Microsoft Microsoft Certifications MD-101 Questions & Answers

• Question 121:

  HOTSPOT

  You have a Microsoft 365 subscription.

  All computers are enrolled in Microsoft Intune.

  You have business requirements for securing your Windows 10 environment as shown in the following table.

  

  What should you implement to meet each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: A conditional access policy

  Box 2: A device compliance policy

  Compliance policies in Intune:

  Define the rules and settings that users and devices must meet to be compliant.

  Include actions that apply to devices that are noncompliant. Actions for noncompliance can alert users to the conditions of noncompliance and safeguard data on noncompliant devices.

  Can be combined with Conditional Access, which can then block users and devices that don't meet the rules.

  Reference:

  https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started

• Question 122:

  HOTSPOT

  You have a computer named Computer1 that runs Windows 10.

  Computer1 has the users shown in the following table.

  

  User1 signs in to Computer1, creates the following files, and then signs out:

  1.

  File1.docx in C:\Users\User1\Desktop

  2.

  File2.docx in C:\Users\Public\Public Desktop

  3.

  File3.docx in C:\Users\Default\ Desktop

  User3 then signs in to Computer1 and creates a file named File4.docx in C:\Users\User3\Desktop.

  User2 has never signed in to Computer1.

  How many DOCX files will appear on the desktop of each user the next time each user signs in? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: 2

  File1.docx (Created by User1) and File2.docx (public)

  Box 2: 2

  File2.docx (public) and File3.docx (default),

  Box 3: 3

  File2 (public) + File3 (Default, user1 creates File3 then User3 signs in) + File4 (desktop, user3)

• Question 123:

  HOTSPOT

  Your company has computers that run Windows 8.1, Windows 10, or macOS.

  The company uses Microsoft Intune to manage the computers.

  You need to create an Intune profile to configure Windows Hello for Business on the computers that support it.

  Which platform type and profile type should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Windows 10 and later Windows Hello for Business is a method for signing in to Windows devices by replacing passwords, smart cards, and virtual smart cards. Intune includes built-in settings so Administrators can configure and use Windows Hello for Business.

  For example, you can use these settings to:

  1.

  Enable Windows Hello for Business for devices and users

  2.

  Set device PIN requirements, including a minimum or maximum PIN length

  3.

  Allow gestures, such as a fingerprint, that users can (or can't use) to sign in to devices

  Box 2: Identity protection

  Create the device profile

  1.

  Sign in to the Microsoft Endpoint Manager admin center.

  2.

  Select Devices > Configuration profiles > Create profile.

  3.

  Enter the following properties:

  4.

  Platform: Select Windows 10 and later.

  5.

  Profile: Select Templates > Identity protection.

  6.

  Etc

  Reference: https://docs.microsoft.com/en-us/mem/intune/protect/identity-protection-configure

• Question 124:

  HOTSPOT

  You have computers that run Windows 10 as shown in the following table.

  

  Computer2 and Computer3 are enrolled in Microsoft Intune.

  In a Group Policy object (GPO) linked to the domain, you enable the Computer Configuration/Administrative Templates/Windows Components/Search/Allow Cortana setting.

  In an Intune device configuration profile, you configure the following:

  1.

  Device/Vendor/MSFT/Policy/Config/ControlPolicyConflict/MDMWinsOverGP to a value of 1

  2.

  Experience/AllowCortana to a value of 0.

  Each of the following statement, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://blogs.technet.microsoft.com/cbernier/2018/04/02/windows-10-group-policy-vs-intune-mdm-policy-who-wins/

• Question 125:

  Reference: https://docs.microsoft.com/en-us/intune/device-fresh-start https://docs.microsoft.com/en-us/intune/devices-wipe

  You use Microsoft Intune to manage Windows updates.

  You have computers that run Windows 10. The computers are in a workgroup and are enrolled in Intune. The computers are configured as shown in the following table.

  

  On each computer, the Select when Quality Updates are received Group Policy setting is configured as shown in the following table.

  

  You have Windows 10 update rings in Intune as shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows/deployment/update/waas-configure-wufb

• Question 126:

  HOTSPOT

  You have 100 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune.

  You need to configure the following device restrictions:

  1.

  Block users from browsing to suspicious websites.

  2.

  Scan all scripts loaded into Microsoft Edge.

  Which two settings should you configure in Device restrictions? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Windows Defender SmartScreen

  Block users from browsing to suspicious websites.

  Microsoft Defender SmartScreen protects against phishing or malware websites and applications, and the downloading of potentially malicious files.

  Microsoft Defender SmartScreen determines whether a site is potentially malicious

  Box 2: Windows Defender Antivirus

  Scan all scripts loaded into Microsoft Edge.

  Reference:

  https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview

• Question 127:

  HOTSPOT

  Your network contains an Active Directory domain named constoso.com that is synced to Microsoft Azure Active Directory (Azure AD). All computers are enrolled in Microsoft Intune.

  The domain contains the computers shown in the following table.

  

  You are evaluating which Intune actions you can use to reset the computers to run Windows 10 Enterprise with the latest update.

  Which computers can you reset by using each action? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Computer 2 and Computer 3 only

  The Fresh Start device action removes any apps that are installed on a PC running Windows 10, version 1709 or later.

  Box 2: Computer1, Computer2, and Computer3

  Windows Wipe:

  

• Question 128:

  HOTSPOT

  You have computers that run Windows 10 and are configured by using Windows Autopilot.

  A user performs the following tasks on a computer named Computer1:

  1.

  Creates a VPN connection to the corporate network

  2.

  Installs a Microsoft Store app named App1

  3.

  Connects to a Wi-Fi network

  You perform a Windows Autopilot Reset on Computer1.

  What will be the state of the computer when the user signs in? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Retained and the passphrase will be retained

  The Windows Autopilot Reset process automatically keeps information from the existing device:

  *

  Wi-Fi connection details.

  Box 2: Removed Windows Autopilot Reset:

  *

  Removes personal files, apps, and settings.

  Box 3: Removed Windows Autopilot Reset:

  Removes personal files, apps, and settings.

  Reapplies a device's original settings.

  Sets the region, language, and keyboard to the original values.

  Maintains the device's identity connection to Azure AD.

  Maintains the device's management connection to Intune.

  The Windows Autopilot Reset process automatically keeps information from the existing device:

  Wi-Fi connection details.

  Provisioning packages previously applied to the device.

  A provisioning package present on a USB drive when the reset process is started.

  Azure Active Directory device membership and MDM enrollment information.

  Reference:

  https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot-reset

• Question 129:

  HOTSPOT

  Your network contains an Active Directory domain. The domain contains computers that run Windows 10 and are enrolled in Microsoft Intune. Updates are deployed by using Windows Update for Business.

  Users in a group named Group1 must meet the following requirements:

  1.

  Update installations must occur any day only between 00:00 and 05:00.

  2.

  Updates must be downloaded from Microsoft and from other company computers that already downloaded the updates.

  You need to configure the Windows 10 Update Rings in Intune to meet the requirements.

  Which two settings should you modify? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Notify download Here's what Automatic update behavior means:

  *

  Notify download Notify the user before downloading the update. Users choose to download and install updates.

  *

  Auto install at maintenance time Updates download automatically and then install during Automatic Maintenance when the device isn't in use or running on battery power.

  *

  Auto install and restart at maintenance time Updates download automatically and then install during Automatic Maintenance when the device isn't in use or running on battery power.

  Box 2: Not configured With Intune, use Delivery Optimization settings for your Windows devices to reduce bandwidth consumption when those devices download applications and updates. Configure Delivery Optimization as part of your device configuration profiles.

  Reference:

  https://deviceadvice.io/2020/01/27/windows-10-update-rings-the-best-user-experience/

  https://docs.microsoft.com/en-us/intune/delivery-optimization-windows#move-from-existing-update-rings-to-delivery-optimization

• Question 130:

  HOTSPOT

  Your company has an infrastructure that has the following:

  1.

  A Microsoft 365 tenant

  2.

  An Active Directory forest

  3.

  Microsoft Intune

  4.

  A Key Management Service (KMS) server

  5.

  A Windows Deployment Services (WDS) server

  6.

  A Microsoft Azure Active Directory (Azure AD) Premium tenant

  The company purchases 100 new computers that run Windows 10.

  You need to ensure that the new computers are joined automatically to Azure AD by using Windows Autopilot.

  What should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Microsoft Endpoint Manager admin center Create an Autopilot device group using Intune

  1.

  In the Microsoft Endpoint Manager admin center, select Groups > New group.

  2.

  Etc.

  Box 2: Device serial number and hardware hash

  Ensure that the CSV file meets requirements. Device information in the CSV file where you capture hardware hashes should include: Serial number Windows product ID Hardware hash Optional group tag Optional assigned user Reference:

  https://docs.microsoft.com/en-us/intune/enrollment-autopilot https://docs.microsoft.com/en-us/mem/autopilot/add-devices