Microsoft Microsoft Certifications MD-101 Questions & Answers

• Question 341:

  You have a Microsoft 365 subscription.

  You have 20 computers that run Windows 10 and are joined to Microsoft Azure Active Directory (Azure AD).

  You plan to replace the computers with new computers that run Windows 10. The new computers will be joined to Azure AD.

  You need to ensure that the desktop theme, taskbar settings, and Bluetooth settings are available on the new computers.

  What should you use?

  A. Folder Redirection

  B. The Microsoft SharePoint Migration Tool

  C. Enterprise State Roaming

  D. Roaming user profiles

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/windows-server/storage/folder-redirection/folder-redirection-rup-overview

• Question 342:

  You have a Microsoft 365 tenant that contains the objects shown in the following table.

  

  In the Microsoft Endpoint Manager admin center, you are creating a Microsoft 365 Apps app named App1. To which objects can you assign App1?

  A. Admin1, Group3, and Group4 only

  B. Group1, Group2, Group3, and Group4 only

  C. Admin1, Group1, Group2, Group3, and Group4

  D. Group1, Group3, and Group4 only

  E. Group3 and Group4 only

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/mem/intune/apps/apps-deploy https://docs.microsoft.com/en-us/microsoft-365/admin/create-groups/compare-groups?view=o365-worldwide

• Question 343:

  You use Windows Admin Center to remotely administer computers that run Windows 10.

  When connecting to Windows Admin Center, you receive the message shown in the following exhibit.

  

  You need to prevent the message from appearing when you connect to Windows Admin Center. To which certificate store should you import the certificate?

  A. Client Authentication Issuers

  B. Trusted Root Certification Authorities

  C. Personal

  Correct Answer: B

  The domain members should have trusted root certificate stored.

  Reference:

  https://social.technet.microsoft.com/Forums/en-US/6b3abb8e-007e-4047-bd30-2946b9c3aaba/windows-admin-center-three-questions-login-and-certs? forum=ws2016

• Question 344:

  You have the devices shown in the following table.

  

  You plan to implement Microsoft Defender for Endpoint.

  You need to identify which devices can be onboarded to Microsoft Defender for Endpoint.

  What should you identify?

  A. Device3 only

  B. Device2, Device3, and Device4 only

  C. Device1, Device2, Device3, and Device4

  D. Device2 and Device3 only

  E. Device1, Device2, and Device3 only

  Correct Answer: B

  All the operating systems are supported.

  Note: You can onboard the following operating systems: Windows 8.1 Windows 10, version 1607 or later

  Windows 11 Windows Server 2012 R2 Windows Server 2016

  Windows Server Semi-Annual Channel (SAC), version 1803 or later Windows Server 2019 Windows Server 2022 Reference:

  https://docs.microsoft.com/en-us/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#bkmk_os

• Question 345:

  You have a Microsoft 365 tenant that uses Microsoft Intune.

  You use the Company Portal app to access and install published apps to enrolled devices.

  From the Microsoft Endpoint Manager admin center, you add a Microsoft Store app.

  Which two App information types are visible in the Company Portal?

  NOTE: Each correct selection is worth one point.

  A. Information URL

  B. Owner

  C. Privacy URL

  D. Developer

  Correct Answer: AC

  Information URL: The information URL will be visible to users in Company Portal.

  Privacy URL: The privacy URL will be visible to users in Company Portal.

  Incorect answers:

  Developer: This information will be visible to people signed into the admin center.

  Owner: This name will be visible to people signed in to the admin center.

  Reference:

  https://docs.microsoft.com/en-us/mem/intune/apps/store-apps-windows

• Question 346:

  Your company has a Microsoft 365 tenant.

  Users sign in to Windows 10 devices by using their Microsoft 365 account.

  On a computer, you open Sync your settings as shown in the exhibit. (Click the Exhibit tab.)

  

  You need to set Sync settings to On.

  What should you do?

  A. Enable User Experience Virtualization (UE-V).

  B. Enable Windows Mobility Center.

  C. Disable Windows Hello for Business.

  D. Enable Enterprise State Roaming.

  Correct Answer: D

  Enterprise State Roaming provides users with a unified experience across their Windows devices and reduces the time needed for configuring a new device.

  Enterprise State Roaming operates similar to the standard consumer settings sync that was first introduced in Windows 8.

  Note: To enable Enterprise State Roaming

  1.

  Sign in to the Azure portal.

  2.

  Browse to Azure Active Directory > Devices > Enterprise State Roaming.

  3.

  Select Users may sync settings and app data across devices.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/devices/enterprise-state-roaming-enable

• Question 347:

  You have a Microsoft 365 tenant that contains the Windows 10 devices shown in the following table.

  

  You enable Enterprise State Roaming.

  You need to ensure that User1 can sync Windows settings across the devices.

  What should you do?

  A. Remove Device1 and Device2 from Intune.

  B. Join Device2 to Azure AD.

  C. Add a Microsoft account to each device.

  D. Enroll Device3 in Intune.

  Correct Answer: B

  For a Windows 10 or newer device to use the Enterprise State Roaming service, the device must authenticate using an Azure AD identity. For devices that are joined to Azure AD, the user's primary sign-in identity is their Azure AD identity, so

  no other configuration is required.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/devices/enterprise-state-roaming-enable

• Question 348:

  You have a Microsoft 365 tenant that contains the objects shown in the following table.

  

  You are creating a compliance policy named Compliance1.

  Which objects can you specify in Compliance1 as additional recipients of noncompliance notifications?

  A. Group1, Group2, Group3, Group4, and Admin1

  B. Group1, Group2, Group3, and Group4 only

  C. Group3, Group4, and Admin1 only

  D. Group1, Group2, and Group3 only

  E. Group3 and Group4 only

  Correct Answer: D

  Need email address to specify additional recipients of noncompliance notification.

  Security groups have no email address.

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/admin/create-groups/compare-groups?view=o365-worldwide

• Question 349:

  You enable controlled folder access in audit mode for several computers that run Windows 10.

  You need to review the events audited by controlled folder access.

  Which Event Viewer log should you view?

  A. Applications and Services\Microsoft\Windows\Windows Defender\Operational

  B. Windows\Security

  C. Applications and Services\Microsoft\Windows\Known Folders\Operational

  Correct Answer: A

  Review controlled folder access events in Windows Event Viewer

  Controlled folder access events appear in Windows Event Viewer under Microsoft/Windows/Windows Defender/Operational folder.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/evaluate-controlled-folder-access?view=o365-worldwide

• Question 350:

  Your network contains an Active Directory domain. The domain contains 5,000 computers that run Windows 10.

  All users use Roaming User Profiles.

  Some users report that it takes a long time to sign in to the computers.

  You discover that the users have user profiles that are larger than 1 GB.

  You need to reduce the amount of time it takes for the users to sign in.

  What should you configure?

  A. Folder Redirection by using a Group Policy Object (GPO)

  B. Sync your settings in the Settings app

  C. Delivery Optimization in the Settings app

  D. Microsoft User Experience Virtualization (UE-V) by using PowerShell

  Correct Answer: A

  Folder Redirection and Offline Files are used together to redirect the path of local folders (such as the Documents folder) to a network location, while caching the contents locally for increased speed and availability. Roaming User Profiles is

  used to redirect a user profile to a network location.

  Reference:

  https://docs.microsoft.com/en-us/windows-server/storage/folder-redirection/folder-redirection-rup-overview