Microsoft MD-102 Online Practice Questions and Exam Preparation

Microsoft MD-102 Online Questions & Answers

• Question 161:

  You have a Microsoft 365 E5 subscription that contains the groups shown in the following table.

  

  You create a Conditional Access policy named CAPolicy1 that will block access to Microsoft Exchange Online from iOS devices. You assign CAPolicy1 to Group1.

  You discover that User1 can still connect to Exchange Online from an iOS device.

  You need to ensure that CAPolicy1 is enforced.

  What should you do?

  A. Configure a new terms of use (TOU).
  B. Assign CAPolicy1 to Group2.
  C. Enable CAPolicy1
  D. Add a condition in CAPolicy1 to filter for devices.
  C. Enable CAPolicy1

• Question 162:

  HOTSPOT

  Your network contains an Active Directory domain. Active Directory is synced with Azure AD.

  There are 500 Active Directory domain-joined computers that run Windows 10 and are enrolled in Microsoft Intune.

  You plan to implement Microsoft Defender Exploit Guard.

  You need to create a custom Microsoft Defender Exploit Guard policy, and then distribute the policy to all the computers.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml#manage-or-deploy-a-configuration

  https://docs.microsoft.com/en-us/intune/endpoint-protection-windows-10

  https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection

• Question 163:

  You need to meet the technical requirement for the IT department users.

  What should you do first?

  A. Issue computer certificates.
  B. Distribute USB keys to the IT department users.
  C. Enable screen saver and configure a timeout.
  D. Turn on Bluetooth.
  D. Turn on Bluetooth.

• Question 164:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that includes Microsoft Intune.

  You need to configure a compliance policy for the iOS/iPadOS platform. The solution must meet the following requirements:

  1. Require jailbroken devices to be marked as noncompliant.

  2. Mark devices without a password lock as noncompliant.

  Which compliance policy settings should you configure for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 165:

  You have a Microsoft 365 subscription.

  Each user is assigned a Windows 365 Enterprise license.

  You need to deploy Cloud PCs that will be Microsoft Entra hybrid joined.

  What should you do first?

  A. Create an Azure network connection (ANC).
  B. Create a provisioning policy.
  C. Create a configuration profile in Microsoft Intune.
  D. Upload a custom image.
  A. Create an Azure network connection (ANC).

• Question 166:

  HOTSPOT

  What is the maximum number of devices that User1 and User2 can enroll in Intune? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 167:

  You have devices enrolled in Microsoft Intune as shown in the following table.

  

  On which devices can you apply app configuration policies?

  A. Device2 only
  B. Device1 and Device2 only
  C. Device3 and Device4 only
  D. Device2, Device3, and Device4 only
  E. Device1, Device2, Device3, and Device4
  C. Device3 and Device4 only

  ---

  Explanation

  App configuration policies for Microsoft Intune

  You can create and use app configuration policies to provide configuration settings for both iOS/iPadOS or Android apps.

  https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-overview

• Question 168:

  You have a Microsoft 365 E5 subscription.

  You need to configure the automated investigation and response (AIR) remediation level for a device named Device1 to require approval for all folders.

  What should you create?

  A. a security group
  B. a device group
  C. an administrative unit
  D. an action group
  B. a device group

• Question 169:

  DRAG DROP

  You have a Microsoft 365 subscription.

  You plan to enroll devices in Microsoft Intune. You need to meet the following requirements:

  1. Only allow the enrollment of devices that have a specific international mobile equipment identifier (IMEI).

  2. Support the enrollment and management of up to 1,000 devices

  Which enrollment setting should you configure for each requirement? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 170:

  You have a Microsoft 365 E5 subscription that contains 500 macOS devices enrolled in Microsoft Intune.

  You need to ensure that you can apply Microsoft Defender for Endpoint antivirus policies to the macOS devices. The solution must minimize administrative effort.

  What should you do?

  A. Onboard the macOS devices to the Microsoft Purview compliance portal.
  B. From the Microsoft Intune admin center, create a security baseline.
  C. Install Defender for Endpoint on the macOS devices.
  D. From the Microsoft Intune admin center, create a configuration profile.
  C. Install Defender for Endpoint on the macOS devices.

  ---

  Explanation

  https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-endpoint-mac

  On macOS 11 (Big Sur) and above, Microsoft Defender for Endpoint requires additional configuration profiles. If you are an existing customer upgrading from earlier versions of macOS, make sure to deploy the additional configuration profiles listed on New configuration profiles for macOS Big Sur and newer versions of macOS.