Microsoft MD-102 Online Practice Questions and Exam Preparation

Microsoft MD-102 Online Questions & Answers

• Question 71:

  You have a Microsoft Intune subscription associated to an Azure AD tenant named contoso.com.

  Users use one of the following three suffixes when they sign in to the tenant: us.contoso.com, eu.contoso.com, or contoso.com.

  You need to ensure that the users are NOT required to specify the mobile device management (MDM) enrollment URL as part of the enrollment process. The solution must minimize the number of changes.

  Which DNS records do you need?

  A. one TXT record only
  B. three CNAME records
  C. three TXT records
  D. one CNAME record only
  B. three CNAME records

  ---

  Explanation

  To simplify enrollment, create a domain name server (DNS) alias (CNAME record type) that redirects enrollment requests to Intune servers. Otherwise, users trying to connect to Intune must enter the Intune server name during enrollment.

  If the company uses more than one UPN suffix, you need to create one CNAME for each domain name and point each one to EnterpriseEnrollment-s.manage.microsoft.com. For example, users at Contoso use the following formats as their email/UPN:

  [email protected]

  [email protected]

  [email protected]

  https://docs.microsoft.com/en-us/mem/intune/enrollment/windows-enroll#simplify-windows-enrollment-without-azure-ad-premium

• Question 72:

  HOTSPOT

  You are evaluating which devices are compliant.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  Policy3, which requires encryption, applies to Device1.

  Box 2: Yes

  Policy1, which has no encryption requirement, applies to Device3.

  Box 3: Yes

  Policy2, which has no encryption requirement, applies to Device4.

• Question 73:

  You have a Microsoft 365 subscription that contains a user named User1 and 500 Windows devices enrolled in Microsoft Intune.

  You configure an attack surface reduction {ASR) rule and enable the rule in Warn mode.

  User1 downloads a file named file1.exe. When User1 attempts to run file1.exe he receives a prompt that the content has been blocked. The user unblocks the content.

  How much time will pass until the user is prompted next to unblock the content?

  A. 10 minutes
  B. one hour
  C. 24 hours
  D. one week
  C. 24 hours

• Question 74:

  SIMULATION

  Username and password

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and select the username below.

  To enter your password, place your cursor in the Enter password box and select the password below.

  Microsoft 365 Username: [email protected]

  Microsoft 365 Password: i7A4$3o^HGD3L~=c[9xuOhM%^4:s11Ai

  If the Microsoft Edge browser or Microsoft 365 portal does not load successfully, select the Microsoft Edge browser icon from the task bar, type the URL "https://portal.office.com", and press Enter.

  The following information is for technical support purposes only:

  Lab Instance: 48262079

  You need to ensure that when the members of a group named sg-Engineering join their Windows devices to Microsoft Entra, the devices are enrolled automatically in Microsoft Intune. The solution must affect only the sg-Engineering group members.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  Automatic MDM enrollment in the Intune admin center

  Windows devices can be enrolled in to Intune automatically when they join or register with Microsoft Entra ID. Automatic enrollment can be configured in Azure portal.

  Step 1: Go to your Microsoft Entra admin center.

  Step 2: Select Mobility (MDM and MAM), and find the Microsoft Intune app.

  Step 3: Select Microsoft Intune and configure the enrollment options. You can specify settings to allow All users to enroll a device, or choose to allow Some users (and specify a group).

  

  Step 4: Click Some.

  Step 5: Select the sg-Engineering Group.

  Step 6: Select Save to configure MDM autoenrollment for Microsoft Entra joined devices and bring-your- own-device scenarios.

  https://learn.microsoft.com/sv-se/windows/client-management/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal

• Question 75:

  You have a Microsoft 365 subscription. All devices run Windows 10.

  You need to prevent users from enrolling the devices in the Windows Insider Program.

  What two configurations should you perform from the Microsoft Intune admin center? Each correct answer is a complete solution.

  NOTE: Each correct selection is worth one point.

  A. a device restrictions device configuration profile
  B. an app configuration policy
  C. a Windows 10 and later security baseline
  D. a custom device configuration profile
  E. a Windows 10 and later update ring
  D. a custom device configuration profile
  E. a Windows 10 and later update ring

  ---

  Explanation

  D: Microsoft Intune includes many built-in settings to control different features on a device. You can also create custom profiles, which are created similar to built-in profiles. Custom profiles are great when you want to use device settings and features that aren't built in to Intune. These profiles include features and settings for you to control on devices in your organization. For example, you can create a custom profile that sets the same feature for every Windows device.

  E Set up Insider Preview builds using Intune 1. Log in to the Azure portal and select Intune.

  2. Go to Software Updates > Windows 10 Update Rings and select + Create to make an Update Ring policy.

  Add a name and select the Settings section to configure its settings.

  3. Etc.

  https://docs.microsoft.com/en-us/windows-insider/business/manage-builds

• Question 76:

  HOTSPOT

  You have a Microsoft 365 subscription that contains the devices shown in the following table.

  

  You plan to enroll the devices in Microsoft Intune.

  How often will the compliance policy check-ins run after each device is enrolled in Intune? To answer, select the appropriate options in the answer area.

  NOTE:Each correct selection is worth one point.

  

  

• Question 77:

  You have a Microsoft 365 E5 subscription that includes Microsoft Intune and contains a user named Admin1.

  Admin1 must use the Microsoft Intune admin center to perform the following tasks:

  1. Create and assign apps and policies to users and devices by using Intune.

  2. Create, assign, and delete Windows 365 Cloud PC provisioning policies.

  You need to assign the required roles to Admin1. The solution must meet the following requirements:

  1. Follow the principle of least privilege.

  2. Minimize administrative effort.

  What should you do?

  A. Assign Admin1 the Help Desk Operator role.
  B. Assign Admin1 the Cloud PC Reader role.
  C. Assign Admin1 the Cloud PC Administrator role.
  D. Create a custom Microsoft Entra role and assign the role to Admin1.
  E. Create a custom Intune role and assign the role to Admin1.
  E. Create a custom Intune role and assign the role to Admin1.

• Question 78:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

  

  You need to create two dynamic device groups named Group1 and Group2. The solution must meet the following requirements:

  1. Group1 must contain Device1 and Device2 only.

  2. Group2 must contain Device1 and Device3 only.

  Which device membership rule should you configure for each group? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  

  

• Question 79:

  You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

  You use Microsoft Intune to manage Windows 11 devices.

  You need to implement passwordless authentication that requires users to use number matching.

  Which authentication method should you use?

  A. Microsoft Authenticator
  B. voice calls
  C. FIDO2 security keys
  D. text messages
  A. Microsoft Authenticator

  ---

  Explanation

  How number matching works in multifactor authentication (MFA) push notifications for Authenticator - Authentication methods policy

  This topic covers how number matching in Microsoft Authenticator push notifications improves user sign-in security. Number matching is a key security upgrade to traditional second factor notifications in Authenticator.

  Beginning May 8, 2023, number matching is enabled for all Authenticator push notifications. As relevant services deploy, users worldwide who are enabled for Authenticator push notifications will begin to see number matching in their approval requests. Users can be enabled for Authenticator push notifications either in the Authentication methods policy or the legacy multifactor authentication policy if Notifications through mobile app is enabled.

  https://learn.microsoft.com/en-us/azure/active-directory/authentication/how-to-mfa-number-match

• Question 80:

  DRAG DROP

  You have a Microsoft 365 E5 subscription that is linked to a Microsoft Entra tenant named contoso.com. The subscription contains a user named User1 and a new Windows 11 device named Device1.

  User1 must enroll Device1 in Microsoft Intune automatically.

  You need to ensure that all other users cannot use automatic enrollment.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place: