Microsoft Microsoft Certifications MD-102 Questions & Answers

• Question 71:

  You have following types of devices enrolled in Microsoft Intune:

  1.

  Windows 10

  2.

  Android

  3.

  iOS

  For which types of devices can you create VPN profiles in Microsoft Intune admin center?

  A. Windows 10 only

  B. Windows 10 and Android only

  C. Windows 10 and iOS only

  D. Android and iOS only

  E. Windows 10, Android, and iOS

  Correct Answer: E

  https://learn.microsoft.com/en-us/mem/intune/configuration/vpn-settings-configure#step-2---create-the-profile

• Question 72:

  You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

  You use Microsoft Intune to manage devices. All devices are in the same time zone.

  You create an update rings policy and assign the policy to all Windows devices.

  On the November 1, you pause the update rings policy.

  All devices remain online.

  Without further modification to the policy, on which date will the devices next attempt to update?

  A. December 1

  B. December 6

  C. November 15

  D. November 22

  Correct Answer: B

  Manage your Windows Update rings

  In the portal, navigate to Devices > Windows > Update rings for Windows 10 and later and select the policy that you want to manage. The policy opens to its Overview page.

  From this page, you can view the rings assignment status and select the following actions from the top of the Overview pane to manage the update ring:

  1.

  Delete

  2.

  Pause

  3.

  Resume

  4.

  Extend

  5.

  Uninstall

  Pause Select Pause to prevent assigned devices from receiving feature or quality updates for up to 35 days from the time you pause the ring. After the maximum days have passed, pause functionality automatically expires and the device scans Windows Updates for applicable updates. Following this scan, you can pause the updates again. If you resume a paused update ring, and then pause that ring again, the pause period resets to 35 days.

  Reference: https://learn.microsoft.com/en-us/mem/intune/protect/windows-10-update-rings#pause

• Question 73:

  You have computers that run Windows 11 Pro. The computers are joined to Azure AD and enrolled in Microsoft Intune.

  You need to upgrade the computers to Windows 11 Enterprise.

  What should you configure in Intune?

  A. a device compliance policy

  B. a device cleanup rule

  C. a device enrollment policy

  D. a device configuration profile

  Correct Answer: D

  Intune: Upgrade Windows Pro to Enterprise.

  1)First, create a Microsoft Intune configuration policy. In the Azure Portal navigate to Microsoft Intune -> Device Configuration -> Profiles. Click Create Profile.

  2)Next, create a new Windows 10 and later profile, with a type of Edition Upgrade. Click Settings

  3)Etc.

  Reference:

  https://blogs.technet.microsoft.com/skypehybridguy/2018/09/21/intune-upgrade-windows-from-pro-to-enterprise-automatically/

• Question 74:

  You have computers that run Windows 10 and are managed by using Microsoft Intune.

  Users store their files in a folder named D:\Folder1.

  You need to ensure that only a trusted list of applications is granted write access to D:\Folder1.

  What should you configure in the device configuration profile?

  A. Microsoft Defender Exploit Guard

  B. Microsoft Defender Application Guard

  C. Microsoft Defender SmartScreen

  D. Microsoft Defender Application Control

  Correct Answer: A

  The four components of Windows Defender Exploit Guard are:

  1.

  Controlled folder access: Protects sensitive data from ransomware by blocking untrusted processes from accessing your protected folders

  2.

  Attack Surface Reduction (ASR)

  3.

  Exploit protection

  4.

  Network protection

  Reference: https://www.microsoft.com/security/blog/2017/10/23/windows-defender-exploit-guard-reduce-the-attack-surface-against-next-generation-malware/

• Question 75:

  You have a Microsoft 365 subscription that contains 100 devices enrolled in Microsoft Intune.

  You need to review the startup processes and how often each device restarts.

  What should you use?

  A. Endpoint analytics

  B. Device Management

  C. Azure Monitor

  D. Intune Data Warehouse

  Correct Answer: A

  https://learn.microsoft.com/en-us/mem/analytics/restart-frequency

• Question 76:

  Your company has 200 computers that run Windows 10. The computers are managed by using Microsoft Intune.

  Currently, Windows updates are downloaded without using Delivery Optimization.

  You need to configure the computers to use Delivery Optimization.

  What should you create in Intune?

  A. a device compliance policy

  B. a Windows 10 update ring

  C. a device configuration profile

  D. an app protection policy

  Correct Answer: C

  With Intune, use Delivery Optimization settings for your Windows devices to reduce bandwidth consumption when those devices download applications and updates. Configure Delivery Optimization as part of your device configuration profiles.

  Reference: https://docs.microsoft.com/en-us/intune/delivery-optimization-windows

• Question 77:

  You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

  You use Microsoft Intune to manage devices.

  Auto-enrollment in Intune is configured.

  You have 100 Windows 11 devices in a workgroup.

  You need to connect the devices to the corporate wireless network and enroll 100 new Windows 11 devices in Intune. What should you use?

  A. a provisioning package

  B. a Group Policy Object (GPO)

  C. mobile device management (MDM) automatic enrollment

  D. a device configuration policy

  Correct Answer: A

• Question 78:

  You have a Microsoft 365 tenant that uses Microsoft Intune.

  You use the Company Portal app to access and install published apps to enrolled devices.

  From the Microsoft Intune admin center, you add a Microsoft Store app.

  Which two App information types are visible in the Company Portal?

  NOTE: Each correct selection is worth one point.

  A. Privacy URL

  B. Information URL

  C. Developer

  D. Owner

  Correct Answer: AB

  In the Microsoft Store App information page available through Microsoft Endpoint Manager admin center, the app details include:

  *

  Privacy URL: Optionally, enter the URL of a website that contains privacy information for this app. The URL is displayed to users in the company portal.

  *

  Developer: Optionally, enter the name of the app developer.

  Information URL or Owner are not included.

  Reference:

  https://docs.microsoft.com/en-us/mem/intune/apps/store-apps-windows

• Question 79:

  You have a Microsoft 365 subscription that uses Microsoft Intune.

  You need to ensure that you can deploy apps to Android Enterprise devices.

  What should you do first?

  A. Create a configuration profile.

  B. Add a certificate connector.

  C. Configure the Partner device management settings.

  D. Link your managed Google Play account to Intune.

  Correct Answer: D

  Connect your Intune account to your Managed Google Play account.

  Managed Google Play is Google's enterprise app store and sole source of applications for Android Enterprise in Intune. You can use Intune to orchestrate app deployment through Managed Google Play for any Android Enterprise scenario (including personally-owned work profile, dedicated, fully managed, and corporate-owned work profile enrollments).

  Reference: https://docs.microsoft.com/en-us/mem/intune/apps/apps-add-android-for-work

  https://docs.microsoft.com/en-us/mem/intune/enrollment/connect-intune-android-enterprise

• Question 80:

  You have a Microsoft 365 Subscription that uses Microsoft Intune. You add apps to Intune as shown in the following table.

  

  You need to create an app configuration policy named Policy1 for the Android Enterprise platform. Which apps can you manage by using Policy1?

  A. App2 only

  B. App3 only

  C. App1 and App3 only

  D. App2 and App3 only

  E. App1, App2, and App3

  Correct Answer: B

  Add app configuration policies for managed Android Enterprise devices App configuration policies in Microsoft Intune supply settings to Managed Google Play apps on managed Android Enterprise devices. The app developer exposes Android-managed app configuration settings. Intune uses these exposed setting to let the admin configure features for the app. The app configuration policy is assigned to your user groups. The policy settings are used when the app checks for them, typically the first time the app runs.

  Not every app supports app configuration. Check with the app developer to see if their app supports app configuration policies.

  Use the configuration designer You can use the configuration designer for Managed Google Play apps when the app is designed to support configuration settings. Configuration applies to devices enrolled in Intune. The designer lets you configure specific configuration values for the settings exposed by the app.

  Reference: https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-use-android¨