Microsoft MD-102 Online Practice Questions and Exam Preparation

Microsoft MD-102 Online Questions & Answers

• Question 241:

  You have an Azure AD tenant that contains the devices shown in the following table.

  

  You purchase Windows 11 Enterprise E5 licenses.

  Which devices can use Subscription Activation to upgrade to Windows 11 Enterprise?

  A. Device1 only
  B. Device1 and Device2 only
  C. Device1 and Device3 only
  D. Device1, Device2, Device3, and Device4
  A. Device1 only

  ---

  Explanation

  The subscription upgrade conditions are: the same Windows OS type and the devices must be Azure AD joined.

• Question 242:

  HOTSPOT

  You have a Microsoft Deployment Toolkit (MDT) deployment share named Share1.

  You add Windows 10 images to Share1 as shown in the following table.

  

  Which images can be used in the Standard Client Task Sequence, and which images can be used in the Standard Client Upgrade Task Sequence?

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit

• Question 243:

  You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

  

  All the devices are enrolled in Microsoft Intune and have Microsoft 365 Apps for enterprise installed.

  On which devices can you use the Cloud Policy service for Microsoft 365 to manage Microsoft 365 Apps for enterprise?

  A. Device2 only
  B. Device1 and Device2 only
  C. Device1, Device2, and Device3 only
  D. Device1, Device2, and Device4 only
  E. Device1, Device2, Device3, and Device4
  E. Device1, Device2, Device3, and Device4

  ---

  Explanation

  Cloud Policy service for Microsoft 365 lets you enforce policy settings for Microsoft 365 Apps for enterprise on a user's device, even if the device isn't domain joined or otherwise managed. When a user signs into Microsoft 365 Apps for enterprise on a device, the policy settings roam to that device. Policy settings are available for devices running Windows, macOS, iOS, and Android, although not all policy settings are available for all operating systems.

  https://learn.microsoft.com/en-us/microsoft-365-apps/admin-center/overview-cloud-policy

• Question 244:

  DRAG DROP

  You have a Microsoft 365 subscription that contains the following devices enrolled in Microsoft Intune:

  1. A corporate-owned Windows device named Device1

  2. A personally-owned Android device named Device2

  You need to use a remote action on each device.

  The solution must meet the following requirements:

  1. Repurpose Device1 by returning the device to the factory default settings.

  2. Remove only corporate data from Device2 and remove the device from Intune when the device checks in.

  Which remote action should you use on each device? To answer, drag the appropriate remote actions to the correct devices. Each remote action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

• Question 245:

  You have a Microsoft 365 E5 subscription.

  You have a Windows device named Device1 that is enrolled in Microsoft Intune.

  On January 1,2024, you assign an app named App1 to Device1 as a required app.

  The install of App1 fails.

  What is the next date that Intune will attempt to install App1?

  A. January 2, 2024
  B. January 5, 2024
  C. January 8, 2024
  D. January 31, 2024
  A. January 2, 2024

  ---

  Explanation

  When an app installation fails, the Intune Management Extension (IME) sets a re-evaluation time, typically based on a 24-hour interval. During this period, the IME logs track the app's status and check whether the conditions for a retry are met.

  If the app's installation has not been retried within the set interval (usually 24 hours), the GRS will trigger a new installation attempt. If the failure is due to an exit code specified for retry, the system will attempt to reinstall the app three times, with 5-minute intervals between each attempt, before reverting to the 24-hour schedule. If the exit code is not managed or is set to "Failed," the GRS will only trigger a retry once every 24 hours. The GRS ensures that retries are spaced out to avoid constant reinstallation attempts, which helps in managing network and device resources effectively

  https://call4cloud.nl/2022/07/retry-failed-win32app-installation

• Question 246:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains three Windows devices named Device1, Device2, and Device3.

  Each device contains two apps named App1 and App2.

  You manage the devices by using Microsoft Intune.

  The subscription contains the groups shown in the following table.

  

  You have an Endpoint Privilege Management (EPM) elevation settings policy named Policy1 that has the following settings:

  1. Endpoint Privilege Management: Enabled

  2. Default elevation response: Require user confirmation

  3. Validation: Windows authentication

  4. Assignments: Group1, Group2

  You create an Endpoint Privilege Management elevation rules policy named RulesPolicy1 that has the following settings:

  1. Rule name: Rule1

  2. Elevation type: Automatic

  3. Child process behavior: Deny all

  4. File name: App1.exe

  5. Assignments: Group1

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  A user on Device1 must provide credentials to run App2 with elevated access. Yes. Since App2 is not included in RulesPolicy1 (which is specific to App1.exe), the default elevation response will apply. This means the user will need to provide credentials (due to the validation setting being Windows authentication) to elevate App2.

  A user on Device2 can run App1 with elevated access without providing credentials. No. Device2 is in Group2, but RulesPolicy1, which allows automatic elevation for App1.exe, is assigned only to Group1. Therefore, users on Device2 must follow the default elevation response, which requires credentials.

  A user on Device3 must provide credentials to run App1 with elevated credentials. No. Device3 is part of Group1, which is assigned to RulesPolicy1. Since RulesPolicy1 allows automatic elevation for App1.exe, users on Device3 will not need to provide credentials when running App1.

• Question 247:

  You have a Microsoft 365 subscription that contains 500 Android Enterprise devices.

  All the devices are enrolled in Microsoft Intune.

  You need to deliver bookmarks to the Chrome browser on the devices.

  What should you create?

  A. a compliance policy
  B. a configuration profile
  C. an app protection policy
  D. an app configuration policy
  D. an app configuration policy

  ---

  Explanation

  An app configuration policy is a better way to deliver bookmarks to the Chrome browser on Android devices than a configuration profile.

  To deliver bookmarks to the Chrome browser on Android devices, you would create an app configuration policy that specifies the bookmarks that you want to be added to the browser. The policy would then be assigned to your managed devices. Once the policy is applied, the bookmarks will be added to Chrome automatically.

  To deliver bookmarks using a configuration profile, you would need to create a file that contains the bookmark data. The file would then be pushed to your managed devices. Once the file is on the device, you would need to use a script to import the bookmarks into Chrome.

  This process is more complex and time-consuming than using an app configuration policy. It also requires you to create and maintain a bookmark file, which can be cumbersome if you have a large number of bookmarks or if you need to frequently update them.

  https://learn.microsoft.com/en-us/mem/intune/apps/apps-configure-chrome-android

• Question 248:

  HOTSPOT

  All users have Microsoft 365 apps deployed.

  You need to configure Microsoft 365 apps to meet the following requirements:

  1. Enable the automatic installation of WebView2 Runtime.

  2. Prevent users from submitting feedback.

  Which two settings should you configure in the Microsoft 365 Apps admin center? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 249:

  You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

  You use Microsoft Intune to deploy and manage Windows devices.

  You have 100 devices from users that left your company.

  You need to repurpose the devices for new users by removing all the data and applications installed by the previous users. The solution must minimize administrative effort.

  What should you do?

  A. Deploy a new configuration profile to the devices.
  B. Perform a Windows Autopilot reset on the devices.
  C. Perform an in-place upgrade on the devices.
  D. Perform a clean installation of Windows 11 on the devices.
  B. Perform a Windows Autopilot reset on the devices.

  ---

  Explanation

  Windows Autopilot Reset takes the device back to a business-ready state, allowing the next user to sign in and get productive quickly and simply. Specifically, Windows Autopilot Reset:

  Removes personal files, apps, and settings.

  Reapplies a device's original settings.

  Sets the region, language, and keyboard to the original values.

  Maintains the device's identity connection to Azure AD.

  Maintains the device's management connection to Intune.

  The Windows Autopilot Reset process automatically keeps information from the existing device:

  Wi-Fi connection details.

  Provisioning packages previously applied to the device.

  A provisioning package present on a USB drive when the reset process is started.

  Azure Active Directory device membership and MDM enrollment information.

  SCEP certificates.

  Windows Autopilot Reset blocks the user from accessing the desktop until this information is restored, including reapplying any provisioning packages. For devices enrolled in an MDM service, Windows Autopilot Reset also blocks until an MDM sync is completed. When Autopilot reset is used on a device, the device's primary user is removed. The next user who signs in after the reset will be set as the primary user.

  https://learn.microsoft.com/en-us/mem/autopilot/windows-autopilot-reset

• Question 250:

  HOTSPOT

  You have a server named Server1 and computers that run Windows 8.1. Server1 has the Microsoft Deployment Toolkit (MDT) installed.

  You plan to upgrade the Windows 8.1 computers to Windows 10 by using the MDT deployment wizard.

  You need to create a deployment share on Server1.

  What should you do on Server1, and what are the minimum components you should add to the MDT deployment share? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Install the Windows Deployment Services role. Install and initialize Windows Deployment Services (WDS) On the server:

  Open an elevated Windows PowerShell prompt and enter the following command:

  Install-WindowsFeature -Name WDS -IncludeManagementTools WDSUTIL /Verbose /Progress /Initialize-Server /Server:MDT01 /RemInst:"D:\RemoteInstall" WDSUTIL /Set-Server /AnswerClients:All

  Box 2: Windows 10 image and task sequence only

  Create the reference image task sequence

  In order to build and capture your Windows 10 reference image for deployment using MDT, you will create a task sequence.