Exam MD-100 All Questions

View all questions & answers for the MD-100 exam

Exam MD-100 topic 5 question 1 discussion

Actual exam question from Microsoft's MD-100

Question #: 1
Topic #: 5

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have two computers named Computer1 and Computer2 that run Windows 10.
You have an Azure Active Directory (Azure AD) user account named [email protected] that is in the local Administrators group on each computer.
You sign in to Computer1 by using [email protected].
You need to ensure that you can use Event Viewer on Computer1 to connect to the event logs on Computer2.
Solution: On Computer2, you run the winrm quickconfig command.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
Windows Remote Management is a component of the Windows Hardware Management features that manage server hardware locally and remotely.
Reference:
https://docs.microsoft.com/en-us/windows/win32/winrm/about-windows-remote-management

by vinnyct at July 8, 2020, 3:37 p.m.

Comments

Submit Cancel

hokieman91

Highly Voted 4 years, 9 months ago

Answer is NO - trick is to enable firewall rules for "remote event log management" on Computer 2 (tested)

upvoted 15 times

...

xphan

Highly Voted 4 years, 10 months ago

Vinnyct's answer is for forwarding and collecting event log. The question here is to view Computer2's event log from Computer1's Event Viewer. In order to do that, we have to enable the Remote Event Log Management first using command Enable-PSRemoting cmdlet. Then 1) Open Event Viewer 2) Right-click on “Event Viewer (local)” on Computer1 3) Chose “Connect to Another Computer” in the menu. 4) Enter Computer2’s IP or Hostname in the box.

upvoted 11 times

Rstilekar

4 years, 5 months ago

I agree with xphan. Correct ans is NO as its not related to Event forwarding and subscription but just to connect to another computer to view it.

upvoted 4 times

...

williamlamata

Most Recent 2 years, 5 months ago

B. No Explanation: Running the winrm quickconfig command on Computer2 will enable the Windows Remote Management (WinRM) service, which is required for remote access to the event logs. However, it is not sufficient to meet the stated goal. To connect to the event logs on Computer2 from Computer1, you also need to configure the Windows Firewall to allow inbound remote management traffic. This can be done by running the following command on Computer2:

upvoted 1 times

...

flabezerra

2 years, 9 months ago

Selected Answer: B

NO The local machine in which will be used to control is Computer1, so you need to enable wecutil qc, if you gonna use a solution like subscription. The question’s command will be used in the remote (the source of information) machine.

upvoted 1 times

flabezerra

2 years, 6 months ago

Actually the answer of this question is YES. You have to run that command on Computer2 anyway.

upvoted 1 times

...

Cisco

4 years, 4 months ago

I tested this one and WINRM is not needed. As others have stated, the firewall just needs to be setup on target machine to allow it. There are 3 Remote Event Log Management Rules that must allow access.

upvoted 3 times

...

bennyandthejets

4 years, 9 months ago

Event Forwarding: A notification of events that occur on remote computers can be sent to subscribing applications. Event forwarding is not a feature of WinRM, but of the Windows Event Log. Event forwarding becomes available for the first time in Windows Vista. The Management applications, such as Microsoft Operations Manager (MOM) use event forwarding......So I think the correct answer is NO.

upvoted 2 times

...

Jammer

4 years, 10 months ago

Looks to be more involved then just Running that command. I think the answer is NO. Believe Xphan has the gist of it

upvoted 2 times

...

loganharris

5 years ago

Windows Remote Management is a component of the Windows Hardware Management features that manage server hardware locally and remotely. References: https://docs.microsoft.com/en-us/windows/win32/winrm/about-windows-remote-management

upvoted 2 times

...

vinnyct

5 years, 1 month ago

it's Yes. https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc748890(v=ws.11)

upvoted 4 times

ad2531

4 years, 7 months ago

It is no: winrm qc -q on Source PC (computer 1) = starts remote mgmt wecutil qc -q on Collector PC (computer 2) = starts event vwr collection

upvoted 5 times

...