Microsoft Microsoft Certifications MD-102 Questions & Answers

• Question 81:

  You have a Microsoft 365 subscription that uses Microsoft Intune.

  You have five new Windows 11 Pro devices.

  You need to prepare the devices for corporate use. The solution must meet the following requirements:

  1.

  Install Windows 11 Enterprise on each device.

  2.

  Install a Windows Installer (MSI) package named App1 on each device.

  3.

  Add a certificate named Certificate1 that is required by App1.

  4.

  Join each device to Azure AD.

  Which three provisioning options can you use? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. subscription activation

  B. a custom Windows image

  C. an in-place upgrade

  D. Windows Autopilot

  E. provisioning packages

  Correct Answer: ADE

  Install Windows 11 Enterprise on each device: Subscription activation Install a Windows Installer (MSI) package named App1 on each device: Provisioning packages Add a certificate named Certificate1 that is required by App1: Provisioning packages Join each device to Azure AD: Autopilot

  Reference: https://learn.microsoft.com/en-us/mem/autopilot/pre-provision https://learn.microsoft.com/en-us/mem/intune/enrollment/windows-bulk-enroll

  https://learn.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-packages

• Question 82:

  You have a Microsoft 365 subscription.

  You plan to use Windows Autopilot to provision 25 Windows 11 devices.

  You need to configure the Out-of-box experience (OOBE) settings.

  What should you create in the Microsoft Intune admin center?

  A. an enrollment status page (ESP)

  B. a deployment profile

  C. a compliance policy

  D. a PowerShell script

  E. a configuration profile

  Correct Answer: B

  Use Windows Autopilot profiles on new devices to customize a customer's out-of-box experience

  In Partner Center, you can create Windows Autopilot deployment profiles and apply them to devices.

  Note:

  Create a new Autopilot profile

  To create a new Autopilot profile, use the following steps:

  1.

  Sign in to Partner Center and select Customers.

  2.

  On the Customer List, select a customer.

  3.

  On the customer's detail page, select Devices.

  4.

  Under Windows Autopilot profiles, select Add new profile.

  5.

  Enter the profile's name and description and then configure the OOBE settings. Choose from:

  Skip privacy settings in setup Disable local admin account in setup Automatically skip pages in setup (Includes Automatically select setup for work or school and Skip Cortana, OneDrive, and OEM registration setup pages) Skip end user license agreement (EULA)

  6.

  Select Submit when finished.

  Reference: https://learn.microsoft.com/en-us/partner-center/autopilot

• Question 83:

  You have two computers named Computer1 and Computer2 that run Windows 10. Computer2 has Remote Desktop enabled.

  From Computer1, you connect to Computer2 by using Remote Desktop Connection.

  You need to ensure that you can access the local drives on Computer1 from within the Remote Desktop session.

  What should you do?

  A. From Computer2, configure the Remote Desktop settings.

  B. From Windows Defender Firewall on Computer1, allow Remote Desktop.

  C. From Windows Defender Firewall on Computer2, allow File and Printer Sharing.

  D. From Computer1, configure the Remote Desktop Connection settings.

  Correct Answer: D

  How to gain access to local files:

  You can gain access to your disk drives on the local computer during a Remote Desktop session. You can redirect the local disk drives, including the hard disk drives, CD-ROM disk drives, floppy disk drives, and mapped network disk drives

  so that you can transfer files between the local host and the remote computer in the same way that you copy files from a network share. You can use Microsoft Windows Explorer to view the disk drives and files for each redirected disk drive.

  Alternatively, you can view the files for each redirected disk drive in My Computer. The drives are displayed as "drive_letter on terminal_server_client_name" in both Windows Explorer and My Computer.

  To view the disk drives and files for the redirected disk drive:

  1.Click Start, point to All Programs (or Programs), point to

  Accessories, point to Communications, and then click Remote Desktop Connection.

  2.Click Options, and then click the

  Local Resources tab.

  3.Click Disk Drives, and then click

  Connect.

  Reference:

  https://support.microsoft.com/en-us/topic/how-to-gain-access-to-local-files-in-a-remote-desktop-session-to-a-windows-xp-based-or-to-a-windows-server-2003-based-host-computer-021ee183-e6be-4201-809e-c355c47b17f4

• Question 84:

  You have an Azure AD tenant that contains the devices shown in the following table.

  

  You purchase Windows 11 Enterprise E5 licenses.

  Which devices can use Subscription Activation to upgrade to Windows 11 Enterprise?

  A. Device1 only

  B. Device1 and Device2 only

  C. Device1 and Device3 only

  D. Device1, Device2, Device3, and Device4

  Correct Answer: A

  The subscription upgrade conditions are: the same Windows OS type and the devices must be Azure AD joined.

• Question 85:

  You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

  You use Microsoft Intune to manage devices.

  You have the devices shown in the following table.

  

  Which devices can be changed to Windows 11 Enterprise by using subscription activation?

  A. Device3 only

  B. Device2 and Device3 only

  C. Device1 and Device2 only

  D. Device1, Device2, and Device3

  Correct Answer: B

  Subscription activation is available for qualifying devices running Windows 10 or Windows 11. You can't use subscription activation to upgrade from Windows 10 to Windows 11. https://learn.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation

• Question 86:

  You have a computer named Computer1 that runs Windows 11.

  A user named User1 plans to use Remote Desktop to connect to Computer1.

  You need to ensure that the device of User1 is authenticated before the Remote Desktop connection is established and the sign in page appears.

  What should you do on Computer1?

  A. Turn on Reputation-based protection

  B. Enable Network Level Authentication (NLA)

  C. Turn on Network Discovery

  D. Configure the Remote Desktop Configuration service

  Correct Answer: B

  What is Network Level Authentication?

  Network level authentication is used for authenticating Remote Desktop services, such as Windows RDP, and Remote Desktop Connection (RDP Client). You might also hear it called front authentication.

  What is Network Level Authentication (NLA) used for?

  Before you can start a remote desktop session, the user will need to authenticate themselves - ie, prove that they are who they say they are. Using network level authentication means that a false connection can't be made, which would use

  up CPU and cause a strain on the resources of the network. This offers a level of security against some cyberattacks such as Denial of Service attacks, where multiple requests are made all at once towards a network, overwhelming its ability

  to cope. To combat this, you can turn on network level authentication to authenticate the user's credentials before starting a remote access session. If the user's credentials aren't authenticated, then the connection is simply denied.

  Reference:

  https://www.atera.com/blog/what-is-network-level-authenticatio

• Question 87:

  You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

  You use Microsoft Intune to deploy and manage Windows devices.

  You have 100 devices from users that left your company.

  You need to repurpose the devices for new users by removing all the data and applications installed by the previous users. The solution must minimize administrative effort.

  What should you do?

  A. Deploy a new configuration profile to the devices.

  B. Perform a Windows Autopilot reset on the devices.

  C. Perform an in-place upgrade on the devices.

  D. Perform a clean installation of Windows 11 on the devices.

  Correct Answer: B

  Windows Autopilot Reset takes the device back to a business-ready state, allowing the next user to sign in and get productive quickly and simply. Specifically, Windows Autopilot Reset:

  Removes personal files, apps, and settings.

  Reapplies a device's original settings.

  Sets the region, language, and keyboard to the original values.

  Maintains the device's identity connection to Azure AD.

  Maintains the device's management connection to Intune.

  The Windows Autopilot Reset process automatically keeps information from the existing device:

  Wi-Fi connection details.

  Provisioning packages previously applied to the device.

  A provisioning package present on a USB drive when the reset process is started.

  Azure Active Directory device membership and MDM enrollment information.

  SCEP certificates.

  Windows Autopilot Reset blocks the user from accessing the desktop until this information is restored, including reapplying any provisioning packages. For devices enrolled in an MDM service, Windows Autopilot Reset also blocks until an

  MDM sync is completed. When Autopilot reset is used on a device, the device's primary user is removed. The next user who signs in after the reset will be set as the primary user.

  Reference:

  https://learn.microsoft.com/en-us/mem/autopilot/windows-autopilot-reset

• Question 88:

  You have a Microsoft 365 tenant that contains the objects shown in the following table.

  

  You are creating a compliance policy named Compliance1.

  Which objects can you specify in Compliance1 as additional recipients of noncompliance notifications?

  A. Group3 and Group4 only

  B. Group3, Group4, and Admin1 only

  C. Group1, Group2, and Group3 only

  D. Group1, Group2, Group3, and Group4 only

  E. Group1, Group2, Group3, Group4, and Admin1

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/microsoft-365/admin/create-groups/compare-groups

• Question 89:

  You have a Microsoft 365 subscription.

  You need to provide a user the ability Security defaults and create Conditional Access policies. The solution must use the principle of least privilege.

  Which role should you assign to the user?

  A. Global Administrator

  B. Conditional Access Administrator

  C. Security Administrator

  D. Intune Administrator

  Correct Answer: B

  To enable security defaults (or confirm they're already enabled)

  Important

  You must be a Security Administrator, Conditional Access administrator, or Global Administrator to perform this task.

  Note: Turn on multi-factor authentication

  Multi-factor authentication (MFA) is a very important first step in securing your organization. Microsoft 365 Business Premium includes the option to use security defaults or Conditional Access policies to turn on MFA for your admins and user

  accounts. For most organizations, security defaults offer a good level of sign-in security. But if your organization must meet more stringent requirements, you can use Conditional Access policies instead.

  This article provides information about:

  Security defaults (suitable for most businesses)

  Conditional Access (for businesses with more stringent security requirements)

  Reference:

  https://learn.microsoft.com/en-us/microsoft-365/business-premium/m365bp-turn-on-mfa?

• Question 90:

  You have a Microsoft 365 subscription that contains a user named User1 and uses Microsoft Intune Suite.

  You use Microsoft Intune to manage devices that run Windows 11.

  User provides remote support for 75 devices in the marketing department.

  You need to add User1 to the Remote Desktop Users group on each marketing department device.

  What should you configure?

  A. an app configuration policy

  B. a device compliance policy

  C. an account protection policy

  D. a device configuration profile

  Correct Answer: C

  https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-account-protection-policy#manage-local-groups-on-windows-devices