ExamGecko
Home Home / Microsoft / MD-102

Microsoft MD-102 Practice Test - Questions Answers, Page 4

Question list
Search
Search

List of questions

Search

Related questions











HOTSPOT

You have a Microsoft 365 subscription.

You use Microsoft Intune Suite to manage devices.

You have the iOS app protection policy shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point,


Answer:

Question 31
Correct answer: Question 31

Explanation:

Box 1 = PIN only

Box 2 = reset the PIN app iOS/iPadOS app protection policy settings - Microsoft Intune | Microsoft Learn

https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy-settings-ios

DRAG DROP

You have a Microsoft 365 E5 subscription and a computer that runs Windows 11.

You need to create a customized installation of Microsoft 365 Apps for enterprise.

Which four actions should you perform in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

Question 32
Correct answer: Question 32

Explanation:

1. Download ODT application

2. Create a configuration file (XML)

3. setup.exe /download to download the installation files

4. setup.exe /configure to deploy the application

https://learn.microsoft.com/en-us/deployoffice/deploy-microsoft-365-apps-local-source

You have devices enrolled in Microsoft Intune as shown in the following table.

On which devices can you apply app configuration policies?

A.

Device2 only

A.

Device2 only

Answers
B.

Device1 and Device2 only

B.

Device1 and Device2 only

Answers
C.

Device3 and Device4 only

C.

Device3 and Device4 only

Answers
D.

Device2, Device3, and Device4 only

D.

Device2, Device3, and Device4 only

Answers
E.

Device1, Device2, Device B, and Device4

E.

Device1, Device2, Device B, and Device4

Answers
Suggested answer: D

Explanation:

The correct answer is D because app configuration policies can be applied to managed devices and managed apps1. Managed devices are enrolled and managed by Intune, while managed apps are integrated with Intune App SDK or wrapped using the Intune Wrapping Tool1. Device2, Device3, and Device4 are either enrolled in Intune or have managed apps installed, so they can receive app configuration policies2. Device1 is not enrolled in any MDM solution and does not have any managed apps installed, so it cannot receive app configuration policies2. Reference: 1: App configuration policies for Microsoft Intune | Microsoft Learn https://learn.microsoft.com/enus/ mem/intune/apps/app-configuration-policies-overview 2: Policy sets - Microsoft Intune | Microsoft Learn https://learn.microsoft.com/en-us/mem/intune/fundamentals/policy-sets

HOTSPOT

You have an Azure AD tenant named contoso.com that contains the devices shown in the following table.

AH devices contain an app named App1 and are enrolled in Microsoft Intune.

You need to prevent users from copying data from App1 and pasting the data into other apps.

Which type of policy and how many policies should you create in Intune? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Question 34
Correct answer: Question 34

Explanation:

Policy type: App protection policy

Minimum number of policies: 1

Comprehensive Explanation of Correct Answer Only: The correct answer is app protection policy because it allows you to customize the settings of apps for iOS/iPadOS or Android devices1. One of the settings you can configure is

Restrict cut, copy, and paste between other apps, which lets you prevent users from copying data from App1 and pasting the data into other apps2. You only need one policy to apply this setting to all devices that have App1 installed1. Reference: 1: App configuration policies for Microsoft Intune | Microsoft Learn https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policiesoverview 2: Troubleshoot restricting cut, copy, and paste between applications - Intune | Microsoft Learn https://learn.microsoft.com/en-us/troubleshoot/mem/intune/app-protectionpolicies/ troubleshoot-cut-copy-paste

You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

You use Microsoft Intune to manage devices.

You plan to deploy two apps named App1 and App2 to all Windows devices. Appl must be installed before App2.

From the Intune admin center, you create and deploy two Windows app (Win32) apps.

You need to ensure that App1 is installed before App2 on every device.

What should you configure?

A.

the App1 deployment configurations

A.

the App1 deployment configurations

Answers
B.

a dynamic device group

B.

a dynamic device group

Answers
C.

a detection rule

C.

a detection rule

Answers
D.

the App2 deployment configurations

D.

the App2 deployment configurations

Answers
Suggested answer: D

Explanation:

The correct answer is D because you can configure the dependencies for a Win32 app in the deployment configurations1. Dependencies are other Win32 apps that must be installed before your Win32 app can be installed1. You can add Win32 app dependencies only after your Win32 app has been added and uploaded to Intune2. In this case, you need to configure the App2 deployment configurations to add App1 as a dependency2. Reference: 1: Microsoft Intune Win32 App Dependencies - MSEndpointMgr https://msendpointmgr.com/2019/06/03/new-intune-featurewin32-app-dependencies/ 2: Add and assign Win32 apps to Microsoft Intune | Microsoft Learn

https://learn.microsoft.com/en-us/mem/intune/apps/apps-win32-add

You have a Microsoft Intune subscription.

You have devices enrolled in intune as shown in the following table.

An app named App1 is installed on each device.

What is the minimum number of app configuration policies required to manage Appl ?

A.

1

A.

1

Answers
B.

2

B.

2

Answers
C.

3

C.

3

Answers
D.

4

D.

4

Answers
E.

5

E.

5

Answers
Suggested answer: B

Explanation:

The correct answer is B because you need to create two app configuration policies for managed devices, one for iOS/iPadOS devices and one for Android devices1. App configuration policies let you customize the settings of apps for iOS/iPadOS or Android devices1. The settings are assigned to user groups and applied when the app runs1. The app developer or supplier provides the configuration settings (keys and values) that are exposed to Intune1. You can't use a single app configuration policy for both iOS/iPadOS and Android devices because they have different configuration settings2.

Reference: 1: App configuration policies for Microsoft Intune | Microsoft Learn

https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-overview 2: Add app configuration policies for managed iOS/iPadOS devices | Microsoft Learn

https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-use-ios

You have a Microsoft 365 E5 subscription that contains 100 iOS devices enrolled in Microsoft Intune.

You need to deploy a custom line-of-business (LOB) app to the devices by using Intune.

Which extension should you select for the app package file?

A.

.intunemac

A.

.intunemac

Answers
B.

apk

B.

apk

Answers
C.

jpa

C.

jpa

Answers
D.

.appx

D.

.appx

Answers
Suggested answer: C

Explanation:

iOS/iPadOS LOB apps: Select Line-of-business app as the app type, select the App package file, and then enter an iOS/iPadOS installation file with the extension .ipa.

Reference:

https://docs.microsoft.com/en-us/mem/intune/apps/apps-add

You have a Microsoft 365 E5 subscription that contains a user named User! and a web app named

Appl.

App1 must only accept modern authentication requests.

You plan to create a Conditional Access policy named CAPolicy1 that will have the following settings:

• Assignments

• Users or workload identities: User1

• Cloud apps or actions: App1

• Access controls

• Grant: Block access

You need to block only legacy authentication requests to Appl. Which condition should you add to CAPolicy1?

A.

Filter for devices

A.

Filter for devices

Answers
B.

Device platforms

B.

Device platforms

Answers
C.

User risk

C.

User risk

Answers
D.

Sign-in risk

D.

Sign-in risk

Answers
E.

Client apps

E.

Client apps

Answers
Suggested answer: E

Explanation:

you can use the client apps condition to block legacy authentication requests to App11. Legacy authentication is a term that refers to authentication protocols that do not support modern authentication features such as multi-factor authentication or conditional access2. Examples of legacy authentication protocols include Basic Authentication, Digest Authentication, NTLM, and Kerberos2. To block legacy authentication requests, you need to configure the client apps condition to include Other clients, which covers any client that uses legacy authentication protocols13.

Reference: 1: Conditional Access: Block legacy authentication | Microsoft Learn https://learn.microsoft.com/en-us/mem/identity-protection/conditional-access/block-legacyauthentication 2: What is legacy authentication? | Microsoft Learn https://learn.microsoft.com/enus/ mem/identity-protection/conditional-access/legacy-authentication 3: Client apps condition in Azure Active Directory Conditional Access | Microsoft Learn https://learn.microsoft.com/enus/ mem/identity-protection/conditional-access/client-apps-condition

HOTSPOT

You have a Microsoft 365 subscription.

All users have Microsoft 365 apps deployed.

You need to configure Microsoft 365 apps to meet the following requirements:

• Enable the automatic installation of WebView2 Runtime.

• Prevent users from submitting feedback.

Which two settings should you configure in the Microsoft 365 Apps admin center? To answer, select the appropriate settings in the answer area.

NOTE: Each correct selection is worth one point.


Question 39
Correct answer: Question 39

You have a Microsoft 365 subscription.

You have 10 computers that run Windows 10 and are enrolled in mobile device management (MDM).

You need to deploy the Microsoft 36S Apps for enterprise suite to all the computers.

What should you do?

A.

From the Microsoft Intune admin center, create a Windows 10 device profile.

A.

From the Microsoft Intune admin center, create a Windows 10 device profile.

Answers
B.

From Azure AD, add an app registration.

B.

From Azure AD, add an app registration.

Answers
C.

From Azure AD. add an enterprise application.

C.

From Azure AD. add an enterprise application.

Answers
D.

From the Microsoft Intune admin center, add an app.

D.

From the Microsoft Intune admin center, add an app.

Answers
Suggested answer: D

Explanation:

To deploy Microsoft 365 Apps for enterprise to Windows 10 devices that are enrolled in Intune, you need to add an app of type "Windows 10 app (Win32)" in the Microsoft Intune admin center and configure the app settings. You can then assign the app to groups of users or devices. Reference:

https://docs.microsoft.com/en-us/mem/intune/apps/apps-win32-app-management

Total 301 questions
Go to page: of 31