Obtain the MD-102 PDF Dumps Get 100% Outcomes Exam Questions For You To Pass [Q26-Q49]

Rate this post

Obtain the MD-102 PDF Dumps Get 100% Outcomes Exam Questions For You To Pass

MD-102 Exam Dumps Contains FREE Real Quesions from the Actual Exam

Microsoft MD-102 Exam Syllabus Topics:

Section	Weight	Objectives
Manage policies and profiles	15-20%	– Manage app protection and configuration 1. Manage app assignment and deployment 2. Configure app protection policies (MAM) 3. Implement app configuration policies – Manage compliance policies 1. Create and assign compliance policies 2. Monitor device compliance status 3. Configure conditional access based on compliance 4. Implement remediation actions – Manage configuration profiles 1. Manage email and certificate profiles 2. Implement endpoint security policies 3. Configure Wi-Fi and VPN profiles 4. Create and manage device configuration profiles
Manage and maintain endpoints	25-30%	– Manage endpoint security 1. Manage endpoint detection and response (EDR) 2. Implement Microsoft Defender for Endpoint 3. Implement disk encryption (BitLocker) 4. Configure antivirus and antimalware policies 5. Configure firewall and application control policies – Manage device retirement and lifecycle 1. Manage device inventory 2. Plan and implement device wipe and retire 3. Handle device replacement scenarios – Manage software updates 1. Implement feature updates and quality updates 2. Monitor update compliance 3. Manage update rings and deployment 4. Configure Windows Update for Business – Monitor and manage endpoint health 1. Monitor device health using Endpoint Analytics 2. Implement proactive remediation 3. Manage device diagnostics and reporting 4. Configure Windows health monitoring
Deploy Windows client	25-30%	– Select and configure deployment methods 1. Configure Windows 11 features for deployment 2. Implement provisioning packages 3. Plan and implement Windows 11 upgrade paths 4. Configure Windows Autopilot – Implement Microsoft Entra ID Hybrid Join 1. Implement Hybrid Azure AD join 2. Plan Microsoft Entra ID Hybrid Join 3. Configure hybrid device authentication – Implement Windows device management with Microsoft Intune 1. Configure device enrollment in Intune 2. Configure device compliance policies 3. Implement mobile device management (MDM) policies 4. Manage device configurations and profiles – Implement Azure Active Directory (Azure AD) join for Windows devices 1. Implement enterprise roaming settings 2. Plan Azure AD join implementation 3. Manage Azure AD device registration 4. Configure Azure AD join settings
Manage identity and access	25-30%	– Manage device authentication 1. Implement passwordless authentication 2. Manage Windows device credentials 3. Configure Windows Hello for Business 4. Configure smart card authentication – Manage endpoint access 1. Implement Remote Desktop access 2. Manage shared devices and guest access 3. Configure Windows LAPS (Local Administrator Password Solution) 4. Configure endpoint privilege management – Manage Conditional Access 1. Manage identity protection settings 2. Configure access reviews 3. Implement Conditional Access policies 4. Configure multi-factor authentication (MFA)

Q26. You have a Microsoft 365 E5 subscription. The subscription contains 25 computers that run Windows 11 and are enrolled in Microsoft Intune. You need to onboard the devices to Microsoft Defender for Endpoint.
What should you create in the Microsoft Intune admin center?

an attack surface reduction (ASR) policy

a security baseline

an endpoint detection and response (EDR) policy

an account protection policy

an antivirus policy

Q27. You have a Microsoft 365 E5 subscription and 100 unmanaged iPad devices.
You need to deploy a specific iOS update to the devices. Users must be prevented from manually installing a more recent version of iOS.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Enroll the devices in Microsoft Intune by using the Intune Company Portal.

Create a compliance policy.

Enroll the devices in Microsoft Intune by using Apple Business Manager.

Create an iOS app provisioning profile.

Create a device configuration profile.

To deploy a specific iOS update to the unmanaged iPad devices, you need to perform the following actions:
Enroll the devices in Microsoft Intune by using Apple Business Manager. Apple Business Manager is a service that allows you to enroll and manage iOS/iPadOS devices in bulk. You can use Apple Business Manager to assign devices to Microsoft Intune and enroll them as supervised devices. Supervised devices are devices that have more management features and restrictions than unsupervised devices. You can also use Apple Business Manager to create device groups and assign roles and permissions12.
Create a device configuration profile. A device configuration profile is a policy that you can create and assign in Microsoft Intune to configure settings on your devices. You can use a device configuration profile to manage software updates for iOS/iPadOS supervised devices. You can choose to deploy the latest update or an older update, specify a schedule for the update installation, and delay the visibility of software updates on the devices34.
The other options are not correct for this scenario because:
Enrolling the devices in Microsoft Intune by using the Intune Company Portal is not suitable for unmanaged devices. The Intune Company Portal is an app that users can download and install on their personal or corporate-owned devices to enroll them in Microsoft Intune. However, this method requires user interaction and consent, and does not enroll the devices as supervised devices5.
Creating a compliance policy is not necessary for this scenario. A compliance policy is a policy that you can create and assign in Microsoft Intune to evaluate and enforce compliance settings on your devices.
You can use a compliance policy to check if the devices meet certain requirements, such as minimum OS version, encryption, or password settings. However, a compliance policy does not deploy or manage software updates on the devices6.
Creating an iOS app provisioning profile is not relevant for this scenario. An iOS app provisioning profile is a file that contains information about the app and its distribution method. You can use an iOS app provisioning profile to deploy custom or line-of-business apps to your iOS/iPadOS devices by using Microsoft Intune. However, an iOS app provisioning profile does not affect the software updates on the devices7.
References: What is Apple Business Manager?, Enroll iOS/iPadOS devices in Intune, Manage iOS/iPadOS software update policies in Intune, Software updates planning guide and scenarios for supervised iOS/iPadOS devices in Microsoft Intune, Enroll your personal device in Intune, Device compliance policies in Microsoft Intune, Add an iOS app provisioning profile with Microsoft Intune

Q28. You have a Microsoft 365 subscription.
You need provide a user the ability to disable Security defaults and principle of least privilege.
Which role should you assign to the user?

Global Administrator

Conditional Access Administrator

Security Administrator

Intune Administrator

Q29. You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

In the Microsoft 365 Apps admin center, you create a Microsoft Office customization.
Which users can download the Office customization file from the admin center?

Admin1, Admin2, Admin3. and Admin4

Admin1, Admin2, and Admin3 only

Admin3 only

Admin3 and Admin4 only

Admin1 and Admin3 only

Q30. You have 100 computers that run Windows 10. You have no servers. All the computers are joined to Microsoft Azure Active Directory (Azure AD).
The computers have different update settings, and some computers are configured for manual updates.
You need to configure Windows Update. The solution must meet the following requirements:
The configuration must be managed from a central location.
Internet traffic must be minimized.
Costs must be minimized.
How should you configure Windows Update? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q31. To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q32. You have a Microsoft 365 E5 subscription that contains two devices named Device1 and Device2.
You manage the devices by using Microsoft Intune.
You need to use Device query to meet the following requirements:
* Identify the Windows build on a device.
* Validate whether a folder exists on the C drive of a device.
Which table should you target for each requirement? To answer, select theappropriateoptions in the answer area.
NOTE: Each correct selection is worth one point.

Q33. Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals.
More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.
After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.
You have a Microsoft Entra tenant named contoso.com.
You purchase an Android device named Device1.
You need to register Device1 in contoso.com.
Solution; You use the Microsoft Intune Company Portal app.
Does this meet the goal?

Yes

Q34. You have a Microsoft 365 E5 subscription and 25 Apple iPads.
You need to enroll the iPads in Microsoft Intune by using the Apple Configurator enrollment method.
What should you do first?

Upload a file that has the device identifiers for each iPad.

Modify the enrollment restrictions.

Configure an Apple MDM push certificate.

Add your user account as a device enrollment manager (DEM).

Q35. Your company has an Azure AD tenant named contoso.com that contains several Windows 10 devices.
When you join new Windows 10 devices to contoso.com, users are prompted to set up a four-digit pin.
You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 10 devices to contoso.com.
Solution: From the Microsoft Entra admin center, you configure automatic mobile device management (MDM) enrollment. From the Microsoft Intune admin center, you configure the Windows Hello for Business enrollment options.
Does this meet the goal?

Yes

Q36. You have a Microsoft 365 tenant that uses Microsoft Intune and contains the devices shown in the following table.

In Microsoft Intune Endpoint security, you need to configure a disk encryption policy for each device.
Which encryption type should you use for each device, and which role-based access control (RBAQ role in Intune should you use to manage the encryption keys? To answer, select the appropriate options m the answer area.
NOTE: Each correct selection is worth one point.

Q37. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 subscription.
You have 20 computers that run Windows 10 and are joined to Microsoft Azure Active Directory (Azure AD).
You plan to replace the computers with new computers that run Windows 10. The new computers will be joined to Azure AD.
You need to ensure that the desktop background, the favorites, and the browsing history are available on the new computers.
Solution: You configure Enterprise State Roaming.
Does this meet the goal?

Yes

Q38. You have following types of devices enrolled in Microsoft Intune:
– Windows 10
– Android
– iOS
For which types of devices can you create VPN profiles in Microsoft Endpoint Manager?

Windows 10 only

Windows 10 and Android only

Windows 10 and iOS only

Windows 10, Android, and iOS

Android and iOS only

Q39. You have a server named Server1 and computers that run Windows 8.1. Server1 has the Microsoft Deployment Toolkit (MDT) installed.
You plan to upgrade the Windows 8.1 computers to Windows 10 by using the MDT deployment wizard.
You need to create a deployment share on Server1.
What should you do on Server1, and what are the minimum components you should add to the MDT deployment share? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q40. You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

You need to implement Microsoft Tunnel for Mobile Application Management (MAM) to provide the devices with access to an on-premises web app named App1.
What should you do on each device? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q41. Your network contains an Active Directory domain.
You install the Microsoft Deployment Toolkit (MDT) on a server.
You have a custom image of Windows 11.
You need to deploy the image to 100 devices by using MDT.
Which three actions should you perform in sequence? To answer, move answer area and arrange them in the correct order.

Q42. You have an Azure AD tenant named contoso.com that contains the devices shown in the following table.

AH devices contain an app named App1 and are enrolled in Microsoft Intune.
You need to prevent users from copying data from App1 and pasting the data into other apps.
Which type of policy and how many policies should you create in Intune? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q43. You need to assign the same deployment profile to all the computers that are configured by using Windows Autopilot.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: each correct selection is worth one point.

Join the computers to Microsoft Azure Active Directory (Azure AD)

Assign a Windows AutoPilot deployment profile to a group

Join the computers to an on-premises Active Directory domain

Create a Microsoft Azure Active Directory (Azure AD) group that has dynamic membership rules and uses the operatingSystem tag

Create a Group Policy object (GPO) that is linked to a domain

Create a Microsoft Azure Active Directory (Azure AD) group that has dynamic membership rules and uses the ZTDID tag

Q44. You have devices enrolled in Microsoft Intune as shown in the following table.

On which devices can you apply app configuration policies?

Device1, Device2, Device3, and Device4

Device2 only

Device3 and Device4 only

Device1 and Device2 only

Device2, Device3, and Device4 only

Q45. You have a Microsoft 365 subscription.
You use Microsoft Intune Suite to manage devices.
You have the iOS app protection policy shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point,

Q46. You have a Microsoft 365 subscription that contains the devices shown in the following table.

You need to ensure that only devices running trusted firmware or operating system builds can access network resources.
Which compliance policy setting should you configure for each device? To answer, drag the appropriate settings to the correct devices. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Q47. You use the Microsoft Deployment Toolkit (MDT) to manage Windows 11 deployments.
From Deployment Workbench, you modify the WinPE settings and add PowerShell support.
You need to generate a new set of WinPE boot image files that contain the updated settings.
What should you do?

From the Operating Systems node, import a new operating system.

From the Deployment Shares node, update the deployment share.

From the Packages node, import a new operating system package.

From the Advanced Configuration node, create new media.

Q48. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain. The domain contains member computers that run Windows 8.1 and are enrolled in Microsoft Intune.
You need to identify which computers can be upgraded to Windows 10.
Solution: You install the Microsoft Assessment and Planning Toolkit. From the Microsoft Assessment and Planning Toolkit, you collect inventory data and run the Windows 8.1 Readiness scenario.
Does this meet the goal?

Yes

Q49. You have a Microsoft 365 E5 subscription that contains a device named Device 1.
Device1 is Microsoft Entra joined.
You manage Device1 by using Microsoft Intune.
You need to use a remote action to reset the device as quickly as possible. If the device is turned off. the action must resume after the device is powered on.
Which remote action should you use?

Delete

Retire

Wipe

Autopilot reset