Microsoft MD-102 Online Practice Questions and Exam Preparation

Microsoft MD-102 Online Questions & Answers

• Question 181:

  You need to meet the technical requirements for the iOS devices.

  Which object should you create in Intune?

  A. a deployment profile
  B. an app protection policy
  C. a device configuration profile
  D. a compliance policy
  C. a device configuration profile

  ---

  Explanation

  Scenario: Technical requirements include: Block iOS devices from sending diagnostic and usage telemetry data.

  Create a device configuration profile.

  Note: Intune includes device restriction policies that help administrators control Android, iOS, macOS, and Windows devices. These restrictions let you control a wide range of settings and features to protect your organization's resources. For example, administrators can:

  Allow or block the device camera

  Control access to Google Play, app stores, viewing documents, and gaming Block built-in apps, or create a list of apps that allowed or prohibited Allow or prevent backing up files to cloud and storage accounts Set a minimum password length, and block simple passwords

  https://docs.microsoft.com/en-us/intune/device-restrictions-configure

• Question 182:

  HOTSPOT

  Your network contains an on-premises Active Directory domain named contoso.com that syncs to Azure AD.

  A user named User1 uses the domain-joined devices shown in the following table.

  

  In the Microsoft Entra admin center, you assign a Windows 11 Enterprise E5 license to User1.

  You need to identify what will occur when User1 next signs in to the devices.

  What should you identify for each device? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://docs.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation

• Question 183:

  You have computers that run Windows 10 and are managed by using Microsoft Intune.

  Users store their files in a folder named D:\Folder1.

  You need to ensure that only a trusted list of applications is granted write access to D:\Folder1.

  What should you configure in the device configuration profile?

  A. Microsoft Defender Exploit Guard
  B. Microsoft Defender Application Guard
  C. Microsoft Defender SmartScreen
  D. Microsoft Defender Application Control
  A. Microsoft Defender Exploit Guard

  ---

  Explanation

  The four components of Windows Defender Exploit Guard are:

  1. Controlled folder access: Protects sensitive data from ransomware by blocking untrusted processes from accessing your protected folders

  2. Attack Surface Reduction (ASR)

  3. Exploit protection

  4. Network protection Reference:

  https://www.microsoft.com/security/blog/2017/10/23/windows-defender-exploit-guard-reduce-the-attack-surface-against-next-generation-malware/

• Question 184:

  DRAG DROP

  You have a Microsoft 365 E5 subscription and use Microsoft Intune.

  You need to use Microsoft Cloud PKI to deploy personal user certificates to all Windows devices.

  Which four actions should you perform in sequence? To answer move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 185:

  You have an Azure AD tenant named contoso.com.

  You have a workgroup computer named Computer1 that runs Windows 11.

  You need to add Computer1 to contoso.com.

  What should you use?

  A. dsregcmd.exe
  B. Computer Management
  C. netdom.exe
  D. the Settings app
  D. the Settings app

  ---

  Explanation

  You join a computer to a domain, including an Azure AD domain in the Settings panel in Windows 10, under System->About

  https://aadguide.azurewebsites.net/aadjoin/

• Question 186:

  HOTSPOT

  You need to meet the technical requirements for Windows AutoPilot.

  Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot-reset

• Question 187:

  You have an Azure AD tenant and 100 Windows 10 devices that are Azure AD joined and managed by using Microsoft Intune.

  You need to configure Microsoft Defender Firewall and Microsoft Defender Antivirus on the devices. The solution must minimize administrative effort.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. To configure Microsoft Defender Antivirus, create a Group Policy Object (GPO) and configure the Windows Defender Antivirus settings.
  B. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Device restrictions settings.
  C. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Endpoint protection settings.
  D. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Device restrictions settings.
  E. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Endpoint protection settings.
  F. To configure Microsoft Defender Firewall, create a Group Policy Object (GPO) and configure Windows Defender Firewall with Advanced Security.
  D. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Device restrictions settings.
  E. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Endpoint protection settings.

  ---

  Explanation

  https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/create-windows-firewall-rules-in-intune

  https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus

• Question 188:

  HOTSPOT

  You have an Azure AD tenant named contoso.com that contains a user named User1. User1 has a user principal name (UPN) of [email protected].

  You join a Windows 11 device named Client1 to contoso.com.

  You need to add User1 to the local Administrators group of Client1.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 189:

  You have a Microsoft 365 subscription that contains 1,000 Windows 11 devices enrolled in Microsoft Intune.

  You plan to use Intune to deploy an application named App1 that contains multiple installation files.

  What should you do first?

  A. Prepare the contents of App1 by using the Microsoft Win32 Content Prep Tool.
  B. Create an Android application package (APK).
  C. Upload the contents of App1 to Intune.
  D. Install the Microsoft Deployment Toolkit (MDT).
  A. Prepare the contents of App1 by using the Microsoft Win32 Content Prep Tool.

  ---

  Explanation

  B. An Android application package (APK) is used to deploy Android apps, not Win32 apps.

  C. You cannot upload the contents of App1 to Intune until you have prepared the app content by using the Microsoft Win32 Content Prep Tool.

  D. The Microsoft Deployment Toolkit (MDT) is used to deploy Windows operating systems and other software to computers, not to manage mobile devices.

• Question 190:

  SIMULATION

  Username and password

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and select the username below.

  To enter your password, place your cursor in the Enter password box and select the password below.

  Microsoft 365 Username: [email protected]

  Microsoft 365 Password: i7A4$3o^HGD3L~=c[9xuOhM%^4:s11Ai

  If the Microsoft Edge browser or Microsoft 365 portal does not load successfully, select the Microsoft Edge

  browser icon from the task bar, type the URL "https://portal.office.com", and press Enter.

  The following information is for technical support purposes only:

  Lab Instance: 48262079

  You need to create a configuration profile that will enable Single app, full-screen kiosk mode for Windows 10 and later devices in a group named sg-IT.

  The solution must sign in a local user named KioskUser automatically and display Microsoft Edge with the https://bing.comhomepage.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  Windows 10/11 and newer device settings to run as a kiosk in Intune On Windows 10/11 devices, you can configure these devices to run in single-app kiosk mode.

  Single app, full-screen kiosk

  Runs only one app on the device, such as a web browser or Store app.

  Create the profile Step 1: Sign in to the Microsoft Intune admin center.

  Step 2: Select Devices > Manage devices > Configuration > Create > New policy.

  Step 3: Enter the following properties:

  Platform: Select Windows 10 and later.

  Profile type: Select Templates > Kiosk.

  Step 4: Select Create.

  Step 5: In Basics, enter the following properties:

  Name: Enter a descriptive name for the new profile.

  Description: Enter a description for the profile. This setting is optional, but recommended.

  Step 6: Select Next.

  Step 7: In Configuration settings > Select a kiosk mode, choose the type of kiosk mode supported by the policy. Options include:

  *-> Single app, full-screen kiosk [Select this one]: The device runs as a single user account, and locks it to a single web browser or app. So when the user signs in, a specific app starts. This mode also restricts users from opening new apps, or changing the running app.

  For example, you can run the Microsoft Edge browser, and only show one site, such as Contoso.com. Or, you can run a Store app, and have the device locked on this app.

  Step 8a:

  Browser and Applications: For Browswer select the Microsoft Edge kiosk mode type: * Normal mode (full version of Microsoft Edge): Runs a full-version of Microsoft Edge with all browsing features. User data and state are saved between sessions.

  

  Step 8b: Add Kiosk browser: These settings control a web browser app on the kiosk. Be sure you deploy a web browser app to the kiosk devices using Client Apps.

  Enter the following settings:

  Default home page URL: Enter the default URL shown when the kiosk browser opens, or when the browser restarts.

  [Enter

  https://bing.com]

  [Skip other Kiosk browser settings]

  Step 9: Select Next.

  Step 10: In Scope tags (optional), assign a tag to filter the profile to specific IT groups.

  [Select sg-IT]

  Select Next.

  Step 11: In Assignments, select the users or user group that will receive your profile.

  [Select user KioskUser]

  Select Next.

  Step 12: In Review + create, review your settings. When you select Create, your changes are saved, and the profile is assigned. The policy is also shown in the profiles list.

  https://learn.microsoft.com/en-us/intune/intune-service/configuration/kiosk-settings

  https://learn.microsoft.com/en-us/intune/intune-service/configuration/kiosk-settings-windows