Microsoft MD-102 Exam Dumps

Microsoft MD-102 Sample Question Answers

Question # 1

You have a Microsoft 365 subscription that includes Microsoft Intune. The subscription contains corporate-owned, fully managed Android Enterprise devices. You plant deploy a configuration profile that will have a device restrictions profile type named Profile1.Profile1will assign maintenance windows for system updates. What should you configure from the Configuration settings for Profile1?

A. Device experience
B. General 
C. Connectivity

Show Answer

Question # 2

You have a Microsoft 365 subscription.You use Microsoft Intune to manage Windows 11 devices.You need to implement Windows Local Administrator Password Solution (Windows LAPS).What should you configure?

A. a device compliance policy
B. anappprotection policy 
C.anaccountprotection policy 
D. a configuration profile 

Show Answer

Question # 3

What should you monitor? 

A. operation allogs
B. audit logs 
C. the Intune Device log
D. device compliance organization allogs

Show Answer

Question # 4

You plant deploy Windows 11 Proto 200 new computers by using the Microsoft DeploymentToolkit (MDT) and Windows Deployment Services (WDS).The company has a Volume Licensing Agreement and uses a product key to activate Windows 11.You need to ensure that the new computers will be configured to have the correct product key duringthe installation.What should you configure?

A.an MDT task sequence 
B. the Device settings in Azure AD 
C. a WDS boot image 
D. a Windows Autopiloted employment profile 

Show Answer

Question # 5

You have a Windows 10 device named Computer 1 enrolled in Microsoft Intune.You need to configure Computer 1 as a public work station that will run as ingle customer-facing, full screen application.Which configuration profile type template should you use in Microsoft Intune admin center?

A. Shared multi-user device 
B. Device restrictions 
C.Kiosk 
D. End point protection 

Show Answer

Question # 6

Your network contains an Active Directory domain. The domain contains 10 computers that runWindows 10. Users in the finance department use the computers.You have a computer named Computer1 that runs Windows 10.From Computer1, you plan to run a script that executes Windows PowerShell commands on thefinance department computers.You need to ensure that you can run the PowerShell commands on the finance departmentcomputers from Computer.What should you do on the finance department computers?

A. From Windows PowerShell, run the Enable-MMAgent cmdlet. 
B. From the local Group Policy, enable the Allow Remote Shell Access setting. 
C. From Windows PowerShell, run the Enable-PSRemoting cmdlet. 
D. From the local Group Policy, enable the Turn on Script Execution setting. 

Show Answer

Question # 7

You have an Azure AD tenant named contoso.com.You plan to purchase 25 computers that run Windows 11. You plan to deliver the computers directlyto users.You need to ensure that during the out-of-box experience (OBE), users are prompted to sign in, andthen the computers are configured to use Microsoft Intune.Which two components should you configure? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. a provisioning package 
B. automatic enrollment 
C. an unattend.xml answer file 
D. a Windows Autopilot deployment profile for self-deploying mode 
E. a Windows Autopilot deployment profile for user-driven mode 

Show Answer

Question # 8

Your network contains an Active Directory domain named contoso.com. The domain contains 25computers that run Windows 11.You have a Microsoft 365 subscriptionYou have an Azure AD tenant that syncs with contoso.com.You configure hybrid Azure AD join and discover that some of the computers have a registered stateof Pending.You need to ensure that the computers complete the join successfully.What should you ensure?

A. that Windows is activated on all the computers 
B. that the users of the computers are assigned Microsoft 365 licenses 
C. that each computer has a line of sight to a domain controller 
D. that the computers contain the latest quality updates 

Show Answer

Question # 9

You need to assign the same deployment profile to all the computers that are configured by usingWindows Autopilot.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. Create an Azure AD group that has dynamic membership rules and uses the ZTDID tag. 
B. Create an Azure AD group that has dynamic membership rules and uses the operatingSystem tag. 
C. Assign a Windows Autopilot deployment profile to a group.
D. Join the computers to Azure AD. 
E. Create a Group Policy object (GPO) that is linked to a domain. 
F. Join the computers to an on-premises Active Directory domain. 

Show Answer

Question # 10

You have a Microsoft 365 subscription that includes Microsoft Intune.You plan to use Windows Autopilot to deploy Windows 11 devices.You need to meet the following requirements during Autopilot provisioning:Display the app and profile configuration progress.Block users from using the devices until all apps and profiles are installedWhat should you configure?

A. an app configuration policy 
B. an app protection policy 
C. an enrollment device platform restriction 
D. an enrollment status page 

Show Answer

Question # 11

You have a Microsoft 365 tenant that contains the devices shown in the following table.The devices are managed by using Microsoft Intune.You create a compliance policy named Policy1 and assign Policy1 to Group1. Policy1 is configured tomark a device as Compliant only if the device security settings match the settings specified in thepolicy.You discover that devices that are not members of Group1 are shown as Compliant.You need to ensure that only devices that are assigned a compliance policy can be shown asCompliant. All other devices must be shown as Not compliant.

A. From Device compliance, configure the Compliance policy settings. 
B. From Endpoint security, configure the Conditional access settings. 
C. From Tenant administration, modify the Diagnostic settings. 
D. From Policy1, modify the actions for noncompliance. 

Show Answer

Question # 12

You have a Microsoft 365 tenant that contains the devices shown in the following table.The devices are managed by using Microsoft Intune.You create a compliance policy named Policy1 and assign Policy1 to Group1. Policy1 is configured tomark a device as Compliant only if the device security settings match the settings specified in thepolicy.You discover that devices that are not members of Group1 are shown as Compliant.You need to ensure that only devices that are assigned a compliance policy can be shown asCompliant. All other devices must be shown as Not compliant.What should you do from the Microsoft Intune admin center?

A. From Device compliance, configure the Compliance policy settings. 
B. From Endpoint security, configure the Conditional access settings. 
C. From Tenant administration, modify the Diagnostic settings. 
D. From Policy1, modify the actions for noncompliance. 

Show Answer

Question # 13

You need to implement mobile device management (MDM) for personal devices that run Windows11. The solution must meet the following requirements:Ensure that you can manage the personal devices by using Microsoft Intune.Ensure that users can access company data seamlessly from their personal devices.Ensure that users can only sign in to their personal devices by using their personal account.What should you use to add the devices to Azure AD?

A. Azure AD registered Most Voted 
B. hybrid Azure AD join 
C. Azure AD joined 

Show Answer

Question # 14

You have a Microsoft 365 subscription.You use app protection policies to protect corporate data on Android devices.You need to ensure that any user connecting from an Android device can only access the corporatedata if they connect from an app that supports mobile application management (MAM).What should you configure?

A. an app configuration policy 
B. a Conditional Access policy 
C. a device configuration profile 
D. a device compliance policy

Show Answer

Question # 15

You have a Microsoft 365 subscription that uses Microsoft Intune Suite.You use Microsoft Intune to manage Windows 11 devices.You create a new policy set named Set and add five device configuration profiles for Windows 10 andlater.You create a device compliance policy named Policy1.You need to ensure that when users are assigned the device configuration profiles in Set1, they arealways assigned Policy1 also.What should you configure?

A. the assignments of Policy1 
B. the Policy1 configurations 
C. the assignments of Set1 
D. the Set1 configurations 

Show Answer

Question # 16

You have a Microsoft 365 subscription. The subscription contains 500 computers that run Windows11 and are enrolled in Microsoft Intune. You need to manage the deployment of monthly securityupdates. The solution must meet the following requirements:Updates must be deployed to a group of test computers for quality assurance.Updates must be deployed automatically 15 days after the quality assurance testing.What should you create in the Microsoft Intune admin center?

A. a device Configuration profile 
B. an update ring 
C. a feature update policy 
D. a security baseline 

Show Answer

Question # 17

You have a Microsoft 365 subscription that includes Microsoft Intune.You have 500 corporate-owned Android devices enrolled as fully managed devices.You need to prepare an app named App1 for deployment to the devices.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point,

A. From the Intune Company Portal, download Appl. 
B. Create an OEMConfig profile. 
C. From the Managed Google Play Store, approve App1. 
D. Sync App1 with Intune. 

Show Answer

Question # 18

You have a Microsoft Deployment Toolkit (MDT) deployment shore.You plan to deploy Windows 11 by using the Standard Client Task Sequence template.You need to modify the task sequence to perform the following actions:Format disks to support Unified Extensible Firmware Interface (UEFl).Create a recovery partition.Which phase of the Task sequence should you modify?

A. Preinstall 
B. Install 
C. Initialization 
D. Post Install 

Show Answer

Question # 19

You have a Microsoft 365 ES subscription.You use Microsoft Intune to manage all devices.You need to prepare a Win32 app named Appl.exe for deployment.What should you do first?

A. From the Microsoft Intune admin center, create an app configuration policy. 
B. Change App1.exe to the INIUNEW1N format. 
C. From the Microsoft 365 Apps admin center, create a deployment configuration 
D. Upload App1 exe to Azure Blob Storage. 

Show Answer

Question # 20

You have a Microsoft 365 subscription that includes Microsoft Intune.You need to deploy a custom app to Android devices. The app uses the APK file format.Which type of app should you select for the deployment?

A. built-in 
B. Android store 
C. Managed Google Play 
D. line-of-business (LOB) 
E. web link 

Show Answer

Question # 21

You have a Microsoft 365 subscription that contains a user named User1.You use Microsoft in tune to manage devices that run Windows 11.You need to remove User1 from the local Administrators group on all enrolled devices. The solutionmust minimize administrative effort.What should you configure?

A. a device compliance policy 
B. an app configuration policy 
C. an account protection policy 

Show Answer

Question # 22

You have a Microsoft 365 subscription that has Windows 365 Enterprise licenses.You plan to use a custom Windows 11 image as a template for Cloud PCs.You have a Hyper-V virtual machine that runs Windows 11 and has the following configurations:Name: VM1Disk size: 64 GBDisk format: VHDXDisk type: Fixed sizeGeneration: Generation 2You need to ensure that you can use VM1 as a source for the custom image. What should you do onVM1 first?

A. Change the disk type to Dynamically expanding 
B. Change the disk format to the VHD
C. Change the generation to Generation 1. 
D. Increase the disk size. 

Show Answer

Question # 23

You have a workgroup computer named Client1 that runs Windows 11 and connects to a publicnetwork.You need to enable PowerShell remoting on Client1. The solution must ensure that PowerShellremoting connections are accepted from the local subnet only.Which PowerShell command should you run?

A. Set-NetFirewallRule -Name "WINRM-HTTP-In-TCP-PUBLIC" -RemoteAddress Any 
B. Set-PSSessionConfiguration -AccessMode Local 
C. Enable-PSRemoting -Force 
D. Enable-PSRemoting -SkipNetworkProfileCheck 

Show Answer

Question # 24

You manage 1,000 computers that run Windows 10. All the computers are enrolled in MicrosoftIntune. You manage the servicing channel settings of the computers by using Intune.You need to review the servicing status of a computer.What should you do?

A. From Software updates, view the Per update ring deployment state. 
B. From Software updates, view the audit logs. 
C. From Device configuration - Profiles, view the device status. 
D. From Device compliance, view the device compliance. 

Show Answer

Question # 25

You have a Microsoft Intune subscription associated to an Azure AD tenant named contoso.com.Users use one of the following three suffixes when they sign in to the tenant: us.contoso.com,eu.contoso.com, or contoso.com.You need to ensure that the users are NOT required to specify the mobile device management(MDM) enrollment URL as part of the enrollment process. The solution must minimize the number ofchanges.Which DNS records do you need?

A. three CNAME records 
B. one CNAME record only 
C. three TXT records 
D. one TXT record only 

Show Answer

Question # 26

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains100 client computers that run Windows 10.Currently, your company does NOT have a deployment infrastructure.The company purchases Windows 11 licenses through a volume licensing agreement.You need to recommend how to upgrade the computers to Windows 11. The solution must minimizelicensing costs.What should you include in the recommendation?

A. Microsoft Deployment Toolkit (MDT) 
B. Configuration Manager 
C. subscription activation 
D. Windows Autopilot 

Show Answer

Question # 27

You have computers that run Windows 10 and are managed by using Microsoft Intune.Users store their files in a folder named D:\Folder1.You need to ensure that only a trusted list of applications is granted write access to D:\Folder1.What should you configure in the device configuration profile?

A. Microsoft Defender Exploit Guard 
B. Microsoft Defender Application Guard 
C. Microsoft Defender SmartScreen 
D. Microsoft Defender Application Control 

Show Answer

Question # 28

You have a Microsoft 365 tenant that uses Microsoft Intune.You use the Company Portal app to access and install published apps to enrolled devices.From the Microsoft Intune admin center, you add a Microsoft Store app.Which two App information types are visible in the Company Portal?NOTE: Each correct selection is worth one point.

A. Privacy URL 
B. Information URL 
C. Developer 
D. Owner 

Show Answer

Question # 29

You have a Microsoft 365 subscription that uses Microsoft Intune Suite You use Microsoft Intune to manage devices. You use Windows Autopilot to deploy Windows 11 to devices. A support engineer reports that when a deployment fails, they cannot collect deployment logs from failed device. You need to ensure that when a deployment fails, the deployment logs can be collected. What should you configure?

A. the automatic enrollment settings
B. the Windows Autopilot deployment profile 
C. the enrollment status page (ESP) profile 
D. the device configuration profile 

Show Answer