Microsoft Microsoft Certifications MD-102 Questions & Answers

• Question 281:

  DRAG DROP

  Your network contains an Active Directory domain.

  You install the Microsoft Deployment Toolkit (MDT) on a server.

  You have a custom image of Windows 11.

  You need to deploy the image to 100 devices by using MDT.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Step 1: Create a deployment share.

  Set up the MDT production deployment share.

  Step 2: Add the Windows 11 image.

  Add a custom image.

  The next step is to add a reference image into the deployment share with the setup files required to successfully deploy Windows 11.

  Step 3: Create a task sequence.

  Create the deployment task sequence.

  Reference:

  https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt

• Question 282:

  DRAG DROP

  You have an on-premises Active Directory domain that syncs to Azure AD tenant.

  The tenant contains computers that run Windows 10. The computers are hybrid Azure AD joined and enrolled in Microsoft Intune.

  The Microsoft Office settings on the computers are configured by using a Group Policy Object (GPO).

  You need to migrate the GPO to Intune.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Step 1: Create a configuration profile

  Create the template

  1) Sign in to the Microsoft Endpoint Manager admin center.

  2) Select Devices > Configuration profiles > Create profile.

  3) Etc.

  Step 2: Configure the Administrative Template settings.

  Find some settings. There are thousands of settings available in these templates.

  Step 3: Assign the profile.

  The template is created, but may not be doing anything yet. Be sure to assign the template (also called a profile) and monitor its status.

  Reference:

  https://docs.microsoft.com/en-us/mem/intune/configuration/administrative-templates-windows

• Question 283:

  DRAG DROP

  Your company has a Microsoft 365 E5 tenant.

  All the devices of the company are enrolled in Microsoft Intune.

  You need to create advanced reports by using custom queries and visualizations from raw Microsoft Intune data.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Step 1: Purchase an Azure subscription.

  Complex reporting functionality require an Azure subscription.

  Step 2: Create a Log Analytics workspace.

  Each Azure resource requires its own diagnostic setting. The diagnostic setting defines the following for a resource:

  *

  One or more destinations to send the logs. Current destinations include Log Analytics workspace, Event Hubs, and Azure Storage.

  *

  Categories of logs and metric data sent to the destinations defined in the setting. The available categories will vary for different resource types.

  *

  Retention policy for data stored in Azure Storage.

  Step 3: Add diagnostic settings.

  You can create and view custom reports using the following steps:

  1.

  Sign in to the Microsoft Endpoint Manager admin center.

  2.

  Select Reports > Diagnostic settings add a diagnostic setting.

  3.

  Etc.

  Reference: https://docs.microsoft.com/en-us/mem/intune/fundamentals/reports

• Question 284:

  DRAG DROP

  You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint.

  You plan to onboard the following types of devices to Defender for Endpoint:

  1.

  macOS

  2.

  Linux Server

  What should you use to onboard each device? To answer, drag the appropriate tools to the correct device types. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Microsoft Intune

  For macOS you can use the following methods:

  Local script

  Microsoft Intune

  JAMF Pro

  Mobile Device Management

  Box 2: Ansible

  You can deploy Microsoft Defender for Endpoint on Linux with Ansible.

  Reference:

  https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/switch-to-mde-phase-3

  https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-install-with-ansible

• Question 285:

  DRAG DROP

  You have a Microsoft 365 subscription that contains the devices shown in the following table.

  

  You need to configure the Microsoft Edge settings for each device.

  What should you use? To answer, drag the appropriate Intune features to the correct devices. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Device configuration profile Windows 10

  Configure Microsoft Edge policy settings with Microsoft Intune You can configure Microsoft Edge policies and settings by adding a device configuration profile to Microsoft Intune. Using Intune to manage and enforce policies is equivalent to using Active Directory Group Policy or configuring local Group Policy Object (GPO) settings on user devices.

  Box 2: App configuration policy Android Enterprise

  App configuration policies for Microsoft Intune App configuration policies can help you eliminate app setup problems by letting you assign configuration settings to a policy that is assigned to end-users before they run the app. The settings are then supplied automatically when the app is configured on the end-users device, and end-users don't need to take action. The configuration settings are unique for each app.

  You can create and use app configuration policies to provide configuration settings for both iOS/iPadOS or Android apps. These configuration settings allow an app to be customized by using app configuration and management. The configuration policy settings are used when the app checks for these settings, typically the first time the app is run.

  Box 3: App configuration policy iOS

  Reference: https://learn.microsoft.com/en-us/deployedge/configure-edge-with-intune https://learn.microsoft.com/en-us/mem/intune/apps/manage-microsoft-edge https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-overview

• Question 286:

  DRAG DROP

  You have a Microsoft Deployment Toolkit (MDT) deployment share that has a path of D:\MDTShare.

  You need to add a feature pack to the boot image.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Step 1: Copy the feature pack to D:\MDTShare\Tools\x86

  Add a feature pack, DaRT 10 (part of MDOP 2015), to the boot images.

  1.

  Copy the CAB files to the deployment share: MDTShare\Tools\x86

  2.

  In the Deployment Workbench, right-click the MDTShare deployment share and select Properties.

  Step 2: Modify the Windows PE properties of the deployment share

  3.

  On the Windows PE tab, in the Platform drop-down list, make sure x86 is selected.

  4.

  On the Features sub tab, select the Microsoft Diagnostics and Recovery Toolkit (DaRT) checkbox.

  Etc.

  Step 3: Update the deployment share

  Like the MDT Build Lab deployment share, the MDT Production deployment share needs to be updated after it has been configured. This is the process during which the Windows PE boot images are created.

  Reference:

  https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt

• Question 287:

  DRAG DROP

  You need to meet the technical requirements for the LEG department computers.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

• Question 288:

  DRAG DROP

  Your on-premises network contains an Active Directory Domain Services (AD DS) domain.

  You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains five virtual machines and is NOT connected to the on-premises network.

  You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

  You purchase Windows 365 Enterprise licenses.

  You need to deploy Cloud PC. The solution must meet the following requirements:

  All users must be able to access their Cloud PC at any time without any restrictions.

  The users must be able to connect to the virtual machines on VNet1.

  How should you configure the provisioning policy for Windows 365? To answer, drag the appropriate options to the correct settings. Each option may be used once, more than once, or not at all. You may need to drag the split bar between

  panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer: