Microsoft MD-102 Online Practice Questions and Exam Preparation

Microsoft MD-102 Online Questions & Answers

• Question 91:

  HOTSPOT

  You have devices enrolled in Microsoft Intune as shown in the following table.

  

  Intune includes the device compliance policies shown in the following table.

  

  The device compliance policies has the assignments shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  Device1 is in Group1. Policy1 is assigned to Group1. Policy2 is also assigned to Group1. Device1 is compliant to Policy1, but not compliant to Policy2 (fails on Secure Boot).

  By default, each device compliance policy includes the action to mark a device as noncompliant if it fails to meet a policy rule.

  Box 2: Yes

  Device2 is in Group2. Policy2 is assigned to Group2. Device2 is compliant to Policy2 (Secure boot met).

  Box 3: Yes

  Device3 is in Group 3. Policy3 and Policy4 are assigned to Group3. Policy3 is for Windows 10 so it is disregarded. Device3 is compliant to Policy4.

  https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started

• Question 92:

  You have a Microsoft 365 E5 subscription that uses Microsoft Intune.

  You configure Intune to send log data to Log Analytics.

  You need to review events involving devices that fail to enroll in Intune.

  What should you monitor?

  A. operational logs
  B. audit logs
  C. the Intune Device log
  D. device compliance organizational logs
  A. operational logs

• Question 93:

  HOTSPOT

  You have a Microsoft 365 subscription.

  Users have iOS devices that are not enrolled in Microsoft Intune.

  You create an app protection policy for the Microsoft Outlook app as shown in the exhibit. (Click the Exhibit tab.)

  

  You need to configure the policy to meet the following requirements:

  Prevent the users from using the Outlook app if the operating system version is less than 12.0.0.

  Require the users to use an alphanumeric passcode to access the Outlook app.

  What should you configure in an app protection policy for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Conditional launch

  Configure conditional launch settings to set sign-in security requirements for your access protection policy.

  By default, several settings are provided with pre-configured values and actions. You can delete some of these, like the Min OS version. You can also select additional settings from the Select one dropdown.

  Note: There are three categories of policy settings: Data relocation, Access requirements, and Conditional launch.

  Box 2. Access requirements Access requirements include:

  PIN for access: Select Require to require a PIN to use this app. The user is prompted to set up this PIN the first time they run the app in a work or school context. The PIN is applied when working either online or offline.

  You can configure the PIN strength using the settings available under the PIN for access section.

  https://docs.microsoft.com/en-us/intune/app-protection-policy-settings-ios

• Question 94:

  You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

  

  All devices have Microsoft Edge installed.

  From the Microsoft Intune admin center, you create a Microsoft Edge Baseline profile named Edge1.

  You need to apply Edge1 to all the supported devices.

  To which devices should you apply Edge1?

  A. Device1 only
  B. Device1 and Device2 only
  C. Device1, Device2, and Device3 only
  D. Device1, Device2, and Device4 only
  E. Device1, Device2, Device3, and Device4
  B. Device1 and Device2 only

  ---

  Explanation

  Windows 10 and Windows 11 only.

  https://learn.microsoft.com/en-us/mem/intune/protect/security-baseline-settings-edge

• Question 95:

  DRAG DROP

  Your network contains an Active Directory domain.

  You install the Microsoft Deployment Toolkit (MDT) on a server.

  You have a custom image of Windows 11.

  You need to deploy the image to 100 devices by using MDT.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Step 1: Create a deployment share.

  Set up the MDT production deployment share.

  Step 2: Add the Windows 11 image.

  Add a custom image.

  The next step is to add a reference image into the deployment share with the setup files required to successfully deploy Windows 11.

  Step 3: Create a task sequence.

  Create the deployment task sequence.

  https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt

• Question 96:

  You have devices enrolled in Microsoft Intune as shown in the following table.

  

  For which devices can you manage updates by using intune?

  A. Devic1l only
  B. Device1 and Oevice2 only
  C. Device 1 and Device3 only
  D. Device 1. Device3, and Device4 only
  E. Device 1. Device2, Device3, and Device4
  E. Device 1. Device2, Device3, and Device4

• Question 97:

  HOTSPOT

  You have an Azure AD tenant named contoso.com.

  You have the devices shown in the following table.

  

  Which devices can be Azure AD joined, and which devices can be registered in contoso.com? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Azure AD join capable

  Devices:

  https://learn.microsoft.com/en-us/azure/active-directory/devices/concept-directory-join

  Azure AD registered

  Devices:

  https://learn.microsoft.com/en-us/azure/active-directory/devices/concept-device-registration

• Question 98:

  You use a Microsoft Intune subscription to manage iOS devices.

  You configure a device compliance policy that blocks jailbroken iOS devices.

  You need to enable Enhanced jailbreak detection.

  What should you configure?

  A. the Compliance policy settings
  B. the device compliance policy
  C. a network location
  D. a configuration profile
  B. the device compliance policy

  ---

  Explanation

  Compliance policy settings include the following settings: Enhanced jailbreak detection (applies only to iOS/iPadOS) Etc.

  https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started

• Question 99:

  You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

  You use Microsoft Intune to manage devices.

  You have a Windows 11 device named Device1 that is enrolled in Intune. Device1 has been offline for 30 days.

  You need to remove Device1 from Intune immediately. The solution must ensure that if the device checks in again, any apps and data provisioned by Intune are removed. User-installed apps, personal data, and OEM-installed apps must be retained.

  What should you use?

  A. a Delete action
  B. a Retire action
  C. a Fresh Start action
  D. an Autopilot Reset action
  A. a Delete action

  ---

  Explanation

  Only two actions remove the device from Intune/Azure AD - Retire or Delete. Retire removes the device object 180 days after retire action so Delete remains only option. Delete is only action which acts once the device checks in and remove corp data specifically and doesn't touch personal

• Question 100:

  HOTSPOT

  Your network contains an Active Directory domain named adatum.com. The domain contains two computers named Computer1 and Computer2 that run Windows 10. Remote Desktop is enabled on Computer2.

  The domain contains the user accounts shown in the following table.

  

  Computer2 contains the local groups shown in the following table.

  

  The relevant user rights assignments for Computer2 are shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.