MD-100 100: Windows 4 — Questions and Answers
Question 1: Which Windows 10 feature allows you to run multiple instances of the same application in isolated containers, each with its own set of settings and data?
- Sandbox (Correct answer)
- Virtual Desktops
- Hyper-V Containers
- Windows Subsystem for Linux
Correct answer: Sandbox
Windows Sandbox creates a lightweight, isolated desktop environment where applications run without affecting the host system; it is discarded when closed.
Question 2: A Windows 10 machine is experiencing random BSODs. A technician wants to analyze the minidump files to identify the failing driver. Which tool is used for this?
- Event Viewer
- WhoCrashed or WinDbg (Correct answer)
- Reliability Monitor
- Device Manager
Correct answer: WhoCrashed or WinDbg
WinDbg (Windows Debugger) or third-party tools like WhoCrashed analyze minidump files (.dmp) in C:\Windows\Minidump to identify the crashing driver or module.
Question 3: You need to restrict a Windows 10 user from installing software from outside the Microsoft Store. Which Group Policy setting accomplishes this?
- Software Restriction Policies – Disallowed (Correct answer)
- Turn off Autoplay for all drives
- Only display the private store within the Microsoft Store app
- Prevent users from installing application extensions
Correct answer: Software Restriction Policies – Disallowed
Software Restriction Policies with a default rule of 'Disallowed' blocks execution of unauthorized software unless explicitly allowed by path, hash, or certificate rules.
Question 4: A Windows 10 device enrolled in Intune needs a compliance policy enforced. Which component on the device communicates compliance status back to Intune?
- Windows Management Instrumentation (WMI)
- MDM client (dmclient.exe) (Correct answer)
- Group Policy Client service
- Windows Update Agent
Correct answer: MDM client (dmclient.exe)
The MDM client (dmclient.exe) on Windows 10 communicates device configuration and compliance status to the Intune MDM service using the OMA-DM protocol.
Question 5: A user needs to connect to a corporate network resource using a VPN that automatically connects when accessing work resources. Which Windows 10 VPN feature enables this?
- Always On VPN (Correct answer)
- DirectAccess
- Split Tunneling VPN
- Point-to-Site VPN
Correct answer: Always On VPN
Always On VPN maintains a persistent, automatic VPN connection triggered by network access, replacing DirectAccess with a more flexible client-based solution.
Question 6: Which NTFS permission allows a user to view and list folder contents but prevents them from reading or executing files within that folder?
- Read
- List Folder Contents (Correct answer)
- Read & Execute
- Traverse Folder
Correct answer: List Folder Contents
The 'List Folder Contents' permission allows browsing folder structure only, without inheriting Read or Execute permissions to the files inside.
Question 7: After enabling BitLocker on a Windows 10 drive, the recovery key is saved to Azure AD. Where can an administrator retrieve it if needed?
- Azure AD Portal > Devices > BitLocker Keys (Correct answer)
- Microsoft Endpoint Manager > Devices > Recovery Keys
- Active Directory Users and Computers
- Azure Key Vault
Correct answer: Azure AD Portal > Devices > BitLocker Keys
BitLocker recovery keys escrowed to Azure AD are viewable in the Azure AD portal under Devices, then selecting the specific device and its BitLocker Keys tab.
MD-100 100: Windows 4
Which Windows 10 feature allows you to run multiple instances of the same application in isolated containers, each with its own set of settings and data?