Microsoft Microsoft Certifications MD-101 Questions & Answers

• Question 51:

  HOTSPOT

  You have a Microsoft 365 E5 tenant that contains the users shown in the following table.

  

  You provision the private store in Microsoft Store for Business and assign Microsoft Store for Business roles to the users as shown in the following table.

  

  You configure the following Shopping behavior settings for the Microsoft Store for Business:

  1.

  Allow users to shop: Yes

  2.

  Make everyone a Basic Purchaser: Off

  3.

  Allow app requests: On

  4.

  Shop offline apps: Off

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoft-store/roles-and-permissions-microsoft-store-for-business https://docs.microsoft.com/en-us/microsoft-store/acquire-apps-microsoft-store-for-business

• Question 52:

  HOTSPOT

  Your network contains an Active Directory domain. The domain contains computers that are managed by using Microsoft Endpoint Configuration Manager.

  You plan to integrate Configuration Manager and Azure as part of a Desktop Analytics implementation.

  You create a new organizational unit (OU) and place several test computers that run Windows 10 into the OU.

  You need to collect diagnostic data from the test computers to Desktop Analytics.

  1.

  App usage and insights data

  2.

  Health monitoring data

  3.

  Deployment status data

  The solution must minimize the data collected.

  Which two Group Policy settings should you configure? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Allow Telemetry Use a Group Policy object to set your organization's telemetry level.

  1.

  From the Group Policy Management Console, go to Computer Configuration > Administrative Templates > Windows Components > Data Collection and

  Preview Builds.

  2.

  Double-click Allow Telemetry.

  3.

  In the Options box, select Full, and then click OK.

  Box 2: Limit Enhanced diagnostic data..

  Microsoft recommends that you enable the Optional (limited) diagnostic data level with Desktop Analytics to maximize the benefits you get from it.

  The Optional (Limited) setting in Configuration Manager is the same setting as Limit Enhanced diagnostic data to the minimum required by Windows Analytics policy available on devices running Windows 10, version 1709 and later.

  Reference:

  https://docs.microsoft.com/en-us/enterprise-threat-detection/collector/collector-client-configuration-windows-10-telemetry-requirements https://docs.microsoft.com/en-us/mem/configmgr/desktop-analytics/enable-data-sharing

• Question 53:

  HOTSPOT

  Your network contains an Active Directory domain. The domain contains the computers shown in the following table.

  

  Microsoft Defender Application Guard is installed on the computers.

  Application Guard Group Policy settings are applied to the computers as shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-application-guard/configure-md-app-guard

• Question 54:

  HOTSPOT

  Your company uses Microsoft Defender for Endpoint. Microsoft Defender for Endpoint includes the device groups shown in the following table.

  

  You onboard a computer to Microsoft Defender for Endpoint as shown in the following exhibit.

  

  What is the effect of the Microsoft Defender for Endpoint configuration? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/machine-groups?view=o365-worldwide#manage-device-groups

• Question 55:

  HOTSPOT

  You have a Microsoft 365 tenant that uses Microsoft Intune.

  From the Microsoft Endpoint Manager admin center, you plan to create a baseline to monitor the Startup score and the App reliability score of enrolled Windows 10 devices.

  You need to identify which tool to use to create the baseline and the minimum number of devices required to create the baseline.

  What should you identify? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Endpoint analytics Endpoint analytics has the following three items are central to understanding each of the reports: Scores Baselines

  Insights and recommendations Box 2: 5 A status of insufficient data means you don't have enough devices reporting to provide a meaningful score. Currently, at least five devices are required.

  Reference: https://docs.microsoft.com/en-us/mem/analytics/scores#understanding-scores

• Question 56:

  HOTSPOT

  Your network contains an on-premises Active Directory domain that contains the locations shown in the following table.

  

  In Microsoft Intune, you enroll the Windows 10 devices shown in the following table. You have a Delivery Optimization device configuration profile applied to all the devices. The profile is configured as shown in the following exhibit.

  

  

  From which devices can Device1 and Device2 get updates? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/mem/intune/configuration/delivery-optimization-settings https://docs.microsoft.com/en-us/windows/deployment/update/waas-delivery-optimization-reference#select-the-source-of-group-ids

• Question 57:

  HOTSPOT

  You have a Microsoft 365 tenant that uses Microsoft Intune to manage the devices shown in the following table.

  

  You need to deploy a compliance solution that meets the following requirements:

  1.

  Marks the devices as Not Compliant if they do not meet compliance policies

  2.

  Remotely locks noncompliant devices

  What is the minimum number of compliance policies required, and which devices support the remote lock action? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: 4 Windows, Android Enterprise, Android, and one for iOS/iPAD.

  Box 2: Device2, Device3, Device4, and Device5

  Remote lock is supported for the following platforms:

  Android Android Enterprise kiosk devices

  Android Enterprise work profile devices

  Android Enterprise fully managed devices

  Android Enterprise corporate-owned with work profile devices

  iOS

  macOS

  Reference:

  https://docs.microsoft.com/en-us/mem/intune/remote-actions/device-remote-lock

• Question 58:

  HOTSPOT

  You create a Windows Autopilot deployment profile.

  You need to configure the profile settings to meet the following requirements:

  1.

  Automatically enrol new devices and provision system apps without requiring end-user authentication.

  2.

  Include the hardware serial number in the computer name.

  Which two settings should you configure? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Deployment mode User-driven

  User-driven: Devices with this profile are associated with the user enrolling the device. User credentials are required to enroll the device.

  Change it to: Self-deploying (preview): (requires Windows 10, version 1809 or later) Devices with this profile aren't associated with the user enrolling the device.

  User credentials aren't required to enroll the device. When a device has no user associated with it, user-based compliance policies don't apply to it. When using self-deploying mode, only compliance policies targeting the device will be

  applied.

  Box 2: Apply device name template

  Apply device name template (requires Windows 10, version 1809 or later, and Azure AD join type): Choose Yes to create a template to use when naming a device during enrollment. Names must be 15 characters or less, and can have letters,

  numbers, and hyphens. Names can't be all numbers. Use the %SERIAL% macro to add a hardware-specific serial number. Or, use the %RAND:x% macro to add a random string of numbers, where x equals the number of digits to add.

  Reference:

  https://docs.microsoft.com/en-us/mem/autopilot/profiles

• Question 59:

  HOTSPOT

  You have a Microsoft 365 tenant.

  You have a Windows 10 update ring named Policy1 as shown in the following exhibit.

  

  A Windows 10 Feature update deployment named Policy2 is configured as shown in the following exhibit.

  

  You have devices enrolled in Microsoft Intune as shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  Box 2: No Device2 already has feature update 20H2.

  Box 3: No Device3 has a higher build than 2004.

  Reference:

  https://docs.microsoft.com/en-us/mem/intune/protect/windows-10-update-rings

• Question 60:

  HOTSPOT

  You have groups that use the Dynamic Device membership type as shown in the following table.

  

  You are deploying Microsoft 365 apps.

  You have devices enrolled in Microsoft Intune as shown in the following table.

  

  In the Microsoft Endpoint Manager admin center, you create a Microsoft 365 Apps app as shown in the exhibit. (Click the Exhibit tab.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes Policy applies to Group1.

  Box 2: No Policy does not apply to Group2.

  Box 3: No The policy will not apply for MacOs.

  Reference:

  https://docs.microsoft.com/en-us/mem/intune/apps/apps-add-office365

  https://docs.microsoft.com/en-us/mem/intune/apps/apps-deploy

  https://docs.microsoft.com/en-us/mem/intune/apps/apps-add