Microsoft Role-based MD-101 Questions & Answers

• Question 1:

  You need to meet the technical requirements for the LEG department computers.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows/deployment/update/windows-analytics-azure-portal

• Question 2:

  DRAG DROP

  You need to meet the technical requirements for the LEG department computers.

  Which three actions should you perform in sequence?

  To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Step 3: Add the commercial ID to the LEG department computers

  The build in diagnostics/telemetry data needs to be configured to with the correct commercial ID.

  Reference:

  https://docs.microsoft.com/en-us/mem/configmgr/desktop-analytics/set-up https://systemcenterdudes.com/sccm-windows-analytics-log-analytics/

• Question 3:

  HOTSPOT

  You need to meet the technical requirements for Windows Autopilot.

  Which two settings should you configure from the Azure Active Directory blade?

  To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Devices Note: Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows Autopilot.

  Configure device settings If you want to manage device identities by using the Azure portal, the devices need to be either registered or joined to Azure AD. As an administrator, you can control the process of registering and joining devices by configuring device

  settings.

  Box 2: Mobility (MDM and MAM)

  Windows Autopilot Deployment for existing devices.

  Configure the Enrollment Status Page.

  If you want, you can set up an enrollment status page for Autopilot using Intune.

  To enable and configure the enrollment and status page:

  1) Open Intune in the Azure portal.

  2) Access Intune > Device enrollment > Windows enrollment and Set up an enrollment status page.

  3) Access Azure Active Directory > Mobility (MDM and MAM) > Microsoft Intune and Configure automatic MDM enrollment and configure the MDM user scope for some or all users.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal#configure-device-settings https://docs.microsoft.com/en-us/mem/autopilot/existing-devices

• Question 4:

  You need to meet the technical requirements for the new HR department computers.

  How should you configure the provisioning package? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: HR-%RAND:4%

  Create a provisioning package for new computers in the HR department.

  The naming convention for the computers is the department acronym, followed by a hyphen, and then four numbers, for example, FIN-6785.

  Box 2: OU=Computers, OU=HR, DC=Contoso, DC=com

  Each department has an organizational unit (OU) that contains a child OU named Computers. Each computer account is in the Computers OU of its respective department.

  AccountOU:

  Enter the full path for the organizational unit. For example: OU=testOU,DC=domain,DC=Domain,DC=com.

  Name of organizational unit for the computer account

  Reference:

  https://docs.microsoft.com/en-us/windows/configuration/wcd/wcd-accounts

• Question 5:

  You need a new conditional access policy that has an assignment for Office 365 Exchange Online.

  You need to configure the policy to meet the technical requirements for Group4.

  Which two settings should you configure in the policy? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  The policy needs to be applied to Group4 so we need to configure Users and Groups. The Access controls are set to Block access

  

  We therefore need to exclude compliant devices.

  From the scenario:

  Ensure that the users in a group named Group4 can only access Microsoft Exchange Online from devices that are enrolled in Intune.

  Note: When a device enrolls in Intune, the device information is updated in Azure AD to include the device compliance status. This compliance status is used by conditional access policies to block or allow access to e-mail and other

  organization resources.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/conditions

  https://docs.microsoft.com/en-us/intune/device-compliance-get-started

• Question 6:

  What is the maximum number of devices that User1 and User2 can enroll in Intune? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: 10 devices User1 is a member of GroupA. GroupA device limit is 10.

  Box 2: 15 devices User2 is a member of GroupB. GroupB device limit is 15.

• Question 7:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 8:

  To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Device 3 only Policy1 applies to Device3 (Android)

  Box 2: Device 4 only Policy2 applies to Device4 (iOS)

  Reference:

  https://docs.microsoft.com/en-us/intune/device-profile-assign

• Question 9:

  You are evaluating which devices are compliant.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No Policy3, which requires encryption, applies to Device1.

  Box 2: Yes Policy1, which has no encryption requirement, applies to Device3.

  Box 3: Yes Policy2, which has no encryption requirement, applies to Device4.

• Question 10:

  HOTSPOT

  You implement the planned changes for Connection1 and Connection2.

  How many VPN connections will there be for User1 when the user signs in to Device1 and Device2? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: 2 Device1 has VPN1 and VPN2.

  Box 2: 3 Device2 has VPN1, VPN2 (group assignment), and VPN3