Microsoft Microsoft Certifications MD-101 Questions & Answers

• Question 311:

  You have a Microsoft 365 E5 subscription that contains a group named Group1. You create a Conditional Access policy named CAPolicy1 and assign CAPolicy1 to Group1.

  You need to configure CAPolicy1 to require the members of Group1 to reauthenticate every eight hours when they connect to Microsoft Exchange Online.

  What should you configure?

  A. Session access controls

  B. an assignment that uses a User risk condition

  C. an assignment that uses a Sign-in risk condition

  D. Grant access controls

  Correct Answer: A

  User sign-in frequency

  Sign-in frequency defines the time period before a user is asked to sign in again when attempting to access a resource.

  The Azure Active Directory (Azure AD) default configuration for user sign-in frequency is a rolling window of 90 days.

  Sign-in frequency control

  Sign in to the Azure portal as a global administrator, security administrator, or Conditional Access administrator.

  Browse to Azure Active Directory > Security > Conditional Access.

  Select New policy.

  Give your policy a name. We recommend that organizations create a meaningful standard for the names of their policies.

  Choose all required conditions for customer's environment, including the target cloud apps.

  Under Access controls > Session.

  Select Sign-in frequency.

  Choose Periodic reauthentication and enter a value of hours or days or select Every time.

  Save your policy.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-session-lifetime

• Question 312:

  You have an on-premises server named Server1 that hosts a Microsoft Deployment Toolkit (MDT) deployment share named MDT1.

  You need to ensure that MDT1 supports multicast deployments.

  What should you install on Server1?

  A. Windows Server Update Services (WSUS)

  B. Multipath I/O (MPIO)

  C. Windows Deployment Services (WDS)

  D. Multipoint Connector

  Correct Answer: C

• Question 313:

  You have a Microsoft Office 365 E1 subscription.

  You plan to create Conditional Access policies.

  You need to ensure that users have the required licenses. The solution must minimize costs.

  Which type of license should you assign to each user?

  A. Microsoft Intune

  B. Azure Active Directory Premium Plan 1

  C. Office 365 E3

  D. Windows 365 Business

  Correct Answer: C

• Question 314:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 8.1.

  Computer1 has apps that are compatible with Windows 10.

  You need to perform a Windows 10 in-place upgrade on Computer1.

  Solution: You add Windows 10 startup and install images to a Windows Deployment Services (WDS) server. You start Computer1 by using WDS and PXE, and then you initiate the Windows 10 installation.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-deployment-scenarios-and-tools

• Question 315:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 8.1.

  Computer1 has apps that are compatible with Windows 10.

  You need to perform a Windows 10 in-place upgrade on Computer1.

  Solution: You copy the Windows 10 installation media to a network share. You start Computer1 from Windows PE (WinPE), and then you run setup.exe from the network share.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-deployment-scenarios-and-tools

• Question 316:

  You have a Microsoft 365 subscription and several Conditional Access policies in Azure Active Directory (Azure AD) that contains the resources shown in the following table.

  You need to identify which Conditional Access policies will apply to a user when the user signs in to the Microsoft Office 365 portal from a Windows 10 computer.

  What should you use?

  A. the What If tool

  B. Event Viewer

  C. the Microsoft 365 compliance center

  D. Resultant Set of Policy (RSoP)

  Correct Answer: B

• Question 317:

  You have a Microsoft Deployment Toolkit (MDT) deployment share.

  You plan to deploy Windows 10 by using the Standard Client Task Sequence template.

  You need to modify the task sequence to perform the following actions:

  1.

  Format disks to support Unified Extensible Firmware Interface (UEFI).

  2.

  Create a recovery partition.

  Which phase of the task sequence should you modify?

  A. Initialization

  B. Install

  C. PostInstall

  D. Preinstall

  Correct Answer: D

  Create Extra Partition in MDT We will create a new task sequence for a machine that doesn't have an extra partition.

  1.

  On the Select Template page, click the drop-down and select Standard Client Task Sequence. Complete the remaining steps.

  2.

  Edit the task sequence and click the New Computer only step. Within that step, click Format and Partition Disk(BIOS) step and edit it.

  

  Etc.

  Reference:

  https://www.prajwaldesai.com/create-extra-partition-in-mdt/

• Question 318:

  You have a Microsoft 365 Business Standard subscription and 100 Windows 10 Pro devices.

  You purchase a Microsoft 365 E5 subscription.

  You need to upgrade the Windows 10 Pro devices to Windows 10 Enterprise. The solution must minimize administrative effort.

  Which upgrade method should you use?

  A. Subscription Activation

  B. an in-place upgrade by using Windows installation media

  C. a Microsoft Deployment Toolkit (MDT) lite-touch deployment

  D. Windows Autopilot

  Correct Answer: A

  Windows 10/11 Subscription Activation Windows 10 Pro supports the Subscription Activation feature, enabling users to pu-pets from Windows 10 Pro or Windows 11 Pro to Windows 10 Enterprise or Windows 11 Enterprise, respectively, if they are subscribed to Windows 10/11 Enterprise E3 or E5.

  Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation

• Question 319:

  You have a Microsoft 365 subscription,

  You need provide a user the ability to disable Security defaults and create Conditional Access policies.

  The solution must use the principle of least privilege.

  Which role should you assign to the user?

  A. Global Administrator

  B. Conditional Access Administrator

  C. Security Administrator

  D. Intune Administrator

  Correct Answer: B

  To enable or disable security defaults in your directory, sign in to theAzure portalas a security administrator, Conditional Access administrator, or global administrator.

  Note: Conditional Access Administrator

  Users with this role have the ability to manage Azure Active Directory Conditional Access settings.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults

• Question 320:

  You have a Microsoft 365 subscription.

  You plan to use Conditional Access policies.

  You need to identify which scenarios the policies will support.

  Which two scenarios should you identify? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Enforce multi-factor authentication (MFA) when users access a Microsoft Office 365 service.

  B. Force users to renew an expired SSL certificate.

  C. Force users to update Windows Defender definition files before they sign in to Microsoft Office 365.

  D. Block users from using legacy authentication when signing in to Microsoft Exchange Online.

  E. Force users to install the latest Windows and Microsoft Office updates before they sign in to Office 365.

  Correct Answer: AD

  A: Conditional Access allows administrators to control what Office 365 apps users can gain access to based on if they pass/fail certain conditions. These conditions are enforced by building a policy (or multiple policies) to control how users

  access your Office 365 resources.

  Cloud Apps- What apps do you want to control? Conditional Access does not need to apply to all of Office 365, you can be more granular and just control access to specific apps " E.g. Exchange Online.

  Access can be allowed to Office 365 with the following conditions:

  *

  Require multi-factor authentication " User is allowed in but will need to complete additional security to log in.

  *

  Etc.

  D: The easiest way to block legacy authentication across your entire organization is by configuring a Conditional Access policy that applies specifically to legacy authentication clients and blocks access.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/block-legacy-authentication