Microsoft MD-102 Online Practice Questions and Exam Preparation

Microsoft MD-102 Online Questions & Answers

• Question 331:

  You have a Microsoft 365 E5 subscription and 25 Apple iPads.

  You need to enroll the iPads in Microsoft Intune by using the Apple Configurator enrollment method.

  What should you do first?

  A. Configure an Apply MDM push certificate.
  B. Add your user account as a device enrollment manager (DEM).
  C. Modify the enrollment restrictions.
  D. Upload a file that has the device identifiers for each iPad.
  A. Configure an Apply MDM push certificate.

  ---

  Explanation

  Set up iOS/iPadOS device enrollment with Apple Configurator

  Prerequisites

  Physical access to iOS/iPadOS devices

  Set MDM authority

  An Apple MDM push certificate

  Device serial numbers (Setup Assistant enrollment only)

  USB connection cables macOS computer running Apple Configurator 2.0

  Note:

  Upload and renew your Apple MDM push certificates in Microsoft Intune. An Apple MDM Push certificate is required to manage iOS/iPadOS and macOS devices in Microsoft Intune, and enables devices to enroll via:

  The Intune Company Portal app.

  Apple bulk enrollment methods, such as the Device Enrollment Program, Apple School Manager, and Apple Configurator.

  Certificates must be renewed annually.

  https://learn.microsoft.com/en-us/mem/intune/enrollment/apple-mdm-push-certificate-get

• Question 332:

  DRAG DROP

  You have a Microsoft Deployment Toolkit (MDT) server named MDT1.

  When computers start from the LiteTouchPE_x64.iso image and connect to MDT1, the welcome screen appears as shown in the following exhibit.

  

  You need to prevent the welcome screen from appearing when the computers connect to MDT1.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Step 1: Modify the CustomSettings.ini file

  CustomSettings.ini (CS) may be edited to include information that you wish to take into account prior to beginning the deployment process-such as data that will exist as variables that can be called upon as needed. This is extremely useful when working with multiple sites or when you want certain settings to apply to desktops, while mobile devices receive a different set of settings.

  Example of line included:

  SkipBDDWelcome=NO Step 2: Modify the task sequence

  Create the deployment task sequence, example:

  1. Using the Deployment Workbench, right-click Task Sequences under the MDT Production node, select New Folder and create a folder with the name: Windows 10.

  2. Right-click the Windows 10 folder created in the previous step, and then select New Task Sequence. Use the following settings for the New Task Sequence Wizard:

  Task sequence ID: W10-X64-001

  Task sequence name: Windows 10 Enterprise x64 Custom Image Etc.

  Step 3: Update the deployment share

  Configure the MDT production deployment share, example:

  1. On SRV1, open an elevated Windows PowerShell prompt and enter the following commands:

  copy-item "C:\Program Files\Microsoft Deployment Toolkit\Templates\Bootstrap.ini" C:\MDTProd\Control\Bootstrap.ini -Force copy-item "C:\Program Files\Microsoft Deployment Toolkit\Templates\CustomSettings.ini" C:\MDTProd\Control\CustomSettings.ini -Force In the Deployment Workbench console on SRV1, right-click the MDT Production deployment share and then select Properties.

  Select the Rules tab and replace the rules with the following text (don't select OK yet):

  [Settings]

  Priority=Default

  [Default]

  _SMSTSORGNAME=Contoso

  OSInstall=YES

  UserDataLocation=AUTO

  *Details omitted* Incorrect:

  * Bootstrap.ini

  Bootstrap.ini is the file that controls access to the shared drive that stores the deployment repository.

  https://learn.microsoft.com/en-us/windows/deployment/windows-10-poc-mdt#create-a-deployment-share-and-reference-image

  https://www.techrepublic.com/article/mdt-automating-deployments-using-customsettings-ini/

• Question 333:

  You have a Microsoft 365 E5 subscription.

  You need to download a report that lists all the devices that are NOT enrolled in Microsoft Intune and are assigned an app protection policy.

  What should you select in the Microsoft Endpoint Manager admin center?

  A. Apps. and then App protection policies
  B. Apps. and then Monitor
  C. Devices, and then Monitor
  D. Reports, and the Device compliance
  B. Apps. and then Monitor

  ---

  Explanation

  You can check if an App Protection policy is assigned and verify if a device is enrolled in Intune. It's the only option that can confirm both on a single dashboard. You need to modify the columns but that's expected if you're looking for a granular report such as this.

  View the App protection status report

  Sign in to the Microsoft Intune admin center.

  Select Apps > Monitor > App protection status.

  https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policies-monitor

• Question 334:

  You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

  You use Microsoft Intune to manage Windows 11 devices.

  You create a new policy set named Set and add five device configuration profiles for Windows 10 and later.

  You create a device compliance policy named Policy1.

  You need to ensure that when users are assigned the device configuration profiles in Set1, they are always assigned Policy1 also.

  What should you configure?

  A. the assignments of Policy1
  B. the Policy1 configurations
  C. the assignments of Set1
  D. the Set1 configurations
  D. the Set1 configurations

• Question 335:

  HOTSPOT

  You have a Microsoft 365 E5 subscription. All devices are enrolled in Microsoft Intune.

  You have a device group named Group1 that contains five Windows 11 devices.

  You need to ensure that the devices in Group1 automatically receive new Windows 11 builds before the builds are released to the public.

  What should you configure in Intune? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 336:

  What should you configure to meet the technical requirements for the Azure AD-joined computers?

  A. Windows Hello for Business from the Microsoft Intune blade in the Azure portal.
  B. The Accounts options in an endpoint protection profile.
  C. The Password Policy settings in a Group Policy object (GPO).
  D. A password policy from the Microsoft Office 365 portal.
  A. Windows Hello for Business from the Microsoft Intune blade in the Azure portal.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-manage-inorganization

• Question 337:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the devices shown in the following table.

  

  Contoso.com contains the Azure Active Directory groups shown in the following table.

  

  You add a Windows Autopilot deployment profile. The profile is configured as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 338:

  You have a Microsoft 365 subscription that contains a user named User1 and uses Microsoft Intune Suite.

  You use Microsoft Intune to manage devices that run Windows 11.

  User provides remote support for 75 devices in the marketing department.

  You need to add User1 to the Remote Desktop Users group on each marketing department device.

  What should you configure?

  A. an app configuration policy
  B. a device compliance policy
  C. an account protection policy
  D. a device configuration profile
  C. an account protection policy

  ---

  Explanation

  https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-account-protection-policy#manage-local-groups-on-windows-devices

• Question 339:

  HOTSPOT

  You have a Microsoft 365 tenant that uses Microsoft Intune to manage the devices shown in the following table.

  

  You need to deploy a compliance solution that meets the following requirements:

  1. Marks the devices as Not Compliant if they do not meet compliance policies

  2. Remotely locks noncompliant devices

  What is the minimum number of compliance policies required, and which devices support the remote lock action? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 340:

  Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10.

  You have the groups shown in the following table.

  

  Which groups can you add to Group4?

  A. Group2 only
  B. Group1 and Group2 only
  C. Group2 and Group3 only
  D. Group1, Group2, and Group3
  A. Group2 only

  ---

  Explanation

  A similar question was on the learn.microsoft.com website.

  "You can add only domain security groups as members to Windows local groups. You cannot nest local Windows groups, and you cannot add domain distribution groups as members of local Windows groups. "

  https://learn.microsoft.com/windows/win32/ad/adding-domain-objects-to-local-groups

  Group 4 is a local group therefore Universal Distribution Groups cannot be nested.

  Group 4 is a local group therefore other local Groups cannot be nested.