Microsoft Microsoft Certifications MD-101 Questions & Answers

• Question 411:

  What should you use to meet the technical requirements for Azure DevOps?

  A. An app protection policy

  B. Windows Information Protection (WIP)

  C. Conditional access

  D. A device configuration profile

  Correct Answer: C

  Ensure that the projects in Azure DevOps can be accessed from the corporate network only.

  Reference:

  https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/manage-conditional-access?view=azure-devops

• Question 412:

  What should you upgrade before you can configure the environment to support co-management?

  A. the domain functional level

  B. Microsoft Endpoint Configuration Manager

  C. the domain controllers

  D. Windows Server Update Services (WSUS)

  Correct Answer: B

  Enable co-management in Configuration Manager.

  Note: Litware plans to transition to co-management for all the company-owned Windows 10 computers. Whenever possible, Litware wants to minimize hardware and software costs.

  Reference:

  https://docs.microsoft.com/en-us/sccm/comanage/tutorial-co-manage-clients

• Question 413:

  What should you configure to meet the technical requirements for the Azure AD-joined computers?

  A. Windows Hello for Business from the Endpoint Manager admin center.

  B. The Accounts options in an endpoint protection profile.

  C. The Password Policy settings in a Group Policy object (GPO).

  D. A password policy from the Microsoft Office 365 portal.

  Correct Answer: A

  Ensure that users can sign in to the Azure AD-joined computers by using a PIN. The PIN must expire every 30 days.

  Group Policy settings for Windows Hello for Business.

  These policy settings are available in User configuration and Computer Configuration under Policies > Administrative Templates > Windows Components >

  Windows Hello for Business.

  Reference:

  https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-manage-in-organization

• Question 414:

  You need to capture the required information for the sales department computers to meet the technical requirements.

  Which Windows PowerShell command should you run first?

  A. Install-Module WindowsAutoPilotIntune

  B. Install-Script Get-WindowsAutoPilotInfo

  C. Import-AutoPilotCSV

  D. Get-WindowsAutoPilotInfo

  Correct Answer: A

  Re-provision the sales department computers by using Windows AutoPilot. Windows Autopilot Deployment for existing devices, install required modules:

  1.

  Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force

  2.

  Install-Module AzureAD -Force

  3.

  Install-Module WindowsAutopilotIntune -Force

  4.

  Install-Module Microsoft.Graph.Intune -Force Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/existing-devices