Microsoft MD-102 Online Practice Questions and Exam Preparation

Microsoft MD-102 Online Questions & Answers

• Question 321:

  A user named User1 has a computer named Computer1 that runs Windows 10.

  User1 connects to a Microsoft Azure virtual machine named VM1 by using Remote Desktop.

  User1 creates a VPN connection to a partner organization.

  When the VPN connection is established, User1 cannot connect to VM1. When User1 disconnects from the VPN, the user can connect to VM1.

  You need to ensure that User1 can connect to VM1 while connected to the VPN.

  What should you do?

  A. From the proxy settings, add the IP address of VM1 to the bypass list to bypass the proxy.
  B. From the properties of VPN1, clear the Use default gateway on remote network check box.
  C. From the properties of the Remote Desktop connection to VM1, specify a Remote Desktop Gateway (RD Gateway).
  D. From the properties of VPN1, configure a static default gateway address.
  B. From the properties of VPN1, clear the Use default gateway on remote network check box.

• Question 322:

  HOTSPOT

  You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

  You use Microsoft Intune to manage devices.

  You plan to create Windows 11 device builds for the marketing and research departments. The solution must meet the requirements: Marketing department devices must support Windows Update for Business.

  Research department devices must have support for feature update versions for up to 36 months from release.

  What is the minimum Windows 11 edition required for each department? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 323:

  You have a Microsoft 365 E5 subscription that contains the following types of devices:

  1. Windows 11

  2. Android

  3. iOS

  All the devices are enrolled in Microsoft Intune.

  You need to use Intune to deploy apps from the Enterprise App Catalog.

  To which device types can you deploy the apps?

  A. Windows 11 only
  B. Windows 11 and Android only
  C. Windows 11 and iOS only
  D. Android and iOS only
  E. Windows 11, Android, and iOS
  A. Windows 11 only

  ---

  Explanation

  The Enterprise App Catalog is a collection of prepackaged Win32 apps that have been designed and prepared by Microsoft to support Intune. The catalog contains both Microsoft apps and third-party apps. An Enterprise App Catalog app is a Windows app that you can add via the Enterprise App Catalog in Intune.

  https://learn.microsoft.com/en-us/mem/intune/apps/apps-add-enterprise-app

• Question 324:

  HOTSPOT

  You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

  You use Microsoft Intune to manage devices.

  Azure AD joined Windows devices enroll automatically in Intune.

  You have the devices shown in the following table.

  

  You are preparing to upgrade the devices to Windows11. All the devices are compatible with Windows 11.

  You need to evaluate Windows Autopilot and in-place upgrade as deployment methods to implement Windows 11 Pro on the devices, while retaining all user settings and applications.

  Which devices can be upgraded by using each method? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 325:

  Your network contains an on-premises Active Directory domain. The domain contains two computers named Computer1 and Computer2 that run Windows 10.

  You install Windows Admin Center on Computer1.

  You need to manage Computer2 from Computer1 by using Windows Admin Center.

  What should you do on Computer2?

  A. Update the TrustedHosts list.
  B. Run the Enable-PSRemoting cmdlet.
  C. Allow Windows Remote Management (WinRM) through the Microsoft Defender firewall.
  D. Add an inbound Microsoft Defender Firewall rule.
  C. Allow Windows Remote Management (WinRM) through the Microsoft Defender firewall.

  ---

  Explanation

  Windows Admin Center uses WinRM for remote management, so allowing WinRM through the firewall is a crucial step in enabling this functionality

  https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/manage-vm

  https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/understand/what-is

• Question 326:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that uses Microsoft Intune. The subscription contains the resources shown in the following table.

  

  User1 is the owner of Device1.

  You deploy Microsoft 365 Apps Windows 10 and later app types to Intune as shown in the following table.

  

  The next day you review the results of the app deployments.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 327:

  You have a Microsoft Entra tenant that contains a device named Device1. Device1 is Microsoft Entra joined.

  You need to validate the Microsoft Entra ID primary refresh token (PRT) for Device1.

  Which command should you run?

  A. klist tgt
  B. dsregcmd /status
  C. query session
  D. sc.exe query state=all
  B. dsregcmd /status

  ---

  Explanation

  Get the status of the primary refresh token 1. Sign in to Windows under the user account in which you experience PRT issues.

  2. Select Start, and then search for and select Command Prompt.

  3. To run the device registration command (dsregcmd), enter dsregcmd /status.

  4. Locate the SSO state section of the device registration command's output. The following text shows an example of this section:

  Output

  +----------------------------------------------------------------------+ | SSO State |

  +----------------------------------------------------------------------+ AzureAdPrt : YES

  AzureAdPrtUpdateTime : 2020-07-12 22:57:53.000 UTC

  AzureAdPrtExpiryTime : 2020-07-26 22:58:35.000 UTC

  AzureAdPrtAuthority :

  https://login.microsoftonline.com/00001111-aaaa-2222-bbbb-3333cccc4444

  EnterprisePrt : YES EnterprisePrtUpdateTime : 2020-07-12 22:57:54.000 UTC EnterprisePrtExpiryTime : 2020-07-26 22:57:54.000 UTC EnterprisePrtAuthority :

  https://msft.sts.microsoft.com:443/adfs

  +----------------------------------------------------------------------+ 5. Check the value of the AzureAdPrt field. If it's set to NO, an error occurred when you tried to acquire the PRT status from Microsoft Entra ID.

  6. Check the value of the AzureAdPrtUpdateTime field. If the value of the AzureAdPrtUpdateTime field is more than four hours, a problem is likely preventing the PRT from refreshing. Lock and unlock the device to force a PRT refresh, and then check whether the time is updated.

  https://learn.microsoft.com/en-us/entra/identity/devices/troubleshoot-primary-refresh-token

• Question 328:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains 100 Windows 10 devices enrolled in Microsoft Intune.

  You need to create Endpoint security policies to meet the following requirements:

  1. Hide the Firewall & network protection area in the Windows Security app.

  2. Disable the provisioning of Windows Hello for Business on the devices.

  Which two policy types should you use? To answer, select the policies in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://www.examtopics.com/discussions/microsoft/view/74677-exam-md-101-topic-4-question-58-discussion/

• Question 329:

  You have an Azure AD tenant named contoso.com.

  You need to ensure that users are not added automatically to the local Administrators group when they join their Windows 11 device to contoso.com.

  What should you configure?

  A. Windows Autopilot
  B. provisioning packages for Windows
  C. Security defaults in Azure AD
  D. Device settings in Azure AD
  A. Windows Autopilot

  ---

  Explanation

  Manage regular users

  By default, Microsoft Entra ID adds the user performing the Microsoft Entra join to the administrator group on the device. If you want to prevent regular users from becoming local administrators, you have the following options:

  *-> Windows Autopilot - Windows Autopilot provides you with an option to prevent primary user performing the join from becoming a local administrator by creating an Autopilot profile.

  * Bulk enrollment - a Microsoft Entra join that is performed in the context of a bulk enrollment happens in the context of an autocreated user. Users signing in after a device has been joined aren't added to the administrators group.

  https://learn.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin

• Question 330:

  HOTSPOT

  You have a Microsoft 365 subscription.

  You plan to enroll devices in Microsoft Intune that have the platforms and versions shown in the following table.

  

  You need to configure device enrollment to meet the following requirements:

  1. Ensure that only devices that have approved platforms and versions can enroll in Microsoft Intune.

  2. Ensure that devices are added to Azure AD groups based on a selection made by users during the enrollment.

  Which device enrollment setting should you configure for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Enrollment restrictions

  As an Intune administrator, you can create and manage enrollment restrictions that define what devices can enroll into management with Intune, including the:

  Number of devices.

  Operating systems and versions.

  Box 2: Device categories

  To make managing devices easier, you can use Microsoft Intune device categories to automatically add devices to groups based on categories that you define.

  Device categories use the following workflow:

  Create categories that users can choose from when they enroll their device.

  When users of iOS/iPadOS and Android devices enroll a device, they must choose a category from the list of categories you configured. To assign a category to a Windows device, users must use the Company Portal website.

  You can then deploy policies and apps to these groups.

  You can create any device categories you want. For example: - Point-of-sale device

  - Demonstration device

  - Sales

  - Accounting

  - Manager Reference:

  https://docs.microsoft.com/en-us/mem/intune/enrollment/enrollment-restrictions-set

  https://docs.microsoft.com/en-us/mem/intune/enrollment/device-group-mapping