Microsoft Microsoft Certifications MD-101 Questions & Answers

• Question 211:

  You have a Microsoft 365 subscription.

  You need to deploy Microsoft Office 365 ProPlus applications to Windows 10 devices.

  What should you do first?

  A. From Microsoft Azure Active Directory (Azure AD), create an app registration.

  B. From the Device Management admin center, create an app.

  C. From the Device Management admin center, create an app configuration policy.

  D. From the Device Management admin center, enable Microsoft Store for Business synchronization.

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/mem/intune/apps/apps-add-office365

• Question 212:

  You have Windows 10 devices that are managed by using Microsoft Intune. Intune and the Microsoft Store for Business are integrated.

  You need to deploy the Remote Desktop modern app as an automatic install to the Windows 10 devices without user interaction.

  Which three actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Create an Azure Active Directory group that contains all users.

  B. From the Intune portal, create a Microsoft Store app for the Remote Desktop modern app.

  C. From the Intune portal assign the app to the Azure Active Directory group.

  D. Create an Azure Active Directory group that contains the Windows 10 devices.

  E. From the Microsoft Store for Business portal, assign a license for the app to all the users in the Azure Active Directory group.

  F. For your organization, make the app available in the Microsoft Store for Business.

  Correct Answer: BCD

  Step 1: Create an Azure Active Directory group that contains the Windows 10 devices.

  Step 2: From the Endpoint Manager admin center, create a Microsoft Store app for the Remote Desktop modern app.

  Step 3: From the Endpoint Manager admin center, assign the app to the Azure Active Directory group.

  Reference:

  https://docs.microsoft.com/en-us/mem/intune/apps/store-apps-windows

  https://docs.microsoft.com/en-us/mem/intune/apps/apps-deploy

  https://docs.microsoft.com/en-us/mem/intune/apps/windows-store-for-business

  https://docs.microsoft.com/en-us/mem/intune/apps/apps-add

• Question 213:

  You have a Microsoft 365 subscription.

  You have 20 computers that run Windows 10 and are joined to Microsoft Azure Active Directory (Azure AD).

  You plan to replace the computers with new computers that run Windows 10. The new computers will be joined to Azure AD.

  You need to ensure that the desktop background, the favorites, and the browsing history are available on the new computers.

  What should you use?

  A. Folder Redirection

  B. The Microsoft SharePoint Migration Tool

  C. Enterprise State Roaming

  D. Roaming user profiles

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/devices/enterprise-state-roaming-windows-settings-reference

• Question 214:

  You have an Azure Active Directory (Azure AD) tenant that contains a user named User1. User1 has the device shown in the following table.

  

  Enterprise State Roaming is configured for User1.

  User1 signs in to Device4 and changes the desktop.

  You need to identify on which devices User1 will have a changed desktop.

  Which devices should you identify?

  A. Device1, Device2, Device3, and Device4

  B. Device4 only

  C. Device2, Device3, and Device4 only

  D. Device2 and Device4 only

  E. Device3 and Device4 only

  Correct Answer: E

  The requirements of Enterprise State Roaming are:

  1.

  Windows 10, with the latest updates, and a minimum Version 1511 (OS Build 10586 or later) is installed on the device.

  2.

  The device is Azure AD joined or hybrid Azure AD joined.

  3.

  Ensure that Enterprise State Roaming is enabled for the tenant in Azure AD.

  4.

  The user is assigned an Azure Active Directory Premium license.

  5.

  The device must be restarted and the user must sign in again to access Enterprise State Roaming features.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/devices/enterprise-state-roaming-troubleshooting

• Question 215:

  You have a Microsoft 365 subscription.

  You have a conditional access policy that requires multi-factor authentication (MFA) for users in a group name Sales when the users sign in from a trusted location. The policy is configured as shown in the exhibit. (Click the Exhibit tab.)

  

  You create a compliance policy.

  You need to ensure that the users are authenticated only if they are using a compliant device.

  What should you configure in the conditional access policy?

  A. a condition

  B. a session control

  C. a cloud app

  D. a grant control

  Correct Answer: D

  Grant options available: Require multifactor authentication Require authentication strength (Preview) Require device to be marked as compliant Require Hybrid Azure AD joined device Require approved client app See list of approved client apps Require app protection policy See list of policy protected client apps Require password change

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-grant

• Question 216:

  You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune.

  You redirect Windows known folders to Microsoft OneDrive for Business.

  Which folder will be included in the redirection?

  A. Saved Games

  B. Documents

  C. Music

  D. Downloads

  E. Favorites

  F. AppData

  G. Videos

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/onedrive/redirect-known-folders

• Question 217:

  Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD).

  You have a Microsoft 365 subscription.

  You create a conditional access policy for Microsoft Exchange Online.

  You need to configure the policy to prevent access to Exchange Online unless a user is connecting from a device that is hybrid Azure AD-joined.

  Which settings should you configure?

  A. Locations

  B. Device platforms

  C. Sign-in risk

  D. Device state

  Correct Answer: D

  The device state condition was used to exclude devices that are hybrid Azure AD joined and/or devices marked as compliant with a Microsoft Intune compliance policy from an organization's Conditional Access policies.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/conditions#device-state

• Question 218:

  Your company plans to deploy Windows 10 to devices that will be configured for English use and other devices that will be configured for Korean use.

  You need to create a single multivariant provisioning package for the planned devices.

  You create the provisioning package.

  What should you do next to add the language settings to the package?

  A. Modify the Customizations.xml file.

  B. Create a file named Languages.xml that contains a header for Korean.

  C. Modify the .ppkg file.

  D. Create a file named Languages.xml that contains a header for English.

  Correct Answer: A

  Follow these steps to create a provisioning package with multivariant capabilities.

  1.

  Build a provisioning package and configure the customizations you want to apply during certain conditions.

  2.

  After you've configured the settings, save the project.

  3.

  Open the project folder and copy the customizations.xml file to any local location.

  4.

  Use an XML or text editor to open the customizations.xml file.

  5.

  Edit the customizations.xml file to create a Targets section to describe the conditions that will handle your multivariant settings.

  6.

  In the customizations.xml file, create a Variant section for the settings you need to customize.

  7.

  Save the updated customizations.xml file and note the path to this updated file. You will need the path as one of the values for the next step.

  8.

  Use the Windows Configuration Designer command-line interface to create a provisioning package using the updated customizations.xml.

  References: https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-multivariant

• Question 219:

  You have a Microsoft Azure Active Directory (Azure AD) tenant. All corporate devices are enrolled in Microsoft Intune.

  You have a web-based application named App1 that uses Azure AD to authenticate.

  You need to prompt all users of App1 to agree to the protection of corporate data when they access App1 from both corporate and non-corporate devices.

  What should you configure?

  A. Notifications in Device compliance

  B. Terms and Conditions in Device enrollment

  C. Terms of use in Conditional access

  D. an Endpoint protection profile in Device configuration

  Correct Answer: C

  Use an Intune terms and conditions policy to present relevant disclaimers for legal or compliance requirements to device users. A terms and conditions policy requires targeted users to accept your terms in Company Portal before they can enroll devices or access protected resources.

  Reference: https://docs.microsoft.com/en-us/mem/intune/enrollment/terms-and-conditions-create

• Question 220:

  You have an Azure Active Directory (Azure AD) tenant named adatum.com. The tenant contains Windows 10 devices that are enrolled in Microsoft Intune.

  You create an Azure Log Analytics workspace and add the Device Health Solution to the workspace.

  You need to create a custom device configuration profile that will enroll the Windows 10 devices in Device Health.

  Which OMA-URI should you add to the profile?

  A. ./Vendor/MSFT/DMClient/Provider/MS DM Server/Push

  B. ./Vendor/MSFT/DMClient/Provider/MS DM Server/CommercialID

  C. ./Vendor/MSFT/DMClient/Provider/MS DM Server/ManagementServerAddressList

  D. ./Vendor/MSFT/DMClient/Provider/MS DM Server/Push/ChannelURI

  Correct Answer: B

  Deploy Commercial ID to Windows devices Besides enabling Windows Telemetry, you will also need to configure the Commercial ID on all your Windows devices. For this we will use the following OMA-URI (Open Mobile Alliance Uniform Resource Identifier) configuration:

  

  Reference: https://allthingscloud.blog/monitor-windows-10-updates-for-intune-mdm-enrolled-devices/