Microsoft MD-102 Online Practice Questions and Exam Preparation

Microsoft MD-102 Online Questions & Answers

• Question 251:

  You have a computer named Computer1 that runs Windows 10.

  You need to prevent standard users from changing the wireless network settings on Computer1. The solution must allow administrators to modify the wireless network settings.

  What should you use?

  A. Windows Configuration Designer
  B. MSConfig
  C. Local Group Policy Editor
  D. an MMC console that has the Group Policy Object Editor snap-in
  C. Local Group Policy Editor

• Question 252:

  An employee reports that she must perform a BitLocker recovery on her laptop. The employee does not have her BitLocker recovery key but does have a Windows 10 desktop computer.

  What should you instruct the employee to do from the desktop computer?

  A. Run the manage-bde.exe "status command
  B. From BitLocker Recovery Password Viewer, view the computer object of the laptop
  C. Go to https://account.activedirectory.windowsazure.com and view the user account profile
  D. Run the Enable-BitLockerAutoUnlock cmdlet
  C. Go to https://account.activedirectory.windowsazure.com and view the user account profile

  ---

  Explanation

  https://celedonpartners.com/blog/storing-recovering-bitlocker-keys-azure-active-directory/

• Question 253:

  HOTSPOT

  Your network contains an Active Directory domain named adatum.com, a workgroup, and computers that run Windows 10. The computers are configured as shown in the following table.

  

  The local Administrator accounts on Computer1, Computer2, and Computer3 have the same user name and password.

  On Computer1, Windows Defender Firewall is configured as shown in the following exhibit.

  

  The services on Computer1 have the following states.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 254:

  You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

  You use Intune to manage devices.

  You need to review details about device wipes initiated through Intune.

  Which report should you review?

  A. Noncompliant devices
  B. Assignment status
  C. Windows health attestation report
  D. Device actions
  D. Device actions

• Question 255:

  HOTSPOT

  You have 1,000 computers that run Windows 10 and are members of an Active Directory domain.

  You need to capture the event logs from the computers to Azure.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Log Analytics

  Box 2: Install the Azure Monitoring Agent

  Azure Monitor agent currently supports the following core functionality:

  * Collect guest logs and metrics from any machine in Azure, in other clouds, or on-premises. Azure Arc-enabled servers are required for machines outside of Azure.

  * Centrally manage data collection configuration using data collection rules, and management configuration using Azure Resource Manager (ARM) templates or policies.

  * Use Windows event filtering or multi-homing for Windows or Linux logs.

  * Improved extension management.

  https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agent-windows

  https://docs.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-migration

• Question 256:

  You have a workgroup computer named Client1 that runs Windows 11 and connects to a public network.

  You need to enable PowerShell remoting on Client1. The solution must ensure that PowerShell remoting connections are accepted from the local subnet only.

  Which PowerShell command should you run?

  A. Set-PSSessionConfiguration -AccessMode Local
  B. Enable-PSRemoting -SkipNetworkProfileCheck
  C. Enable-PSRemoting -Force
  D. Set-NetFirewallRule -Name "WINRM-HTTP-In-TCP-PUBLIC" -RemoteAddress Any
  B. Enable-PSRemoting -SkipNetworkProfileCheck

  ---

  Explanation

  The Enable-PSRemoting cmdlet configures the computer to receive PowerShell remote commands that are sent by using the WS-Management technology. WS-Management based PowerShell remoting is currently supported only on Windows platform.

  Syntax

  Enable-PSRemoting

  [-Force]

  [-SkipNetworkProfileCheck]

  [-WhatIf]

  [-Confirm]

  [<CommonParameters>] Parameters include:

  * -SkipNetworkProfileCheck

  Indicates that this cmdlet enables remoting on client versions of the Windows operating system when the computer is on a public network. This parameter enables a firewall rule for public networks that allows remote access only from computers in the same local subnet.

  https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/enable-psremoting

• Question 257:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains a computer named Computer1 that runs Windows 11. Computer1 is enrolled in Microsoft Intune.

  You need to deploy an app named App1 to Computer1. The App1 installation will use multiple files.

  What should you use to package App1, and which file format will be used? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Win32 Content Prep Tool

  Use:

  In Microsoft Intune, there isn't a direct way to deploy .exe files. Instead, you need to package the .exe file using one of the supported formats, such as .intunewin or .msi, before deploying it. Here are two common methods to deploy .exe files via Intune: Wrap the .exe file in a .intunewin package:

  * Create an application package by using the Microsoft Win32 Content Prep Tool (IntuneWinAppUtil.exe). This tool allows you to convert a .exe file into a .intunewin package.

  * Download the IntuneWinAppUtil.exe tool from the Microsoft Download Center.

  Open a command prompt and run the following command to convert the .exe file into a .intunewin package:

  * IntuneWinAppUtil.exe -c <path_to_exe_file> -s <path_to_setup_file> -o <output_path>

  Replace <path_to_exe_file> with the path to the .exe file, <path_to_setup_file> with the path to the setup file or installation script, and <output_path> with the desired output folder for the .intunewin package.

  Box 2: . intunewin

  File format:

  Does Intune support .exe files?

  In Microsoft Intune, there isn't a direct way to deploy .exe files. Instead, you need to package the .exe file using one of the supported formats, such as . intunewin or . msi, before deploying it.

  https://learn.microsoft.com/en-us/answers/questions/1312151/how-to-deploy-apps-with-exe-file-extension-via-int

• Question 258:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has an Azure AD tenant named contoso.com that contains several Windows 10 devices.

  When you join new Windows 10 devices to contoso.com, users are prompted to set up a four-digit pin.

  You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 10 devices to contoso.com.

  Solution: From the Microsoft Entra admin center, you configure the Authentication methods.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Instead, from the Azure Active Directory admin center, you configure automatic mobile device management (MDM) enrollment. From the Endpoint Management admin center, you configure the Windows Hello for Business enrollment options.

  https://docs.microsoft.com/en-us/intune/protect/windows-hello

• Question 259:

  DRAG DROP

  You have a Microsoft 365 subscription. The subscription contains computers that run Windows 11 and are enrolled in Microsoft Intune.

  You need to create a compliance policy that meets the following requirements:

  1. Requires BitLocker Drive Encryption (BitLocker) on each device

  2. Requires a minimum operating system version

  Which setting of the compliance policy should you configure for each requirement? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Device Compliance settings for Windows 10/11 in Intune

  As part of your mobile device management (MDM) solution, use these settings to require BitLocker, set a minimum and maximum operating system, set a risk level using Microsoft Defender for Endpoint, and more.

  Box 1: Device Health

  Device Health

  Windows Health Attestation Service evaluation rules

  Require BitLocker:

  Windows BitLocker Drive Encryption encrypts all data stored on the Windows operating system volume. BitLocker uses the Trusted Platform Module (TPM) to help protect the Windows operating system and user data. It also helps confirm that a computer isn't tampered with, even if its left unattended, lost, or stolen. If the computer is equipped with a compatible TPM, BitLocker uses the TPM to lock the encryption keys that protect the data. As a result, the keys can't be accessed until the TPM verifies the state of the computer.

  Not configured (default) - This setting isn't evaluated for compliance or non-compliance.

  Require - The device can protect data that's stored on the drive from unauthorized access when the system is off, or hibernates.

  Box 2: Device Properties

  Requires a minimum operating system version

  Device Properties

  Operating System Version

  To discover build versions for all Windows 10/11 Feature Updates and Cumulative Updates (to be used in some of the fields below), see Windows release information. Be sure to include the appropriate version prefix before the build numbers, like 10.0 for Windows 10 as the following examples illustrate.

  Minimum OS version:

  Enter the minimum allowed version in the major.minor.build.revision number format. To get the correct value, open a command prompt, and type ver.

  Etc.

  https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-create-windows

• Question 260:

  Your on-premises network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

  The domain contains a domain controller named dc1.contoso.com.

  You have a Microsoft 365 E5 subscription that uses Microsoft Intune Suite.

  You have an Azure subscription that contains the resources shown in the following table.

  

  The subscription contains the virtual networks shown in the following table.

  

  You plan to deploy Windows 365 Enterprise Cloud PC.

  You need to create an Azure network connection (ANC) that will use Microsoft Entra hybrid join.

  Which virtual network can you use for the ANC?

  A. VNet1 only
  B. VNet2 only
  C. VNet3 only
  D. VNet1 and VNet2
  E. VNet1 and VNet3
  A. VNet1 only