MD-102 practice questions 11–20

1. Question 11 · 383 in bank

   You have a Microsoft 365 tenant that contains the objects shown in the following table.

   

   You are creating a compliance policy named Compliance1. Which objects can you specify in Compliance1 as additional recipients of noncompliance notifications?

   • AGroup3 and Group4 only
   • BGroup3, Group4, and Admin1 only
   • CGroup1, Group2, and Group3 only
   • DGroup1, Group2, Group3, and Group4 only
   • EGroup1, Group2, Group3, Group4, and Admin1

   Show answer

   Answer: C

   Explanation

   Question has a typo -_- says "main-enabled" which should be "mail-enabled". Groups with email address can be sent notifications which means C is correct.

   Source: Adapted from community discussion — OyYaGotta

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 12 · 383 in bank

   HOTSPOT - You have an Azure AD tenant named contoso.com that contains a user named User1. User1 has a user principal name (UPN) of user1@contoso.com. You join a Windows 11 device named Client1 to contoso.com. You need to add User1 to the local Administrators group of Client1. How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 13 · 383 in bank

   You have a Microsoft 365 E5 subscription that contains 100 iOS devices enrolled in Microsoft Intune. You need to deploy a custom line-of-business (LOB) app to the devices by using Intune. Which extension should you select for the app package file?

   • A.intunemac
   • B.ipa
   • C.apk
   • D.appx

   Show answer

   Answer: B

   Explanation

   When deploying a custom line-of-business (LOB) app to iOS devices using Microsoft Intune, the recommended extension for the app package file is .ipa. The .ipa file is the standard package format for iOS applications.

   Source: Adapted from community discussion — mohdAj

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 14 · 383 in bank

   You have a Microsoft 365 subscription. You need to provide a user the ability Security defaults and create Conditional Access policies. The solution must use the principle of least privilege. Which role should you assign to the user?

   • AGlobal Administrator
   • BConditional Access Administrator
   • CSecurity Administrator
   • DIntune Administrator

   Show answer

   Answer: B

   Explanation

   Both Conditional Access Administrator and Security Administrator can change security defaults REF: https://learn.microsoft.com/en-us/microsoft-365/business-premium/m365bp-turn-on-mfa?view=o365-worldwide&tabs=secdefaults#to-enable-security-defaults-or-confirm-theyre-already-enabled When I look at all the permissions Security Administrator has. Its way more compaired to the Conditional Access Administrator role. So I guess the answer is B REF:https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#security-administrator REF: https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#conditional-access-administrator

   Source: Adapted from community discussion — ExamKiller020

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 15 · 383 in bank

   HOTSPOT - In Microsoft Intune, you have the device compliance policies shown in the following table.

   

   The Intune compliance policy settings are configured as shown in the following exhibit.

   

   On June 1, you enroll Windows 10 devices in Intune as shown in the following table.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I think the answer is No, No, Yes. Device 1 is Windows 10 - and policy 1 is for Windows 8. Default compliance for devices without a policy is not compliant so first 2 questions are NO. Then the third device has 2 policies, the first one is compliant and the second policy is not compliant but the device is not marked as non-compliant due to the fact that mark device as non-compliant is set to 10 days. This means that the machine will be compliant until june 10th. Source: Mark device non-compliant: By default, this action is set for each compliance policy and has a schedule of zero (0) days, marking devices as noncompliant immediately. When you change the default schedule, you provide a grace period in which a user can remediate issues or become compliant without being marked as non-compliant. This action is supported on all platforms supported by Intune. https://docs.microsoft.com/en-us/mem/intune/protect/actions-for-noncompliance

   Source: Adapted from community discussion — Casticod

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 16 · 383 in bank

   You have a Microsoft 365 subscription that contains a user named User1 and uses Microsoft Intune Suite. You use Microsoft Intune to manage devices that run Windows 11. User provides remote support for 75 devices in the marketing department. You need to add User1 to the Remote Desktop Users group on each marketing department device. What should you configure?

   • Aan app configuration policy
   • Ba device compliance policy
   • Can account protection policy
   • Da device configuration profile

   Show answer

   Answer: C

   Explanation

   The correct answer is D. This is a device configuration profile. Here's how you can do it: In the Microsoft Intune portal, go to "Devices" and select "Configuration profiles." Click on "Create profile" to create a new device configuration profile. Choose the platform for the devices you want to target (Windows 11 in this case). In the configuration settings, look for the option to configure local user groups or local administrators on Windows 11 devices. Add User1 as a member of the "Remote Desktop Users" group. Assign this configuration profile to the devices in the marketing department.

   Source: Adapted from community discussion — picho707

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 17 · 383 in bank

   HOTSPOT - You have an Azure AD tenant named contoso.com that contains the users shown in the following table.

   

   For contoso.com, the Mobility (MDM and MAM) settings have the following configurations: • MDM user scope: Group1 • MAM user scope: Group2 You purchase the devices shown in the following table:

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   It really helps to read the question people!!!! Option 2 says user1 joins device1 to contoso.com - why would Device2 be affacted by this?

   Source: Adapted from community discussion — benpatto

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 18 · 383 in bank

   You have a Microsoft 365 subscription that uses Microsoft Intune Suite. You use Microsoft Intune to deploy and manage Windows devices. You have 100 devices from users that left your company. You need to repurpose the devices for new users by removing all the data and applications installed by the previous users. The solution must minimize administrative effort. What should you do?

   • ADeploy a new configuration profile to the devices.
   • BPerform a Windows Autopilot reset on the devices.
   • CPerform an in-place upgrade on the devices.
   • DPerform a clean installation of Windows 11 on the devices.

   Show answer

   Answer: B

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 19 · 383 in bank

   HOTSPOT - You create a Windows Autopilot deployment profile. You need to configure the profile settings to meet the following requirements: • Automatically enroll new devices and provision system apps without requiring end-user authentication • Include the hardware serial number in the computer name. Which two settings should you configure? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   To configure a Windows Autopilot deployment profile to meet the specified requirements, you need to set the following: 1. **Automatically enroll new devices and provision system apps without requiring end-user authentication:** - **Deployment mode:** Select "Self-Deploying mode" as it allows devices to be deployed with zero-touch, without requiring user authentication. 2. **Include the hardware serial number in the computer name:** - **Apply computer name template:** Use the template "%SERIAL%" which will include the hardware serial number in the computer name. Therefore, the settings you need to configure are: 1. **Deployment mode:** Self-Deploying 2. **Apply computer name template:** %SERIAL% Make sure to configure these settings in the Windows Autopilot deployment profile to meet the requirements.

   Source: Adapted from community discussion — [Removed]

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

10. Question 20 · 383 in bank

    You have a computer named Computer1 that runs Windows 11. A user named User1 plans to use Remote Desktop to connect to Computer1. You need to ensure that the device of User1 is authenticated before the Remote Desktop connection is established and the sign in page appears. What should you do on Computer1?

    • ATurn on Reputation-based protection
    • BEnable Network Level Authentication (NLA)
    • CTurn on Network Discovery
    • DConfigure the Remote Desktop Configuration service

    Show answer

    Answer: B

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MD-102 practice, question 11. 383 questions available.