Microsoft Microsoft Certifications MD-102 Questions & Answers

• Question 241:

  HOTSPOT

  You have an Azure AD tenant that contains the following:

  1.

  Windows 11 devices that are joined to Azure AD

  2.

  A user that has a display name of User1 and a UPN of [email protected]

  You enable Remote Desktop on the Windows 11 devices.

  You need to ensure that User1 can use Remote Desktop to connect to the devices.

  How should you complete the command that must be run on each device? To answer, select the appropriate options in the answer area

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: "Remote Desktop Users"

  Connect to remote Azure Active Directory joined device Add users to Remote Desktop Users group Remote Desktop Users group is used to grant users and groups permissions to remotely connect to the device. Users can be added either manually or through MDM policies:

  Adding users manually:

  You can specify individual Azure AD accounts for remote connections by running the following command, where is the UPN of the user, for example [email protected]:

  net localgroup "Remote Desktop Users" /add "AzureAD\"

  Box 2: AzureAD\[email protected]

  Reference:

  https://learn.microsoft.com/en-us/windows/client-management/client-tools/connect-to-remote-aadj-pc

• Question 242:

  HOTSPOT

  You have a Microsoft 365 subscription that contains the devices shown in the following table.

  

  All the devices will be reimaged and licensed by using subscription activation. The devices are assigned to the users shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  Device1 has 14 GB RAM, 256 GB storage, and TPM version 1.2.

  TPM 2.0 is required to run Windows 11, as an important building block for security-related features. TPM 2.0 is used in Windows 11 for a number of features, including Windows Hello for identity protection and BitLocker for data protection.

  Note: Since July 28, 2016, all new device models, lines, or series (or if you're updating the hardware configuration of an existing model, line, or series with a major update, such as CPU, graphic cards) must implement and enable by default

  TPM 2.0 (details in section 3.7 of the Minimum hardware requirements page). The requirement to enable TPM 2.0 only applies to the manufacturing of new devices.

  Box 2: No

  Device2 has 4 GB RAM, 64 GB storage, and TPM version 2.0. This is fine.

  At least 4 GB is required.

  At least 64 GB storage is required.

  Device2 is assigned to User2.

  There is a Microsoft 365 E3 license for this assignment.

  Microsoft 365 E3 is for Windows 11 Pro.

  Box 3: Yes

  Device3 meets the Windows 11 requirements.

  There is no Windows 11 license for Device3.

  Reference:

  https://www.microsoft.com/en-us/windows/windows-11-specifications

  https://learn.microsoft.com/en-us/windows/security/hardware-security/tpm/tpm-recommendations

• Question 243:

  HOTSPOT

  You have a Microsoft 365 subscription. The subscription contains 1,000 computers that run Windows 11 and are enrolled in Microsoft Intune.

  You plan to create a compliance policy that has the following options enabled:

  1.

  Require Secure Boot to be enabled on the device.

  2.

  Require the device to be at or under the machine risk score.

  Which two Compliance settings should you configure? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Device health https://learn.microsoft.com/en-us/mem/intune/enrollment/windows-enrollment-status Microsoft Defender for Endpoint https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-create-windows#microsoft-defender-for-endpoint

• Question 244:

  HOTSPOT

  You need to recommend a solution to meet the device management requirements.

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 245:

  HOTSPOT

  You need to meet the technical requirements for Windows AutoPilot.

  Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References:

  https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows- autopilot-reset

• Question 246:

  HOTSPOT

  You need to resolve the performance issues in the Los Angeles office.

  How should you configure the update settings? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 247:

  HOTSPOT

  You need to meet the OOBE requirements for Windows AutoPilot.

  Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 248:

  HOTSPOT

  You need a new conditional access policy that has an assignment for Office 365 Exchange Online.

  You need to configure the policy to meet the technical requirements for Group4.

  Which two settings should you configure in the policy? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/conditions https://docs.microsoft.com/en-us/intune/device-compliance-get-started

• Question 249:

  HOTSPOT

  Your company has computers that run Windows 10 and are Microsoft Azure Active Directory (Azure AD)-joined.

  The company purchases an Azure subscription.

  You need to collect Windows events from the Windows 10 computers in Azure. The solution must enable you to create alerts based on the collected events.

  What should you create in Azure and what should you configure on the computers? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 250:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the devices shown in the following table.

  

  Contoso.com contains the Azure Active Directory groups shown in the following table.

  

  You add a Windows Autopilot deployment profile. The profile is configured as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: