Microsoft Microsoft Certifications MD-102 Questions & Answers

• Question 41:

  You have an Azure AD tenant named contoso.com.

  You need to ensure that users are not added automatically to the local Administrators group when they join their Windows 11 device to contoso.com.

  What should you configure?

  A. Windows Autopilot

  B. provisioning packages for Windows

  C. Security defaults in Azure AD

  D. Device settings in Azure AD

  Correct Answer: A

  Manage regular users

  By default, Microsoft Entra ID adds the user performing the Microsoft Entra join to the administrator group on the device. If you want to prevent regular users from becoming local administrators, you have the following options:

  *-> Windows Autopilot - Windows Autopilot provides you with an option to prevent primary user performing the join from becoming a local administrator by creating an Autopilot profile.

  * Bulk enrollment - a Microsoft Entra join that is performed in the context of a bulk enrollment happens in the context of an autocreated user. Users signing in after a device has been joined aren't added to the administrators group.

  Reference: https://learn.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin

• Question 42:

  You have an Azure AD tenant named contoso.com.

  You plan to use Windows Autopilot to configure the Windows 10 devices shown in the following table.

  

  Which devices can be configured by using Windows Autopilot self-deploying mode?

  A. Device2 only

  B. Device3 only

  C. Device1 and Device3 only

  D. Device1, Device2, and Device3

  Correct Answer: B

  Self-deploying mode uses a device's TPM 2.0 hardware to authenticate the device into an organization's Azure AD tenant. Therefore, devices without TPM 2.0 can't be used with this mode.

  Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/self-deploying

• Question 43:

  You have a Microsoft 365 Business Standard subscription and 100 Windows 10 Pro devices.

  You purchase a Microsoft 365 E5 subscription.

  You need to upgrade the Windows 10 Pro devices to Windows 10 Enterprise. The solution must minimize administrative effort.

  Which upgrade method should you use?

  A. Windows Autopilot

  B. a Microsoft Deployment Toolkit (MDT) lite-touch deployment

  C. Subscription Activation

  D. an in-place upgrade by using Windows installation media

  Correct Answer: C

  Windows 10/11 Subscription Activation Windows 10 Pro supports the Subscription Activation feature, enabling users to “step-up” from Windows 10 Pro or Windows 11 Pro to Windows 10 Enterprise or Windows 11 Enterprise, respectively, if they are subscribed to Windows 10/11 Enterprise E3 or E5.

  Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation

• Question 44:

  You have the Windows 10 devices shown in the following table.

  

  You plan to upgrade the devices to Windows 11 Enterprise.

  On which devices can you perform a direct in-place upgrade to Windows 11 Enterprise?

  A. Device3 only

  B. Device3 and Device 4 only

  C. Device2, Device3, and Device4 only

  D. Device1, Device3, and Device4 only

  E. Device1, Device2, Device3, and Device4 only

  Correct Answer: B

• Question 45:

  Your company has a Remote Desktop Gateway (RD Gateway).

  You have a server named Server1 that is accessible by using Remote Desktop Services (RDS) through the RD Gateway.

  You need to configure a Remote Desktop connection to connect through the gateway.

  Which setting should you configure?

  A. Connect from anywhere

  B. Server authentication

  C. Connection settings

  D. Local devices and resources

  Correct Answer: A

  Reference: https://rublon.com/blog/how-to-set-up-remote-desktop-gateway/

• Question 46:

  You have a Microsoft Deployment Toolkit (MDT) deployment share.

  You plan to deploy Windows 11 by using the Standard Client Task Sequence template.

  You need to modify the task sequence to perform the following actions:

  1.

  Format disks to support Unified Extensible Firmware Interface (UEFI).

  2.

  Create a recovery partition.

  Which phase of the task sequence should you modify?

  A. Preinstall

  B. PostInstall

  C. Install

  D. Initialization

  Correct Answer: A

  Create Extra Partition in MDT

  We will create a new task sequence for a machine that doesn't have an extra partition.

  1.

  On the Select Template page, click the drop-down and select Standard Client Task Sequence. Complete the remaining steps.

  2.

  Edit the task sequence and click the New Computer only step. Within that step, click Format and Partition Disk(BIOS) step and edit it.

  Etc.

  Reference:

  https://www.prajwaldesai.com/create-extra-partition-in-mdt/

• Question 47:

  You have the Microsoft Deployment Toolkit (MDT) installed. You install and customize Windows 11 on a reference computer.

  You need to capture an image of the reference computer and ensure that the image can be deployed to multiple computers.

  Which command should you run before you capture the image?

  A. dism

  B. wpeinit

  C. sysprep

  D. bcdedit

  Correct Answer: C

  Sysprep (System Preparation) prepares a Windows client or Windows Server installation for imaging. Sysprep can remove PC-specific information from a Windows installation (generalizing) so it can be installed on different PCs.

  Reference: https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/sysprep--system-preparation--overview

• Question 48:

  Your network contains an on-premises Active Directory domain. The domain contains two computers named Computer1 and Computer2 that run Windows 10.

  You install Windows Admin Center on Computer1.

  You need to manage Computer2 from Computer1 by using Windows Admin Center.

  What should you do on Computer2?

  A. Update the TrustedHosts list.

  B. Run the Enable-PSRemoting cmdlet.

  C. Allow Windows Remote Management (WinRM) through the Microsoft Defender firewall.

  D. Add an inbound Microsoft Defender Firewall rule.

  Correct Answer: C

  Windows Admin Center uses WinRM for remote management, so allowing WinRM through the firewall is a crucial step in enabling this functionality

  Reference: https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/manage-vm https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/understand/what-is

• Question 49:

  You have a Microsoft 365 tenant that contains the objects shown in the following table.

  

  In the Microsoft Intune admin center, you are creating a Microsoft 365 Apps app named App1.

  To which objects can you assign App1?

  A. Group3 and Group4 only

  B. Admin1, Group3, and Group4 only

  C. Group1, Group3, and Group4 only

  D. Group1, Group2, Group3, and Group4 only

  E. Admin1, Group1, Group2, Group3, and Group4

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/mem/intune/fundamentals/groups-add

• Question 50:

  You have a Microsoft 365 subscription that includes Microsoft Intune.

  You have 500 corporate-owned Android devices enrolled as fully managed devices.

  You need to prepare an app named App1 for deployment to the devices.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. From the Intune Company Portal, download App1.

  B. Sync App1 with Intune.

  C. From the Managed Google Play Store, approve App1.

  D. Create an OEMConfig profile.

  Correct Answer: BC

  C: Add a Managed Google Play store app in the Managed Google Play console (Alternative)

  If you prefer to synchronize a Managed Google Play app with Intune rather than adding it directly using Intune, use the following steps.

  1.

  Go to the Managed Google Play store. Sign in with the same account you used to configure the connection between Intune and Android Enterprise.

  2.

  Search the store and select the app you want to assign by using Intune.

  3.

  On the page that displays the app, click Approve.

  In the following example, the Microsoft Excel app has been chosen.

  A window for the app opens asking you to give permissions for the app to perform various operations.

  4.

  Select Approve to accept the app permissions and continue.

  5.

  Select an option for handling new app permission requests, and then select Save.

  (B) The app is approved, and it is displayed in your IT admin console. Next, you can Sync a Managed Google Play app with Intune.

  Reference:

  https://learn.microsoft.com/en-us/mem/intune/apps/apps-add-android-for-work