Microsoft Microsoft Certifications MD-102 Questions & Answers

• Question 11:

  What should you use to meet the technical requirements for Azure DevOps?

  A. An app protection policy

  B. Windows Information Protection (WIP)

  C. Conditional access

  D. A device configuration profile

  Correct Answer: C

  https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/manage- conditional-access?view=azure-devops

• Question 12:

  You need to capture the required information for the sales department computers to meet the technical

  requirements.

  Which Windows PowerShell command should you run first?

  A. Install-Module WindowsAutoPilotIntune

  B. Install-Script Get-WindowsAutoPilotInfo

  C. Import-AutoPilotCSV

  D. Get-WindowsAutoPilotInfo

  Correct Answer: B

  References:

  https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/existing-devices "This topic describes how to convert Windows 7 or Windows 8.1 domain-joined computers to Windows 10 devices joined to either Azure Active

  Directory or Active Directory (Hybrid Azure AD Join) by using Windows Autopilot"

• Question 13:

  You need to meet the device management requirements for the developers. What should you implement?

  A. folder redirection

  B. Enterprise State Roaming

  C. home folders

  D. known folder redirection in Microsoft OneDrive

  Correct Answer: B

  Litware identifies the following device management requirements:

  Ensure that Microsoft Edge Favorites are accessible from all computers to which the developers sign in.

  Enterprise State Roaming allows for the synchronization of Microsoft Edge browser setting, including favorites and reading list, across devices.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/devices/enterprise-state-roaming- windows-settings-reference

• Question 14:

  Your network contains an Active Directory domain named contoso.com. The domain contains 25 computers that run Windows 11.

  You have a Microsoft 365 subscription

  You have an Azure AD tenant that syncs with contoso.com.

  You configure hybrid Azure AD join and discover that some of the computers have a registered state of Pending.

  You need to ensure that the computers complete the join successfully.

  What should you ensure?

  A. that Windows is activated on all the computers

  B. that the users of the computers are assigned Microsoft 365 licenses

  C. that each computer has a line of sight to a domain controller

  D. that the computers contain the latest quality updates

  Correct Answer: C

  Pending devices in Azure Active Directory

  How a device gets stuck in a pending state:

  There are two scenarios in which a device can be stuck in a pending state.

  Sync a new on-premises domain joined device to Azure AD

  A new on-premises device can get stuck in a pending state if it can't complete the device registration process. This problem can be caused by several factors, such as that the *device can't connect to the registration service*.

  To troubleshoot a device registration problem, see:

  Troubleshooting hybrid Azure Active Directory joined devices

  *-> Test Device Registration Connectivity

  Note: Pending devices are devices that are synced to Azure Active Directory (Azure AD) from your on-premises Active Directory, but haven't completed registration with the Azure AD device registration service. When the registered state of a

  device is pending, the device can't complete any authorization or authentication requests, such as requesting a Primary Refresh token for single sign-on, or applying device-based Conditional Access policies.

  Reference:

  https://learn.microsoft.com/en-us/troubleshoot/azure/active-directory/pending-devices

• Question 15:

  You plan to deploy Windows 11 Pro to 200 new computers by using the Microsoft Deployment Toolkit (MDT) and Windows Deployment Services (WDS).

  The company has a Volume Licensing Agreement and uses a product key to activate Windows 11.

  You need to ensure that the new computers will be configured to have the correct product key during the installation.

  What should you configure?

  A. an MDT task sequence

  B. the Device settings in Azure AD

  C. a WDS boot image

  D. a Windows Autopilot deployment profile

  Correct Answer: A

  Create the deployment task sequence.

  The task sequence used to deploy your production Windows 10 reference image. You will then configure the task sequence to enable patching via a Windows Server Update Services (WSUS) server.

  This includes: Specify Product Key: Do not specify a product key at this time

  Reference:

  https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt#a-href-idsec08astep-8-deploy-the-windows-10-client-image

• Question 16:

  Your network contains an Active Directory domain. The domain contains 10 computers that run Windows 10. Users in the finance department use the computers.

  You have a computer named Computer1 that runs Windows 10.

  From Computer1, you plan to run a script that executes Windows PowerShell commands on the finance department computers.

  You need to ensure that you can run the PowerShell commands on the finance department computers from Computer.

  What should you do on the finance department computers?

  A. From Windows PowerShell, run the Enable-MMAgent cmdlet.

  B. From the local Group Policy, enable the Allow Remote Shell Access setting.

  C. From Windows PowerShell, run the Enable-PSRemoting cmdlet.

  D. From the local Group Policy, enable the Turn on Script Execution setting.

  Correct Answer: C

  https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/enable-psremoting?view=powershell-6

• Question 17:

  You have a Microsoft 365 tenant that contains the devices shown in the following table.

  

  The devices are managed by using Microsoft Intune.

  You create a compliance policy named Policy1 and assign Policy1 to Group1. Policy1 is configured to mark a device as Compliant only if the device security settings match the settings specified in the policy.

  You discover that devices that are not members of Group1 are shown as Compliant.

  You need to ensure that only devices that are assigned a compliance policy can be shown as Compliant. All other devices must be shown as Not compliant.

  What should you do from the Microsoft Intune admin center?

  A. From Device compliance, configure the Compliance policy settings.

  B. From Endpoint security, configure the Conditional access settings.

  C. From Tenant administration, modify the Diagnostic settings.

  D. From Policy1, modify the actions for noncompliance.

  Correct Answer: A

  There are two parts to compliance policies in Intune:

  Compliance policy settings - Tenant-wide settings that are like a built-in compliance policy that every device receives. Compliance policy settings set a baseline for how compliance policy works in your Intune environment, including whether devices that haven't received any device compliance policies are compliant or noncompliant.

  Device compliance policy - Platform-specific rules you configure and deploy to groups of users or devices. These rules define requirements for devices, like minimum operating systems or the use of disk encryption. Devices must meet these rules to be considered compliant.

  Reference: https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started

• Question 18:

  You have a Microsoft 365 subscription that includes Microsoft Intune.

  You plan to use Windows Autopilot to deploy Windows 11 devices.

  You need to meet the following requirements during Autopilot provisioning:

  1.

  Display the app and profile configuration progress.

  2.

  Block users from using the devices until all apps and profiles are installed What should you configure?

  A. an app configuration policy

  B. an app protection policy

  C. an enrollment device platform restriction

  D. an enrollment status page

  Correct Answer: D

  https://learn.microsoft.com/en-us/mem/intune/enrollment/windows-enrollment-status

• Question 19:

  You need to assign the same deployment profile to all the computers that are configured by using Windows Autopilot.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Create an Azure AD group that has dynamic membership rules and uses the ZTDID tag.

  B. Create an Azure AD group that has dynamic membership rules and uses the operatingSystem tag.

  C. Assign a Windows Autopilot deployment profile to a group.

  D. Join the computers to Azure AD.

  E. Create a Group Policy object (GPO) that is linked to a domain.

  F. Join the computers to an on-premises Active Directory domain.

  Correct Answer: AC

  A: ZTDId: A unique value assigned to all imported Windows AutoPilot devices.

  C: It is possibly to automatically assign a Windows AutoPilot deployment profile to Windows AutoPilot devices. That makes it a lot easier for administrators, as this prevents the administrators from potentially forgetting to assign the deployment profile to newly imported devices.

  Reference: https://www.petervanderwoude.nl/post/automatically-assign-windows-autopilot-deployment-profile-to-windows-autopilot-devices/

• Question 20:

  You have an Azure AD tenant named contoso.com.

  You plan to purchase 25 computers that run Windows 11. You plan to deliver the computers directly to users.

  You need to ensure that during the out-of-box experience (OBE), users are prompted to sign in, and then the computers are configured to use Microsoft Intune.

  Which two components should you configure? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. a provisioning package

  B. automatic enrollment

  C. an unattend.xml answer file

  D. a Windows Autopilot deployment profile for self-deploying mode

  E. a Windows Autopilot deployment profile for user-driven mode

  Correct Answer: BE

  Reference: https://learn.microsoft.com/en-us/windows/client-management/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal https://learn.microsoft.com/en-us/autopilot/user-driven