Microsoft Microsoft Certifications MD-102 Questions & Answers

• Question 161:

  You need to meet the technical requirements for the iOS devices. Which object should you create in Intune?

  A. a deployment profile

  B. an app protection policy

  C. a device configuration profile

  D. a compliance policy

  Correct Answer: C

  Scenario: Technical requirements include: Block iOS devices from sending diagnostic and usage telemetry data.

  Create a device configuration profile.

  Note: Intune includes device restriction policies that help administrators control Android, iOS, macOS, and Windows devices. These restrictions let you control a wide range of settings and features to protect your organization's resources. For example, administrators can:

  Allow or block the device camera Control access to Google Play, app stores, viewing documents, and gaming Block built-in apps, or create a list of apps that allowed or prohibited Allow or prevent backing up files to cloud and storage accounts Set a minimum password length, and block simple passwords

  Reference: https://docs.microsoft.com/en-us/intune/device-restrictions-configure

• Question 162:

  You need to prepare for the deployment of the Phoenix office computers. What should you do first?

  A. Generalize the computers and configure the Device settings from the Microsoft Entra admin center.

  B. Extract the serial number of each computer to an XML file and upload the file from the Microsoft Intune admin center.

  C. Extract the hardware ID information of each computer to a CSV file and upload the file from the Microsoft Intune admin center.

  D. Generalize the computers and configure the Mobility (MDM and MAM) settings from the Microsoft Entra admin center.

  E. Extract the serial number information of each computer to a CSV file and upload the file from the Microsoft Intune admin center.

  Correct Answer: C

  To manage devices through Microsoft Store for Business and Education, you'll need a .csv file that contains specific information about the devices. You should be able to get this from your Microsoft account contact, or the store where you purchased the devices. Upload the .csv file to Microsoft Store to add the devices.

  Note:

  Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro preinstalled and were purchased already.

  Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows Autopilot.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-store/add-profile-to-devices

• Question 163:

  Which devices are registered by using the Windows Autopilot deployment service?

  A. Device1 only

  B. Device3 only

  C. Device1 and Device3 only

  D. Device1, Device2, and Device3

  Correct Answer: A

• Question 164:

  Which user can enroll Device6 in Intune?

  A. User4 and User1 only

  B. User4 and User2 only

  C. User4, User1, and User2 only

  D. User1, User2, User3, and User4

  Correct Answer: D

  All the users can enroll devices to Intune.

• Question 165:

  You need to ensure that computer objects can be created as part of the Windows Autopilot deployment. The solution must meet the technical requirements. To what should you grant the right to create the computer objects?

  A. Server1

  B. DC1

  C. GroupA

  D. Server2

  Correct Answer: A

  The Intune connector for Active Directory is installed on Server1. Contoso must meet the following technical requirements:

  1.

  Users in GroupA must be able to deploy new computers.

  2.

  Administrative effort must be minimized.

  Note: To be clear, the entire domain join process will work without any direct connection to the on-premise network and domain controllers. The computer object is created on-premises through the Intune Connector for Active Directory triggered by the Windows Autopilot and Intune.

  Reference: https://blog.matrixpost.net/set-up-windows-autopilot-production-environment-part-2/

• Question 166:

  You implement Boundary1 based on the planned changes.

  Which devices have a network boundary of 192.168.1.0/24 applied?

  A. Device2 only

  B. Device3 only

  C. Device1, Device2, and Device5 only

  D. Device1, Device2, Device3, and Device4 only

  Correct Answer: D

  Both Personal and Corporate devices can be enrolled to Intune, the network boundary can be assigned to enrolled Windows 10/11 devices. https://learn.microsoft.com/en-us/mem/intune/configuration/network-boundary-windows

  The Boundary is assigned to Group 1 and 2, Devices 1,2,3 and 4 have membership to these groups. Device 5 is not part of the membership for Group 1 and 2 so doesnt receive the policy.

• Question 167:

  HOTSPOT

  You have a Microsoft 365 subscription.

  You use Microsoft Intune Suite to manage devices.

  You have the iOS app protection policy shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 168:

  HOTSPOT

  You have an Azure AD tenant named contoso.com that contains the devices shown in the following table.

  

  All devices contain an app named App1 and are enrolled in Microsoft Intune.

  You need to prevent users from copying data from App1 and pasting the data into other apps.

  Which type of policy and how many policies should you create in Intune? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 169:

  HOTSPOT

  All users have Microsoft 365 apps deployed.

  You need to configure Microsoft 365 apps to meet the following requirements:

  1.

  Enable the automatic installation of WebView2 Runtime.

  2.

  Prevent users from submitting feedback.

  Which two settings should you configure in the Microsoft 365 Apps admin center? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 170:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You create a new update rings policy named Policy1 as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: