MD-102 Actual Questions - Instant Download Tests Free Updated Today!
Get instant access of 100% real Microsoft MD-102 exam questions with verified answers
NEW QUESTION # 165
You have a Microsoft Intune subscription that is configured to use a PFX certificate connector to an on-premises Enterprise certification authority (CA).
You need to use Intune to configure autoenrollment for Android devices by using public key pair (PKCS) certificates.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, email Description automatically generated
Reference:
https://docs.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure
NEW QUESTION # 166
You have an Azure AD tenant that contains the devices shown in the following table.
You purchase Windows 11 Enterprise E5 licenses.
Which devices can use Subscription Activation to upgrade to Windows 11 Enterprise?
- A. Device1 and Device3 only
- B. Device1 only
- C. Device1 and Device2 only
- D. Device1, Device2, Device3, and Device4
Answer: A
NEW QUESTION # 167
Hotspot Question
You have a Microsoft 365 E5 subscription that includes Microsoft Intune. The subscription contains a group named Group1. Group1 contains devices enrolled in Intune.
You deploy Remote Help in Intune.
You need to configure Remote Help to only allow support administrators to join Remote Help sessions from the devices in Group1.
Which type of Microsoft Entra object should you create, and which type of policy should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
https://learn.microsoft.com/en-us/entra/identity-platform/howto-create-service-principal-portal
NEW QUESTION # 168
You have a Microsoft 365 subscription that uses Microsoft Intune and contains 100 Windows 10 devices. You need to create Intune configuration profiles to perform the following actions on the devices:
* Deploy a custom Start layout.
* Rename the local Administrator account.
Which profile type template should you use for each action? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Device Restrictions
Ref:https://www.anoopcnair.com/start-menu-taskbar-custom-layout-intune-cloudpc/#:~:text=%E2%80%9D%20 Endpoint protection -> Local device security options -> Accounts -> Rename Admin Account Ref:https://www.tenable.com/audits/items/CIS_MS_InTune_for_Windows_10_2004_Level_1_v1.0.1.audit:de2d
NEW QUESTION # 169
You have a Microsoft 365 subscription that uses Microsoft Intune and contains the users shown in the following table.
Group2 has been assigned in the Enrollment Status Page.
You have the devices shown in the following table.
You capture and upload the hardware IDs of the devices in the marketing department.
You configure Windows Autopilot.
For each of the following statements, select Yes if the statement is true. Otherwise select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 170
You have a shared computer that runs Windows 10.
The computer is infected with a virus.
You discover that a malicious TTF font was used to compromise the computer.
You need to prevent this type of threat from affecting the computer in the future.
What should you use?
- A. Windows Defender Exploit Guard
- B. Windows Defender SmartScreen
- C. Windows Defender Credential Guard
- D. Windows Defender System Guard
- E. Windows Defender Application Guard
Answer: A
Explanation:
Exploit protection helps protect against malware that uses exploits to infect devices and spread.
Exploit protection consists of many mitigations that can be applied to either the operating system or individual apps.
Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender- atp/exploit-protection
NEW QUESTION # 171
You have a Microsoft 365 subscription that includes Microsoft Intune. The subscription contains corporate-owned, fully managed Android Enterprise devices.
You plan to deploy a configuration profile that will have a device restrictions profile type named Profile1.
Profile1 will assign maintenance windows for system updates.
What should you configure from the Configuration settings for Profile1?
- A. General
- B. Connectivity
- C. Device experience
- D. Power Settings
Answer: C
NEW QUESTION # 172
Case Study 2 - Contoso Ltd
Overview
Contoso, Ltd, is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York.
Contoso has the users and computers shown in the following table.
The company has IT, human resources (HR), legal (LEG), marketing (MKG) and finance (FIN) departments.
Contoso uses Microsoft Store for Business and recently purchased a Microsoft 365 subscription.
The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office will work from home.
Existing Environment
The network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).
All member servers run Windows Server 2016. All laptops and desktop computers run Windows
10 Enterprise.
The computers are managed by using Microsoft System Center Configuration Manager. The mobile devices are managed by using Microsoft Intune.
The naming convention for the computers is the department acronym, followed by a hyphen, and then four numbers, for example, FIN-6785. All the computers are joined to the on-premises Active Directory domain.
Each department has an organization unit (OU) that contains a child OU named Computers. Each computer account is in the Computers OU of its respective department.
Intune Configuration
The domain has the users shown in the following table.
User2 is a device enrollment manager (DEM) in Intune.
The devices enrolled in Intune are shown in the following table.
The device compliance policies in Intune are configured as shown in the following table.
The device compliance policies have the assignments shown in the following table.
The device limit restrictions in Intune are configured as shown in the following table.
Requirements
Planned Changes
Contoso plans to implement the following changes:
- Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro preinstalled and were purchased already.
- Start using a free Microsoft Store for Business app named App1.
- mplement co-management for the computers.
Technical Requirements
Contoso must meet the following technical requirements:
- Ensure that the users in a group named Group4 can only access Microsoft Exchange Online from devices that are enrolled in Intune.
- Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows Autopilot.
- Monitor the computers in the LEG department by using Windows Analytics.
- Create a provisioning package for new computers in the HR department.
- Block iOS devices from sending diagnostic and usage telemetry data.
- Use the principle of least privilege whenever possible.
- Enable the users in the MKG department to use App1.
- Pilot co-management for the IT department.
You need to meet the requirements for the MKG department users.
What should you do?
- A. Assign the MKG department users the Basic Purchaser role in Microsoft Store for Business
- B. Assign the MKG department users the Purchaser role in Microsoft Store for Business
- C. Download the APPX file for App1 from Microsoft Store for Business
- D. Add App1 to the private store
- E. Acquire App1 from Microsoft Store for Business
Answer: E
Explanation:
Enable the users in the MKG department to use App1.
The private store is a feature in Microsoft Store for Business and Education that organizations receive during the signup process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab in Microsoft Store app, and is usually named for your company or organization. Only apps with online licenses can be added to the private store.
Reference:
https://docs.microsoft.com/en-us/microsoft-store/distribute-apps-from-your-private-store
NEW QUESTION # 173
Drag and Drop Question
Your company uses Microsoft Intune. You have a Microsoft Store for Business account.
You need to ensure that you can deploy Microsoft Store for Business apps by using Intune.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.
Answer:
Explanation:
Explanation:
Step 1: From the Microsoft Endpoint Manager admin center, enable the Microsoft Store for Business connector.
Enable Microsoft store for business (Intune>Apps>Microsoft store for business> Enable).
Step 2: From the Microsoft Store for Business portal, activate Intune as a management tool.
Before you enable synchronization in the Intune console, you must configure your store account to use Intune as a management tool.
1. Ensure that you sign into the Microsoft Store for Business using the same tenant account you use to sign into Intune.
2. In the Business Store, choose the Manage tab, select Settings, and choose the Distribute tab.
3. If you don't specifically have Microsoft Intune available as a mobile device management tool, choose Add management tool to add Microsoft Intune.
Step 3: From the Microsoft Endpoint Manager admin center, initiate a sync.
If you've already associated your Microsoft Store for Business account with your Intune admin credentials, you can manually sync your Microsoft Store for Business apps with Intune using the following steps.
1. Select Tenant administration > Connectors and tokens > Microsoft Store for Business.
2. Click Sync to get the apps you've purchased from the Microsoft Store into Intune.
Reference:
https://docs.microsoft.com/en-us/mem/intune/apps/windows-store-for-business
NEW QUESTION # 174
Hotspot Question
Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure AD tenant by using Azure AD Connect.
You use Microsoft Intune and Configuration Manager to manage devices.
You need to recommend a deployment plan for new Windows 11 devices. The solution must meet the following requirements:
- Devices for the marketing department must be joined to the AD DS
domain only. The IT department will install complex applications on the devices at build time, before giving the devices to the marketing department users.
- Devices for The sales department must be Azure AD joined. The devices will be shipped directly from the manufacturer to The homes of the sales department users.
- Administrative effort must be minimized.
Which deployment method should you recommend for each department? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Configuration manager doesn't require AAD connectivity and Autopilot with OEM registration means you can send the devices direct to user.
NEW QUESTION # 175
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to ensure that feature and quality updates install automatically during a maintenance window.
Solution: In Group policy, from the Maintenance Scheduler settings, you configure Automatic Maintenance Random Delay.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
This setting(Automatic Maintenance Random Delay) is related to option 4(Autodownload and schedule) in Configure Automatic Updates. If you did not select option 4 in Configure Automatic Updates, it is not necessary to configure this setting.
So option "4. Autodownload and schedule" NEEDS to be selected for this to do anything.
https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update- services/deploy/4-configure-group-policy-settings-for-automatic-updates#automatic-maintenance- random-delay
NEW QUESTION # 176
You have a Microsoft 365 tenant that uses Microsoft Intune and contains the devices shown in the following table.
In Microsoft Intune Endpoint security, you need to configure a disk encryption policy for each device.
Which encryption type should you use for each device, and which role-based access control (RBAQ role in Intune should you use to manage the encryption keys? To answer, select the appropriate options m the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Graphical user interface, text, application Description automatically generated
NEW QUESTION # 177
Hotspot Question
You have 100 computers that run Windows 10.
The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune.
You need to configure the following device restrictions:
- Block users from browsing to suspicious websites.
- Scan all scripts loaded into Microsoft Edge.
Which two settings should you configure in Device restrictions? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: Windows Defender SmartScreen
Block users from browsing to suspicious websites.
Microsoft Defender SmartScreen protects against phishing or malware websites and applications, and the downloading of potentially malicious files.
Microsoft Defender SmartScreen determines whether a site is potentially malicious Box 2: Windows Defender Antivirus Scan all scripts loaded into Microsoft Edge.
Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender- smartscreen/windows-defender-smartscreen-overview
NEW QUESTION # 178
You have a Microsoft 365 tenant that contains the objects shown in the following table.
You are creating a compliance policy named Compliance1.
Which objects can you specify in Compliance1 as additional recipients of noncompliance notifications?
- A. Group3, Group4, and Admin1 only
- B. Group1, Group2, Group3, and Group4 only
- C. Group3 and Group4 only
- D. Group1, Group2, Group3, Group4, and Admin1
- E. Group1, Group2, and Group3 only
Answer: E
Explanation:
Need email address to specify additional recipients of noncompliance notification.
Security groups have no email address.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/admin/create-groups/compare- groups?view=o365-worldwide
NEW QUESTION # 179
You have 100 Windows 10 devices enrolled in Microsoft Intune.
You need to configure the devices to retrieve Windows updates from the internet and from other computers on a local network.
Which Delivery Optimization setting should you configure, and which type of Intune object should you create? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Delivery Optimization setting: B. Download mode Intune object: A configuration profile To configure the devices to retrieve Windows updates from the internet and from other computers on a local network, you need to configure the Download mode setting in a Delivery Optimization device configuration profile. This setting specifies how the devices use Delivery Optimization to download updates. You can choose from several options, such as HTTP only, LAN only, or Group. For example, you can set the Download mode to Group and specify a group ID for the devices to share updates among themselves and with other devices that have the same group ID. You can also set the Download mode to Internet to allow the devices to download updates from Microsoft or other devices on the internet that use Delivery Optimization.
References: https://docs.microsoft.com/en-us/mem/intune/configuration/delivery-optimization-windows
NEW QUESTION # 180
......
Download Latest & Valid Questions For Microsoft MD-102 exam: https://passleader.bootcamppdf.com/MD-102-exam-actual-tests.html