Microsoft Microsoft Certifications MD-102 Questions & Answers

• Question 51:

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  In the Microsoft 365 Apps admin center, you create a Microsoft Office customization. Which users can download the Office customization file from the admin center?

  A. Admin3 only

  B. Admin1 and Admin3 only

  C. Admin3 and Admin4 only

  D. Admin1, Admin2, and Admin3 only

  E. Admin1, Admin2, Admin3, Admin4

  Correct Answer: C

• Question 52:

  You have a Microsoft 365 E5 subscription.

  You need to download a report that lists all the devices that are NOT enrolled in Microsoft Intune and are assigned an app protection policy.

  What should you select in the Microsoft Intune admin center?

  A. Reports, and then Device compliance

  B. Apps, and then App protection policies

  C. Devices, and then Monitor

  D. Apps, and then Monitor

  Correct Answer: D

  https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policies-monitor#view-the-app-protection-status-report

• Question 53:

  You need to recommend a solution to configure the employee VPN connections. What should you include in the recommendation?

  A. Remote Access Management Console

  B. Group Policy Management Console (GPMC)

  C. Connection Manager Administration Kit (CMAK)

  D. Microsoft Intune

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-onvpn/deploy/vpn-deploy-client-vpn-connections#bkmk_ProfileXML

• Question 54:

  You have a Microsoft 365 subscription that contains 1,000 iOS devices and includes Microsoft Intune.

  You need to prevent the printing of corporate data from managed apps on the devices.

  What should you configure?

  A. an app configuration policy

  B. a security baseline

  C. an app protection policy

  D. an iOS app provisioning profile

  Correct Answer: C

  iOS app protection policy settings.

  The policy settings that are described can be configured for an app protection policy on the Settings pane in the portal when you make a new policy.

  Policy settings include:

  * Printing Org data

  Select Block to prevent the app from printing work or school data. If you leave this setting to Allow, the default value, users will be able to export and print all Org data.

  Reference: https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy-settings-ios

• Question 55:

  You need to configure Delivery Optimization to meet the technical requirements. Which download mode should you use?

  A. Simple (99)

  B. Group (2)

  C. Internet (3)

  D. HTTP Only (0)

  E. Bypass (100)

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/windows/deployment/update/waas-delivery-optimizationreference#download-mode

• Question 56:

  You need to meet the technical requirement for the IT department users. What should you do first?

  A. Issue computer certificates.

  B. Distribute USB keys to the IT department users.

  C. Enable screen saver and configure a timeout.

  D. Turn on Bluetooth.

  Correct Answer: D

• Question 57:

  An employee reports that she must perform a BitLocker recovery on her laptop. The employee does not have her BitLocker recovery key but does have a Windows 10 desktop computer. What should you instruct the employee to do from the desktop computer?

  A. Run the manage-bde.exe “status command

  B. From BitLocker Recovery Password Viewer, view the computer object of the laptop

  C. Go to https://account.activedirectory.windowsazure.com and view the user account profile

  D. Run the Enable-BitLockerAutoUnlock cmdlet

  Correct Answer: C

  Reference: https://celedonpartners.com/blog/storing-recovering-bitlocker-keys-azure-active-directory/

• Question 58:

  You need to recommend a solution to monitor update deployments. What should you include in the recommendation?

  A. Windows Server Update (WSUS)

  B. the Update Management solution in Azure Automation

  C. the Update Compliance solution in Azure Log Analytics

  D. the Azure Security Center

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/windows/deployment/update/update-compliance-monitor

• Question 59:

  You have a computer named Computer1 that runs Windows 10.

  You need to configure User Account Control (UAC) to prompt administrators for their credentials.

  Which settings should you modify?

  A. Administrators Properties in Local Users and Groups

  B. User Account Control Settings in Control Panel

  C. Security Options in Local Group Policy Editor

  D. User Rights Assignment in Local Group Policy Editor

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/windows/security/identity-protection/user-account-control/useraccountcontrol-security-policy-settings

• Question 60:

  You have a computer named Computer1 that runs Windows 10.

  You need to prevent standard users from changing the wireless network settings on Computer1. The solution must allow administrators to modify the wireless network settings.

  What should you use?

  A. Windows Configuration Designer

  B. MSConfig

  C. Local Group Policy Editor

  D. an MMC console that has the Group Policy Object Editor snap-in

  Correct Answer: C