Microsoft Microsoft Certifications MD-102 Questions & Answers

• Question 111:

  You have a Microsoft 365 subscription that contains a user named User1. User1 is assigned a Windows 10/11 Enterprise E3 license.

  You use Microsoft Intune Suite to manage devices.

  User1 activates the following devices:

  1.

  Device1: Windows 11 Enterprise

  2.

  Device2: Windows 10 Enterprise

  3.

  Device3: Windows 11 Enterprise How many more devices can User1 activate?

  A. 2

  B. 3

  C. 7

  D. 8

  Correct Answer: A

  When you purchase Windows 10/11 Enterprise E3 via a partner, you get the following benefits:

  *

  Deploy on up to five devices. For each user covered by the license, you can deploy Windows 10 Enterprise edition on up to five devices.

  *

  Etc.

  Reference: https://learn.microsoft.com/en-us/windows/deployment/windows-10-enterprise-e3-overview

• Question 112:

  You have a Microsoft Deployment Toolkit (MDT) deployment share.

  From the Deployment Workbench, you open the New Task Sequence Wizard and select the Standard Client Upgrade Task Sequence task sequence template.

  You discover that there are no operating system images listed on the Select OS page as shown in the following exhibit.

  

  You need to be able to select an operating system image to perform a Windows 11 in-place upgrade. What should you do?

  A. Enable monitoring for the deployment share.

  B. Import a full set of source files.

  C. Import a custom image file.

  D. Run the Update Deployment Share Wizard.

  Correct Answer: B

  Importing a full set of source files into the Deployment Workbench is necessary to have an operating system image available for the in-place upgrade task sequence.

  The in-place upgrade task sequence requires access to the Windows 11 source files to perform the upgrade.

  Options A, C, and D are not directly related to the availability of operating system images in the task sequence. Enabling monitoring (Option A) is for tracking deployment progress, importing a custom image file (Option C) is for using a custom

  image (not needed for an in-place upgrade), and running the Update Deployment Share Wizard (Option D) is for updating the deployment share but doesn't specifically address the lack of operating system images.

• Question 113:

  You use the Microsoft Deployment Toolkit (MDT) to deploy Windows 11.

  You create a new task sequence by using the Standard Client Task Sequence template to deploy Windows 11 Enterprise to new computers. The computers have a single hard disk.

  You need to modify the task sequence to create a system volume and a data volume.

  Which phase should you modify in the task sequence?

  A. Initialization

  B. State Restore

  C. Preinstall

  D. Postinstall

  Correct Answer: C

  Reference: https://www.prajwaldesai.com/create-extra-partition-in-mdt/

• Question 114:

  You have a Hyper-V host that contains the virtual machines shown in the following table.

  

  On which virtual machines can you install Windows 11?

  A. VM1 only

  B. VM3 only

  C. VM1 and VM2 only

  D. VM2 and VM3 only

  E. VM1, VM2, and VM3

  Correct Answer: B

  Windows 11 VM Hyper-V Requirments

  Generation 2 VM.

  UEFI (System Firmware)

  Secure Boot Enabled (Secure Boot can only be enabled with UEFI)

  TPM 2.0 Enabled.

  1 (GHz) or faster CPU with 2 or more cores.

  4GM Memory or more.

  64GB or more of disk space.

  Reference:

  https://activedirectorypro.com/install-windows-11-vm-hyper-v/

• Question 115:

  Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 11. You need to enable the Windows Remote Management (WinRM) service on Computer1 and perform the following configurations:

  1.

  For the WinRM service, set Startup type to Automatic.

  2.

  Create a listener that accepts requests from any IP address.

  3.

  Enable a firewall exception for WS-Management communications. Which PowerShell cmdlet should you use?

  A. Connect-WSMan

  B. Enable-PSRemoting

  C. Invoke-WSManAction

  D. Enable-PSSessionConfiguration

  Correct Answer: B

  The Enable-PSRemoting cmdlet configures the computer to receive PowerShell remote commands that are sent by using the WS-Management technology. WS-Management based PowerShell remoting is currently supported only on Windows platform.

  The Enable-PSRemoting cmdlet performs the following operations:

  *

  Runs the Set-WSManQuickConfig cmdlet, which performs the following tasks:

  Starts the WinRM service.

  Sets the startup type on the WinRM service to Automatic.

  Creates a listener to accept requests on any IP address.

  Enables a firewall exception for WS-Management communications.

  Creates the simple and long name session endpoint configurations if needed.

  Enables all session configurations.

  Changes the security descriptor of all session configurations to allow remote access.

  *

  Restarts the WinRM service to make the preceding changes effective.

  Reference:

  https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/enable-psremoting

• Question 116:

  You are replacing 100 company-owned Windows devices.

  You need to use the Microsoft Deployment Toolkit (MDT) to securely wipe and decommission the devices. The solution must meet the following requirements:

  1.

  Back up the user state.

  2.

  Minimize administrative effort.

  Which task sequence template should you use?

  A. Standard Client Task Sequence

  B. Standard Client Replace Task Sequence

  C. Litetouch OEM Task Sequence

  D. Sysprep and Capture

  Correct Answer: B

  Standard Client Replace task sequence. Used to run User State Migration Tool (USMT) backup and the optional full Windows Imaging (WIM) backup action. Can also be used to do a secure wipe of a machine that is going to be decommissioned.

  Reference: https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit

• Question 117:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has an Azure AD tenant named contoso.com that contains several Windows 10 devices.

  When you join new Windows 10 devices to contoso.com, users are prompted to set up a four-digit pin.

  You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 10 devices to contoso.com.

  Solution: From the Microsoft Entra admin center, you configure automatic mobile device management (MDM) enrollment. From the Microsoft Intune admin center, you create and assign a device restrictions profile.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 118:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has an Azure AD tenant named contoso.com that contains several Windows 10 devices.

  When you join new Windows 10 devices to contoso.com, users are prompted to set up a four-digit pin.

  You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 10 devices to contoso.com.

  Solution: From the Microsoft Entra admin center, you configure automatic mobile device management (MDM) enrollment. From the Microsoft Intune admin center, you configure the Windows Hello for Business enrollment options.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Hello for Business is an alternative sign-in method that uses Active Directory or an Azure Active Directory account to replace a password, smart card, or a virtual smart card. It lets you use a user gesture to sign in, instead of a password. A

  user gesture might be a PIN, biometric authentication such as Windows Hello, or an external device such as a fingerprint reader.

  Intune integrates with Hello for Business in two ways:

  An Intune policy can be created under Device enrollment. This policy targets the entire organization (tenant-wide). It supports the Windows AutoPilot out-of-box-experience (OOBE) and is applied when a device enrolls.

  An identity protection profile can be created under Device configuration. This profile targets assigned users and devices, and is applied during check-in.

  Reference:

  https://docs.microsoft.com/en-us/intune/protect/windows-hello

• Question 119:

  Your network contains an Active Directory domain named contoso.com. The domain contains two computers named Computer1 and Computer2 that run Windows 10.

  On Computer1, you need to run the Invoke-Command cmdlet to execute several PowerShell commands on Computer2.

  What should you do first?

  A. On Computer2, run the Enable-PSRemoting cmdlet.

  B. On Computer2, add Computer1 to the Remote Management Users group.

  C. From Active Directory, configure the Trusted for Delegation setting for the computer account of Computer2.

  D. On Computer1, run the New-PSSession cmdlet.

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/enable-psremoting

• Question 120:

  You have an Azure AD tenant that contains the devices shown in the following table.

  

  Which devices can be activated by using subscription activation?

  A. Device1 only

  B. Device1 and Device2 only

  C. Device1 and Device3 only

  D. Device1, Device2, Device3, and Device4

  Correct Answer: C

  Windows subscription activation The subscription activation feature enables you to "step-up" from Windows Pro edition to Enterprise or Education editions. You can use this feature if you're subscribed to Windows Enterprise E3 or E5 licenses. Subscription activation also supports step-up from Windows Pro Education edition to Education edition.

  Devices must be Azure AD-joined or hybrid Azure AD joined. Workgroup-joined or Azure AD registered devices aren't supported.

  Reference: https://learn.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation