Microsoft Microsoft Certifications MD-102 Questions & Answers

• Question 61:

  You have several computers that run Windows 10. The computers are in a workgroup.

  You need to prevent users from using Microsoft Store apps on their computer.

  What are two possible ways to achieve the goal? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. From Security Settings in the local Group Policy, configure Security Options.

  B. From Administrative Templates in the local Group Policy, configure the Store settings.

  C. From Security Settings in the local Group Policy, configure Software Restriction Policies.

  D. From Security Settings in the local Group Policy, configure Application Control Policies.

  Correct Answer: BD

  Reference: https://www.techrepublic.com/article/how-to-manage-your-organizations-microsoft-store-grouppolicy/

• Question 62:

  Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10.

  On Computer1, you create a folder and assign Full control permissions to Everyone.

  You share the folder as Share1 and assign the permissions shown in the following table.

  

  When accessing Share1, which two actions can be performed by User1 but not by User2? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  A. Delete a file created by another user.

  B. Set the permissions for a file.

  C. Rename a file created by another user.

  D. Take ownership of file.

  E. Copy a file created by another user to a subfolder.

  Correct Answer: BD

• Question 63:

  A user named User1 has a computer named Computer1 that runs Windows 10.

  User1 connects to a Microsoft Azure virtual machine named VM1 by using Remote Desktop.

  User1 creates a VPN connection to a partner organization.

  When the VPN connection is established, User1 cannot connect to VM1. When User1 disconnects from the VPN, the user can connect to VM1.

  You need to ensure that User1 can connect to VM1 while connected to the VPN.

  What should you do?

  A. From the proxy settings, add the IP address of VM1 to the bypass list to bypass the proxy.

  B. From the properties of VPN1, clear the Use default gateway on remote network check box.

  C. From the properties of the Remote Desktop connection to VM1, specify a Remote Desktop Gateway (RD Gateway).

  D. From the properties of VPN1, configure a static default gateway address.

  Correct Answer: B

• Question 64:

  Your company has a wireless access point that uses WPA2-Enterprise. You need to configure a computer to connect to the wireless access point. What should you do first?

  A. Create a provisioning package in Windows Configuration Designer.

  B. Request a passphrase.

  C. Request and install a certificate.

  D. Create a Connection Manager Administration Kit (CMAK) package.

  Correct Answer: B

  Reference: https://support.microsoft.com/en-za/help37/windows-setting-up-wireless-network

• Question 65:

  You are creating a device configuration profile in Microsoft Intune. You need to configure specific OMA-URI settings in the profile. Which profile type template should you use?

  A. Device restrictions (Windows 10 Team)

  B. Identity protection

  C. Custom

  D. Device restrictions

  Correct Answer: C

  Windows client custom profiles use Open Mobile Alliance Uniform Resource Identifier (OMA-URI) settings to configure different features. These settings are typically used by mobile device manufacturers to control features on the device.

  Reference: https://docs.microsoft.com/en-us/mem/intune/configuration/custom-settings-windows-10

• Question 66:

  A user has a computer that runs Windows 10.

  When the user connects the computer to the corporate network, the user cannot access the internal corporate servers. The user can access servers on the

  Internet.

  You run the ipconfig command and receive the following output.

  

  You send a ping request and successfully ping the default gateway, the DNS servers, and the DHCP server. Which configuration on the computer causes the issue?

  A. the DNS servers

  B. the IPv4 address

  C. the subnet mask

  D. the default gateway address

  Correct Answer: A

• Question 67:

  You have 200 computers that run Windows 10 and are joined to an Active Directory domain.

  You need to enable Windows Remote Management (WinRM) on all the computers by using Group Policy.

  Which three actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Enable the Allow Remote Shell access setting.

  B. Enable the Allow remote server management through WinRM setting.

  C. Set the Startup Type of the Windows Remote Management (WS-Management) service to Automatic.

  D. Enable the Windows Defender Firewall: Allow inbound Remote Desktop exceptions setting.

  E. Set the Startup Type of the Remote Registry service to Automatic.

  F. Enable the Windows Defender Firewall: Allow inbound remote administration exception setting.

  Correct Answer: BCF

• Question 68:

  You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

  

  All devices have Microsoft Edge installed.

  From the Microsoft Intune admin center, you create a Microsoft Edge Baseline profile named Edge1.

  You need to apply Edge1 to all the supported devices.

  To which devices should you apply Edge1?

  A. Device1 only

  B. Device1 and Device2 only

  C. Device1, Device2, and Device3 only

  D. Device1, Device2, and Device4 only

  E. Device1, Device2, Device3, and Device4

  Correct Answer: B

  Windows 10 and Windows 11 only.

  Reference: https://learn.microsoft.com/en-us/mem/intune/protect/security-baseline-settings-edge

• Question 69:

  You have a Microsoft 365 tenant.

  You have devices enrolled in Microsoft Intune.

  You assign a conditional access policy named Policy1 to a group named Group1. Policy1 restricts devices marked as noncompliant from accessing Microsoft OneDrive for Business.

  You need to identify which noncompliant devices attempt to access OneDrive for Business.

  What should you do?

  A. From the Microsoft Entra admin center, review the Conditional Access Insights and Reporting workbook.

  B. From the Microsoft Intune admin center, review Device compliance report.

  C. From the Microsoft Intune admin center, review the Noncompliant devices report.

  D. From the Microsoft Intune admin center, review the Setting compliance report.

  Correct Answer: A

  https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-insights-reporting

• Question 70:

  Your network contains an Active Directory domain. The domain contains 2,000 computers that run Windows 10.

  You implement hybrid Azure AD and Microsoft Intune.

  You need to automatically register all the existing computers to Azure AD and enroll the computers in Intune. The solution must minimize administrative effort.

  What should you use?

  A. an Autodiscover address record

  B. a Group Policy object (GPO)

  C. an Autodiscover service connection point (SCP)

  D. a Windows Autopilot deployment profile

  Correct Answer: B

  https://learn.microsoft.com/en-us/windows/client-management/enroll-a-windows-10-device-automatically-using-group-policy