Microsoft Microsoft Certifications MD-101 Questions & Answers

• Question 81:

  HOTSPOT

  A company named A.Datum Corporation uses Microsoft Endpoint Configuration Manager, Microsoft Intune, and Desktop Analytics.

  A.Datum purchases a company named Contoso, Ltd. Contoso has devices that run the following operating systems:

  1.

  Windows 8.1

  2.

  Windows 10

  3.

  Android

  4.

  iOS

  A.Datum plans to use Desktop Analytics to monitor the Contoso devices.

  You need to identify which devices can be monitored by using Desktop Analytics and how to add the devices to Desktop Analytics.

  What should you identify? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Windows 8.1 and Windows 10 only

  Windows 7, Windows 8.1 and Windows 10 are supported.

  Box 2: Install the Endpoint Configuration Manager agent.

  Need to for the Windows 8.1 client.

  Reference:

  https://docs.microsoft.com/en-us/mem/configmgr/desktop-analytics/enroll-devices https://docs.microsoft.com/en-us/mem/configmgr/desktop-analytics/overview

• Question 82:

  HOTSPOT

  You have devices enrolled in Microsoft Intune as shown in the following table.

  

  You create device configuration profiles in Intune as shown in the following table.

  

  You assign the device configuration profiles to groups as shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No Windows 10 Device1 belongs to Group1 and Group2. Group 1 has Profile3. Group2 has Profile1, Profile2 and Profile 4. Profile1, for the correct platform, is the only that applies, with Minimum password length set to 4.

  Box 2: Yes Android Device2 belongs to Group2. Group2 has Profile1, Profile2 and Profile 4, but only Profile2 applies to Android. Profile2 has a Minimum password length set to 5.

  Box 3: No iOS Device3 belongs to Group2 and Group3. Group2 has Profile1, Profile2 and Profile 4. Group3 has Profile3 and Profile5. Only Profile3 and Profile5 applies to iOS. Profile5 is the most restrictive with Minimum password length set to 8.

  Note: If a compliance policy evaluates against the same setting in another compliance policy, then the most restrictive compliance policy setting applies.

  Reference:

  https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-troubleshoot

• Question 83:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com that syncs to Azure Active Directory (Azure AD). The domain contains computers that run Windows 10. The computers are configured as shown in the following table.

  

  All the computers are enrolled in Microsoft Intune.

  You configure the following Maintenance Scheduler settings in the Default Domain Policy:

  1.

  Turn off auto-restart for updates during active hours: Enabled

  2.

  Active hours start: 08:00

  3.

  Active hours end: 22:00

  In Intune, you create a device configuration profile named Profile1 that has the following OMA-URI settings:

  1.

  ./Device/Vendor/MSFT/Policy/Config/ControlPolicyConflict/MDMWinsOverGP set to value 1

  2.

  ./Device/Vendor/MSFT/Policy/Config/Update/ActiveHoursStart set to value 9

  3.

  ./Device/Vendor/MSFT/Policy/Config/Update/ActiveHoursEnd set to value 21

  You assign Profile to Group1.

  How are the active hours configured on Computer1 and Computer2? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: 09:00 to 21:00 For Computer1 Profile1 overrides the Default Domain Policy.

  Box 2: 08:00 to 22:00 Computer2 uses the default Domain Policy.

  Reference:

  https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-controlpolicyconflict

• Question 84:

  HOTSPOT

  You have a Microsoft 365 subscription.

  You have 25 Microsoft Surface Hub devices that you plan to manage by using Microsoft Endpoint Manager.

  You need to configure the devices to meet the following requirements:

  1.

  Enable Windows Hello for Business.

  2.

  Configure Microsoft Defender SmartScreen to block users from running unverified files.

  Which profile types should you configure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Identity protection In the Windows Hello for Business settings you can configure in an Identity protection profile. Identity protection profiles are part of device configuration policy in

  Microsoft Intune. With an Identity protection profile, you can configure settings on discrete groups of Windows 10/11 devices.

  Box 2: Endpoint protection Microsoft Intune includes many settings to help protect your devices. These settings are created in an endpoint protection configuration profile in Intune to control security, including BitLocker and Microsoft Defender.

  Reference:

  https://docs.microsoft.com/en-us/mem/intune/protect/identity-protection-windows-settings?toc=/intune/configuration/toc.jsonandbc=/intune/configuration/breadcrumb/ toc.json https://docs.microsoft.com/en-us/mem/intune/protect/endpointprotection-windows-10?toc=/intune/configuration/toc.jsonandbc=/intune/configuration/breadcrumb/ toc.json

• Question 85:

  HOTSPOT

  Your company has computers that run Windows 10. The employees at the company use the computers.

  You plan to monitor the computers by using the Update Compliance solution.

  You create the required resources in Azure.

  You need to configure the computers to send enhanced Update Compliance data.

  Which two Group Policy settings should you configure? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Configure the Commercial ID All Group policies that need to be configured for Update Compliance are under Computer Configuration>Administrative Templates>Windows Components\Data Collection and Preview Builds. All of these policies must be in the Enabled state and set to the defined Value below.

  *

  Configure the Commercial ID Identifies the device as belonging to your organization. Box 2: Allow device name to be sent in Windows diagnostic data

  *

  Allow device name to be sent in Windows diagnostic data Allows device name to be sent for Windows Diagnostic Data. If this policy is Not Configured or Disabled, Device Name will not be sent and will not be visible in Update Compliance, showing # instead.

  Reference: https://docs.microsoft.com/en-us/windows/deployment/update/update-compliance-configuration-manual

• Question 86:

  HOTSPOT

  You are licensed for Microsoft Endpoint Manager.

  You use Microsoft Endpoint Configuration Manager and Microsoft Intune.

  You have devices enrolled in Configuration Manager as shown in the following table.

  

  In Configuration Manager, you enable co-management and configure the following settings:

  1.

  Automatic enrolment in Intune: Pilot

  2.

  Intune Auto Enrollment: Collection1

  In Configuration Manager, you configure co-management staging to have the following settings:

  1.

  Compliance policies: Collection2

  2.

  Device Configuration: Collection1

  In Configuration Manager, you configure co-management workloads as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No The Pilot Group does not include Device1.

  Box 2: Yes

  Box 3: Yes The Pilot Group includes Device3.

  Reference:

  https://docs.microsoft.com/en-us/mem/configmgr/comanage/how-to-enable

• Question 87:

  You need to prepare for the deployment of the Phoenix office computers.

  What should you do first?

  A. Extract the hardware ID information of each computer to a CSV file and upload the file from the Devices settings in Microsoft Store for Business.

  B. Generalize the computers and configure the Mobility (MDM and MAM) settings from the Azure Active Directory blade in the Azure portal.

  C. Generalize the computers and configure the Device settings from the Azure Active Directory blade in the Azure portal.

  D. Extract the hardware ID information of each computer to an XLSX file and upload the file from the Devices settings in Microsoft Store for Business.

  Correct Answer: A

  References: https://docs.microsoft.com/en-us/microsoft-store/add-profile-to-devices#manage-autopilot-deployment-profiles

• Question 88:

  You need to meet the requirements for the MKG department users.

  What should you do?

  A. Assign the MKG department users the Purchaser role in Microsoft Store for Business

  B. Download the APPX file for App1 from Microsoft Store for Business

  C. Add App1 to the private store

  D. Assign the MKG department users the Basic Purchaser role in Microsoft Store for Business

  E. Acquire App1 from Microsoft Store for Business

  Correct Answer: E

  Enable the users in the MKG department to use App1.

  The private store is a feature in Microsoft Store for Business and Education that organizations receive during the signup process. When admins add apps to the private store, all employees in the organization can view and download the apps.

  Your private store is available as a tab in Microsoft Store app, and is usually named for your company or organization. Only apps with online licenses can be added to the private store.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-store/distribute-apps-from-your-private-store

• Question 89:

  You need to meet the technical requirements for the IT department.

  What should you do first?

  A. From the Azure Active Directory blade in the Azure portal, enable Seamless single sign-on.

  B. From the Configuration Manager console, add an Intune subscription.

  C. From the Azure Active Directory blade in the Azure portal, configure the Mobility (MDM and MAM) settings.

  D. From the Microsoft Intune blade in the Azure portal, configure the Windows enrollment settings.

  Correct Answer: C

  Pilot co-management for the IT department. Configure auto-enrollment of devices to Intune.

  1.

  Sign in to the Azure portal and select Azure Active Directory > Mobility (MDM and MAM) > Microsoft Intune.

  2.

  Configure MDM user scope.

  3.

  Etc.

  Reference:

  https://docs.microsoft.com/en-us/sccm/comanage/tutorial-co-manage-clients

• Question 90:

  You need to prepare for the deployment of the Phoenix office computers.

  What should you do first?

  A. Generalize the computers and configure the Mobility (MDM and MAM) settings from the Azure Active Directory admin center.

  B. Extract the hardware ID information of each computer to a CSV file and upload the file from the Microsoft Intune blade in the Azure portal.

  C. Extract the hardware ID information of each computer to an XML file and upload the file from the Devices settings in Microsoft Store for Business.

  D. Extract the serial number information of each computer to a CSV file and upload the file from the Microsoft Intune blade in the Azure portal.

  Correct Answer: A

  Windows Autopilot Deployment for existing devices.

  Configure the Enrollment Status Page.

  If you want, you can set up an enrollment status page for Autopilot using Intune.

  To enable and configure the enrollment and status page:

  1.

  Open Intune in the Azure portal.

  2.

  Access Intune > Device enrollment > Windows enrollment and Set up an enrollment status page.

  3.

  Access Azure Active Directory > Mobility (MDM and MAM) > Microsoft Intune and Configure automatic MDM enrollment and configure the MDM user scope for some or all users.

  Note:

  Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro preinstalled and were purchased already.

  Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows Autopilot.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-store/add-profile-to-devices https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/existing-devices