MD-100: Windows Client — Questions and Answers

Question 1: "You are in charge of the Microsoft Intune-enabled Windows 10 devices. You are required to make sure that only authorized locations can access Microsoft Exchange online.<br> What needs to be configured to fulfill the requirement? "

Create a device configuration profile (Correct answer)
Create a provisioning package
None of these
Create a device compliance policy

Correct answer: Create a device configuration profile

To restrict access to Microsoft Exchange Online based on location, you would typically use Conditional Access policies, which are often integrated with or managed through device configuration profiles in Intune. A device configuration profile allows you to deploy specific settings, policies, and restrictions to devices, including network access controls or VPN configurations that could enforce location-based access.

Question 2: A user receives a UAC prompt when trying to install an application. What is the purpose of User Account Control (UAC)?

To log user activity to Event Viewer
To block all installations by non-admin users
To prevent unauthorized changes to the OS by requiring elevation approval for administrative actions (Correct answer)
To enforce BitLocker before installs

Correct answer: To prevent unauthorized changes to the OS by requiring elevation approval for administrative actions

UAC prompts users to confirm or provide admin credentials before allowing operations that could affect system integrity.

Question 3: A technician discovers that Windows Firewall is blocking a legitimate application. Which tool quickly creates an inbound rule exception?

netsh advfirewall
Windows Defender Firewall with Advanced Security (wf.msc)
Either A or C (Correct answer)
Windows Security > Firewall & network protection > Allow an app

Correct answer: Either A or C

Both the Windows Security app's 'Allow an app through firewall' and the advanced wf.msc console can create inbound exceptions.

Question 4: Which Windows 10 feature restricts which applications can modify files in protected folders, defending against ransomware?

AppLocker
Windows Firewall
Windows Sandbox
Controlled Folder Access (Correct answer)

Correct answer: Controlled Folder Access

Controlled Folder Access is part of Windows Defender Exploit Guard and blocks unauthorized apps from changing files in protected folders.

Question 5: Which Windows 10 tool provides a graphical view of network adapter settings, including speed, duplex, and driver details?

Network and Sharing Center
Device Manager (Correct answer)
Task Manager Networking tab
Resource Monitor

Correct answer: Device Manager

Device Manager shows detailed hardware properties including driver version, speed, and duplex settings for network adapters.

Question 6: Which Windows 10 deployment method uses a task sequence to apply a WIM image, configure settings, and install applications in a fully automated, zero-touch manner?

Microsoft Endpoint Configuration Manager (MECM) (Correct answer)
Windows Autopilot
Microsoft Deployment Toolkit (MDT)
Windows Deployment Services (WDS)

Correct answer: Microsoft Endpoint Configuration Manager (MECM)

MECM (formerly SCCM) uses task sequences to orchestrate full OS deployment with zero-touch automation, including image application, driver injection, and app installation.

Question 7: Which Windows 10 feature allows multiple users to share a PC while keeping their files and settings separate?

Roaming Profiles
User Profiles (Correct answer)
Sandboxes
Virtual Desktops

Correct answer: User Profiles

User Profiles store each user's documents, settings, and desktop environment in a separate folder under C:\Users.

Question 8: What does enabling 'Exploit protection' in Windows Security help prevent?

Malicious email attachments
Network intrusions from the internet
Unauthorized user account creation
Memory-based exploits such as buffer overflows and heap spraying (Correct answer)

Correct answer: Memory-based exploits such as buffer overflows and heap spraying

Exploit protection applies DEP, ASLR, CFG, and other memory protections to processes to block common exploit techniques.

Question 9: A user's Windows 10 PC must comply with a policy requiring the screen to lock after 5 minutes of inactivity. Where is this configured?

Settings > Personalization > Lock screen > Screen saver settings (Correct answer)
Settings > Ease of Access > Display
Settings > Privacy > Screen timeout
Control Panel > Mouse

Correct answer: Settings > Personalization > Lock screen > Screen saver settings

The screen saver settings include a 'On resume, display logon screen' option tied to a wait time that enforces screen lock.

Question 10: When NTFS permissions and Share permissions are both applied to a folder, which set of permissions takes effect for a network user?

The most permissive combination of both
The most restrictive combination of both (Correct answer)
NTFS permissions always win
Share permissions always win

Correct answer: The most restrictive combination of both

Windows applies the most restrictive result when combining NTFS and Share permissions for network access.

Question 11: Which Windows Defender feature monitors processes in real time and blocks known malicious code from executing?

Controlled folder access
Exploit protection
Real-time protection (Correct answer)
Cloud-delivered protection

Correct answer: Real-time protection

Real-time protection continuously scans files, programs, and processes as they run, blocking known malware immediately.

Question 12: What combination of broad coverage, high reliability, and high performance does an LTE network offer best?

FALSE
TRUE (Correct answer)

Correct answer: TRUE

LTE (Long-Term Evolution) networks are specifically designed to provide a superior mobile broadband experience. They offer significantly higher data speeds, lower latency, and improved spectral efficiency compared to previous generations, enabling broad coverage, high reliability, and excellent performance for various applications.

Question 13: Which Windows 10 feature allows you to run and test untrusted applications in an isolated, disposable environment?

Application Guard
AppLocker
Hyper-V
Windows Sandbox (Correct answer)

Correct answer: Windows Sandbox

Windows Sandbox provides a lightweight, isolated desktop environment that is destroyed when closed, leaving the host system unaffected.

Question 14: A Windows 10 user reports slow network performance. The network adapter is set to 10 Mbps Half Duplex but the switch supports 1 Gbps. What should be done?

Update the network adapter driver
Manually set the adapter to 100 Mbps Full Duplex
Replace the network cable
Set the adapter speed and duplex to Auto Negotiation (Correct answer)

Correct answer: Set the adapter speed and duplex to Auto Negotiation

Auto Negotiation allows the adapter and switch to automatically agree on the highest supported speed and duplex mode.

Question 15: Which netsh command resets the TCP/IP stack to a clean state on Windows 10?

netsh int ip reset (Correct answer)
netsh tcp reset stack
netsh interface reset all
netsh winsock reset

Correct answer: netsh int ip reset

netsh int ip reset rewrites TCP/IP registry entries to their default state, resolving corruption issues.

Question 16: Which Windows 10 feature provides full-disk encryption to protect data on laptops if they are lost or stolen?

Windows Defender
Secure Boot
BitLocker Drive Encryption (Correct answer)
EFS (Encrypting File System)

Correct answer: BitLocker Drive Encryption

BitLocker encrypts entire volumes to protect data at rest, requiring a PIN, USB key, or TPM for pre-boot authentication.

Question 17: What is the primary purpose of running DISM with the /RestoreHealth switch?

Revert the system to a previous restore point
Defragment and optimize the system drive
Reset all network adapter settings
Repair the local Windows image using Windows Update as the source (Correct answer)

Correct answer: Repair the local Windows image using Windows Update as the source

DISM /Online /Cleanup-Image /RestoreHealth contacts Windows Update to download healthy component files and repair the local Windows image store.

Question 18: A Windows 10 PC is running slowly. Which built-in tool analyzes startup services and provides a performance score?

Resource Monitor
Windows Experience Index
Performance Monitor (perfmon)
Task Manager > Performance and Startup tabs (Correct answer)

Correct answer: Task Manager > Performance and Startup tabs

Task Manager's Performance tab shows real-time CPU, memory, and disk utilization, while the Startup tab rates each item's impact.

Question 19: Which Windows 10 feature allows you to run multiple instances of the same application in isolated containers, each with its own set of settings and data?

Windows Subsystem for Linux
Sandbox (Correct answer)
Virtual Desktops
Hyper-V Containers

Correct answer: Sandbox

Windows Sandbox creates a lightweight, isolated desktop environment where applications run without affecting the host system; it is discarded when closed.

Question 20: An administrator uses Intune to configure a VPN profile for Windows 10 devices. Which connection type supports automatic (Always On) VPN?

PPTP
L2TP
SSTP
IKEv2 (Correct answer)

Correct answer: IKEv2

IKEv2 is the required VPN protocol for Always On VPN on Windows 10, providing automatic connection without user intervention.

Question 21: What is the purpose of Windows Defender SmartScreen?

Monitors network packets for intrusions
Encrypts web traffic
Scans emails for phishing links
Warns users about or blocks unrecognized apps and malicious websites (Correct answer)

Correct answer: Warns users about or blocks unrecognized apps and malicious websites

SmartScreen checks downloaded files and websites against a cloud-based reputation database and warns users about suspicious content.

Question 22: What is the purpose of the 'quota' feature in NTFS on Windows 10?

Restricts file types that can be saved
Limits the amount of disk space each user can consume on a volume (Correct answer)
Compresses files automatically when the drive is full
Prevents files from being deleted

Correct answer: Limits the amount of disk space each user can consume on a volume

NTFS disk quotas let administrators set per-user disk space limits and generate warnings when thresholds are exceeded.

Question 23: What does the 'Keep my files' option do when using Reset this PC in Windows 10?

Keeps all installed apps and system settings but reformats user data folders
Keeps files and apps but resets only system settings to defaults
Creates a backup of personal files to OneDrive before resetting
Removes installed apps and settings while preserving personal files in user folders (Correct answer)

Correct answer: Removes installed apps and settings while preserving personal files in user folders

'Keep my files' removes installed applications and reverts settings to defaults while leaving documents, pictures, and other personal files in place.

Question 24: What is the Microsoft Store used for in Windows 10?

Downloading driver updates
Accessing enterprise line-of-business apps
Downloading and installing UWP (Universal Windows Platform) apps in a sandboxed, managed way (Correct answer)
Installing only Microsoft Office products

Correct answer: Downloading and installing UWP (Universal Windows Platform) apps in a sandboxed, managed way

The Microsoft Store distributes UWP apps that are sandboxed, automatically updated, and can be deployed across Windows devices.

Question 25: Which Windows 10 security feature helps prevent unsigned or untrusted drivers from loading during boot?

Windows Defender SmartScreen
Device Guard
Secure Boot (Correct answer)
BitLocker

Correct answer: Secure Boot

Secure Boot is a UEFI feature that only allows digitally signed bootloaders and OS components to execute at startup.

Question 26: The term "WiMAX" was coined by WiMAX Forum, which was established in?

Fri Jun 01 00:00:00 IST 2001 (Correct answer)
Sat Jun 01 00:00:00 IST 2002
Wed Aug 01 00:00:00 IST 2001
Sun Jul 01 00:00:00 IST 2001

Correct answer: Fri Jun 01 00:00:00 IST 2001

The WiMAX Forum, an industry organization dedicated to promoting and certifying the interoperability of broadband wireless access products based on the IEEE 802.16 standard, was officially established on June 1, 2001. This forum played a crucial role in standardizing and advancing WiMAX technology.

Question 27: Which setting ensures a user cannot reuse their last 5 passwords when changing their password?

Minimum password age
Password must meet complexity requirements
Maximum password age
Enforce password history (Correct answer)

Correct answer: Enforce password history

The 'Enforce password history' policy remembers a specified number of past passwords and prevents their reuse.

Question 28: What is the primary purpose of Windows Defender Credential Guard?

Stores passwords in a local encrypted vault
Encrypts the SAM database
Isolates credential hashes and tokens in a virtualized container to prevent pass-the-hash attacks (Correct answer)
Blocks brute-force login attempts

Correct answer: Isolates credential hashes and tokens in a virtualized container to prevent pass-the-hash attacks

Credential Guard uses virtualization-based security to protect NTLM hashes and Kerberos tickets from theft.

Question 29: Windows' main workspace is called .

taskbar
shortcut
desktop (Correct answer)
folder

Correct answer: desktop

The desktop is the primary graphical user interface (GUI) of Windows, serving as the main workspace where users can access programs, files, and folders. It displays icons, shortcuts, and the taskbar, providing the central point for user interaction with the operating system.

Question 30: What does enabling 'Reserved Storage' in Windows 10 do?

Creates a hidden system backup partition
Reserves a portion of disk space so Windows updates always have room to install (Correct answer)
Reserves RAM for system processes
Allocates space for the paging file

Correct answer: Reserves a portion of disk space so Windows updates always have room to install

Reserved Storage sets aside around 7 GB of disk space exclusively for Windows updates, temporary files, and caches.

Question 31: Which command-line tool can be used to trace the route packets take to a destination on a Windows 10 PC?

route
pathping
tracert (Correct answer)
arp

Correct answer: tracert

tracert (Trace Route) sends ICMP packets with increasing TTL values to display each hop between source and destination.

Question 32: Which Windows Recovery Environment option automatically diagnoses and fixes problems that prevent Windows from starting correctly?

Reset this PC
System Image Recovery
Startup Repair (Correct answer)
System Restore

Correct answer: Startup Repair

Startup Repair scans for and fixes issues such as missing or damaged system files, corrupt BCD, and incorrect boot configuration that prevent Windows from loading.

Question 33: A technician needs to resize a Windows 10 system volume without data loss. The 'Extend Volume' option in Disk Management is grayed out. What is the most likely reason?

The disk is not initialized
The volume is formatted with FAT32
BitLocker is enabled on the drive
There is no contiguous unallocated space immediately after the volume (Correct answer)

Correct answer: There is no contiguous unallocated space immediately after the volume

Disk Management can only extend a volume using contiguous unallocated space that directly follows the partition; non-contiguous free space makes the option unavailable.

Question 34: A user double-clicks a .pdf file and the wrong application opens. Where can the default app association be changed in Windows 10?

Control Panel > Programs > Set program access
Right-click > Properties > Change > (in File Explorer)
Settings > Apps > Default apps > Choose default apps by file type
Either A or C (Correct answer)

Correct answer: Either A or C

Default apps by file type can be set in Settings > Apps > Default apps, or on a per-file basis by right-clicking and choosing Open with > Choose another app.

Question 35: Which Windows 10 setting automatically deletes temporary files and empties the Recycle Bin on a schedule?

Disk Cleanup
Storage Sense (Correct answer)
Defragment and Optimize Drives
OneDrive Files On-Demand

Correct answer: Storage Sense

Storage Sense automatically frees up space by removing temporary files and optionally clearing the Recycle Bin and Downloads folder.

Question 36: What is a 'recovery key' in the context of BitLocker?

A USB drive with the OS installer
A 48-digit numerical key used to unlock a BitLocker-encrypted drive when normal authentication fails (Correct answer)
A backup of the TPM chip data
An administrator password reset token

Correct answer: A 48-digit numerical key used to unlock a BitLocker-encrypted drive when normal authentication fails

The BitLocker recovery key is a 48-digit code generated during encryption setup that unlocks the drive if the TPM or PIN fails.

Question 37: Which offering has Intune?

Microsoft Visual Studio
Windows Autopilot
Microsoft Managed Desktop
Microsoft Enterprise Mobility + Security (Correct answer)

Correct answer: Microsoft Enterprise Mobility + Security

Microsoft Intune is a key component of Microsoft Enterprise Mobility + Security (EMS), a suite of products designed to help organizations manage and secure their mobile devices, apps, and data. EMS provides a comprehensive set of identity, access, data protection, and device management capabilities, with Intune handling the mobile device and application management aspects.

Question 38: Which tool should a technician use to uninstall a stubborn application that doesn't appear in 'Apps & features'?

Device Manager
Programs and Features in Control Panel or a third-party uninstaller (Correct answer)
Task Manager
Disk Cleanup

Correct answer: Programs and Features in Control Panel or a third-party uninstaller

Control Panel's Programs and Features often lists legacy apps not shown in Settings, and third-party tools can force-remove entries.

Question 39: What type of attack does the Account Lockout Policy primarily protect against?

Man-in-the-middle attacks
Brute-force password attacks (Correct answer)
Replay attacks
Phishing attacks

Correct answer: Brute-force password attacks

Account lockout limits consecutive failed attempts, making automated brute-force guessing of passwords impractical.

Question 40: Which file system is required to use features like file-level encryption (EFS) and disk quotas on Windows 10?

exFAT
NTFS (Correct answer)
ReFS
FAT32

Correct answer: NTFS

NTFS (New Technology File System) supports advanced features including EFS encryption, disk quotas, compression, and granular permissions.

Question 41: When chkdsk is run on the active system drive (C:) while Windows is running, what happens?

chkdsk schedules itself to run automatically at the next system restart (Correct answer)
chkdsk runs immediately in a background low-priority thread
chkdsk aborts the operation and requires a bootable USB to proceed
chkdsk creates a Volume Shadow Copy and runs against that

Correct answer: chkdsk schedules itself to run automatically at the next system restart

Because the system volume is locked by Windows when in use, chkdsk schedules the scan to run before Windows loads on the next restart.

Question 42: A user needs to install a legacy 32-bit application on Windows 10 x64. Is this supported?

Only if compatibility mode is enabled
No, 64-bit Windows cannot run 32-bit apps
Only via a virtual machine
Yes, Windows 10 x64 includes a WOW64 compatibility layer that runs 32-bit applications (Correct answer)

Correct answer: Yes, Windows 10 x64 includes a WOW64 compatibility layer that runs 32-bit applications

WOW64 (Windows 32-bit on Windows 64-bit) is a built-in subsystem that allows 32-bit applications to run transparently on 64-bit Windows.

Question 43: An administrator needs to deploy a required app to all enrolled Intune devices without user interaction. Which assignment type should be used?

Required (Correct answer)
Available for enrolled devices
Uninstall
Available with or without enrollment

Correct answer: Required

The 'Required' assignment type in Intune automatically installs the app on targeted devices without requiring user action.

Question 44: What happens to a sideloaded UWP app package (.appx) installed outside the Microsoft Store if its developer certificate expires?

The app is automatically uninstalled
The app may stop launching unless the certificate is renewed or trust is re-established (Correct answer)
Nothing — installed apps run regardless of certificate status
Windows Defender quarantines the app

Correct answer: The app may stop launching unless the certificate is renewed or trust is re-established

Sideloaded apps rely on certificate trust; if the signing certificate expires or is revoked, Windows may block app execution.

Question 45: Which Windows 10 feature helps prevent data loss by enabling IT to control whether apps can copy corporate data to personal storage locations?

AppLocker
Controlled Folder Access
Windows Information Protection (WIP) (Correct answer)
BitLocker

Correct answer: Windows Information Protection (WIP)

WIP (formerly EDP) classifies corporate vs. personal data and enforces policies to prevent leakage between the two.

Question 46: Where does Windows 10 store application compatibility settings when a user manually applies them via right-click > Properties > Compatibility?

In a .compat file next to the executable
In Group Policy preferences
In the registry under HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags (Correct answer)
In the AppData\Local\Temp folder

Correct answer: In the registry under HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

Per-user compatibility settings are stored in the registry path HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers.

Question 47: Which command-line tool can be used to install, update, and remove Windows applications as a package manager?

powershell install-package
winget (Correct answer)
choco
msiexec

Correct answer: winget

Winget is Microsoft's official Windows Package Manager CLI tool for discovering and managing application installations.

Question 48: Which Windows Hello authentication method uses facial recognition to sign in to Windows 10?

Windows Hello FIDO2
Windows Hello PIN
Windows Hello Face (Correct answer)
Windows Hello Fingerprint

Correct answer: Windows Hello Face

Windows Hello Face uses an IR camera to perform biometric facial recognition for passwordless sign-in.

Question 49: Which NTFS permission allows a user to list files in a folder but not read file contents?

Read & Execute
Read
List Folder Contents (Correct answer)
Traverse Folder

Correct answer: List Folder Contents

The 'List Folder Contents' permission lets users see file and subfolder names without granting access to read the actual file data.

Question 50: What is the difference between 'Repair' and 'Reset' options for an installed Windows 10 app in Settings?

Repair fixes the app without losing data; Reset reinstalls it and clears all app data (Correct answer)
Both options remove and reinstall the app
Repair is only for Store apps; Reset is only for desktop apps
Reset fixes the app without losing data; Repair clears data

Correct answer: Repair fixes the app without losing data; Reset reinstalls it and clears all app data

Repair attempts to fix the app while keeping its settings and data intact; Reset restores the app to its original state and deletes data.

MD-100: Windows Client

MD-100 validates IT professionals' expertise in installing, configuring, and maintaining Windows clients within a domain infrastructure. It covers Windows deployment, connectivity, storage, maintenance, and security/data protection in Microsoft Entra environments.

Questions

100 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds