Microsoft Microsoft Certifications MD-102 Questions & Answers

• Question 1:

  You have a Hyper-V host. The host contains virtual machines that run Windows 10 as shown in following table.

  

  Which virtual machines can be upgraded to Windows 11?

  A. VM1 only

  B. VM2 only

  C. VM2 and VM3 only

  D. VM1.VM2. andVM3

  Correct Answer: B

• Question 2:

  You have a computer named Computed that has Windows 10 installed.

  You create a Windows PowerShell script named config.psl.

  You need to ensure that config.psl runs after feature updates are installed on Computer5.

  Which file should you modify on Computer5?

  A. LiteTouch.wsf

  B. SetupConfig.ini

  C. Unattendb*

  D. Unattend.xml

  Correct Answer: B

  Explanation: SetupConfig.ini is a file that can be used to customize the behavior of Windows Setup during feature updates. You can use this file to specify commands or scripts that run before or after the installation process. To run a PowerShell script after a feature update, you can use the PostOOBE parameter in SetupConfig.ini and specify the path to the script file. References: [SetupConfig.ini reference]

• Question 3:

  You have a Microsoft 365 subscription. The subscription contains 500 computers that run Windows 11 and are enrolled in Microsoft Intune. You need to manage the deployment of monthly security updates. The solution must meet the following requirements:

  Updates must be deployed to a group of test computers for quality assurance. Updates must be deployed automatically 15 days after the quality assurance testing.

  What should you create in the Microsoft Intune admin center?

  A. a device Configuration profile

  B. an update ring

  C. a feature update policy

  D. a security baseline

  Correct Answer: B

• Question 4:

  You have a Microsoft 365 E5 subscription that contains the groups shown in the following table.

  

  You create a Conditional Access policy named CAPolicy1 that will block access to Microsoft Exchange Online from iOS devices. You assign CAPolicy1 to Group1.

  You discover that User1 can still connect to Exchange Online from an iOS device.

  You need to ensure that CAPolicy1 is enforced.

  What should you do?

  A. Configure a new terms of use (TOU).

  B. Assign CAPolicy1 to Group2.

  C. Enable CAPolicy1

  D. Add a condition in CAPolicy1 to filter for devices.

  Correct Answer: C

• Question 5:

  You need to meet the technical requirements for the IT department. What should you do first?

  A. From the Azure Active Directory blade in the Azure portal, enable Seamless single sign- on.

  B. From the Configuration Manager console, add an Intune subscription.

  C. From the Azure Active Directory blade in the Azure portal, configure the Mobility (MDM and MAM) settings.

  D. From the Microsoft Intune blade in the Azure portal, configure the Windows enrollment settings.

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/sccm/comanage/tutorial-co-manage-clients

• Question 6:

  You have a Microsoft 365 subscription that contains 1,000 Android devices enrolled in Microsoft Intune. You create an app configuration policy that contains the following settings:

  Device enrollment type: Managed devices Profile Type: All Profile Types Platform: Android Enterprise

  Which two types of apps can be associated with the policy? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  A. Built-in Android app

  B. Managed Google Play store app

  C. Web link

  D. Android Enterprise system app

  E. Android store app

  Correct Answer: BD

• Question 7:

  You have a Microsoft 365 E5 subscription that contains a group named Group1.

  You create a Conditional Access policy named CAPolicy1 and assign CAPolicy1 to Group1.

  You need to configure CAPolicy1 to require the members of Group1 to reauthenticate every eight hours when they connect to Microsoft Exchange Online. What should you configure?

  A. Session access controls

  B. an assignment that uses a User risk condition

  C. an assignment that uses a Sign-in risk condition

  D. Grant access controls

  Correct Answer: A

  User sign-in frequency

  Sign-in frequency defines the time period before a user is asked to sign in again when attempting to access a resource.

  The Azure Active Directory (Azure AD) default configuration for user sign-in frequency is a rolling window of 90 days.

  Sign-in frequency control

  Sign in to the Azure portal as a global administrator, security administrator, or Conditional Access administrator.

  Browse to Azure Active Directory > Security > Conditional Access.

  Select New policy.

  Give your policy a name. We recommend that organizations create a meaningful standard for the names of their policies.

  Choose all required conditions for customer's environment, including the target cloud apps.

  Under Access controls > Session.

  Select Sign-in frequency.

  Choose Periodic reauthentication and enter a value of hours or days or select Every time.

  Save your policy.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional- access/howto-conditional-access-session-lifetime

• Question 8:

  What should you configure to meet the technical requirements for the Azure AD-joined computers?

  A. Windows Hello for Business from the Microsoft Intune blade in the Azure portal.

  B. The Accounts options in an endpoint protection profile.

  C. The Password Policy settings in a Group Policy object (GPO).

  D. A password policy from the Microsoft Office 365 portal.

  Correct Answer: A

  References:

  https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for- business/hello-manage-inorganization

• Question 9:

  You need to meet the requirements for the MKG department users. What should you do?

  A. Assign the MKG department users the Purchaser role in Microsoft Store for Business

  B. Download the APPX file for App1 from Microsoft Store for Business

  C. Add App1 to the private store

  D. Assign the MKG department users the Basic Purchaser role in Microsoft Store for Business

  E. Acquire App1 from Microsoft Store for Business

  Correct Answer: E

  References: https://docs.microsoft.com/en-us/microsoft-store/distribute-apps-from-your-private-store

  Enable the users in the MKG department to use App1.

  The private store is a feature in Microsoft Store for Business and Education that organizations receive during the signup process. When admins add apps to the private store, all employees in the organization can view and download the apps.

  Your private store is available as a tab in Microsoft Store app, and is usually named for your company or organization. Only apps with online licenses can be added to the private store.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-store/distribute-apps-from-your-private-store

• Question 10:

  What should you upgrade before you can configure the environment to support co- management?

  A. the domain functional level

  B. Configuration Manager

  C. the domain controllers

  D. Windows Server Update Services (WSUS)

  Correct Answer: B

  https://docs.microsoft.com/en-us/sccm/comanage/tutorial-co-manage-clients