MD-100: Windows Client — Questions and Answers

Question 1: Which Windows Hello authentication method uses facial recognition to sign in to Windows 10?

Windows Hello FIDO2
Windows Hello PIN
Windows Hello Fingerprint
Windows Hello Face (Correct answer)

Correct answer: Windows Hello Face

Windows Hello Face uses an IR camera to perform biometric facial recognition for passwordless sign-in.

Question 2: What does enabling 'Reserved Storage' in Windows 10 do?

Reserves RAM for system processes
Creates a hidden system backup partition
Allocates space for the paging file
Reserves a portion of disk space so Windows updates always have room to install (Correct answer)

Correct answer: Reserves a portion of disk space so Windows updates always have room to install

Reserved Storage sets aside around 7 GB of disk space exclusively for Windows updates, temporary files, and caches.

Question 3: When NTFS permissions and Share permissions are both applied to a folder, which set of permissions takes effect for a network user?

The most restrictive combination of both (Correct answer)
The most permissive combination of both
NTFS permissions always win
Share permissions always win

Correct answer: The most restrictive combination of both

Windows applies the most restrictive result when combining NTFS and Share permissions for network access.

Question 4: A user receives a UAC prompt when trying to install an application. What is the purpose of User Account Control (UAC)?

To log user activity to Event Viewer
To enforce BitLocker before installs
To prevent unauthorized changes to the OS by requiring elevation approval for administrative actions (Correct answer)
To block all installations by non-admin users

Correct answer: To prevent unauthorized changes to the OS by requiring elevation approval for administrative actions

UAC prompts users to confirm or provide admin credentials before allowing operations that could affect system integrity.

Question 5: A user needs to install a legacy 32-bit application on Windows 10 x64. Is this supported?

Only if compatibility mode is enabled
Only via a virtual machine
No, 64-bit Windows cannot run 32-bit apps
Yes, Windows 10 x64 includes a WOW64 compatibility layer that runs 32-bit applications (Correct answer)

Correct answer: Yes, Windows 10 x64 includes a WOW64 compatibility layer that runs 32-bit applications

WOW64 (Windows 32-bit on Windows 64-bit) is a built-in subsystem that allows 32-bit applications to run transparently on 64-bit Windows.

Question 6: What is the Microsoft Store used for in Windows 10?

Downloading driver updates
Downloading and installing UWP (Universal Windows Platform) apps in a sandboxed, managed way (Correct answer)
Accessing enterprise line-of-business apps
Installing only Microsoft Office products

Correct answer: Downloading and installing UWP (Universal Windows Platform) apps in a sandboxed, managed way

The Microsoft Store distributes UWP apps that are sandboxed, automatically updated, and can be deployed across Windows devices.

Question 7: A user must be able to log into a PC via Remote Desktop. Which built-in group must they be added to?

Remote Management Users
Remote Desktop Users (Correct answer)
Power Users
Network Users

Correct answer: Remote Desktop Users

Members of the Remote Desktop Users group are permitted to connect to the computer using Remote Desktop Protocol.

Question 8: A user's Windows 10 PC must comply with a policy requiring the screen to lock after 5 minutes of inactivity. Where is this configured?

Settings > Personalization > Lock screen > Screen saver settings (Correct answer)
Control Panel > Mouse
Settings > Ease of Access > Display
Settings > Privacy > Screen timeout

Correct answer: Settings > Personalization > Lock screen > Screen saver settings

The screen saver settings include a 'On resume, display logon screen' option tied to a wait time that enforces screen lock.

Question 9: What does the 'Previous Versions' feature in Windows 10 rely on to restore earlier copies of files?

Backup and Restore (Windows 7)
File History
OneDrive versioning
Shadow Copies (Volume Shadow Copy Service) (Correct answer)

Correct answer: Shadow Copies (Volume Shadow Copy Service)

Previous Versions are created by the Volume Shadow Copy Service (VSS), which takes point-in-time snapshots of volumes.

Question 10: What combination of broad coverage, high reliability, and high performance does an LTE network offer best?

TRUE (Correct answer)
FALSE

Correct answer: TRUE

LTE (Long-Term Evolution) networks are specifically designed to provide a superior mobile broadband experience. They offer significantly higher data speeds, lower latency, and improved spectral efficiency compared to previous generations, enabling broad coverage, high reliability, and excellent performance for various applications.

Question 11: HSPA employs the HSDPA protocol, which supports a maximum theoretical data rate between?

1.8 Mbps and 14.4 Mbps (Correct answer)
1.4 Mbps and 12.2 Mbps
1.2 Mbps and 16.4 Mbps
None of the above

Correct answer: 1.8 Mbps and 14.4 Mbps

HSPA (High-Speed Packet Access) is a 3G mobile telephony protocol that significantly enhances data transfer speeds. Specifically, HSDPA (High-Speed Downlink Packet Access), a key component of HSPA, theoretically supports downlink data rates ranging from 1.8 Mbps up to 14.4 Mbps, depending on the specific network implementation and channel conditions.

Question 12: Which Windows 10 feature restricts which applications can modify files in protected folders, defending against ransomware?

Windows Sandbox
Windows Firewall
Controlled Folder Access (Correct answer)
AppLocker

Correct answer: Controlled Folder Access

Controlled Folder Access is part of Windows Defender Exploit Guard and blocks unauthorized apps from changing files in protected folders.

Question 13: Which Windows Defender feature monitors processes in real time and blocks known malicious code from executing?

Real-time protection (Correct answer)
Exploit protection
Controlled folder access
Cloud-delivered protection

Correct answer: Real-time protection

Real-time protection continuously scans files, programs, and processes as they run, blocking known malware immediately.

Question 14: What does enabling 'Exploit protection' in Windows Security help prevent?

Unauthorized user account creation
Network intrusions from the internet
Malicious email attachments
Memory-based exploits such as buffer overflows and heap spraying (Correct answer)

Correct answer: Memory-based exploits such as buffer overflows and heap spraying

Exploit protection applies DEP, ASLR, CFG, and other memory protections to processes to block common exploit techniques.

Question 15: Where in Windows Security can you view the history of threats detected and remediated by Windows Defender?

Device security > Core isolation
Account protection
Virus & threat protection > Protection history (Correct answer)
App & browser control > Reputation-based protection

Correct answer: Virus & threat protection > Protection history

Protection history in the Virus & threat protection section shows a log of all detected threats and the actions taken.

Question 16: Click and drag to move windows.

Start button
Taskbar
Top of the window (Correct answer)
Close button

Correct answer: Top of the window

To move a window in Windows, you typically click and hold the left mouse button on the title bar (the top section) of the window. While holding the button, you can then drag the window to a new position on the screen. This action allows users to arrange their workspace efficiently.

Question 17: You are the Microsoft Endpoint Manager administrator at Techuisitve. You administer Windows 10 devices enrolled with Microsoft Intune. The company has a large number of Windows 10 professional devices. All devices running Windows 10 Professional must be upgraded to Windows 10 Enterprise. What should you do?

Create a provisioning package
None of these
Create a device compliance policy
Create a device configuration profile (Correct answer)

Correct answer: Create a device configuration profile

To upgrade Windows 10 Professional devices to Windows 10 Enterprise using Microsoft Intune, you would create a device configuration profile. This profile type allows you to deploy an 'Edition upgrade' policy, which uses a product key or a subscription activation to perform the upgrade across multiple devices efficiently and at scale.

Question 18: Which registry hive contains configuration data for applications installed for the current user only?

HKEY_USERS (HKU)
HKEY_CLASSES_ROOT (HKCR)
HKEY_LOCAL_MACHINE (HKLM)
HKEY_CURRENT_USER (HKCU) (Correct answer)

Correct answer: HKEY_CURRENT_USER (HKCU)

HKCU stores per-user application settings, preferences, and configuration data that are specific to the logged-in user.

Question 19: Which Windows 10 feature provides full-disk encryption to protect data on laptops if they are lost or stolen?

Windows Defender
EFS (Encrypting File System)
BitLocker Drive Encryption (Correct answer)
Secure Boot

Correct answer: BitLocker Drive Encryption

BitLocker encrypts entire volumes to protect data at rest, requiring a PIN, USB key, or TPM for pre-boot authentication.

Question 20: Which Windows 10 feature allows you to snap applications to predefined screen zones using keyboard shortcuts?

Virtual Desktops
Timeline
Task View
Snap Assist (Correct answer)

Correct answer: Snap Assist

Snap Assist automatically fills remaining screen space with suggestions when you snap a window to one side of the screen.

Question 21: What is the purpose of Windows Defender SmartScreen?

Monitors network packets for intrusions
Encrypts web traffic
Scans emails for phishing links
Warns users about or blocks unrecognized apps and malicious websites (Correct answer)

Correct answer: Warns users about or blocks unrecognized apps and malicious websites

SmartScreen checks downloaded files and websites against a cloud-based reputation database and warns users about suspicious content.

Question 22: Which command-line tool can be used to install, update, and remove Windows applications as a package manager?

choco
powershell install-package
winget (Correct answer)
msiexec

Correct answer: winget

Winget is Microsoft's official Windows Package Manager CLI tool for discovering and managing application installations.

Question 23: What is the purpose of the Windows Program Compatibility Troubleshooter?

Uninstalls incompatible applications
Automatically detects and recommends compatibility settings for applications that don't run correctly (Correct answer)
Moves apps to a compatible OS partition
Updates application drivers

Correct answer: Automatically detects and recommends compatibility settings for applications that don't run correctly

The Program Compatibility Troubleshooter tests different compatibility modes and settings to identify what makes an older app work on Windows 10.

Question 24: A deployed Windows 10 app keeps crashing. Which Event Viewer log primarily records application crashes and errors?

Windows Logs > Security
Applications and Services Logs > Microsoft > Windows > AppLocker
Windows Logs > System
Windows Logs > Application (Correct answer)

Correct answer: Windows Logs > Application

The Application log in Windows Logs records events from user-mode applications including crashes, errors, and warnings.

Question 25: Which Windows 10 tool allows you to see all startup programs and disable those that slow down boot time?

msconfig > Boot tab
Services.msc
Task Manager > Startup tab (Correct answer)
Autoruns from Sysinternals

Correct answer: Task Manager > Startup tab

The Startup tab in Task Manager lists applications configured to launch at logon and shows their startup impact.

Question 26: Some of your desktop windows may be hidden behind others.<br> Which hidden window is easiest to switch to?

Click the icon on the taskbar (Correct answer)
Press Ctrl+Alt+ Delete on your keyboard
Close all programs and reopen them one-by-one
Press your computer's Power button

Correct answer: Click the icon on the taskbar

The taskbar in Windows displays icons for all open applications and windows, even those minimized or hidden behind others. Clicking an application's icon on the taskbar is the quickest and most direct way to bring that specific window to the foreground and make it active, allowing for easy switching between tasks.

Question 27: Which is not a protected wireless network technology?

WEP
AES
None of these (Correct answer)
TKIP

Correct answer: None of these

WEP (Wired Equivalent Privacy), TKIP (Temporal Key Integrity Protocol), and AES (Advanced Encryption Standard) are all technologies used to secure wireless networks. WEP is an older, less secure encryption protocol, while TKIP and AES are components of WPA/WPA2/WPA3, offering stronger protection. Therefore, none of the listed options are *not* protected wireless network technologies.

Question 28: What is the primary purpose of Windows Defender Credential Guard?

Isolates credential hashes and tokens in a virtualized container to prevent pass-the-hash attacks (Correct answer)
Blocks brute-force login attempts
Encrypts the SAM database
Stores passwords in a local encrypted vault

Correct answer: Isolates credential hashes and tokens in a virtualized container to prevent pass-the-hash attacks

Credential Guard uses virtualization-based security to protect NTLM hashes and Kerberos tickets from theft.

Question 29: This icon is probably a .

shortcut
file
folder (Correct answer)
document

Correct answer: folder

In graphical user interfaces like Windows, a folder icon visually represents a directory used to organize and store files and other folders. It allows users to categorize and manage their digital documents and applications efficiently, keeping the file system structured.

Question 30: What is a 'recovery key' in the context of BitLocker?

A backup of the TPM chip data
A 48-digit numerical key used to unlock a BitLocker-encrypted drive when normal authentication fails (Correct answer)
A USB drive with the OS installer
An administrator password reset token

Correct answer: A 48-digit numerical key used to unlock a BitLocker-encrypted drive when normal authentication fails

The BitLocker recovery key is a 48-digit code generated during encryption setup that unlocks the drive if the TPM or PIN fails.

Question 31: A Windows 10 PC is running slowly. Which built-in tool analyzes startup services and provides a performance score?

Windows Experience Index
Performance Monitor (perfmon)
Task Manager > Performance and Startup tabs (Correct answer)
Resource Monitor

Correct answer: Task Manager > Performance and Startup tabs

Task Manager's Performance tab shows real-time CPU, memory, and disk utilization, while the Startup tab rates each item's impact.

Question 32: Which Windows 10 Pro feature allows administrators to control which applications users are allowed to run using publisher, path, or hash rules?

Controlled Folder Access
AppLocker (Correct answer)
Software Restriction Policies
Windows Defender Application Guard

Correct answer: AppLocker

AppLocker lets administrators define rules that allow or deny execution of applications based on file attributes.

Question 33: Which Windows 10 feature runs Microsoft Edge in an isolated Hyper-V container to contain browser-based attacks?

Windows Defender Application Guard (Correct answer)
Controlled Folder Access
Device Guard
Windows Sandbox

Correct answer: Windows Defender Application Guard

Application Guard launches Edge in a hardware-isolated Hyper-V container so malicious websites cannot access the host OS.

Question 34: A user wants to automatically back up files in their Documents, Pictures, and Videos folders. Which built-in Windows 10 feature should they configure?

OneDrive only
System Restore
File History (Correct answer)
Backup and Restore (Windows 7)

Correct answer: File History

File History continuously backs up files in designated libraries and folders to a connected drive or network location.

Question 35: A user forgets their local Windows account password. As an administrator, which command lets you reset it from an elevated prompt?

reset user <username>
passwd <username>
set password <username>
net user <username> <newpassword> (Correct answer)

Correct answer: net user <username> <newpassword>

The 'net user <username> <newpassword>' command resets a local user's password from an elevated command prompt.

Question 36: You want to prevent a local account from being used to log in interactively but keep the account active. What should you do?

Remove the account from all groups
Delete the account
Disable the account (Correct answer)
Set an expired password

Correct answer: Disable the account

Disabling an account prevents login while preserving the account and its data for potential future re-enabling.

Question 37: What does running 'msiexec /x {ProductCode}' accomplish?

Repairs an MSI installation
Lists all installed MSI packages
Silently uninstalls an MSI application using its product GUID (Correct answer)
Installs an MSI from a network share

Correct answer: Silently uninstalls an MSI application using its product GUID

The /x switch with a product GUID tells msiexec to remove (uninstall) the specified application from the system.

Question 38: You can't find a computer file. <br>Which are good places to find the file? Check all.

The screensaver
The Recycle Bin (Correct answer)
The Downloads folder (Correct answer)
Default folders like My Documents (Correct answer)

Correct answer: The Recycle Bin

When a file is missing, common places to check include the Downloads folder, where files from the internet are typically saved, and default user folders like My Documents (or Documents), where many applications save files by default. The Recycle Bin is also crucial, as deleted files are moved there before permanent removal, offering a chance for recovery. The screensaver is a display setting, not a storage location.

Question 39: A technician wants to encrypt an individual file using the built-in Windows encryption feature without a full-disk solution. Which feature should they use?

BitLocker
Windows Defender
Encrypting File System (EFS) (Correct answer)
Credential Guard

Correct answer: Encrypting File System (EFS)

EFS (Encrypting File System) allows encryption of individual files and folders on NTFS volumes using the user's credentials.

Question 40: What is the effect of enabling the 'User must change password at next logon' option for a local account?

The current password expires in 24 hours
The account is immediately locked
The user is prompted to set a new password upon their next successful login (Correct answer)
The account is set to read-only mode

Correct answer: The user is prompted to set a new password upon their next successful login

Enabling this option forces the user to create a new password the next time they successfully authenticate.

Question 41: A technician wants to edit the boot menu to change the default OS or timeout on a Windows 10 dual-boot system. Which tool should be used?

Startup and Recovery in System Properties
msconfig > Boot tab
Any of the above (Correct answer)
bcdedit

Correct answer: Any of the above

Boot entries can be managed via bcdedit for full control, msconfig for basic settings, or the Startup and Recovery dialog in System Properties.

Question 42: Which audit policy should be enabled to track successful and failed logon attempts on a standalone Windows 10 PC?

Audit object access
Audit process tracking
Audit logon events (Correct answer)
Audit account management

Correct answer: Audit logon events

Enabling 'Audit logon events' records successful and failed interactive, network, and service logon attempts in the Security event log.

Question 43: Which tool should a technician use to uninstall a stubborn application that doesn't appear in 'Apps & features'?

Programs and Features in Control Panel or a third-party uninstaller (Correct answer)
Disk Cleanup
Device Manager
Task Manager

Correct answer: Programs and Features in Control Panel or a third-party uninstaller

Control Panel's Programs and Features often lists legacy apps not shown in Settings, and third-party tools can force-remove entries.

Question 44: What is the difference between 'Repair' and 'Reset' options for an installed Windows 10 app in Settings?

Repair fixes the app without losing data; Reset reinstalls it and clears all app data (Correct answer)
Both options remove and reinstall the app
Repair is only for Store apps; Reset is only for desktop apps
Reset fixes the app without losing data; Repair clears data

Correct answer: Repair fixes the app without losing data; Reset reinstalls it and clears all app data

Repair attempts to fix the app while keeping its settings and data intact; Reset restores the app to its original state and deletes data.

Question 45: What hardware component stores the BitLocker encryption keys and measures boot integrity on modern Windows 10 devices?

System BIOS
UEFI Firmware
TPM (Trusted Platform Module) (Correct answer)
Secure Enclave

Correct answer: TPM (Trusted Platform Module)

The TPM chip securely stores BitLocker keys and validates the boot environment to detect tampering.

Question 46: Which command extends a simple volume on a dynamic disk using all available unallocated space from the command line?

fsutil extend
format /extend
diskpart > extend (Correct answer)
chkdsk /extend

Correct answer: diskpart > extend

In DiskPart, selecting the volume and running 'extend' expands it into adjacent unallocated space.

Question 47: Which offering has Intune?

Windows Autopilot
Microsoft Enterprise Mobility + Security (Correct answer)
Microsoft Visual Studio
Microsoft Managed Desktop

Correct answer: Microsoft Enterprise Mobility + Security

Microsoft Intune is a key component of Microsoft Enterprise Mobility + Security (EMS), a suite of products designed to help organizations manage and secure their mobile devices, apps, and data. EMS provides a comprehensive set of identity, access, data protection, and device management capabilities, with Intune handling the mobile device and application management aspects.

Question 48: A technician needs to deploy an application silently to multiple Windows 10 PCs. Which msiexec switch combination enables a completely silent install with no UI?

/i setup.msi /quiet /norestart (Correct answer)
/i setup.msi /s
/i setup.msi /passive
/install setup.msi /silent

Correct answer: /i setup.msi /quiet /norestart

The /quiet switch suppresses all UI and /norestart prevents automatic reboots, making the install fully unattended.

Question 49: Which built-in group membership grants a user the ability to install software and change system settings without full administrative rights?

Backup Operators
Power Users (Correct answer)
Administrators
Remote Desktop Users

Correct answer: Power Users

The Power Users group grants elevated privileges such as installing applications and modifying system settings, but with fewer rights than Administrators.

Question 50: Intune-enrolled Windows 10 laptop. Device configuration and compliance policies use the same setting. Which setting wins?

Device Compliance Policy setting wins (Correct answer)
Device Configuration Policy setting wins
Less restrictive setting wins
Most restrictive setting wins

Correct answer: Device Compliance Policy setting wins

When there's a conflict between a device configuration policy and a device compliance policy for the same setting on an Intune-enrolled device, the device compliance policy typically takes precedence. Compliance policies are designed to enforce critical security and organizational standards, ensuring that devices meet specific requirements before gaining access to resources.

MD-100: Windows Client

MD-100 validates IT professionals' expertise in installing, configuring, and maintaining Windows clients within a domain infrastructure. It covers Windows deployment, connectivity, storage, maintenance, and security/data protection in Microsoft Entra environments.

Questions

35 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

learn.microsoft.com — Eligibility, renewal, score validity, passing score, score release, exam format, exam information · verified Nov 2026
home.pearsonvue.com — Test delivery · verified Oct 2026