MCA Microsoft 365 Certified Associate Modern Desktop Administrator Complete Study Guide with 900 Practice Test Questions: Exam MD-100 and Exam MD-101

MCA

Microsoft 365® Certified Associate Modern Desktop Administrator

Complete Study Guide

Exam MD-100 and Exam MD-101

Second Edition

William Panek

Copyright © 2023 by John Wiley & Sons, Inc. All rights reserved.

Published by John Wiley & Sons, Inc., Hoboken, New Jersey.

Published simultaneously in Canada and the United Kingdom.

ISBN: 978-1-119-98464-1

ISBN: 978-1-119-98466-5 (ebk.)

ISBN: 978-1-119-98465-8 (ebk.)

No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning, or otherwise, except as permitted under Section 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, Inc., 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 750-4470, or on the web at www.copyright.com. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748-6011, fax (201) 748-6008, or online at www.wiley.com/go/permission.

Trademarks: WILEY, the Wiley logo, and the Sybex logo are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates, in the United States and other countries, and may not be used without written permission. Microsoft 365 is a registered trademark of Microsoft Corporation. All other trademarks are the property of their respective owners. John Wiley & Sons, Inc. is not associated with any product or vendor mentioned in this book. MCA Microsoft 365 Certified Associate Modern Desktop Administrator Complete Study Guide is an independent publication and is neither affiliated with, nor authorized, sponsored, or approved by, Microsoft Corporation.

Limit of Liability/Disclaimer of Warranty: While the publisher and author have used their best efforts in preparing this book, they make no representations or warranties with respect to the accuracy or completeness of the contents of this book and specifically disclaim any implied warranties of merchantability or fitness for a particular purpose. No warranty may be created or extended by sales representatives or written sales materials. The advice and strategies contained herein may not be suitable for your situation. You should consult with a professional where appropriate. Further, readers should be aware that websites listed in this work may have changed or disappeared between when this work was written and when it is read. Neither the publisher nor authors shall be liable for any loss of profit or any other commercial damages, including but not limited to special, incidental, consequential, or other damages.

For general information on our other products and services or for technical support, please contact our Customer Care Department within the United States at (800) 762-2974, outside the United States at (317) 572-3993 or fax (317) 572-4002.

Wiley also publishes its books in a variety of electronic formats. Some content that appears in print may not be available in electronic formats. For more information about Wiley products, visit our web site at www.wiley.com.

Library of Congress Control Number: 2022949492

Cover image: © Getty Images Inc./Jeremy Woodhouse

Cover design: Wiley

This book is dedicated to the three ladies of my life: Crystal, Alexandria, and Paige.

Acknowledgments

I would like to thank my wife and best friend, Crystal. She is always the light at the end of my tunnel. I want to thank my two daughters, Alexandria and Paige, for all of their love and support during the writing of all my books. The three of them are my support system and I couldn't do any of this without them.

I want to thank my family, and especially my brothers, Rick, Gary, and Rob. They have always been there for me. I want to thank my father, Richard, who helped me become the man I am today, and my mother, Maggie, for all of her love and support.

I would like to thank all of my friends and co-workers at StormWind Studios (www.stormwindstudios.com). Thanks to all of you for everything that you do. I would not have been able to complete this book without all of your help and support.

I want to thank everyone on my Sybex team, especially my development editor, Kim Wimpsett, who helped me make this the best book possible, and Doug Holland, who is the technical editor and an outstanding resource on this book. It's always good to have the very best technical person backing you up. I want to thank Saravanan Dakshinamurthy, who was my production editor, and Elizabeth Welch, the copyeditor.

Special thanks to my acquisitions editor, Kenyon Brown, who was the lead for the entire book. Finally, I want to thank everyone else behind the scenes who helped make this book possible. It's truly an amazing thing to have so many people work on my books to help make them the very best. I can't thank you all enough for your hard work.

About the Author

William Panek  holds the following certifications: MCP, MCP+I, MCSA, MCSA+ Security and Messaging, MCSE-NT (3.51 and 4.0), MCSE (2000, 2003, 2012/2012 R2), MCSE+Security and Messaging, MCDBA, MCT, MCTS, MCITP, CCNA, CCDA, and CHFI. Will is also a five-time and current Microsoft MVP winner.

After many successful years in the computer industry, Will decided that he could better use his talents and his personality as an instructor. He began teaching for schools such as Boston University and the University of Maryland, just to name a few. He has done consulting and training for some of the biggest government and corporate companies in the world, including the United States Secret Service, Cisco, United States Air Force, and United States Army.

In 2015, Will became a Sr. Microsoft Instructor for StormWind Studios (www.stormwindstudios.com). He currently lives in New Hampshire with his wife and two daughters. Will was also a Representative in the New Hampshire House of Representatives from 2010 to 2012. In his spare time, he likes to do blacksmithing, shooting (trap and skeet), snowmobiling, playing racquetball, and riding his Harley. Will is also a commercially rated helicopter pilot.

About the Technical Editor

Doug Holland  is a software architect at Microsoft and a former Microsoft MVP and Intel Black Belt Developer. Based in Northern California, Doug works with Microsoft's partners, assisting them in the development of solutions based on Microsoft Azure and emerging technologies.

Table of Exercises

EXERCISE 1.1   Performing a Clean Installation of Windows 10

EXERCISE 1.2   Upgrading Windows 8.1 to Windows 10

EXERCISE 1.3   Configuring Locales

EXERCISE 1.4   Troubleshooting Failed Installations with Setup Logs

EXERCISE 1.5   Downloading and Installing MDT

EXERCISE 1.6   Configuring MDT

EXERCISE 1.7   Prepare a System for Imaging by Using the System Preparation Tool

EXERCISE 2.1   Adding the Local Users and Groups Snap-In

EXERCISE 2.2   Accessing Local Users and Groups via the Computer Management Utility

EXERCISE 2.3   Creating New Users via the MMC

EXERCISE 2.4   Disabling User Accounts

EXERCISE 2.5   Deleting a User Account

EXERCISE 2.6   Renaming a User Account

EXERCISE 2.7   Changing a User’s Password

EXERCISE 2.8   Adding a User to an Existing Group

EXERCISE 2.9   Setting Up User Profiles

EXERCISE 2.10   Assigning Home Folders

EXERCISE 2.11   Creating Local Groups

EXERCISE 2.12   Adding Accounts to Groups

EXERCISE 2.13   Adding the Local Computer Policy Snap-In

EXERCISE 2.14   Accessing an LGPO

EXERCISE 2.15   Configuring Password Policy

EXERCISE 2.16   Configuring Account-Lockout Policies

EXERCISE 2.17   Configuring Audit Policies

EXERCISE 2.18   Applying a User Rights Policy

EXERCISE 2.19   Seeing How UAC Affects Accounts

EXERCISE 2.20   Enabling Remote Desktop on Windows 10

EXERCISE 2.21   Setting Up a VPN Connection on Windows 10

EXERCISE 3.1   Managing NTFS Permissions

EXERCISE 3.2   Logging into OneDrive

EXERCISE 3.3   Using BitLocker in Windows 10

EXERCISE 4.1   Configuring Windows 10 Desktop Options

EXERCISE 4.2   Installing New Features

EXERCISE 4.3   Changing the Computer Name on a Windows 10/11 Computer

EXERCISE 4.4   Changing the System’s Virtual Memory on a Windows 10/11 Computer

EXERCISE 4.5   Configuring a Power Plan

EXERCISE 4.6   Configuring the Power Button for Hibernate Mode

EXERCISE 4.7   Configuring Services

EXERCISE 4.8   Creating a New Virtual Machine

EXERCISE 4.9   Creating an Internal Virtual Network

EXERCISE 4.10   Creating a Differencing Hard Disk

EXERCISE 5.1   Creating a New Volume

EXERCISE 5.2   Converting a Basic Disk to a GPT Disk

EXERCISE 5.3   Converting a Basic Disk to a Dynamic Disk

EXERCISE 5.4   Editing a Drive Letter

EXERCISE 5.5   Deleting a Partition

EXERCISE 5.6   Creating an Extended Volume

EXERCISE 5.7   Opening Devices

EXERCISE 5.8   Viewing Devices Using Device Manager

EXERCISE 5.9   Configuring Network Adapter Advanced Properties

EXERCISE 5.10   Viewing Driver Details

EXERCISE 5.11   Updating a Driver

EXERCISE 5.12   Rolling Back a Driver

EXERCISE 5.13   Disabling and Enabling a Device in Device Manager

EXERCISE 5.14   Uninstalling and Reinstalling a Device Driver

EXERCISE 5.15   Verifying Signed Drivers

EXERCISE 5.16   Configuring an Input/Output Device

EXERCISE 5.17   Installing a Printer

EXERCISE 5.18   Installing a Shared Network Print Device

EXERCISE 5.19   Managing Documents in the Local Queue in Windows 10

EXERCISE 5.20   Removing a Printer from Printers & Scanners in Windows 10

EXERCISE 5.21   Using the Print Migration Tools

EXERCISE 5.22   Creating a New Inbound Rule

EXERCISE 5.23   Running an Advanced Scan

EXERCISE 6.1   Viewing the Network Connection Details in Windows 10

EXERCISE 6.2   Viewing Wireless Network Connection Properties

EXERCISE 6.3   Accessing the Windows Client Wireless Properties

EXERCISE 6.4   Configure a Static TCP/IP Address in Windows 10

EXERCISE 6.5   Using DHCP in Windows 10/11

EXERCISE 6.6   Connecting a Windows Client Machine to the Domain

EXERCISE 7.1   Booting Your Windows 10/11 Computer to Safe Mode from the Sign-In Screen

EXERCISE 7.2   Viewing the Boot Log File

EXERCISE 7.3   Backing Up Files

EXERCISE 7.4   Restoring Files

EXERCISE 7.5   Configuring OneDrive

EXERCISE 7.6   Creating a System Image

EXERCISE 7.7   Creating a Restore Point

EXERCISE 7.8   Restoring a Restore Point

EXERCISE 7.9   Using the Recycle Bin

EXERCISE 9.1   Setting Up an On-Site Domain Controller

EXERCISE 9.2   Creating an Azure AD User Account

EXERCISE 9.3   Creating an Azure AD Group Account

EXERCISE 9.4   Setting Up Self-Service Password Reset

EXERCISE 9.5   Testing the Self-Service Password Reset

EXERCISE 9.6   Adding Azure AD Identity Protection

EXERCISE 9.7   Installing Azure AD Connect

EXERCISE 9.8   Creating the Site-to-Site VPN Connection

EXERCISE 9.9   Creating the Local Network Gateway

EXERCISE 10.1   Setting Up an Intune Account

EXERCISE 10.2   Adding Users to Intune

EXERCISE 10.3   Creating a New Group

EXERCISE 10.4   Confirming the Windows Version

EXERCISE 10.5   Enrolling Windows 10 Desktop Version 1607 or Higher

EXERCISE 12.1   Installing Microsoft Defender Application Guard

EXERCISE 12.2   Using Microsoft Defender Application Guard

EXERCISE 12.3   Microsoft Defender Application Guard Enterprise

EXERCISE 12.4   Enabling Microsoft Defender Credential Guard Using a GPO

EXERCISE 12.5   Enabling Microsoft Defender Exploit Guard Using Intune

Introduction

This book was written from over 25 years of IT experience. I have taken that experience and translated it into a Windows 10/11 book that will help you not only prepare for the Microsoft 365 Certified: Modern Desktop Administrator Associate exams but also develop a clear understanding of how to install and configure Windows 10/11 while avoiding all the possible configuration pitfalls.

Many Microsoft books just explain the Windows operating system, but with MCA Microsoft 365® Certified Associate Modern Desktop Administrator Complete Study Guide: Exam MD-100 and Exam MD-101, Second Edition, I will go a step further, providing many in-depth, step-by-step procedures to support my explanations of how the operating system performs at its best.

The exams MD-100 and MD-101 cover aspects from both Windows 10 and Windows 11. Hence, I will refer to them collectively as Microsoft Windows 10/11. These are Microsoft's client operating system software. Windows 11 is the newest version of the operating system launched by Microsoft.

Windows 10/11 eliminates many of the problems that plagued the previous versions of Windows clients, and it includes a much faster boot time and shutdown. It is also easier to install and configure, and it barely stops to ask the user any questions during installation. In this book, I will show you what features are installed during the automated installation and where you can make changes if you need to be more in charge of your operating system and its features.

This book takes you through all the ins and outs of Windows 10/11, including installation, configuration, online Microsoft subscriptions, auditing, backups, and so much more.

Windows 10/11 has improved on Microsoft's desktop environment and made networking easier, working with Microsoft Azure, enhanced search ability, improved performance—and that's only scratching the surface.

When all is said and done, this is a technical book for IT professionals who want to take Windows 10/11 to the next step and get certified. With this book, you will not only learn Windows 10/11 and hopefully pass the exams, you will also become a Windows client expert.

The Microsoft Certification Program

Since the inception of its certification program, Microsoft has certified more than 2 million people. As the computer network industry continues to increase in both size and complexity, this number is sure to grow—and the need for proven ability will also increase. Certifications can help companies verify the skills of prospective employees and contractors.

The Microsoft certification track for Windows includes the following certification:

Microsoft 365 Certified: Modern Desktop Administrator Associate    The Microsoft 365 Certified: Modern Desktop Administrator Associate is now the highest-level certification you can achieve with Microsoft in relation to Windows 10/11. It requires passing exams MD-100 and MD-101. This book assists in your preparation for both exams.

How Do You Become Certified on Windows 10/11?

Attaining Microsoft certification has always been a challenge. In the past, students have been able to acquire detailed exam information—even most of the exam questions—from online brain dumps and third-party cram books or software products. For the new generation of exams, this is simply not the case.

Microsoft has taken strong steps to protect the security and integrity of its new certification tracks. Now prospective candidates must complete a course of study that develops detailed knowledge about a wide range of topics. It supplies them with the true skills needed, derived from working with the technology being tested.

The new generations of Microsoft certification programs are heavily weighted toward hands-on skills and experience. It is recommended that candidates have troubleshooting skills acquired through hands-on experience and working knowledge.

Fortunately, if you are willing to dedicate the time and effort to learn Windows 10/11, you can prepare yourself well for the exam by using the proper tools. By working through this book, you can successfully meet the requirements to pass the Windows 10/11 exams.

Microsoft 365 Certified: Modern Desktop Administrator Associate Exam Requirements

Candidates for MCA certification on Windows 10/11 must pass two Windows 10 MCSA tests:

MD-100: Windows Client

MD-101: Managing Modern Desktops

Microsoft provides exam objectives to give you a general overview of possible areas of coverage on the Microsoft exams. Keep in mind, however, that exam objectives are subject to change at any time without prior notice and at Microsoft's sole discretion. Please visit the Microsoft Learning website (www.microsoft.com/learning) for the most current listing of exam objectives.

Note Icon For a more detailed description of the Microsoft certification programs, including a list of all the exams, visit the Microsoft Learning website at www.microsoft.com/learning.

Note Icon Like all exams, the MCA certification from Microsoft is updated periodically and may eventually be retired or replaced. At some point after Microsoft is no longer offering this exam, the old editions of our books and online tools will be retired. If you have purchased this book after the exam was retired, or are attempting to register in the Sybex online learning environment after the exam was retired, please know that we make no guarantees that this exam's online Sybex tools will be available once the exam is no longer available.

Types of Exam Questions

In an effort to both refine the testing process and protect the quality of its certifications, Microsoft has focused its latest certification exams on real experience and hands-on proficiency. There is a greater emphasis on your past working environments and responsibilities and less emphasis on how well you can memorize. In fact, Microsoft says that certification candidates should have hands-on experience before attempting to pass any certification exams.

Note Icon Microsoft will accomplish its goal of protecting the exams' integrity by regularly adding and removing exam questions, limiting the number of questions that any individual sees in a beta exam, limiting the number of questions delivered to an individual by using adaptive testing, and adding new exam elements.

Exam questions may be in a variety of formats. Depending on which exam you take you may see multiple-choice questions as well as select-and-place and prioritize-a-list questions. Simulations and case study–based formats are included as well. Let's take a look at the types of exam questions, so you'll be prepared for all of the possibilities.

Multiple-Choice Questions

Multiple-choice questions come in two main forms. One is a straightforward question followed by several possible answers of which one or more is correct. The other type of multiple-choice question is more complex and based on a specific scenario. The scenario may focus on several areas or objectives.

Select-and-Place Questions

Select-and-place exam questions involve graphical elements that you must manipulate to successfully answer the question. For example, you might see a diagram of a computer network. A typical diagram will show computers and other components next to boxes that contain the text Place here. The labels for the boxes represent various computer roles on a network, such as a print server and a file server. Based on information given for each computer, you are asked to select each label and place it in the correct box. You need to place all of the labels correctly. No credit is given for the question if you correctly label only some of the boxes.

In another select-and-place problem, you might be asked to put a series of steps in order by dragging items from boxes on the left to boxes on the right and placing them in the correct order. One other type requires that you drag an item from the left and place it under an item in a column on the right.

Note Icon For more information on the various exam question types, go to https://docs.microsoft.com/en-us/certifications/exam-duration-question-types.

Simulations

Simulations are the kinds of questions that most closely represent actual situations and test the skills you use while working with Microsoft software interfaces. These exam questions include a mock interface on which you are asked to perform certain actions according to a given scenario. The simulated interfaces look nearly identical to what you see in the actual product.

Because of the number of possible errors that can be made on simulations, be sure to consider the following recommendations from Microsoft:

Do not change any simulation settings that don't pertain to the solution directly.

When related information has not been provided, assume that the default settings are used.

Make sure that your entries are spelled correctly.

Close all the simulation application windows after completing the set of tasks in the simulation.

The best way to prepare for simulation questions is to spend time working with the graphical interface of the product on which you will be tested.

Case Study–Based Questions

Case study–based questions first appeared in the MCSD program. These questions present a scenario with a range of requirements. Based on the information provided, you answer a series of multiple-choice and select-and-place questions. The interface for case study–based questions have a number of tabs, each of which contains information about the scenario. At present, this type of question appears only in most of the Design exams.

Tips for Taking the Windows Client Exams

Here are some general tips for achieving success on your certification exam:

Arrive early at the exam center so that you can relax and review your study materials. During this final review, you can look over tables and lists of exam-related information.

Read the questions carefully. Do not be tempted to jump to an early conclusion. Make sure that you know exactly what the question is asking.

Answer all questions. If you are unsure about a question, mark it for review and come back to it at a later time.

On simulations, do not change settings that are not directly related to the question. Also, assume default settings if the question does not specify or imply which settings are used.

For questions that you're not sure about, use a process of elimination to get rid of the obviously incorrect answers first. This improves your odds of selecting the correct answer when you need to make an educated guess.

Exam Registration

At the time this book was released, Microsoft exams are given using more than 1,000 Authorized VUE Testing Centers around the world. For the location of a testing center near you, go to VUE's website at www.vue.com. If you are outside the United States and Canada, contact your local VUE registration center.

Find out the number of the exam you want to take, and then register with the VUE registration center nearest to you. At this point, you will be asked for advance payment for the exam. The exams are $165 each and you must take them within one year of payment. You can schedule exams up to six weeks in advance or as late as one working day prior to the date of the exam. You can cancel or reschedule your exam if you contact the center at least two working days prior to the exam. Same-day registration is available in some locations, subject to space availability. Where same-day registration is available, you must register a minimum of two hours before test time.

When you schedule the exam, you will be provided with instructions regarding appointment and cancellation procedures, ID requirements, and information about the testing center location. In addition, you will receive a registration and payment confirmation letter from VUE.

Microsoft requires certification candidates to accept the terms of a nondisclosure agreement before taking certification exams.

Note Icon Exam policies can change from time to time. We highly recommend that you check both the Microsoft and Pearson VUE sites for the most up-to-date information when you begin your preparing, when you register, and again a few days before your scheduled exam date.

Who Should Read This Book?

This book is intended for individuals who want to earn their Microsoft 365 Certified: Modern Desktop Administrator Associate certification.

Not only will this book help anyone who is looking to pass the Microsoft exams, it will also help anyone who wants to learn the real ins and outs of the Windows client operating system.

What's Inside?

Here is a glance at what's in each chapter.

Part I: MD-100

Chapter 1: Windows Client Installation    In the first chapter, I explain the requirements and steps to install and configure Windows client. I will also show you the different versions of Windows 10/11. This chapter also shows you how to configure automated installation of Windows 10/11.

Chapter 2: Configuring Users    This chapter shows you how to configure user authorization and authentication. Understanding how users authenticate onto your network and knowing how to secure your network and users is one of the most important tasks that administrators must perform. I will also show you how to manage local groups, manage local users, configure remote connectivity, configure remote management, and configure devices by using local policies.

Chapter 3: Managing Data    I show you how to configure disks, volumes, and filesystem options using Disk Management and Windows PowerShell. I will also discuss how to configure removable devices and how to create and configure storage spaces. Finally, I will show you how to troubleshoot storage and removable device issues.

Chapter 4: Managing the Windows Client Environment    This chapter takes you through the different ways to configure the Windows 10/11 environment, including performing post-installation configuration, configuring Edge, configuring mobility settings, configuring sign-in options, and customizing the Windows desktop.

Chapter 5: Configuring Security and Devices    This chapter takes you through the different ways to configure Windows client devices, including configuring Windows Defender Firewall and implementing encryption.

Chapter 6: Configuring Network Connectivity    This chapter will show you how to implement and configure Windows networking, including workgroups and domains. I will also talk about how to configure TCP/IP.

Chapter 7: Configuring Recovery    This chapter will explain to you how to implement and configure Windows backups and recovery points. I will show you how to use cloud-based backups and how to recover the Windows client system using advanced boot options.

Part II: MD-101

Chapter 8: Deploy Windows Client    This chapter shows you how to configure automated installation of Windows 10/11.

Chapter 9: Managing Identity and Access    This chapter shows you how to configure user authorization and authentication. Understanding how users authenticate onto your network and Azure is one of the most important tasks that administrators must perform. I will also teach you how to manage user profiles.

Chapter 10: Planning and Managing Microsoft Intune    This chapter takes you through the different ways to manage Intune device enrollment and inventory. I will also show you how to deploy and update your applications. Finally, I will talk about implementing Mobile Application Management.

Chapter 11: Managing Devices    I show you how to implement conditional access and compliance policies for devices. I will show you how to configure device profiles and also how to plan and implement co-management between your on-site network with your Azure-based network.

Chapter 12: Managing Security    This chapter teaches you how to configure and manage Windows Defender. I will show you how to use Windows Defender Credential Guard, Windows Defender Exploit Guard, Windows Defender Advanced Threat Protection, Windows Defender Application Guard, and Windows Defender Antivirus.

Chapter 13: Monitoring Devices    This chapter will show you how to monitor your different devices using Azure Monitor, Endpoint Manager Admin Center, and using Endpoint Analytics.

What's Included with the Book

There are many helpful items intended to prepare you for the Microsoft 365 Certified: Modern Desktop Administrator Associate certification included in this book:

Assessment Test    There is an assessment test at the conclusion of the introduction that can be used to quickly evaluate where you are with Windows 10/11. This test should be taken prior to beginning your work in this book and should help you identify areas in which you are either strong or weak. Note that these questions are purposely more simplistic than the types of questions you may see on the exams.

Opening List of Objectives    Each chapter includes a list of the exam objectives that are covered in that chapter.

Helpful Exercises    Throughout the book, I have included step-by-step exercises of some of the more important tasks you should be able to perform. Some of these exercises have corresponding videos that can be downloaded from the book's website. Also, later in this introduction you'll find a recommended home lab setup that will be helpful in completing these tasks.

Video Resources    After each chapter summary, if the chapter includes exercises with corresponding videos, a list or description of the exercises with video resources will be provided. The videos can be accessed at www.wiley.com/go/Sybextestprep.

Exam Essentials    The end of each chapter also includes a listing of exam essentials. These are essentially repeats of the objectives, but remember that any objective on the exam blueprint could show up on the exam.

Chapter Review Questions    Each chapter includes review questions. These are used to assess your understanding of the chapter and are taken directly from the chapter. These questions are based on the exam objectives and are similar in difficulty to items you might encounter on the Microsoft 365 Certified: Modern Desktop Administrator Associate exams.

Note Icon The Sybex Interactive Online Test Bank, flashcards, videos, and glossary can be accessed at www.wiley.com/go/Sybextestprep.

Interactive Online Learning Environment and Test Bank

The interactive online learning environment that accompanies MCA Microsoft 365® Certified Associate Modern Desktop Administrator Complete Study Guide, Exam MD-100 and Exam MD-101 provides a test bank with study tools to help you prepare for the certification exams and increase your chances of passing the exam the very first time! The test bank includes the following elements:

Sample Tests    All of the questions in this book are provided, including the assessment test, which you'll find at the end of this introduction, and the chapter tests that include the review questions at the end of each chapter. In addition, there are practice exams. Use these questions to test your knowledge of the study guide material. The online test bank runs on multiple devices.

Electronic Flashcards    The flashcards are included for quick reference and are great tools for learning quick facts. You can even consider them additional simple practice questions, which is essentially what they are.

Videos    Some of the exercises include corresponding videos. These videos show you how I do the exercises. There is also a video that shows you how to set up virtualization so that you can complete the exercises within a virtualized environment. I also have videos to help you on the Microsoft exams at www.youtube.com/c/williampanek.

PDF of Glossary of Terms    There is a glossary included that covers the key terms used in this book.

Recommended Home Lab Setup

To get the most out of this book, you will want to make sure that you complete the exercises throughout the chapters. To complete the exercises, you will need one of two setups. First, you can set up a machine with Windows 10/11 and complete the labs using a regular Windows client machine.

The second way to set up Windows 10/11 is by using virtualization. I set up Windows 10/11 as a virtual hard disk (VHD) and I did all the labs this way. The advantages of using virtualization are that you can always just wipe out the system and start over without losing a real server. Plus, you can set up multiple virtual servers and create a full lab environment on one machine.

I created a video for this book showing you how to set up a virtual machine and how to install Windows 10 onto that virtual machine. This video can be seen at www.youtube.com/c/williampanek.

How to Contact Sybex or the Author

Sybex strives to keep you supplied with the latest tools and information you need for your work. Please check the website at www.wiley.com/go/Sybextestprep, where I'll post additional content and updates that supplement this book should the need arise.

You can contact me by going to my website at www.willpanek.com. I also have videos and test prep information at www.youtube.com/c/williampanek. I also have a Twitter account, @AuthorWillPanek.

Objective Mapping

Table I.1 contains an objective map to show you at a glance where you can find each objective covered.

TABLE I.1 MD-100 Objective Map

TABLE I.2 MD-101 Objective Map

How to Contact the Publisher

If you believe you have found a mistake in this book, please bring it to our attention. At John Wiley & Sons, we understand how important it is to provide our customers with accurate content, but even with our best efforts an error may occur.

In order to submit your possible errata, please email it to our Customer Service Team at [email protected] with the subject line Possible Book Errata Submission.

Assessment Test – MD-100

You want to create roaming profiles for users in the Sales department. They frequently log on at computers in a central area. The profiles should be configured as mandatory and roaming profiles. Which users are able to manage mandatory profiles on Windows 10/11 computers?

The user who uses the profile

Server operators

Power users

Administrators

What filename extension is applied by default to custom consoles that are created for the MMC?

.mmc

.msc

.con

.mcn

You are the IT administrator for a large computer-training company that uses laptops for all its employees. Currently the users have to connect to the wireless network through the wireless network adapter. Windows 10/11 includes this built in as which feature?

Available Network Finder (ANF)

View Networks (VN)

Network Availability Viewer (NAV)

View Available Networks (VAN)

If you wanted to require that a user enter an Administrator password to perform administrative tasks, what type of user account should you create for the user?

Administrator user account

Standard user account

Power user account

Authenticated user account

You have installed a clean installation of Windows 10/11 on your computer. You want to create an image of the new installation to use as a basis for remote installs. What Windows utility should you use to accomplish this?

WDS

Windows SIM

ImageX

Sysprep

You are the administrator in charge of a computer that runs both Windows 7 and Windows 10. Windows 10 is installed on a different partition from Windows 7. You have to make sure that the computer always starts Windows 10 by default. What action should you perform?

Run Bcdedit.exe and the /default parameter.

Run Bcdedit.exe and the /bootcd parameter.

Create a Boot.ini file in the root of the Windows 10 partition.

Create a Boot.ini file in the root of the Windows 7 partition.

You have a user with limited vision. Which accessibility utility is used to read aloud screen text, such as the text in dialog boxes, menus, and buttons?

Read-Aloud

Orator

Dialog Manager

Narrator

You have just purchased a new computer that has Windows 10 preinstalled. You want to migrate existing users from a previous computer that was running Windows XP Professional. Which two files would you use to manage this process through the User State Migration Tool?

usmt.exe

ScanState.exe

LoadState.exe

Windows7Migrate.exe

You are using Windows 10 Home and you want to update your video drivers. How do you accomplish this?

Install new drivers using Driver Manager.

Upgrade the drivers using Device Manager.

Upgrade the drivers using Driver Manager.

Install new drivers using Device Manager.

You are the network administrator for a large organization. You have a Windows client machine that is working fine, but you downloaded and installed a newer version of the network adapter driver. After you load the driver, the network device stops working properly. Which tool should you use to help you fix the problem?

Driver rollback

Driver Repair utility

Reverse Driver application

Windows Driver Compatibility tool

You are the network administrator for your organization. Your organization has been using Windows 10/11 Enterprise. You need to run the Print Management tools from the command prompt. What command do you run?

Printmgmt.exe

PrintMig.exe

Prtmgmt.exe

Printbrm.exe

You are configuring power settings on your laptop. You configure the laptop to enter Sleep mode after a specified period of inactivity. Which of the following will occur when the computer enters Sleep mode?

The computer will be shut down gracefully.

Data will be saved to the hard disk.

The monitor and hard disk will be turned off, but the computer will remain in a fully active state.

The user session will not be available when you resume activity on the computer.

You are the administrator for a large organization that is moving to Windows 10. You need to set up a way that you can run multiple storage commands from a scripting tool. How can you set this up?

Use SCCM for scripting.

Use PowerShell for scripting.

Use AD FS for scripting.

Use Disk Administrator scripting.

What is the CIDR equivalent for 255.255.255.224?

/24

/25

/26

/27

You have compressed a 4 MB file into 2 MB. You are copying the file to another computer that has a FAT32 partition. How can you ensure that the file will remain compressed?

When you copy the file, use the XCOPY command with the /Comp switch.

When you copy the file, use the Windows Explorer utility and specify the option Keep Existing Attributes.

On the destination folder, make sure that you set the option Compress Contents To Save Disk Space in the folder's properties.

You can't maintain disk compression on a non-NTFS partition.

You are the network administrator for your company. Your network consists of 200 Windows client computers, and you want to assign static IP addresses rather than use a DHCP server. You want to configure the computers to reside on the 192.168.10.0 network. What subnet mask should you use with this network address?

255.0.0.0

255.255.0.0

255.255.255.0

255.255.255.255

You are using a laptop running Windows 10 Home. You want to synchronize files between your laptop and a network folder. Which of the following actions must you perform first in order to enable synchronization to occur between your laptop and the network folder?

Upgrade your laptop to Windows 10 Enterprise.

Enable one-way synchronization between the laptop and the network folder.

Enable two-way synchronization between the laptop and the network folder.

Configure the files on your laptop as read-only.

You have a DNS server that contains corrupted information. You fix the problem with the DNS server, but one of your users is complaining that they are still unable to access Internet resources. You verify that everything works on another computer on the same subnet. Which command can you use to fix the problem?

ipconfig /flush

ipconfig /flushdns

ping /flush

DNS /flushdns

You are the network administrator for a medium-sized company. Rick was the head of HR and recently resigned. John has been hired to replace Rick and has been given Rick's laptop. You want John to have access to all of the resources to which Rick had access. What is the easiest way to manage the transition?

Rename Rick's account to John.

Copy Rick's account and call the copied account John.

Go into the Registry and do a search and replace to replace all of Rick's entries with John's name.

Take ownership of all of Rick's resources and assign John Full Control to the resources.

Which of the following statements are true regarding the creation of a group in Windows 10/11? (Choose two.)

Only members of the Administrators group can create users on a Windows client computer.

Group names can be up to 64 characters.

Group names can contain spaces.

Group names can be the same as usernames but not the same as other group names on the computer.

You need to expand the disk space on your Windows client computer. You are considering using spanned volumes. Which of the following statements are true concerning spanned volumes? (Choose all that apply.)

Spanned volumes can contain space from 2 to 32 physical drives.

Spanned volumes can contain space from 2 to 24 physical drives.

Spanned volumes can be formatted as FAT32 or NTFS partitions.

Spanned volumes can be formatted only as NTFS partitions.

You have a network folder that resides on an NTFS partition on a Windows client computer. NTFS permissions and share permissions have been applied. Which of the following statements best describes how share permissions and NTFS permissions work together if they have been applied to the same folder?

The NTFS permissions will always take precedence.

The share permissions will always take precedence.

The system will look at the cumulative share permissions and the cumulative NTFS permissions. Whichever set is less restrictive will be applied.

The system will look at the cumulative share permissions and the cumulative NTFS permissions. Whichever set is more restrictive will be applied.

Your home computer network is protected by a firewall. You have configured your Windows client home computer to use Exchange. After you configure your email accounts, you discover that you are unable to send email messages. Your email provider uses POP3 and SMTP. What port should you open on the firewall?

25

110

443

995

You need Windows 10 to be the primary operating system on a dual-boot machine. Which file do you configure for this?

boot.ini

bcdedit

bcboot.ini

bcdboot

Which of the following versions of Windows can be upgraded to Windows 10 Enterprise edition? (Choose all that apply.)

Windows 8 Home

Windows 8 Professional

Windows 8 Home Premium

Windows 8 Enterprise

You are configuring a Windows client computer that is going to be used by your children. You are configuring access restrictions using the Parental Controls feature of Windows 10/11. Which of the following can be configured by setting Parental Controls? (Choose all that apply.)

When your children can access the computer

Which websites your children can view

Which programs your children can access

Which other computers on your home network your children can access

How do you access the Advanced Boot Options menu in Windows 10/11 during the boot process?

Hold the Shift key down and choose the Restart option.

Press F6.

Press F8.

Press F10.

You have a computer that runs Windows 10. Your computer has two volumes, C: and D:. Both volumes are formatted by using the NTFS filesystem. You need to disable previous versions on the D: volume. What should you do?

From System Properties, modify the System Protection settings.

From the properties of the D: volume, modify the Quota settings.

From the properties of the D: volume, modify the Sharing settings.

From the Disk Management snap-in, convert the hard disk drive that contains the D: volume to Dynamic.

Which utility is used to upgrade a FAT32 partition to NTFS?

UPFS

UPGRADE

Disk Manager

Convert

Your work computer network is protected by a firewall. You have configured your Windows client computer to use HTTPS. What port should you open on the firewall?

25

110

443

995

Assessment Test – MD-101

You need to automatically register all the existing computers to the Azure AD network and also enroll all of the computers in Intune. What should you use?

Use a DNS Autodiscover address record.

Use a Windows Autopilot deployment profile.

Use an Autodiscover service connection point (SCP).

Set up a Group Policy Object (GPO).

You need to create a new Azure Active Directory policy for your users. What PowerShell command would you use to accomplish this task?

New-AzurePolicy

New-AzureActiveDirectoryPolicy

Set-AzurePolicy

New-AzureADPolicy

You have a computer that runs Windows 10/11 Pro. The computer is joined to Azure Active Directory (Azure AD) and enrolled in Microsoft Intune. You need to upgrade the computer to Windows 10/11 Enterprise for another user. What should you configure in Intune?

Windows Autopilot device profile

A device enrollment policy

A device cleanup rule

A device compliance policy

You decide to install Windows Deployment Services (WDS). You are using a Windows Server 2022 domain and have verified that your network meets the requirements for using WDS. What command-line utility can you use to configure the WDS server?

dism.exe

wdsutil.exe

setup.exe

The WDS icon in Control Panel

You are the network administrator for your company's Azure AD network. You need to view an Azure Active Directory policy for your users. What PowerShell command would you use to accomplish this task?

Get-AzureADPolicy

Get-AzurePolicy

View-AzurePolicy

View-AzureADPolicy

You are the administrator for your organization. Your company wants to set up a way to integrate its on-site AD with Azure AD. What tool can you use to do this?

Site-to-Site VPN Gateway Connectors

Azure AD Connect

Azure AD Replication

Active Directory Replicator

An administrator wants to look at an Azure Active Directory application policy for your users' applications. What PowerShell command would you use to accomplish this task?

Add-AzureADPolicy

Add-AzureADApplicationPolicy

Create-AzurePolicy

Install-AzureADPolicy

Your boss has asked you about Azure security and making sure that user logins are secure. What feature can you explain to your boss to ease their concerns?

Azure AD User Security

Azure AD Identity Protection

Azure AD Security add-on

Azure Identity Protection

An administrator wants to change an Azure Active Directory policy for one of their users. What PowerShell command would you use to accomplish this task?

New-AzureADPolicy

Edit-AzureADPolicy

New-AzurePolicy

Set-AzureADPolicy

An administrator wants to view their Azure AD directory settings for the company's Azure AD subscription. What PowerShell command would you use to accomplish this task?

View-AzureADDirectorySetting

Get-AzureADDirectorySetting

Add-AzureADDirectorySetting

Set-AzureADDirectorySetting

You need to upgrade 100 Windows 10 Pro computers to Windows 10 Enterprise. What should you configure in Intune?

A device enrollment policy

A device cleanup rule

A device compliance policy

A device configuration profile

An administrator needs to create a device configuration profile in Microsoft Intune. You need to implement an ADMX-backed policy. Which profile type should you use?

Identity protection

Custom

Device restrictions

System restrictions

You need to set up a Windows client system in a break room where all employees can use it. Which device configuration profile type should you use?

Kiosk

Endpoint protection

Identity protection

Device restrictions

You are the IT manager of a large company. Sales personnel use their Windows client computers while on the road. All devices are enrolled into the Intune network for application and data maintenance. One of your salespeople reports that their Windows device was just stolen. You need to make sure no one can gain access to the company data. What action can you take to protect the device?

Prevent the computer from connecting to the corporate wireless network.

Remove the computer from the management infrastructure.

Lock the device remotely.

Do a remote wipe on the user's device.

What is Microsoft Intune?

Computer-based software

A cloud-based service

Third party non-Microsoft software

A set of programs that are designed to prevent, search for, detect, and remove software viruses

When your users get added to Intune and get licensed, how many devices can each user use by default?

14

15

16

17

How do you allow your tablets to connect to your cell phones for Internet access?

Configure the broadband connection as a metered network.

Turn on cellular tethering.

Enable tablet tethering.

Enable tablet metering in the tablets' settings.

An administrator needs to secure some of the Microsoft operating system's loopholes that hackers use. What type of updates would you need to install to help solve this problem?

Security updates

Definition updates

Critical updates

Software updates

You want to enable self-service password reset on the sign-in screen. Which settings should you configure from the Microsoft Intune blade?

Device configuration

Device compliance

Device enrollment

Conditional access

What do you need to do to be sure that all iOS devices can be managed by the Intune Administrators?

Add an Employee Portal app from the Apple App Store.

Create a device enrollment manager account.

Configure an Intune Service Connector for Exchange.

Import an Apple Push Notification service (APNs) certificate.

You are the new Azure AD Global administrator for your organization. Your company has an Azure AD domain name of WillPanek.onmicrosoft.com. Your bosses want you to change the default domain name to Panek.onmicrosoft.com. How can you change the initial domain name?

Use the Custom Domain Names section of Azure AD and change the name.

In Azure AD, go to Default Directories and change the domain name.

Use PowerShell to change the default domain name.

This can't be done.

You are the new Azure AD Global administrator for your organization. Your company has an Azure AD domain name of WillPanek.onmicrosoft.com. Your bosses want you to add a new domain name for Panek.onmicrosoft.com. How can you add the new domain name to your existing domain?

Use the Custom Domain Names section of Azure AD and change the name.

In Azure AD, go to Default Directories and add the domain name.

Use the Azure Administrative Center to add the new domain name.

This can't be done.

Your company is using Microsoft Azure Active Directory and all computers are enrolled in Microsoft Intune. The administrator needs to make sure that only approved applications are allowed to run on all of these computers. What should you implement to ensure this?

Microsoft Defender Credential Guard

Microsoft Defender Exploit Guard

Microsoft Defender Application Guard

Microsoft Defender Antivirus

You have a Microsoft 365 subscription. All computers are enrolled in Microsoft Intune. You have business requirements for securing your Windows client devices. You need to lock any device that has a high Microsoft Defender for Endpoint risk score. Which device configuration profile type should you use?

Kiosk

Endpoint Protection

Identity Protection

Device Restrictions

You have a Windows client machine that has a virus that was caused by a malicious font. You need to stop this type of threat from affecting your corporate computers in the future. What should you use?

Microsoft Defender Exploit Guard

Microsoft Defender Application Guard

Microsoft Defender Credential Guard

Microsoft Defender System Guard

You have been asked by your boss to set up a device configuration profile in Microsoft Intune to allow your users to be able to reset their own passwords. Which device configuration profile option should you configure in Intune?

Kiosk

Endpoint protection

Identity protection

Custom

You are the network administrator for your company. Your company is using Microsoft Intune to manage all of their devices. The company uses conditional access to restrict access to Microsoft 365 services for devices that do not comply with the company's security policies. You want to view which devices will be prevented from accessing the services. What should you use?

The Device Health solution in Windows Analytics.

Use the Windows Defender Security Center.

Device Compliance in the Microsoft Endpoint Manager admin center.

The Conditional access blade in the Azure Active Directory admin center.

You need to use a Microsoft Azure monitoring tool to monitor devices and change settings. Which of the following tools can you use?

Performance Monitor

Microsoft Azure IoT Central Application

Azure Performance Center

Intune Performance Center

You are the administrator of a company that has bought an application where everyone needs access to the application. You have decided that you want to install the application to all employees by using the Microsoft Store. How do you do that?

Sideloading

WS Installations

BranchCache

Image Installation

You have a computer named Portable1. You need to view the events collected from Portable1. Which query would an administrator run in Log Analytics?

Eventview | where SourceSystem = = Portable1

Eventview | where Computer = = Portable1

Event | where SourceSystem = = Portable1

Event | where Computer = = Portable1

Answers to Assessment Test – MD-100

D.  Only members of the Administrators group can manage mandatory profiles. See Chapter 2 for more information.

B.  When you create a custom console for the MMC, the .msc filename extension is automatically applied. See Chapter 2 for more information.

D.  The feature the question is referring to is View Available Networks (VAN). Before Windows 10, when you used a wireless network adapter you would choose the wireless network that you wanted to connect to by using the wireless network adapter properties. In Windows 10/11, this is built into the operating system. See Chapter 1 for more information.

B.  You would create a standard user account for the user. Standard users must provide the credentials of an administrator account when prompted by User Account Control (UAC) in order to perform administrative tasks. See Chapter 2 for more information.

C.  You can use the ImageX utility to create an image of a Windows 10/11 installation. After the image has been created, you can prepare the image with a utility such as the System Preparation Tool (Sysprep). The image can then be used for remote installations of Windows client. See Chapter 1 for more information.

A.  The Boot Configuration Data (BCD) store contains boot information parameters that were previously found in Boot.ini in older versions of Windows. To edit the boot options in the BCD store, use the bcdedit utility, which can be launched only from a command prompt. See Chapter 1 for more information.

D.  The Narrator utility uses a sound output device to read onscreen text. See Chapter 4 for more information.

B, C.  Windows 10 ships with a utility called the User State Migration Tool (USMT) that is used by administrators to migrate users from one computer to another via a command-line utility. The USMT consists of two executable files: ScanState.exe and LoadState.exe. See Chapter 8 for more information.

B.  To get the latest drivers for any piece of hardware, you need to use the Upgrade Drivers button in Device Manager. After the upgrade button is chosen, you can use downloaded drivers or drivers from a new DVD. See Chapter 5 for more information.

A.  Driver rollback allows you to replace a newly installed driver with the previous driver. You can do the driver rollback using the Device Manager utility. See Chapter 5 for more information.

D.  The Printbrm.exe command should be run from a command prompt with administrative permission. This command is the command-line version of the Print Management tool. See Chapter 5 for more information.

B.  Sleep mode is a combination of Standby mode and Hibernate mode. When Sleep mode is configured, the user's session is quickly accessible on wakeup, but the data is saved to the hard disk. Sleep mode is the preferred power-saving mode in Windows 10/11. See Chapter 4 for more information.

B.  PowerShell commands allow you to run multiple configurations by using scripts or even by using individual commands. See Chapter 4 for more information.

D.  A subnet mask of 255.255.255.224 equals a CIDR of /27. CIDR is the number of on bits. See Chapter 6 for more information.

D.  Windows client data compression is supported only on NTFS partitions. If you move the file to a FAT32 partition, then it will be stored as uncompressed. See Chapter 5 for more information.

C.  You should use the subnet mask 255.255.255.0 on your network in this scenario. The IP network address 192.168.10.0 is a Class C address. Class C addresses, by default, use the subnet mask 255.255.255.0. The network portion of the address is 192.168.10, and the host portion of the address can be 1 to 254. See Chapter 6 for more information.

A.  To enable synchronization of files between your laptop and a network folder, you must first upgrade your laptop to a version of Windows 10 that supports synchronization with network folders, such as Windows 10 Enterprise. Windows Sync Center also supports synchronization of files between computers and mobile devices. See Chapter 4 for more information.

B.  The ipconfig /flushdns command is used to purge the DNS Resolver cache. The ipconfig command displays a computer's IP configuration. See Chapter 6 for more information.

A.  The easiest way is to simply rename Rick's account to John. When you rename Rick's account to John, John will automatically have all of the rights and permissions to any resource that Rick had access to. See Chapter 2 for more information.

A, C. Only administrators can create new groups on a Windows 10/11 computer. Group names can contain up to 256 characters and can contain spaces. Group names must be unique to the computer, different from all the other usernames and group names that have been specified on that computer. See Chapter 2 for more information.

A, C. You can create