Microsoft MD-102 Online Practice Questions and Exam Preparation

Microsoft MD-102 Online Questions & Answers

• Question 131:

  You use the Microsoft Deployment Toolkit (MDT) to deploy Windows 11.

  You create a new task sequence by using the Standard Client Task Sequence template to deploy Windows 11 Enterprise to new computers. The computers have a single hard disk.

  You need to modify the task sequence to create a system volume and a data volume.

  Which phase should you modify in the task sequence?

  A. Initialization
  B. State Restore
  C. Preinstall
  D. Postinstall
  C. Preinstall

  ---

  Explanation

  https://www.prajwaldesai.com/create-extra-partition-in-mdt/

• Question 132:

  HOTSPOT

  You have a Microsoft 365 subscription that contains 5,000 Windows devices enrolled in Microsoft Intune.

  You plan to use the Sync and Collect diagnostics bulk device actions.

  What is the maximum number of devices you can include in each action? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: 100

  Sync

  Sync bulk devices 1. Select Devices > All devices > Bulk Device Actions.

  

  2. Enter the following configurations:

  2a. Select Windows for OS 2b. Select Sync for Device action 3. On the Devices page, select from 1 to 100 devices. Select Next.

  4. On the Review + create page, ensure your settings are correct, and select Create.

  Box 2: 25

  Collect diagnostics

  Collect diagnostics from an Intune managed device

  Collect diagnostics is available as a Bulk device action that collects diagnostic logs from up to 25 Windows devices at a time.

  https://help.drata.com/en/articles/5604949-intune-windows-connection

  https://learn.microsoft.com/en-us/mem/intune/remote-actions/collect-diagnostics

• Question 133:

  You have a Microsoft 365 E5 subscription.

  All Windows devices are enrolled in Microsoft Intune.

  You need to deploy the Remote Help app to all the devices.

  The solution must minimize administrative effort.

  Which type of app should you deploy?

  A. Windows app (Win32)
  B. line-of-business (LOB)
  C. Microsoft 365
  D. Microsoft Store
  A. Windows app (Win32)

  ---

  
  

• Question 134:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that uses Microsoft Intune Suite.

  You need to recommend a solution that meets the following requirements:

  1. Administrators must use a secure connection over a shared screen session to perform remote tasks on a user's device.

  2. Administrators must have elevated access to perform remote tasks on a user's device.

  3. The solution must follow the principle of least privilege.

  What should you include in the recommendation for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Remote Help

  Administrators must use a secure connection over a shared screen session to perform remote tasks on a user's device.

  Use Remote Help with Microsoft Intune

  Remote Help is a cloud-based solution for secure help desk connections with role-based access controls. With the connection, your support staff can remote connect to the user's device.

  Box 2: Help Desk Operator

  Administrators must have elevated access to perform remote tasks on a user's device.

  Configure permissions for Remote Help

  Remote Help uses Intune role-based access controls (RBAC) to set the level of access a helper is allowed. Through RBAC, you determine which users can provide help and the level of help they can provide.

  The following Intune RBAC permissions manage the use of the Remote Help app. Set each to Yes to grant the permission:

  Category: Remote Help app

  Permissions:

  Elevation : Yes/No

  View screen : Yes/No

  Take full control : Yes/No

  Unattended control : Yes/No

  Help Desk Operator

  By default, the built-in Help Desk Operator role sets all of these permissions to Yes. You can use the built- in role or create custom roles to grant only the remote tasks and Remote Help app permissions that you want different groups of users to have.

  Incorrect:

  Endpoint Privilege Manager

  Policy and Profile Manager

  https://learn.microsoft.com/en-us/mem/intune/fundamentals/remote-help

• Question 135:

  You have two computers named Computer1 and Computer2 that run Windows 10. Computer2 has Remote Desktop enabled.

  From Computer1, you connect to Computer2 by using Remote Desktop Connection.

  You need to ensure that you can access the local drives on Computer1 from within the Remote Desktop session.

  What should you do?

  A. From Computer2, configure the Remote Desktop settings.
  B. From Windows Defender Firewall on Computer1, allow Remote Desktop.
  C. From Windows Defender Firewall on Computer2, allow File and Printer Sharing.
  D. From Computer1, configure the Remote Desktop Connection settings.
  D. From Computer1, configure the Remote Desktop Connection settings.

  ---

  Explanation

  How to gain access to local files: You can gain access to your disk drives on the local computer during a Remote Desktop session. You can redirect the local disk drives, including the hard disk drives, CD-ROM disk drives, floppy disk drives, and mapped network disk drives so that you can transfer files between the local host and the remote computer in the same way that you copy files from a network share. You can use Microsoft Windows Explorer to view the disk drives and files for each redirected disk drive. Alternatively, you can view the files for each redirected disk drive in My Computer. The drives are displayed as "drive_letter on terminal_server_client_name" in both Windows Explorer and My Computer.

  To view the disk drives and files for the redirected disk drive:

  1.Click Start, point to All Programs (or Programs), point to Accessories, point to Communications, and then click Remote Desktop Connection.

  2.Click Options, and then click the Local Resources tab.

  3.Click Disk Drives, and then click Connect.

  https://support.microsoft.com/en-us/topic/how-to-gain-access-to-local-files-in-a-remote-desktop-session-to-a-windows-xp-based-or-to-a-windows-server-2003-based-host-computer-021ee183-e6be-4201-809e-c355c47b17f4

• Question 136:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains two devices named Device1 and Device2.

  You manage the devices by using Microsoft Intune.

  You need to use Device query to meet the following requirements:

  1. Identify the Windows build on a device.

  2. Validate whether a folder exists on the C drive of a device.

  Which table should you target for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Windows build: OSVersion

  Folder: FileInfo

  Windows build: The table you should target is OSVersion. This table provides detailed information about the operating system version and build number of a device.

  Folder: The table you should target is FileInfo. This table allows you to check for the existence of specific files or folders on a device.

• Question 137:

  You have a Microsoft Entra tenant named contoso.com that contains a group named Contoso Help Desk.

  You need to ensure that Contoso Help Desk is added to the local Administrators group whenever a Windows device is joined to contoso.com.

  What should you do?

  A. Assign the Cloud Device Administrator role to Contoso Help Desk.
  B. Assign the Microsoft Entra Joined Device Local Administrator role to Contoso Help Desk.
  C. Configure the Enterprise State Roaming settings.
  D. Enable Microsoft Entra Local Administrator Password Solution (LAPS) for contoso.com.
  B. Assign the Microsoft Entra Joined Device Local Administrator role to Contoso Help Desk.

  ---

  Explanation

  The Microsoft Entra Joined Device Local Administrator role allows members of a group to be automatically added to the local Administrators group on Windows devices that are joined to the Microsoft Entra tenant. By assigning this role to the Contoso Help Desk group, you ensure that members of this group are granted local administrator privileges on all devices joined to contoso.com.

• Question 138:

  HOTSPOT

  You need a new conditional access policy that has an assignment for Office 365 Exchange Online.

  You need to configure the policy to meet the technical requirements for Group4.

  Which two settings should you configure in the policy? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/conditions

  https://docs.microsoft.com/en-us/intune/device-compliance-get-started

• Question 139:

  Your network contains an Active Directory domain. The domain contains 10 computers that run Windows 10. Users in the finance department use the computers.

  You have a computer named Computer1 that runs Windows 10.

  From Computer1, you plan to run a script that executes Windows PowerShell commands on the finance department computers.

  You need to ensure that you can run the PowerShell commands on the finance department computers from Computer.

  What should you do on the finance department computers?

  A. From Windows PowerShell, run the Enable-MMAgent cmdlet.
  B. From the local Group Policy, enable the Allow Remote Shell Access setting.
  C. From Windows PowerShell, run the Enable-PSRemoting cmdlet.
  D. From the local Group Policy, enable the Turn on Script Execution setting.
  C. From Windows PowerShell, run the Enable-PSRemoting cmdlet.

  ---

  Explanation

  https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/enable-psremoting?view=powershell-6

• Question 140:

  You have a Microsoft Azure subscription that contains an Azure Log Analytics workspace.

  You deploy a new computer named Computer1 that runs Windows 10. Computer1 is in a workgroup.

  You need to ensure that you can use Log Analytics to query events from Computer1.

  What should you do on Computer1?

  A. Join Azure AD.
  B. Configure Windows Defender Firewall.
  C. Create an event subscription
  D. Install the Azure Monitor Agent.
  A. Join Azure AD.

  ---

  Explanation

  The Windows client installer supports latest Windows machines only that are Microsoft Entra joined or Microsoft Entra hybrid joined.

  https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-windows-client