MD-102 practice questions 181–190

1. Question 181 · 383 in bank

   Your on-premises network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a domain controller named dc1.contoso.com. You have a Microsoft 365 E5 subscription that uses Microsoft Intune Suite. You have an Azure subscription that contains the resources shown in the following table.

   

   The subscription contains the virtual networks shown in the following table.

   

   You plan to deploy Windows 365 Enterprise Cloud PC. You need to create an Azure network connection (ANC) that will use Microsoft Entra hybrid join. Which virtual network can you use for the ANC?

   • AVNet1 only
   • BVNet2 only
   • CVNet3 only
   • DVNet1 and VNet2
   • EVNet1 and VNet3

   Show answer

   Answer: A

   Explanation

   A. VNet1 only Explanation: To use your own network and provision Microsoft Entra hybrid joined Cloud PCs, you must meet the above requirements, and the following requirements: The Azure virtual network must be able to resolve DNS entries for your Active Directory Domain Services (AD DS) environment. To support this resolution, define your AD DS DNS servers as the DNS servers for the virtual network. The Azure vNet must have network access to an enterprise domain controller, either in Azure or on-premises. Link: https://learn.microsoft.com/en-us/windows-365/enterprise/requirements-network?tabs=enterprise%2Cent

   Source: Adapted from community discussion — skitic

   References

   • Microsoft Learn

   Next question

2. Question 182 · 383 in bank

   DRAG DROP - You have a Microsoft 365 E5 subscription that includes Microsoft Intune. The subscription contains Android Enterprise devices that are enrolled in Intune and have personally-owned work profiles. All the Android devices are members of a group named Group1. You need to ensure that end users and Intune administrators receive an email message when an Android device does NOT have an up-to-date security provider. Which actions should you perform from the Microsoft Intune admin center in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I think correct but in the wrong order. First you need to create the notification, and then you create the compliance policy where you add the notification message that you created before

   Source: Adapted from community discussion — Savior99

   References

   • Microsoft Learn

   

   Next question

3. Question 183 · 383 in bank

   HOTSPOT - You have a Microsoft 365 subscription. You have 25 Microsoft Surface Hub devices that you plan to manage by using Microsoft Intune. You need to configure the devices to meet the following requirements: • Enable Windows Hello for Business. • Configure Microsoft Defender SmartScreen to block users from running unverified files. Which profile type template should you use for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

4. Question 184 · 383 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription that contains the security groups shown in the following table.

   

   The subscription contains devices that run Windows 11, version 21H2 as shown in the following table.

   

   You have a feature update deployment profile named Deployment1 as shown in the following table.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answer are correct: Group 1: Device 3 Group 2: Device 1, Device 2 and Device 3 Group 3: Device 1 Scope for the policy: Include: group 2 Exclude: Group 1 and Group 3 So: N: Device 1 has the extension attribute1 "Test" that will make member of group 3 which is excluded of the feature update deployment profile Y: group 2 members are running windows, Device 2 will be part of the feature update deployment profile N: Device 3 is part of the group 1 which is excluded from the feature update deployment profile

   Source: Adapted from community discussion — sergioandreslq

   

   Next question

5. Question 185 · 383 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription that uses Microsoft Intune. You need to ensure that users can only enroll devices that meet the following requirements: • Android devices that support the use of work profiles. • iOS devices that run iOS 11.0 or later. Which two restrictions should you modify? To answer, select the restrictions in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

6. Question 186 · 383 in bank

   You have a Microsoft 365 subscription that uses Microsoft Intune Suite. You use Intune to manage Windows 11 devices. You need to implement Windows Local Administrator Password Solution (Windows LAPS). What should you configure?

   • Aa configuration profile
   • Ban account protection policy
   • Can app protection policy
   • Da device compliance policy

   Show answer

   Answer: B

   Explanation

   To implement Windows Local Administrator Password Solution (Windows LAPS) with Microsoft Intune, you should configure an account protection policy. This policy can enforce password requirements for local admin accounts, back up a local admin account from devices to your Active Directory (AD) or Microsoft Entra, and schedule rotation of those account passwords to help keep them safe. https://learn.microsoft.com/en-us/mem/intune/protect/windows-laps-overview

   Source: Adapted from community discussion — Krayzr

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 187 · 383 in bank

   You have a Microsoft 365 subscription that contains 500 computers that run Windows 11. The computers are Microsoft Entra joined and are enrolled in Microsoft Intune. You plan to manage Microsoft Defender for Endpoint on the computers. You need to prevent users from disabling Microsoft Defender for Endpoint. What should you do?

   • AFrom the Microsoft Intune admin center, create a security baseline.
   • BFrom the Microsoft Intune admin center, create an antivirus policy.
   • CFrom the Microsoft Entra admin center, create a Conditional Access policy.
   • DFrom the Microsoft Intune admin center, create a device compliance policy.

   Show answer

   Answer: B

   Explanation

   The correct answer is B. From the Microsoft Intune admin center, create an antivirus policy. Here’s the reasoning: Microsoft Defender for Endpoint is an antivirus solution, and its settings can be managed through an antivirus policy in Microsoft Intune. This includes settings that prevent users from disabling the antivirus. Therefore, creating an antivirus policy in the Microsoft Intune admin center would be the appropriate action to take. Option A, creating a security baseline, is not the best choice because security baselines are predefined sets of recommended security settings that might not cover the specific requirement of preventing users from disabling Microsoft Defender for Endpoint. Option C, creating a Conditional Access policy in the Microsoft Entra admin center, is not applicable because Conditional Access policies are used to enforce access controls based on conditions, not to manage antivirus settings. Option D, creating a device compliance policy, is also not the best choice because device compliance policies are used to determine whether a device is compliant with the organization’s rules, not to manage antivirus settings.

   Source: Adapted from community discussion — Krayzr

   References

   • Microsoft Learn

   Next question

8. Question 188 · 383 in bank

   You have a Microsoft 365 subscription that includes Microsoft Intune. You need to deploy a custom app to Android devices. The app uses the APK file format. Which type of app should you select for the deployment?

   • Abuilt-in
   • BAndroid store
   • CManaged Google Play
   • Dline-of-business (LOB)
   • Eweb link

   Show answer

   Answer: D

   Explanation

   The correct answer is D. line-of-business (LOB). Reasoning: A Line-of-Business (LOB) application is a custom application that is integral to running a business, but not available to the public. In this case, since you have a custom app in APK format that you need to deploy to Android devices, you would use the LOB app type in Microsoft Intune. Here’s a brief explanation of each option: A. Built-in: These are apps that come pre-installed on the device. Since you’re deploying a custom app, this option is not applicable. B. Android store: This refers to apps that are available on the Google Play Store. Since your app is custom and not on the Play Store, this option is not applicable. C. Managed Google Play: This is for publicly available Google Play Store apps that you want to manage and distribute in your organization. Since your app is a custom app and not on the Play Store, this option is not applicable. D. Line-of-business (LOB): This is the correct option for deploying custom apps that are not available on the public app store. E. Web link: This is for deploying a web link to a device. Since you’re deploying an app and not a web link, this option is not applicable.

   Source: Adapted from community discussion — Krayzr

   Next question

9. Question 189 · 383 in bank

   You have a Microsoft 365 E5 subscription. You use Microsoft Intune to manage all devices. You need to prepare a Win32 app named App1.exe for deployment. What should you do first?

   • AFrom the Microsoft Intune admin center, create an app configuration policy.
   • BChange App1.exe to the INTUNEWIN format.
   • CFrom the Microsoft 365 Apps admin center, create a deployment configuration.
   • DUpload App1.exe to Azure Blob Storage.

   Show answer

   Answer: B

   Next question

10. Question 190 · 383 in bank

    Select 2

    Your company uses Microsoft Intune to manage devices. You need to ensure that only Android devices that use Android work profiles can enroll in Intune. Which two configurations should you perform in the device enrollment restrictions? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

    • AFrom Platform Settings, set Android device administrator Personally Owned to Block.
    • BFrom Platform Settings, set Android Enterprise (work profile) to Allow.
    • CFrom Platform Settings, set Android device administrator Personally Owned to Allow.
    • DFrom Platform Settings, set Android device administrator to Block.

    Show answer

    Answer: BD

    Explanation

    To ensure that only Android devices using Android work profiles can enroll in Intune, you should: D. From Platform Settings, set Android device administrator to Block. B. From Platform Settings, set Android Enterprise (work profile) to Allow. This configuration ensures that only devices using Android work profiles can enroll while blocking other Android devices managed by the older device administrator method.

    Source: Adapted from community discussion — veliyath

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MD-102 practice, question 181. 383 questions available.