MD-100 Cheat Sheet 2026

The 30 highest-yield MD-100 facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. A Windows 10 device managed by Intune needs to have a specific registry key set that is not available in standard Intune profiles. What is the BEST approach? → Create a custom OMA-URI configuration profile
2. An administrator needs to deploy a required app to all enrolled Intune devices without user interaction. Which assignment type should be used? → Required
3. A technician wants to edit the boot menu to change the default OS or timeout on a Windows 10 dual-boot system. Which tool should be used? → Any of the above
4. A Windows 10 PC has two network adapters. A user wants all traffic to use the faster wired adapter. What should be adjusted? → Interface metric — set the wired adapter to a lower metric value
5. Which Windows 10 feature displays an application and system reliability history as a graphical timeline? → Reliability Monitor
6. Which file system is required to use features like file-level encryption (EFS) and disk quotas on Windows 10? → NTFS
7. Which Windows 10 built-in tool provides a unified interface for managing local users, groups, disk partitions, services, and device drivers? → Computer Management
8. What does the 'Keep my files' option do when using Reset this PC in Windows 10? → Removes installed apps and settings while preserving personal files in user folders
9. A user's account is locked out. Which tool can an administrator use to unlock it on a standalone Windows 10 PC? → Local Users and Groups (lusrmgr.msc)
10. Which Windows 10 tool allows you to see all startup programs and disable those that slow down boot time? → Task Manager > Startup tab
11. When configuring a Windows 10 device for Autopilot deployment, which identifier is uploaded to the Autopilot service to pre-register the device? → Hardware hash (device fingerprint)
12. When NTFS permissions and Share permissions are both applied to a folder, which set of permissions takes effect for a network user? → The most restrictive combination of both
13. What is the purpose of Windows Defender SmartScreen? → Warns users about or blocks unrecognized apps and malicious websites
14. An administrator wants to prevent users on shared Windows 10 kiosk devices from accessing settings or installing apps. Which feature should be configured? → Assigned Access (Kiosk Mode)
15. Which IPv6 address type is equivalent to an IPv4 private address and is routable only within a local network? → Unique Local Address (ULA) fc00::/7
16. Which Windows 10 network profile type applies the most restrictive firewall rules and disables network discovery? → Public
17. Which Windows 10 diagnostic data level is the MINIMUM required for Microsoft to provide Windows Update for Business recommendations? → Basic (Required)
18. Where in Windows 10 can you configure power plans to balance performance and battery life? → Either A or B
19. Which sign-in option uses a short numeric code as an alternative to a password on Windows 10? → PIN
20. Which command displays the current DNS cache on a Windows 10 machine? → ipconfig /displaydns
21. A Windows 10 system fails to start and displays 'BOOTMGR is missing.' Which tool can repair the boot manager? → Startup Repair in Windows Recovery Environment
22. Which Windows 10 security feature helps prevent unsigned or untrusted drivers from loading during boot? → Secure Boot
23. What is the purpose of the 'Account lockout threshold' policy in Local Security Policy? → It locks an account after a specified number of failed sign-in attempts
24. Which netsh command resets the TCP/IP stack to a clean state on Windows 10? → netsh int ip reset
25. Which Event Viewer log records both successful and failed user logon attempts on a Windows 10 system? → Security log
26. A company wants to enable co-management for Windows 10 devices already managed by SCCM. What is the FIRST prerequisite to configure? → Onboard SCCM to Microsoft Endpoint Manager and enable co-management
27. Which Windows 10 built-in tool provides a real-time view of device health, including boot performance and reliability scores? → Reliability Monitor
28. A Windows 10 PC is configured with DNS server 8.8.8.8. What does this indicate about the DNS configuration? → The PC is using Google's public DNS server
29. Which NTFS permission allows a user to view and list folder contents but prevents them from reading or executing files within that folder? → List Folder Contents
30. Which Sysinternals or built-in Windows tool shows which process has a file or folder locked, preventing deletion? → Process Explorer or Resource Monitor