Microsoft Microsoft Certifications MD-101 Questions & Answers

• Question 91:

  HOTSPOT

  You have a Microsoft Intune subscription.

  You are creating a Windows Autopilot deployment profile named Profile1 as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/user-driven#:~:text=Windows%20Autopilot%20user%2Ddriven%20mode%20is%20designed%20to%20enable%20new,personnel%20ever%20touch%20the%20device.

  https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/white-glove

• Question 92:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant named adatum.com that contains the users shown in the following table.

  

  You configure the following device settings for the tenant:

  1.

  Users may join devices to Azure AD: User1

  2.

  Additional local administrators on Azure AD joined devices: None

  You install Windows 10 on a computer named Computer1.

  You need to identify which users can join Computer1 to adatum.com, and which users will be added to the Administrators group after joining adatum.com.

  Which users should you identify? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  When you connect a Windows device with Azure AD using an Azure AD join, Azure AD adds the following security principals to the local administrators group on the device: The Azure AD global administrator role The Azure AD device administrator role The user performing the Azure AD join

  After several tests, only user (without role) is able to join Azure AD. Using A global admin account display an error. After that, global admin account have local admin rights on this device.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin

• Question 93:

  HOTSPOT

  Your network contains an on-premises Active Directory forest named contoso.com that syncs to Azure Active Directory (Azure AD). Azure AD contains the users shown in the following table.

  

  You assign Windows 10 Enterprise E5 licenses to Group1 and User2. You add computers to the network as shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes Computer 1 is directly connected to Azure AD.

  Box 2: Yes Computer 2 is Hybrid Azure AD connected.

  Box 3: No User2 is not in Azure Active Directory.

  Reference:

  https://docs.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation

• Question 94:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.

  

  Contoso.com contains the devices shown in the following table.

  

  In Intune, you create the app protection policies shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes - User1 is a member of Group1, Device1 is Intune managed, Policy1 is enrolled and assigned to Group1. Box 2: No - User2 is a member of Group2, Device1 is Intune managed, Policy2 is not enrolled and is assigned to Group2. Box 3: Yes - User2 is a member of Group2,Device2 is not Intune managed, Policy2 is assigned to Group2

  Reference: https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policy

• Question 95:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the devices shown in the following table.

  

  All devices contain an app named App1 and are enrolled in Microsoft Intune.

  You need to prevent users from copying data from App1 and pasting the data into other apps.

  Which type of policy and how many policies should you create in Intune? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 2: 3 One for Windows, one for Android, and one for iOS.

  Reference:

  https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policies

  https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policies-configure-windows-10

• Question 96:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named User1. User1 has the devices shown in the following table.

  

  On September 5, 2019, you create and enforce a terms of use (ToU) in contoso.com. The ToU has the following settings:

  1.

  Name: Terms1

  2.

  Display name: Terms name

  3.

  Require users to expand the terms of use: Off

  4.

  Require users to consent on every device: On

  5.

  Expire consents: On

  6.

  Expire starting on: October 10, 2019

  7.

  Frequency Monthly

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/terms-of-use#frequently-asked-questions

• Question 97:

  HOTSPOT

  Your company uses Microsoft System Center Configuration Manager (Current Branch) and purchases 365 subscription.

  You need to set up Desktop Analytics for Configuration Manager.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: The Microsoft Endpoint Manager console

  How to set up Desktop Analytics.

  Use this procedure to sign in to Desktop Analytics and configure it in your subscription. This procedure is a one-time process to set up Desktop Analytics for your organization.

  Initial onboarding

  1.

  Open the Desktop Analytics portal in the Microsoft Endpoint Manager admin center as a user with the Global Admin role. Select Start. Alternatively, on the Configuration Manager console, go to the Software Library workspace, select the Desktop Analytics Servicing node, and select Plan deployments.

  2.

  Etc.

  Box 2: Configure Azure Services Use this procedure to connect Configuration Manager to Desktop Analytics, and configure device settings. This procedure is a one-time process to attach your hierarchy to the cloud service.

  In the Configuration Manager console, go to the Administration workspace, expand Cloud Services, and select the Azure Services node. Select Configure Azure

  Services in the ribbon.

  Reference:

  https://docs.microsoft.com/en-us/mem/configmgr/desktop-analytics/connect-configmgr

  https://docs.microsoft.com/en-us/mem/configmgr/desktop-analytics/set-up

• Question 98:

  HOTSPOT

  Your company has computers that run Windows 10 and are Microsoft Azure Active Directory (Azure AD)-joined.

  The company purchases an Azure subscription.

  You need to collect Windows events from the Windows 10 computers in Azure. The solution must enable you to create alerts based on the collected events.

  What should you create in Azure and what should you configure on the computers? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  The Azure Log Analytics agent collects telemetry from Windows and Linux virtual machines in any cloud, on-premises machines, and those monitored by System

  Center Operations Manager and sends collected data to your Log Analytics workspace in Azure Monitor.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-monitor/platform/log-analytics-agent

• Question 99:

  HOTSPOT

  You have a workgroup computer named Computer1 that runs Windows 10 and has the users shown in the following table.

  

  Group1 is a member of Group3.

  You are creating a file named Kiosk.xml that specifies a lockdown profile for a multi-app kiosk.

  Kiosk.xml contains the following section.

  

  You apply Kiosk.xml to Computer1.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No The lockdown profile only applies to the specified group, not to the nested group. Box 2: No

  Box 3: Yes Reference: https://docs.microsoft.com/en-us/windows/configuration/lock-down-windows-10-to-specific-apps#config-for-group-accounts

• Question 100:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com that syncs to Azure Active Directory (Azure AD). The domain contains the users shown in the following table.

  

  Enterprise State Roaming is enabled for User2.

  You have the computers shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  The requirements of Enterprise State Roaming are:

  1.

  Windows 10, with the latest updates, and a minimum Version 1511 (OS Build 10586 or later) is installed on the device.

  2.

  The device is Azure AD joined or hybrid Azure AD joined.

  3.

  Ensure that Enterprise State Roaming is enabled for the tenant in Azure AD.

  4.

  The user is assigned an Azure Active Directory Premium license.

  5.

  The device must be restarted and the user must sign in again to access Enterprise State Roaming features.

  Box 1: No

  Computer2 runs Windows 8.1.

  Enterprise State Roaming requires Windows 10, with the latest updates, and a minimum Version 1511 (OS Build 10586).

  Also, Enterprise State Roaming is enabled for User2, not for User1.

  Box 2: No

  The device must be Azure AD joined or hybrid Azure AD joined.

  Your network contains an Active Directory domain named contoso.com that syncs to Azure Active Directory (Azure AD), in other words, a hybrid Azure AD.

  Also, Enterprise State Roaming is enabled for User2, not for User1.

  Box 3: Yes

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/devices/enterprise-state-roaming-troubleshooting