Microsoft MD-102 Online Practice Questions and Exam Preparation

Microsoft MD-102 Online Questions & Answers

• Question 351:

  You have a Microsoft 365 subscription.

  You have devices enrolled in Microsoft Intune as shown in the following table.

  

  To which devices can you deploy apps by using Intune?

  A. Device1 only
  B. Device1 and Device2 only
  C. Device1 and Device3 only
  D. Device1, Device2, and Device3 only
  E. Device1, Device2, Device3, and Device4
  D. Device1, Device2, and Device3 only

• Question 352:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

  

  The subscription contains the dynamic device groups shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Device1 is a member of Group1 only: No. Device1 is Microsoft Entra hybrid joined, not AzureAD joined (which is required for Group1 membership). Therefore, Device1 is not a member of Group1.

  Device2 is a member of Group1 and Group2: Yes. Device2 is Microsoft Entra joined, so it meets the AzureAD trust type condition for Group1. It does not meet the conditions for Group2 because it is not Workplace (Microsoft Entra registered), so it's a member of Group1 only.

  Device3 is a member of Group2 only: Yes. Device3 is Microsoft Entra registered, which aligns with the Workplace trust type condition required for Group2 membership.

• Question 353:

  You install a feature update on a computer that runs Windows 10.

  How many days do you have to roll back the update?

  A. 5
  B. 10
  C. 14
  D. 30
  B. 10

  ---

  Explanation

  Microsoft has changed the time period associated with operating system rollbacks with Windows 10 version 1607, decreasing it to 10 days. Previously, Windows 10 had a 30-day rollback period.

  https://redmondmag.com/articles/2016/08/04/microsoft-shortens-windows-10-rollback-period.aspx

• Question 354:

  SIMULATION

  Username and password

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and select the username below.

  To enter your password, place your cursor in the Enter password box and select the password below.

  Microsoft 365 Username: [email protected]

  Microsoft 365 Password: i7A4$3o^HGD3L~=c[9xuOhM%^4:s11Ai

  If the Microsoft Edge browser or Microsoft 365 portal does not load successfully, select the Microsoft Edge browser icon from the task bar, type the URL "https://portal.office.com", and press Enter.

  The following information is for technical support purposes only:

  Lab Instance: 48262079

  You need to create a Conditional Access policy for the sg-Legal group that requires Android devices to be compliant when they connect to Microsoft Office 365. Access to other apps and devices must NOT be affected.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  Correct Answer: See explanation below.

  Create a device-based Conditional Access policy

  Create the Conditional Access policy

  Step 1: Sign in to the Microsoft Intune admin center.

  Step 2: Select Endpoint security > Conditional Access > Create new policy.

  

  The New pane opens, which is the configuration pane from Microsoft Entra. The policy you're creating is a Microsoft Entra policy for Conditional Access.

  Step 3: Under Assignments, configure Users to select the Identities in the directory that the policy applies to.

  On the Include tab, configure the user and groups you want to include.

  [Select the group sg-Legal group]

  Step 4: Next configure Target resources, which is also under Assignments. Use the drop-down for Select what this policy applies to to select Cloud apps.

  On the Include tab, use available options to identify the apps and services that you want to protect with this Conditional Access policy.

  If you choose Select apps, use the available UI to select apps and services to protect with this policy.

  [Select Microsoft Office 365] Step 5: Next, configure Conditions. Select the signals you want to use as conditions for this policy.

  Options include:

  User risk

  Sign-in risk

  *Device platforms

  Locations

  Client apps

  Filter for devices

  [Select Device platforms] Step 6: Device platforms

  Conditional Access supports the following device platforms:

  *Android

  iOS

  Windows

  macOS

  Linux

  [Select Android] Step 7: Under Access controls, configure Grant to select one or more requirements. Grant access: The users specified in this policy are granted access, but you can require any of the following further actions:

  Require multi-factor authentication

  Require authentication strength

  *-> Require device to be marked as compliant - This option is required for the policy to use device compliance status.

  Require Microsoft Entra hybrid joined device

  Require approved client app

  Require app protection policy

  Require password change

  [Select Require device to be marked as compliant]

  

  Step 8: Under Enable policy, select On. By default, the policy is set to Report-only.

  Step 9: Select Create.

  https://learn.microsoft.com/en-us/intune/intune-service/protect/create-conditional-access-intune

  https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-conditions

• Question 355:

  You have an Azure AD tenant named contoso.com.

  You plan to use Windows Autopilot to configure the Windows 10 devices shown in the following table.

  

  Which devices can be configured by using Windows Autopilot self-deploying mode?

  A. Device2 only
  B. Device3 only
  C. Device1 and Device3 only
  D. Device1, Device2, and Device3
  B. Device3 only

  ---

  Explanation

  Self-deploying mode uses a device's TPM 2.0 hardware to authenticate the device into an organization's Azure AD tenant. Therefore, devices without TPM 2.0 can't be used with this mode.

  https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/self-deploying

• Question 356:

  HOTSPOT

  You have a Microsoft 36S subscription, use Microsoft Intune. and have the users shown in the following table.

  

  You create a policy set named Set1 as shown in the exhibit. (Click the Exhibit tab.)

  

  Users have enrolled devices in Intune as shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth on* point.

  

  

• Question 357:

  You need to recommend a solution to configure the employee VPN connections.

  What should you include in the recommendation?

  A. Remote Access Management Console
  B. Group Policy Management Console (GPMC)
  C. Connection Manager Administration Kit (CMAK)
  D. Microsoft Intune
  D. Microsoft Intune

  ---

  Explanation

  https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-onvpn/deploy/vpn-deploy-client-vpn-connections#bkmk_ProfileXML

• Question 358:

  HOTSPOT

  You have a hybrid environment that contains a Microsoft Entra tenant and an on-premises Active Directory Domain Services (AD DS) domain. The environment contains the devices shown in the following table.

  

  Which Microsoft Entra join type can each device use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  

  

• Question 359:

  You need to meet the device management requirements for the developers.

  What should you implement?

  A. folder redirection
  B. Enterprise State Roaming
  C. home folders
  D. known folder redirection in Microsoft OneDrive
  B. Enterprise State Roaming

  ---

  Explanation

  Litware identifies the following device management requirements: Ensure that Microsoft Edge Favorites are accessible from all computers to which the developers sign in.

  Enterprise State Roaming allows for the synchronization of Microsoft Edge browser setting, including favorites and reading list, across devices.

  https://docs.microsoft.com/en-us/azure/active-directory/devices/enterprise-state-roaming-windows-settings-reference

• Question 360:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains a user named User1.

  You need to perform the following tasks for User1:

  Set the Usage location to Canada.

  Configure the Phone and Email authentication contact info for self-service password reset (SSPR).

  Which two settings should you configure in the Azure Active Directory admin center? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.