering.

Question 3

A user receives a UAC prompt when trying to install an application. What is the purpose of User Account Control (UAC)?

Accepted Answer

To prevent unauthorized changes to the OS by requiring elevation approval for administrative actions

Answer

UAC prompts users to confirm or provide admin credentials before allowing operations that could affect system integrity.

Question 4

Which Windows Defender feature monitors processes in real time and blocks known malicious code from executing?

Accepted Answer

Real-time protection

Answer

Real-time protection continuously scans files, programs, and processes as they run, blocking known malware immediately.

Question 5

Which Windows 10 feature restricts which applications can modify files in protected folders, defending against ransomware?

Accepted Answer

Controlled Folder Access

Answer

Controlled Folder Access is part of Windows Defender Exploit Guard and blocks unauthorized apps from changing files in protected folders.

MD-100 - Microsoft Windows Client Practice Test