Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 41:

  You have a Microsoft 365 E5 subscription that uses Microsoft Intune.

  You need to ensure that during device enrollment in Intune, users are prevented from using their device until all assigned apps and profiles are installed.

  What should you configure?

  A. a Conditional Access policy

  B. a Windows Autopilot deployment profile

  C. an enrollment restriction

  D. an Enrollment Status Page profile

  Correct Answer: D

  Explanation:

  When a user signs into a device for the first time, the Enrollment Status Page (ESP) displays the device's configuration progress. The ESP also makes sure the device is in the expected state before the user can access the desktop for the

  first time.

  The ESP tracks the installation of applications, security policies, certificates, and network connections.

  ESP profiles

  An administrator can deploy ESP profiles to a licensed Intune user and configure specific settings within the ESP profile. A few of these settings are:

  Force the installation of specified applications.

  Allow users to collect troubleshooting logs.

  Specify what a user can do if device setup fails.

  Incorrect:

  *

  Device enrollment restrictions let you restrict enrollment based on device attributes. When restrictions are applied, users on restricted devices or who exceed the device limit are blocked from enrolling in Microsoft Intune. There are two types of device enrollment restrictions you can configure in Microsoft Intune:

  Device platform restrictions define which platforms, versions, and management types can enroll. In Intune, you can restrict device platforms, OS versions, manufacturer, and personally owned devices. Device limit restrictions define how many devices each user can enroll.

  *

  After you have created a device group, you can apply a Windows Autopilot deployment profile to each device in the group. Deployment profiles determine the deployment mode, and customize the OOBE (Out-of-box experience) for your end users.

  Note: An Out-of-box experience (OOBE pronounced oo-bee) is the experience an end-user has when taking a product after unboxing, or for digital distribution, runs the installer, and is preparing to first use it, as opposed to the point-of-sale experience or the interaction experience of an expert user. In computing, this includes the initial configuration of a piece of hardware or software on a computer. The out-of-box experience is typically the first impression a product creates, such as the ease with which a buyer can begin using the product. For hardware products, a positive OOBE can be created with logical easy-to-follow instructions and good quality of manufacturing

  Reference: https://learn.microsoft.com/en-us/mem/autopilot/enrollment-status

• Question 42:

  You have an Azure AD tenant that contains a user named User1. User1 has the devices shown in the following table.

  

  The Device settings are configured as shown in the following exhibit.

  

  How many of the devices can User1 join to Azure AD?

  A. 1

  B. 2

  C. 3

  D. 4

  Correct Answer: A

  Explanation:

  You can Azure AD join all Windows 11 and Windows 10 devices except Home editions.

  Note: You can Azure AD register Windows 10 or newer, iOS, Android, and macOS devices.

  Reference: https://learn.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-join https://learn.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-register

• Question 43:

  Your on-premises network contains the device types shown in the following table.

  

  You plan to deploy an in-place upgrade to a 64-bit version of Windows 10 Enterprise by using the Microsoft Deployment Toolkit (MDT).

  Which device types will support an in-place upgrade?

  A. Type4 and Type5 only

  B. Type3, Type4, and Type5 only

  C. Type1, Type4, and Type5 only

  D. Type1, Type2, and Type5 only

  Correct Answer: A

  Explanation:

  MDT has many useful features, such as:

  *

  UEFI support. Supports deployment to machines using Unified Extensible Firmware Interface (UEFI) version 2.3.1.

  *

  Offline BitLocker. Provides the capability to have BitLocker enabled during the Windows Preinstallation Environment (Windows PE) phase, thus saving hours of encryption time.

  *

  Deploy to VHD. Provides ready-made task sequence templates for deploying Windows into a virtual hard disk (VHD) file.

  Incorrect:

  Not Type1: The upgrade process cannot change from a 32-bit operating system to a 64-bit due to the possible complications with drivers and applications it may bring.

  Not Type2, not Type3: Boot images are the Windows Preinstallation Environment (Windows PE) images that are used to start the deployment.

  You’re not able to use a custom image of Windows 10 for the In-Place Upgrade scenario. You’d have to use the install.wim image provided with the latest Windows 10 media that Microsoft has released.

  Reference: https://msendpointmgr.com/2015/10/26/deploy-windows-10-enterprise-using-in-place-upgrade/

  https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit

• Question 44:

  You have a Microsoft 365 E5 subscription.

  Al users have Mac computers. ATI the computers are enrolled in Microsoft Endpoint Manager and onboarded to Microsoft Defender for Endpoint.

  You need to configure Microsoft Defender for Endpoint on the computers.

  What should you create from the Endpoint Management admin center?

  A. a Microsoft Defender for Endpoint baseline profile

  B. an update policy for iOS

  C. a device configuration profile

  D. a mobile device management (MDM) security baseline profile

  Correct Answer: D

• Question 45:

  You have a Microsoft 365 E5 tenant that contains 500 Windows 10 devices. The devices are enrolled in Microsoft Intune.

  You plan to use Endpoint analytics to identify hardware issues.

  You need to enable Windows health monitoring on the devices to support Endpoint analytics.

  What should you do?

  A. Create a configuration profile.

  B. Create a compliance policy.

  C. Configure the Endpoint analytics baseline regression threshold.

  D. Create a Windows 10 Security Baseline profile.

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/mem/intune/configuration/windows-health-monitoring

• Question 46:

  Your on-premises network contains an Active Directory domain named Contoso.com and 500 devices that run either macOS, Windows 8.1. Windows 10, or Windows 11. All the devices are managed by using Microsoft Endpoint Configuration Manager. The domain syncs with Azure Active Directory (Azure AD).

  You plan to implement a Microsoft 365 E5 subscription and enable co-management. Which devices can be co-managed after the implementation?

  A. Windows 11 and Windows 10 only

  B. Windows 11, Windows 10-Windows8.1.andmacOS

  C. Windows 11 and macOS only

  D. Windows 11 only

  E. Windows 11. Windows 10, and Windows8.1 only

  Correct Answer: C

• Question 47:

  You have a Microsoft 365 tenant that contains two users named User1 and User2. You create the alert policy shown in the following exhibit.

  

  User2 runs a script that modifies a file in a Microsoft SharePoint Online library once every four minutes and runs for a period of two hours. How many alerts will User1 receive?

  A. 2

  B. 5

  C. 10

  D. 25

  Correct Answer: D

• Question 48:

  You have a Microsoft 365 E5 subscription. The subscription contains users that have the following types of devices:

  1.

  Windows 10

  2.

  Android

  3.

  OS

  On which devices can you configure the Endpoint DLP policies?

  A. Windows 10 only

  B. Windows 10 and Android only

  C. Windows 10 and macO Sonly

  D. Windows 10, Android, and iOS

  Correct Answer: C

  Endpoint data loss prevention (Endpoint DLP) extends the activity monitoring and protection capabilities of DLP to sensitive items that are physically stored on Windows 10, Windows 11, and macOS (Catalina 10.15 and higher) devices. Once devices are onboarded into the Microsoft Purview solutions, the information about what users are doing with sensitive items is made visible in activity explorer and you can enforce protective actions on those items via DLP policies. https://docs.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-learn-about?view=o365-worldwide

• Question 49:

  You have a Microsoft 365 E5 subscription.

  You define a retention label that has the following settings:

  1.

  Retention period 7 years

  2.

  Start the retention period bated on: When items were created You need to prevent the removal of the label once the label K applied to a lie What should you select in the retention label settings?

  A. Retain items even If users delete

  B. Mark items as a record

  C. Mark items as a regulatory record

  D. Retain items forever

  Correct Answer: B

• Question 50:

  You have a Microsoft 365 E5 subscription that uses Microsoft intune.

  In the Microsoft Endpoint Manager admin center, you discover many stale and inactive devices,

  You enable device clean-up rules

  What can you configure as the minimum number of days before a device a removed automatically?

  A. 10

  B. 30

  C. 45

  D. 90

  Correct Answer: D