Microsoft Microsoft Certifications MD-102 Questions & Answers

• Question 201:

  HOTSPOT

  You use Microsoft Intune to manage Windows 10 devices.

  You are designing a reporting solution that will provide reports on the following:

  1.

  Compliance policy trends

  2.

  Trends in device and user enrollment

  3.

  App and operating system version breakdowns of mobile devices

  You need to recommend a data source and a data visualization tool for the design.

  What should you recommend? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  https://learn.microsoft.com/en-us/mem/intune/developer/reports-nav-create-intune-reports https://learn.microsoft.com/en-us/mem/intune/developer/reports-proc-get-a-link-powerbi

• Question 202:

  HOTSPOT

  You have two computers that run Windows 10. The computers are enrolled in Microsoft Intune as shown in the following table.

  

  

  Windows 10 update rings are defined in Intune as shown in the following table.

  You assign the update rings as shown in the following table.

  

  What is the effect of the configurations on Computer1 and Computer2? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  Correct Answer:

  

• Question 203:

  HOTSPOT

  You have 200 computers that run Windows 10. The computers are joined to Azure AD and enrolled in Microsoft Intune.

  You need to configure an Intune device configuration profile to meet the following requirements:

  1.

  Prevent Microsoft Office applications from launching child processes.

  2.

  Block users from transferring files over FTP.

  Which two settings should you configure in the Endpoint protection configuration profile? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 204:

  HOTSPOT

  You have a Microsoft 365 subscription that uses Microsoft Intune and contains the users shown in the following table.

  

  You create a policy set named Set1 as shown in the exhibit. (Click the Exhibit tab.)

  

  You enroll devices in Intune as shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 205:

  HOTSPOT

  You have a Microsoft 365 subscription that contains 1,000 iOS devices. The devices are enrolled in Microsoft Intune as follows:

  1.

  Two hundred devices are enrolled by using the Intune Company Portal.

  2.

  Eight hundred devices are enrolled by using Apple Automated Device Enrollment (ADE).

  You create an iOS/iPadOS software updates policy named Policy1 that is configured to install iOS/iPadOS 15.5.

  How many iOS devices will Policy1 update, and what should you configure to ensure that only iOS/iPadOS 15.5 is installed? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 206:

  HOTSPOT

  You have three computers that run Windows 10 as shown in the following table.

  

  All the computers have C and D volumes. The Require additional authentication at startup Group Policy settings is disabled on all the computers. Which volumes can you encrypt by using BitLocker Drive Encryption (BitLocker)? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://www.windowscentral.com/how-use-bitlocker-encryption-windows-10

• Question 207:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You create an app protection policy for Android device named Policy1 as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Install the Company Portal app on the device

  On Android, Android devices will prompt to install the Intune Company Portal app regardless of which Device Management type is chosen. For example, if you select 'Android Enterprise' then users with unmanaged Android devices will still be

  prompted.

  Box 2: device only

  App protection policies can apply to apps running on devices that may or may not be managed by Intune.

  Important

  It can take time for app protection policies to apply to existing devices. End users will see a notification on the device when the app protection policy is applied. Apply your app protection policies to devices before applying condidtional access

  rules.

  Reference:

  https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policies#app-protection-policies-for-iosipados-and-android-apps

• Question 208:

  HOTSPOT

  Your network contains an on-premises Active Directory domain named contoso.com that syncs to Azure AD.

  A user named User1 uses the domain-joined devices shown in the following table.

  

  In the Microsoft Entra admin center, you assign a Windows 11 Enterprise E5 license to User1.

  You need to identify what will occur when User1 next signs in to the devices.

  What should you identify for each device? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Will perform an in-place upgrade to Windows 11 Enterprise Windows 10 Pro

  Box 2: Will activate as Windows 11 Enterprise Windows 11 Pro

  Windows 10 Pro supports the Subscription Activation feature, enabling users to “step-up” from Windows 10 Pro or Windows 11 Pro to Windows 10 Enterprise or Windows 11 Enterprise, respectively, if they are subscribed to Windows 10/11 Enterprise E3 or E5.

  With Windows 10, version 1903 and later, the Subscription Activation feature also supports the ability to step-up from Windows 10 Pro Education or Windows 11 Pro Education to the Enterprise grade editions for educational institutions— Windows 10 Education or Windows 11 Education.

  Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation

• Question 209:

  HOTSPOT

  You have a Microsoft Deployment Toolkit (MDT) deployment share named Share1.

  You add Windows 10 images to Share1 as shown in the following table.

  

  Which images can be used in the Standard Client Task Sequence, and which images can be used in the Standard Client Upgrade Task Sequence? NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Image1, Image2, Image3, Image4, and Image5.

  All images.

  Standard Client Task Sequence

  Standard Client task sequence. The most frequently used task sequence. Used for creating reference images and for deploying clients in production.

  Box 2: Image1, Image2, Image3, and Image4 only.

  Exclude image5 with applications.

  Standard Client Upgrade Task Sequence

  Standard Client Upgrade task sequence. A simple task sequence template used to perform an in-place upgrade from Windows 7, Windows 8, or Windows 8.1 directly to Windows 10, automatically preserving existing data, settings,

  applications, and drivers.

  Reference:

  https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit

• Question 210:

  HOTSPOT

  You have a hybrid Azure AD tenant.

  You configure a Windows Autopilot deployment profile as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: import a CSV file into Windows Autopilot

  You can perform Windows Autopilot device registration within your organization by manually collecting the hardware identity of devices (hardware hashes) and uploading this information in a comma-separated-values (CSV) file.

  Box 2: joined to Azure AD only

  As per exhibit (Azure AD joined).

  Reference:

  https://docs.microsoft.com/en-us/mem/autopilot/add-devices

  https://docs.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-join-hybrid