Microsoft MD-102 Online Practice Questions and Exam Preparation

Microsoft MD-102 Online Questions & Answers

• Question 231:

  HOTSPOT

  You have a Microsoft 365 subscription that contains the devices shown in the following table.

  

  You need to use the remote actions shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  No - You can use Action1 on Device1.

  Device1 is Windows 11, Entra Joined, and no MDM.

  Action1 is Locate device.

  For supported device platforms, you can use a remote device action from within the Microsoft Intune admin center to locate a device should it be lost or stolen.

  Box 2: No

  No - You can use Action2 on Device2.

  Device2 is Windows 11, Entra registered, and Intune

  Action2 is Remote lock.

  Box 3: Yes

  Yes - You can use Action2 on Device3.

  Device3 is Android, Entra registered, and Intune

  Action2 is Remote lock.

  Note: Remotely lock devices with Intune

  Remote lock is supported for the following platforms:

  Android

  Android Enterprise kiosk devices

  Android Enterprise work profile devices

  Android Enterprise fully managed devices

  Android Enterprise corporate-owned with work profile devices Android Open Source Project (AOSP) devices iOS macOS

  Remote lock isn't supported for:

  Windows 10 desktop Reference:

  https://learn.microsoft.com/en-us/mem/intune/remote-actions/device-locate

  https://learn.microsoft.com/en-us/mem/intune/remote-actions/device-remote-lock

• Question 232:

  Which devices are registered by using the Windows Autopilot deployment service?

  A. Device1 only
  B. Device3 only
  C. Device1 and Device3 only
  D. Device1, Device2, and Device3
  A. Device1 only

• Question 233:

  SIMULATION

  Username and password

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and select the username below.

  To enter your password, place your cursor in the Enter password box and select the password below.

  Microsoft 365 Username: [email protected]

  Microsoft 365 Password: i7A4$3o^HGD3L~=c[9xuOhM%^4:s11Ai

  If the Microsoft Edge browser or Microsoft 365 portal does not load successfully, select the Microsoft Edge browser icon from the task bar, type the URL "https://portal.office.com", and press Enter.

  The following information is for technical support purposes only:

  Lab Instance: 48262079

  You need to create a Compliance policy notification message template that will send an email containing the following:

  Locale: English (United States)

  Subject: Compliance Failure

  Message: There has been a compliance failure on your device, please contact your helpdesk.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  Create a notification message template

  To send email to your users, create a notification message template. When a device is noncompliant, the details you enter in the template is shown in the email sent to your users.

  Step 1: In the Intune admin center, go to Devices > Compliance.

  Step 2: Select the Notifications tab and then choose Create notification.

  Step 3: Enter the following information for the Basics step: [Skip]

  Name: Contoso Admin

  Email header ?Include company logo: Set to Enabled to show your organization's logo. Email footer ?Include company name: Set to Enabled to show your organization's name. Email footer ?Include contact information: Set to Enabled to show your organization's contact information.

  Company Portal Website Link: Set to Disabled.

  Step 4: Click Next.

  Step 5: Enter the following information for the Notification message templates step:

  Subject: Device compliance [Enter: Compliance Failure]

  Message: Your device is currently not meeting our organization's compliance requirements. [Enter: There has been a compliance failure on your device, please contact your helpdesk.]

  Locale: [Enter: English (United States)] (This could be in Step 3 above instead)

  Step 6: Click Next and review your notification.

  Step 7: Click Create. The notification message template is ready to use.

  https://learn.microsoft.com/en-us/intune/intune-service/protect/quickstart-send-notification

• Question 234:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has an Azure AD tenant named contoso.com that contains several Windows 10 devices.

  When you join new Windows 10 devices to contoso.com, users are prompted to set up a four-digit pin.

  You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 10 devices to contoso.com.

  Solution: From the Microsoft Entra admin center, you modify the User settings and the Device settings.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Instead, from the Azure Active Directory admin center, you configure automatic mobile device management (MDM) enrollment. From the Endpoint Management admin center, you configure the Windows Hello for Business enrollment options.

  https://docs.microsoft.com/en-us/intune/protect/windows-hello

• Question 235:

  HOTSPOT

  You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

  Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure AD tenant by using Azure AD Connect.

  You use Microsoft Intune and Configuration Manager to manage devices.

  You need to recommend a deployment plan for new Windows 11 devices. The solution must meet the following requirements:

  1. Devices for the marketing department must be joined to the AD DS domain only. The IT department will install complex applications on the devices at build time, before giving the devices to the marketing department users.

  2. Devices for the sales department must be Azure AD joined. The devices will be shipped directly from the manufacturer to the homes of the sales department users.

  3. Administrative effort must be minimized.

  Which deployment method should you recommend for each department? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth point.

  

  

• Question 236:

  You have a Microsoft 365 subscription that uses Microsoft Intune.

  You need to ensure that you can deploy apps to Android Enterprise devices.

  What should you do first?

  A. Create a configuration profile.
  B. Add a certificate connector.
  C. Configure the Partner device management settings.
  D. Link your managed Google Play account to Intune.
  D. Link your managed Google Play account to Intune.

  ---

  Explanation

  Connect your Intune account to your Managed Google Play account.

  Managed Google Play is Google's enterprise app store and sole source of applications for Android Enterprise in Intune. You can use Intune to orchestrate app deployment through Managed Google Play for any Android Enterprise scenario (including personally-owned work profile, dedicated, fully managed, and corporate-owned work profile enrollments).

  https://docs.microsoft.com/en-us/mem/intune/apps/apps-add-android-for-work

  https://docs.microsoft.com/en-us/mem/intune/enrollment/connect-intune-android-enterprise

• Question 237:

  Your company has devices enrolled in Microsoft Intune as shown in the following table.

  

  In Microsoft Intune admin center, you define the company's network as a location named Location1.

  Which devices can use network location-based compliance policies?

  A. Device1 only
  B. Device2 only
  C. Device1 and Device2 only
  D. Device2 and Device3 only
  E. Device1, Device2, and Device3
  E. Device1, Device2, and Device3

  ---

  Explanation

  Intune supported operating systems

  Intune supports devices running the following operating systems (OS):

  1. iOS

  2. Android

  3. Windows

  4. macOS Note: View the device compliance settings for the different device platforms:

  1. Android device administrator

  2. Android Enterprise

  3. iOS

  4. macOS

  5. Windows Holographic for Business

  6. Windows 8.1 and later

  7. Windows 10/11 Reference:

  https://docs.microsoft.com/en-us/mem/intune/fundamentals/supported-devices-browsers

  https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started

• Question 238:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains a Windows device named Device1.

  Device1 was onboarded to Microsoft Defender for Endpoint by using a local script.

  You use Microsoft Intune to manage Device1.

  You plan to use the machine risk score in a compliance policy.

  You need to ensure that the machine risk score is evaluated based on data from Defender for Endpoint.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Configure the Advanced features settings.

  From the Endpoints settings of the Microsoft Defender Portal

  Connect Microsoft Defender for Endpoint to Intune

  The first step you take is to set up the service-to-service connection between Intune and Microsoft Defender for Endpoint. Set up requires administrative access to both the Microsoft Defender Security Center, and to Intune.

  To enable Microsoft Defender for Endpoint

  Open the Microsoft Defender for Endpoint portal at security.microsoft.com. The Intune admin center also includes a link to the Defender for Endpoint portal.

  1. Sign in to the Microsoft Intune admin center.

  2. Select Endpoint security > Microsoft Defender for Endpoint, and then select Open the Microsoft Defender Security Center. [Box 2]

  

  3. In Microsoft Defender portal (previously the Microsoft Defender Security Center):

  4. Select Settings > Endpoints >Advanced features. [Box 1] 5. For Microsoft Intune connection, choose

  On:

  

  Box 2: Configure the Microsoft Defender for Endpoint setting From the Microsoft Intune admin center

  https://learn.microsoft.com/en-us/mem/intune/protect/advanced-threat-protection-configure

• Question 239:

  You have following types of devices enrolled in Microsoft Intune:

  1. Windows 10

  2. Android

  3. iOS

  For which types of devices can you create VPN profiles in Microsoft Intune admin center?

  A. Windows 10 only
  B. Windows 10 and Android only
  C. Windows 10 and iOS only
  D. Android and iOS only
  E. Windows 10, Android, and iOS
  E. Windows 10, Android, and iOS

  ---

  Explanation

  https://learn.microsoft.com/en-us/mem/intune/configuration/vpn-settings-configure#step-2---create-the-profile

• Question 240:

  HOTSPOT

  You have a Microsoft 365 subscription.

  You need to enable passwordless authentication for all users. The solution must meet the following requirements:

  1. Users in the research department cannot use mobile devices and must authenticate from unmanaged Linux devices by using an alternative method.

  2. To access services, users in the sales department must authenticate by using their mobile phone.

  3. Administrative effort must be minimized.

  Which authentication method should you use for each department? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-passwordless-phone

  https://learn.microsoft.com/en-us/azure/active-directory/authentication/fido2-compatibility