Microsoft Microsoft Certifications MD-101 Questions & Answers

• Question 261:

  Your network contains an Active Directory domain named contoso.com that syncs to Azure Active Directory (Azure AD).

  Existing on-premises computers are managed by using Microsoft System Center Configuration Manager (Current Branch). You configure contoso.com for co-management.

  You deploy 100 new devices that run Windows 10. The devices are joined to Azure AD and enrolled in Microsoft Intune.

  You need to ensure that the devices are co-managed.

  What should you create in Intune first?

  A. a conditional access policy

  B. a device compliance policy

  C. an app for the Configuration Manager client

  D. a device configuration profile

  E. an app configuration policy

  Correct Answer: C

  For new internet-based devices, you need to create an app in Intune. Deploy this app to Windows 10 devices that aren't already Configuration Manager clients. This scenario is when you have new Windows 10 devices that join Azure AD and automatically enroll to Intune. You install the Configuration Manager client to reach a co-management state.

  References: https://docs.microsoft.com/en-us/configmgr/comanage/how-to-prepare-win10

• Question 262:

  You have a Microsoft 365 subscription. All devices run Windows 10.

  You need to prevent users from enrolling the devices in the Windows Insider Program.

  What two configurations should you perform from the Endpoint Management admin center?

  Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  A. a Windows 10 security baseline

  B. an app configuration policy

  C. a custom device configuration profile

  D. a Windows 10 update ring

  E. a device restrictions device configuration profile

  Correct Answer: CD

  C: Microsoft Intune includes many built-in settings to control different features on a device. You can also create custom profiles, which are created similar to built- in profiles. Custom profiles are great when you want to use device settings and features that aren't built in to Intune. These profiles include features and settings for you to control on devices in your organization. For example, you can create a custom profile that sets the same feature for every Windows device.

  D: Set up Insider Preview builds using Intune

  1.

  Log in to the Azure portal and select Intune.

  2.

  Go to Software Updates > Windows 10 Update Rings and select + Create to make an Update Ring policy. Add a name and select the Settings section to configure its settings.

  3.

  Etc.

  

  Reference: https://docs.microsoft.com/en-us/windows-insider/business/manage-builds

• Question 263:

  You have a Microsoft 365 subscription.

  A remote user purchases a laptop from a retail store. The laptop is intended for company use and has Windows 10 Pro edition installed.

  You need to configure the laptop to meet the following requirements:

  1.

  Modify the layout of the Start menu

  2.

  Upgrade Windows 10 to Windows 10 Enterprise

  3.

  Join the laptop to a Microsoft Azure Active Directory (Azure AD) domain named contoso.com

  The solution must minimize how long it takes for the user to apply the configurations.

  What should you do?

  A. Create a custom Windows image (.wim) file that contains an image of Windows 10 Enterprise and upload the file to a Microsoft

  B. Create a provisioning package (.ppkg) file and email the file to the user

  C. Create a Windows To Go workspace and ship the workspace to the user

  D. Create a Sysprep Unattend (.xml) file and email the file to the user

  Correct Answer: B

  A provisioning package (.ppkg) is a container for a collection of configuration settings. With Windows client, you can create provisioning packages that let you quickly and efficiently configure a device without having to install a new image. Note: Windows provisioning makes it easy for IT administrators to configure end-user devices without imaging. Using Windows provisioning, an IT administrator can easily specify desired configuration and settings required to enroll the devices into management and then apply that configuration to target devices in a matter of minutes. It is best suited for small- to medium-sized businesses with deployments that range from tens to a few hundred computers.

  Reference: https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-packages

• Question 264:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company uses Windows Autopilot to configure the computer settings of computers issued to users.

  A user named User1 has a computer named Computer1 that runs Windows 10.

  User1 leaves the company.

  You plan to transfer the computer to a user named User2.

  You need to ensure that when User2 first starts the computer, User2 is prompted to select the language setting and to agree to the license agreement.

  Solution: You perform a local Windows Autopilot Reset.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead:

  Windows Autopilot user-driven mode lets you configure new Windows devices to automatically transform them from their factory state to a ready-to-use state. This process doesn't require that IT personnel touch the device.

  The process is very simple. Devices can be shipped or distributed to the end user directly with the following instructions:

  Unbox the device, plug it in, and turn it on.

  Choose a language (only required when multiple languages are installed), locale, and keyboard.

  Connect it to a wireless or wired network with internet access. If using wireless, the user must establish the Wi-Fi link.

  Specify your e-mail address and password for your organization account.

  The rest of the process is automated. The device will:

  Join the organization.

  Enroll in Intune (or another MDM service)

  Get configured as defined by the organization.

  Reference:

  https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot-reset

• Question 265:

  You install a feature update on a computer that runs Windows 10.

  How many days do you have to roll back the update?

  A. 5

  B. 10

  C. 14

  D. 30

  Correct Answer: B

  Microsoft has changed the time period associated with operating system rollbacks with Windows 10 version 1607, decreasing it to 10 days. Previously, Windows 10 had a 30-day rollback period.

  References: https://redmondmag.com/articles/2016/08/04/microsoft-shortens-windows-10-rollback-period.aspx

• Question 266:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company uses Windows Update for Business.

  The research department has several computers that have specialized hardware and software installed.

  You need to prevent the video drivers from being updated automatically by using Windows Update.

  Solution: From the Windows Update settings in a Group Policy object (GPO), you enable Do not include drivers with Windows Updates.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Do not include drivers with Windows Updates.

  Allows admins to exclude Windows Update drivers during updates.

  To configure this setting in Group Policy, use Computer Configuration\Administrative Templates\Windows Components\Windows update\Do not include drivers with Windows Updates. Enable this policy to not include drivers with Windows

  quality updates. If you disable or do not configure this policy, Windows Update will include updates that have a Driver classification.

  Reference:

  https://docs.microsoft.com/en-us/windows/deployment/update/waas-wu-settings

• Question 267:

  Your company standardizes on Windows 10 Enterprise for all users.

  Some users purchase their own computer from a retail store. The computers run Windows 10 Pro.

  You need to recommend a solution to upgrade the computers to Windows 10 Enterprise, join the computers to Microsoft Azure Active Directory (Azure AD), and install several Microsoft Store apps. The solution must meet the following

  requirements:

  1.

  Ensure that any applications installed by the users are retained.

  2.

  Minimize user intervention.

  What is the best recommendation to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

  A. Microsoft Deployment ToolKit (MDT)

  B. Windows Deployment Services (WDS)

  C. a Windows Configuration Designer provisioning package

  D. Windows AutoPilot

  Correct Answer: C

  You use Windows Configuration Designer to create a provisioning package (.ppkg) that contains customization settings. You can apply the provisioning package to a device running Windows 10. Incorrect Answers:

  A: Microsoft Deployment Toolkit (MDT) allows you to automate the deployment of Windows operating systems in your organization. It is not used to upgrade to Windows 10 Enterprise.

  B: Windows Deployment Services (WDS) is the revised version of Remote Installation Services (RIS). WDS enables the deployment of Windows operating systems. You can use it to set up new computers using network-based installations. It is not used to upgrade to Windows 10 Enterprise.

  D: Windows Autopilot is a user-driven mode designed to minimize intervention of the IT administrator.

  References: https://docs.microsoft.com/en-us/windows/deployment/upgrade/windows-10-edition-upgrades https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-create-package

• Question 268:

  Your network contains an Active Directory forest. The forest contains a single domain and three sites named Site1, Site2, and Site3. Each site is associated to two subnets. Site1 contains two subnets named SubnetA and SubnetB.

  All the client computers in the forest run Windows 10. Delivery Optimization is enabled.

  You have a computer named Computer1 that is in SubnetA.

  From which hosts will Computer1 download updates?

  A. the computers in Site1 only

  B. any computer in the domain

  C. the computers in SubnetA only

  D. any computer on the network

  Correct Answer: C

  Download mode option : LAN (1=Default)

  This default operating mode for Delivery Optimization enables peer sharing on the same network. The Delivery Optimization cloud service finds other clients that connect to the Internet using the same public IP as the target client. These

  clients then try to connect to other peers on the same network by using their private subnet IP.

  https://docs.microsoft.com/en-us/windows/deployment/update/waas-delivery-optimization-reference

  https://docs.microsoft.com/en-us/windows/deployment/do/waas-delivery-optimization-reference#download-mode

  https://techcommunity.microsoft.com/t5/windows-it-pro-blog/delivery-optimization-scenarios-and-configuration-options/ba-p/280195

• Question 269:

  You have a computer named Computer5 that has Windows 10 installed.

  You create a Windows PowerShell script named config.ps1.

  You need to ensure that config.ps1 runs after feature updates are installed on Computer5.

  Which file should you modify on Computer5?

  A. Unattend.xml

  B. Unattend.bat

  C. SetupConfig.ini

  D. LiteTouch.wsf

  Correct Answer: C

  You can run a post script after a Windows 10 feature upgrade with SetupConfig.ini

  Reference: https://www.joseespitia.com/2017/06/01/how-to-run-a-post-script-after-a-windows-10-feature-upgrade/

• Question 270:

  Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD). The domain contains 500 laptops that run Windows 8.1 Professional. The users of the laptops work from home.

  Your company uses Microsoft Intune, the Microsoft Deployment Toolkit (MDT), and Windows Configuration Designer to manage client computers.

  The company purchases 500 licenses for Windows 10 Enterprise.

  You verify that the hardware and applications on the laptops are compatible with Windows 10.

  The users will bring their laptop to the office, where the IT department will deploy Windows 10 to the laptops while the users wait.

  You need to recommend a deployment method for the laptops that will retain their installed applications. The solution must minimize how long it takes to perform the deployment.

  What should you include in the recommendation?

  A. an in-place upgrade

  B. a clean installation by using a Windows Configuration Designer provisioning package

  C. Windows AutoPilot

  D. a clean installation and the User State Migration Tool (USMT)

  Correct Answer: A

  For existing computers running Windows 7, Windows 8, or Windows 8.1, the recommended path for organizations deploying Windows 10 leverages the Windows installation program (Setup.exe) to perform an in-place upgrade, which automatically preserves all data, settings, applications, and drivers from the existing operating system version. This requires the least IT effort, because there is no need for any complex deployment infrastructure.

  Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-10-deployment-scenarios#in-place-upgrade