Microsoft MD-102 Online Practice Questions and Exam Preparation

Microsoft MD-102 Online Questions & Answers

• Question 261:

  HOTSPOT

  In Microsoft Intune, you have the device compliance policies shown in the following table.

  

  The Intune compliance policy settings are configured as shown in the following exhibit.

  

  On June 1, you enroll Windows 10 devices in Intune as shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 262:

  You have a Microsoft 365 E5 subscription and 100 unmanaged iPad devices.

  You need to deploy a specific iOS update to the devices. Users must be prevented from manually installing a more recent version of iOS.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Create a device configuration profile.
  B. Enroll the devices in Microsoft Intune by using the Intune Company Portal.
  C. Create a compliance policy.
  D. Create an iOS app provisioning profile.
  E. Enroll the devices in Microsoft Intune by using Apple Business Manager.
  A. Create a device configuration profile.
  E. Enroll the devices in Microsoft Intune by using Apple Business Manager.

  ---

  Explanation

  https://learn.microsoft.com/en-us/mem/intune/protect/software-updates-ios

• Question 263:

  HOTSPOT

  You have two Windows 10 devices enrolled in Microsoft Intune as shown in the following table.

  

  The Compliance policy settings are configured as shown in the following exhibit.

  

  On August 1, you create a compliance policy as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 264:

  You have a Windows 10 device named Device1 that is joined to Active Directory and enrolled in Microsoft Intune.

  Device1 is managed by using Group Policy and Intune.

  You need to ensure that the Intune settings override the Group Policy settings.

  What should you configure?

  A. a device configuration profile
  B. a device compliance policy
  C. an MDM Security Baseline profile
  D. a Group Policy Object (GPO)
  A. a device configuration profile

  ---

  Explanation

  Creating the policy

  Let's create a new policy in Intune to control the GP vs. MDM winner 1) Navigate to portal.azure.com and locate Intune 2) Select "Device configuration Profiles Create profile"

  3) Under Platform select Windows 10 and later 4) Under Profile type select "custom" and "add" 5) Name the custom setting with something intuitive 6) For OMA-URI add the policy OMA-URI string: ./Device/Vendor/MSFT/Policy/Config/ControlPolicyConflict/MDMWinsOverGP

  7) For Data type select Integer and add the number

  Note: The following describes which policy wins according to Windows 10 version.

  Windows 10 versions 1709 and earlier Group Policy will override MDM policies, even if an identical policy is configured in MDM.

  Windows 10 version 1803 and beyond there is a new Policy CSP (configuration service provider) setting called ControlPolicyConflict that includes the policy of MDMWinsOverGP, where the preference of which policy wins can be controlled, i.e. Microsoft Intune MDM policy.

  Note 2: the ControlPolicyConflict policy allows the IT admin to control which policy will be used whenever both the MDM policy and its equivalent Group Policy (GP) are set on the device.

  https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-controlpolicyconflict

  https://uem4all.com/2018/04/02/windows-10-group-policy-vs-intune-mdm-policy-who-wins/

• Question 265:

  You have a Microsoft 365 subscription that has Windows 365 Enterprise licenses.

  You plan to use a custom Windows 11 image as a template for Cloud PCs.

  You have a Hyper-V virtual machine that runs Windows 11 and has the following configurations:

  1. Name: VM1

  2. Disk size: 64 GB

  3. Disk format: VHDX

  4. Disk type: Fixed size

  5. Generation: Generation 2

  You need to ensure that you can use VM1 as a source for the custom image.

  What should you do on VM1 first?

  A. Change the disk type to Dynamically expanding
  B. Change the disk format to the VHD
  C. Change the generation to Generation 1.
  D. Increase the disk size.
  B. Change the disk format to the VHD

• Question 266:

  HOTSPOT

  You have 100 Windows 10 devices enrolled in Microsoft Intune.

  You need to configure the devices to retrieve Windows updates from the internet and from other computers on a local network.

  Which Delivery Optimization setting should you configure, and which type of Intune object should you create? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 267:

  You have a Microsoft 365 Subscription that uses Microsoft Intune.

  You add apps to Intune as shown in the following table.

  

  You need to create an app configuration policy named Policy1 for the Android Enterprise platform.

  Which apps can you manage by using Policy1?

  A. App2 only
  B. App3 only
  C. App1 and App3 only
  D. App2 and App3 only
  E. App1, App2, and App3
  B. App3 only

  ---

  Explanation

  Add app configuration policies for managed Android Enterprise devices

  App configuration policies in Microsoft Intune supply settings to Managed Google Play apps on managed Android Enterprise devices. The app developer exposes Android-managed app configuration settings. Intune uses these exposed setting to let the admin configure features for the app. The app configuration policy is assigned to your user groups. The policy settings are used when the app checks for them, typically the first time the app runs.

  Not every app supports app configuration. Check with the app developer to see if their app supports app configuration policies.

  Use the configuration designer

  You can use the configuration designer for Managed Google Play apps when the app is designed to support configuration settings. Configuration applies to devices enrolled in Intune. The designer lets you configure specific configuration values for the settings exposed by the app.

  https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-use-android

• Question 268:

  SIMULATION

  Username and password

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and select the username below.

  To enter your password, place your cursor in the Enter password box and select the password below.

  Microsoft 365 Username: [email protected]

  Microsoft 365 Password: i7A4$3o^HGD3L~=c[9xuOhM%^4:s11Ai

  If the Microsoft Edge browser or Microsoft 365 portal does not load successfully, select the Microsoft Edge browser icon from the task bar, type the URL "https://portal.office.com", and press Enter. The following information is for technical support purposes only:

  Lab Instance: 48262079

  You need to deploy an update ring that will upgrade Windows 10 devices to Windows 11. The update ring must be assigned to all devices, and all the other update ring settings must use the default settings.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  Update rings for Windows 10 and later policy in Intune

  Create and assign update rings

  Step 1: Sign in to the Microsoft Intune admin center.

  Step 2: Select Devices > By platform > Windows > Manage updates > Windows 10 and later updates > Update rings tab > Create profile.

  Step 3: Under Basics, specify a name, a description (optional), and then select Next.

  Step 4: Under Update ring settings, configure settings for your business needs. [Leave the defaults]

  Step 5: Under Scope tags, select + Select scope tags to open the Select tags pane if you want to apply them to the update ring. Choose one or more tags, and then click Select to add them to the update ring and return to the Scope tags page. [Leave the defaults]

  When ready, select Next to continue to Assignments.

  Step 6: Under Assignments, choose + Select groups to include and then assign the update ring to one or more groups. Use + Select groups to exclude to fine-tune the assignment. Select Next to continue. [Select the All devices group]

  Note: The All devices group targets all devices that are enrolled into management.

  Step 7: Under Review + create, review the settings, and then select Create when ready to save your Windows update ring. Your new update ring is displayed in the list of update rings.

  https://learn.microsoft.com/en-us/intune/intune-service/protect/windows-10-update-rings

  https://learn.microsoft.com/en-us/mem/intune-service/fundamentals/groups-add

• Question 269:

  You have a Microsoft 365 E5 subscription.

  You use Microsoft Intune to manage all devices.

  You need to prepare a Win32 app named App1.exe for deployment.

  What should you do first?

  A. From the Microsoft Intune admin center, create an app configuration policy.
  B. Change App1.exe to the INTUNEWIN format.
  C. From the Microsoft 365 Apps admin center, create a deployment configuration.
  D. Upload App1.exe to Azure Blob Storage.
  B. Change App1.exe to the INTUNEWIN format.

• Question 270:

  HOTSPOT

  Your network contains an Active Directory domain. The domain contains 1,000 computers that run Windows 11.

  You need to configure the Remote Desktop settings of all the computers. The solution must meet the following requirements:

  Prevent the sharing of clipboard contents.

  Ensure that users authenticate by using Network Level Authentication (NLA).

  Which two nodes of the Group Policy Management Editor should you use? To answer, select the appropriate nodes in the answer area.

  NOTE: Each correct selection is worth one point.