ExamGecko
Home Home / Microsoft / MD-102

Microsoft MD-102 Practice Test - Questions Answers, Page 20

Question list
Search
Search

List of questions

Search

Related questions











HOTSPOT

You have a Microsoft Intune subscription that has the following device compliance policy settings:

Mark devices with no compliance policy assigned as: Compliant Compliance status validity period (days): 14

On January 1, you enroll Windows 10 devices in Intune as shown in the following table.

On January 4, you create the following two device compliance policies:

Name: Policy1

Platform: Windows 10 and later

Require BitLocker: Require

Mark device noncompliant: 5 days after noncompliance

Scope (Tags): Tag1

Name: Policy2

Platform: Windows 10 and later

Firewall: Require

Mark device noncompliant: Immediately

Scope (Tags): Tag2

On January 5, you assign Policy1 and Policy2 to Group1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.


Question 191
Correct answer: Question 191

Explanation:

Box 1: No.

Policy1 and Policy2 apply to Group1 which Device1 is a member of. Device1 does not meet the firewall requirement in Policy2 so the device will immediately be marked as non-compliant.

Box 2: No

For the same reason as Box1.

Box 3: Yes

Policy1 and Policy2 apply to Group1. Device2 is not a member of Group1 so the policies don't apply.

The Scope (tags) have nothing to do with whether the policy is applied or not. The tags are used in RBAC.

HOTSPOT

You have a Microsoft 365 subscription that includes Microsoft Intune.

You have computers that run Windows 11 as shown in the following table.

You have the groups shown in the following table.

You create and assign the compliance policies shown in the following table.

The next day, you review the compliance status of the computers.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.


Question 192
Correct answer: Question 192

Explanation:


You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

You use Microsoft Intune to manage devices.

You need to ensure that the startup performance of managed Windows 11 devices is captured and available for review in the Intune admin center.

What should you configure?

A.

the Azure Monitor agent

A.

the Azure Monitor agent

Answers
B.

a device compliance policy

B.

a device compliance policy

Answers
C.

a Conditional Access policy

C.

a Conditional Access policy

Answers
D.

an Intune data collection policy

D.

an Intune data collection policy

Answers
Suggested answer: D

HOTSPOT

You have a Microsoft 365 ES subscription that uses Microsoft Intune.

Devices are enrolled in Intune as shown in the following table.

The devices are the members of groups as shown in the following table.

You create an JOS/iPadOS update profile as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.


Question 194
Correct answer: Question 194

You have a Microsoft Intune deployment that contains the resources shown in the following table.

You create a policy set named Set1 and add Comply1 to Set1.

Which additional resources can you add to Set1?

A.

Conf1 only

A.

Conf1 only

Answers
B.

Comply2 only

B.

Comply2 only

Answers
C.

Comply2 and Conf1 only

C.

Comply2 and Conf1 only

Answers
D.

CA1. Conf1. and Office 1 only

D.

CA1. Conf1. and Office 1 only

Answers
E.

Comply2. CA1, Conf1. and Office1

E.

Comply2. CA1, Conf1. and Office1

Answers
Suggested answer: B

You use Microsoft Defender for Endpoint to protect computers that run Windows 10.

You need to assess the differences between the configuration of Microsoft Defender for Endpoint and the Microsoft-recommended configuration baseline.

Which tool should you use?

A.

Microsoft Defender for Endpoint Power 81 app

A.

Microsoft Defender for Endpoint Power 81 app

Answers
B.

Microsoft Secure Score

B.

Microsoft Secure Score

Answers
C.

Endpoint Analytics

C.

Endpoint Analytics

Answers
D.

Microsoft 365 Defender portal

D.

Microsoft 365 Defender portal

Answers
Suggested answer: B

DRAG DROP

You have a Microsoft Intune subscription that is configured to use a PFX certificate connector to an on-premises Enterprise certification authority (CA).

You need to use Intune to configure autoenrollment for Android devices by using public key pair (PKCS) certificates.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.


Question 197
Correct answer: Question 197

Explanation:

Reference:

https://docs.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure

You have a Microsoft 365 subscription that contains 1,000 iOS devices and includes Microsoft Intune. You need to prevent the printing of corporate data from managed apps on the devices, should you configure?

A.

an app configuration policy

A.

an app configuration policy

Answers
B.

a security baseline

B.

a security baseline

Answers
C.

an app protection policy

C.

an app protection policy

Answers
D.

an iOS app provisioning profile

D.

an iOS app provisioning profile

Answers
Suggested answer: C

Explanation:

An app protection policy is a set of rules that controls how data is accessed and handled by managed apps on mobile devices. App protection policies can prevent the printing of corporate data from managed apps on iOS devices by using theRestrict cut, copy, and paste with other appssetting. This setting can be configured to block printing from the iOS share menu. An app configuration policy is used to customize the behavior of a managed app, such as specifying a VPN profile or a web link. A security baseline is a collection of recommended security settings for Windows 10 devices that are managed by Intune.An iOS app provisioning profile is a file that contains information about the app's identity, entitlements, and distribution method

You have a Microsoft 365 tenant that contains the objects shown in the following table.

In the Microsoft Intune admin center, you are creating a Microsoft 365 Apps app named App1. To which objects can you assign App1?

A.

Group3 and Group4 only

A.

Group3 and Group4 only

Answers
B.

Admin1, Group3, and Group4 only

B.

Admin1, Group3, and Group4 only

Answers
C.

Group1, Group3, and Group4 only

C.

Group1, Group3, and Group4 only

Answers
D.

Group1, Group2, Group3, and Group4 only

D.

Group1, Group2, Group3, and Group4 only

Answers
E.

Admin1, Group1. Group2, Group3, andGroup4

E.

Admin1, Group1. Group2, Group3, andGroup4

Answers
Suggested answer: C

Explanation:

In the Microsoft Intune admin center, you can assign apps to users or devices. Users can be assigned to apps by using user groups or individual user accounts. Devices can be assigned to apps by using device groups. In this scenario, the objects shown in the table are as follows:

Admin1 is an individual user account that belongs to theGlobal administratorsrole group.

Group1 is a user group that contains 100 users.

Group2 is a device group that contains 50 devices.

Group3 is a user group that contains 200 users.

Group4 is a device group that contains 150 devices.

Since App1 is a Microsoft 365 Apps app, it can only be assigned to users, not devices. Therefore, Group2 and Group4 are not valid objects for app assignment. Admin1 is also not a valid object for app assignment, because individual user accounts can only be used for testing purposes, not for production deployment. Therefore, the only valid objects for app assignment are Group1 and Group3, which are user groups.

You have a Hyper-V host. The host contains virtual machines that run Windows 10 as shown in following table.

Which virtual machines can be upgraded to Windows 11?

A.

VM1 only

A.

VM1 only

Answers
B.

VM2 only

B.

VM2 only

Answers
C.

VM2 and VM3 only

C.

VM2 and VM3 only

Answers
D.

VM1.VM2. andVM3

D.

VM1.VM2. andVM3

Answers
Suggested answer: C

Explanation:

Windows 11 has certain hardware requirements that must be met in order to upgrade from Windows 10. Some of these requirements are as follows:

A processor with at least1 GHzclock speed and2 cores.

A system firmware that supportsUEFIandSecure Boot.

ATrusted Platform Module (TPM)version2.0or higher.

At least4 GBof system memory (RAM).

At least64 GBof storage space.

In this scenario, the virtual machines that run Windows 10 have the following specifications:

VM1 is a generation 1 virtual machine with no virtual TPM, 4 virtual processors, and 16 GB of memory.

VM2 is a generation 2 virtual machine with a virtual TPM, 2 virtual processors, and 4 GB of memory.

VM3 is a generation 2 virtual machine with a virtual TPM, 1 virtual processor, and 8 GB of memory.

VM1 cannot be upgraded to Windows 11 because it does not have a virtual TPM and it is not a generation 2 virtual machine. Generation 1 virtual machines do not support UEFI and Secure Boot, which are required for Windows 11. VM2 and VM3 can be upgraded to Windows 11 because they have a virtual TPM and they are generation 2 virtual machines. They also meet the minimum requirements for processor speed, cores, memory, and storage space.

Total 301 questions
Go to page: of 31