Microsoft Microsoft Certifications MD-101 Questions & Answers

• Question 361:

  You are responsible for your company's Microsoft 365 environment, with co-management enabled.

  All company computers have been deployed via Microsoft Deployment Toolkit (MDT) , and have Windows 10 installed.

  You have been tasked devising a strategy for deploying Microsoft Office 365 ProPlus to new computers. You have to make sure that most recent version is installed at all times, while also reducing the effort required to meet the prerequisites.

  Which of the following actions should you take?

  A. You should make use of Windows Deployment Services (WDS).

  B. You should make use of the Microsoft Deployment Toolkit

  C. You should make use of the Office Deployment Tool (ODT).

  D. You should make use of a Windows Configuration Designer provisioning package

  Correct Answer: C

  The Office Deployment Tool (ODT) is a command-line tool that you can use to download and deploy Microsoft 365 Apps to your client computers. The ODT gives you more control over an Office installation: you can define which products and languages are installed, how those products should be updated, and whether or not to display the install experience to your users.

  Reference: https://docs.microsoft.com/en-us/deployoffice/overview-of-the-office-2016-deployment-tool

• Question 362:

  You manage your company's Microsoft 365 subscription.

  You are tasked with creating an app protection policy for the Microsoft Outlook app on iOS devices that are not enrolled in Microsoft 365 Device Management.

  You have to make sure that the policy is configured to prohibit the users from using the Outlook app if the operating system version is less than 12.0.0. you also have to make sure that an alphanumeric passcode is required for users to

  access the Outlook app

  Which of the following is policy settings that you should configure? (Choose two.)

  A. Conditional launch

  B. Data transfer exemptions

  C. Data protection

  D. Access requirements

  Correct Answer: AD

  Conditional launch Configure conditional launch settings to set sign-in security requirements for your access protection policy.

  By default, several settings are provided with pre-configured values and actions. You can delete some of these, like the Min OS version. You can also select additional settings from the Select one dropdown.

  Access requirements PIN for access Select Require to require a PIN to use this app. The user is prompted to set up this PIN the first time they run the app in a work or school context.

  The PIN is applied when working either online or offline.

  Reference: https://docs.microsoft.com/en-us/intune/app-protection-policy-settings-ios

• Question 363:

  Your company has an Active Directory domain, named weylandindustries.com, and a Microsoft Office 365 subscription. The domain is also synced to Microsoft Azure Active Directory (Azure AD).

  All company computers are domain-joined, and are running the most recent Microsoft OneDrive sync client.

  You are currently configuring OneDrive group policy settings.

  Which of the following is the setting that will minimize the disk space consumed by a user profile, when enabled?

  A. OneDrive Files On-Demand

  B. Silently move known folders to OneDrive

  C. Prompt users to move Windows known folders to OneDrive

  D. Silently configure OneDrive using the primary Windows account

  Correct Answer: A

  OneDrive Files On-Demand enables users to view, search for, and interact with files stored in OneDrive from within File Explorer without downloading them and taking up space on the local hard drive.

  References: https://docs.microsoft.com/en-us/onedrive/plan-onedrive-enterprise

• Question 364:

  You company has a Microsoft Azure Active Directory (Azure AD) tenant that includes Microsoft Intune. All of the Windows 10 devices are enrolled in Intune.

  You are preparing to configure a Windows Information Protection (WIP) policy:

  You need to make sure that the policy is configured to allow for the logging of unacceptable data sharing, but not blocking the action.

  Which of the following is the WIP protection mode that you should use?

  A. Block

  B. Silent

  C. Off

  D. Allow Overrides

  Correct Answer: B

  Silent: WIP runs silently, logging inappropriate data sharing, without blocking anything that would have been prompted for employee interaction while in Allow Override mode. Unallowed actions, like apps inappropriately trying to access a network resource or WIP-protected data, are still stopped.

  Reference: https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune

• Question 365:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  Your company's environment includes a Microsoft 365 subscription.

  Users in the company's sales division have personal iOS or Android devices that are enrolled in Microsoft Intune. New users are added to the sales division on a monthly basis.

  After a mobile application is created for users in the sales division, you are instructed to make sure that the application can only be downloaded by the sales division users

  Solution: You start by assigning the application to a group.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Before you can configure, assign, protect, or monitor apps, you must add them to Microsoft Intune.

  Reference: https://docs.microsoft.com/en-us/intune/apps-add

• Question 366:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  Your company's environment includes a Microsoft 365 subscription.

  Users in the company's sales division have personal iOS or Android devices that are enrolled in Microsoft Intune. New users are added to the sales division on a monthly basis.

  After a mobile application is created for users in the sales division, you are instructed to make sure that the application can only be downloaded by the sales division users

  Solution: You start by adding the application to Intune.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Before you can configure, assign, protect, or monitor apps, you must add them to Microsoft Intune.

  Reference: https://docs.microsoft.com/en-us/intune/apps-add

• Question 367:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  Your company's environment includes a Microsoft 365 subscription.

  Users in the company's sales division have personal iOS or Android devices that are enrolled in Microsoft Intune. New users are added to the sales division on a monthly basis.

  After a mobile application is created for users in the sales division, you are instructed to make sure that the application can only be downloaded by the sales division users

  Solution: You start by adding the application to Microsoft Store for Business.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Before you can configure, assign, protect, or monitor apps, you must add them to Microsoft Intune.

  Reference: https://docs.microsoft.com/en-us/intune/apps-add

• Question 368:

  You need to consider the underlined segment to establish whether it is accurate.

  To enable sideload a LOB application in Windows 10, you should run the Install-Package cmdlet.

  Select “No adjustment required” if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

  A. No adjustment required.

  B. Install-PackageProvider

  C. Save-Package

  D. Add-AppxPackage

  Correct Answer: D

  Install the app From the folder with the .msix package, run the Windows PowerShell Add-AppxPackage command to install the .msix package.

  Reference:

  https://docs.microsoft.com/en-us/windows/application-management/sideload-apps-in-windows-10

• Question 369:

  Your company makes use of Microsoft Intune to manage their Windows 10 computers that run.

  Subsequent to creating an app protection policy for Microsoft Edge, you assign the policy to a group.

  After opening Microsoft Edge on one of the computers, you decide to check whether the app protection policy is protecting Microsoft Edge on the computer.

  You plan to add a column in Task Manager to achieve this.

  Which of the following is the column that should be added?

  A. Base priority

  B. Command line

  C. Enterprise context

  D. DPI awareness

  Correct Answer: C

  References: https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/wip-app-enterprise-context https://www.itpromentor.com/win10-mam-wip/

• Question 370:

  You need to consider the underlined segment to establish whether it is accurate.

  To enable sideloading in Windows 10, you should navigate to the For developers setting via Update and Security in the Settings app.

  Select “No adjustment required” if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

  A. No adjustment required.

  B. Widows Insider

  C. Delivery Optimization

  D. Activation

  Correct Answer: A

  How to allow Windows 10 to sideload apps on your computer

  1.

  Open Settings.

  2.

  Click on Update and security.

  3.

  Click on For developers.

  4.

  Under "Use developer features," select the Sideload apps option.

  Reference:

  https://www.windowscentral.com/how-enable-windows-10-sideload-apps-outside-store https://docs.microsoft.com/en-us/windows/application-management/sideload-apps-in-windows-10