MD-100 100: Windows 3 — Questions and Answers
Question 1: A user accidentally deleted important files from a network share that has shadow copies enabled. How can the user restore a previous version of a file without IT assistance?
- Use the Recycle Bin restore option
- Right-click the folder and select 'Restore previous versions' (Correct answer)
- Run 'vssadmin restore' from Command Prompt
- Use File History backup
Correct answer: Right-click the folder and select 'Restore previous versions'
Previous Versions (shadow copies) can be accessed by right-clicking a file or folder and selecting 'Restore previous versions' from the Properties dialog.
Question 2: Which Windows 10 deployment method uses a task sequence to apply a WIM image, configure settings, and install applications in a fully automated, zero-touch manner?
- Windows Autopilot
- Microsoft Deployment Toolkit (MDT)
- Windows Deployment Services (WDS)
- Microsoft Endpoint Configuration Manager (MECM) (Correct answer)
Correct answer: Microsoft Endpoint Configuration Manager (MECM)
MECM (formerly SCCM) uses task sequences to orchestrate full OS deployment with zero-touch automation, including image application, driver injection, and app installation.
Question 3: A Windows 10 user needs to share a printer over the network. After sharing it, remote users cannot connect. The firewall is blocking the connection. Which firewall rule group must be enabled?
- Remote Desktop
- File and Printer Sharing (Correct answer)
- Network Discovery
- Remote Administration
Correct answer: File and Printer Sharing
The 'File and Printer Sharing' inbound firewall rule group must be enabled to allow remote clients to connect to a shared printer.
Question 4: Which command-line utility can be used to display the current IP configuration of all network adapters on a Windows 10 computer?
- netstat -an
- ipconfig /all (Correct answer)
- arp -a
- nslookup /all
Correct answer: ipconfig /all
ipconfig /all displays full IP configuration for all adapters including IP address, subnet mask, gateway, DNS servers, and MAC address.
Question 5: A Windows 10 PC shows high CPU usage from an unknown process. Which tool provides the most detailed view of CPU, memory, disk, and network usage broken down by process and service?
- Task Manager
- Resource Monitor (Correct answer)
- Performance Monitor
- Process Explorer
Correct answer: Resource Monitor
Resource Monitor (resmon.exe) provides granular real-time data on CPU, memory, disk, and network usage at the individual process, thread, and service level.
Question 6: After joining a Windows 10 device to Azure AD, a user wants to sign in with their Microsoft 365 work account. Which authentication method does Azure AD use by default for modern Windows 10 sign-in?
- NTLM authentication
- Kerberos v5 protocol
- Primary Refresh Token (PRT) with OAuth 2.0 (Correct answer)
- LDAP bind authentication
Correct answer: Primary Refresh Token (PRT) with OAuth 2.0
Azure AD-joined devices use a Primary Refresh Token (PRT) obtained via OAuth 2.0 to enable SSO across apps and services without re-entering credentials.
Question 7: A technician must verify the integrity of Windows 10 system files without restarting. Which command should be run first?
- sfc /scannow
- dism /online /cleanup-image /checkhealth (Correct answer)
- chkdsk /f /r
- dism /online /cleanup-image /restorehealth
Correct answer: dism /online /cleanup-image /checkhealth
DISM /CheckHealth quickly checks if the component store has any corruption flags without performing a full scan or repair, making it the fastest first step.
MD-100 100: Windows 3
A user accidentally deleted important files from a network share that has shadow copies enabled.
How can the user restore a previous version of a file without IT assistance?