MD-102 practice questions 201–210

1. Question 201 · 383 in bank

   HOTSPOT - You have the device configuration profile shown in the following exhibit.

   

   Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   https://learn.microsoft.com/en-us/deployedge/microsoft-edge-configure-kiosk-mode#overview Would require Digital/Interactive Signage experience instea dof Public-Browsing to be limited to one site. Multiple tabs are also part of PBE

   Source: Adapted from community discussion — letters1234

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 202 · 383 in bank

   You have a Microsoft 365 E5 subscription. All devices are enrolled in Microsoft Intune. You need to ensure that devices that have NOT checked in for 30 days are deleted from Intune. What should you configure from the Microsoft Intune admin center?

   • Aa device limit restriction
   • Bautomatic enrollment
   • Ca device clean-up rule
   • Da configuration profile

   Show answer

   Answer: C

   Explanation

   Based in this link: https://techcommunity.microsoft.com/t5/device-management-in-microsoft/using-intune-device-cleanup-rules-updated-version/ba-p/3760854 For me is C To automatically delete devices that have not checked in for 30 days, you can configure the Device Cleanup Rules in the Microsoft Intune admin center. How to do it: > Microsoft Intune admin center. > Devices > Device Cleanup Rules. > Enable the cleanup rule > Set the number of days to 30 for deleting devices that have not checked in. Done :)

   Source: Adapted from community discussion — murcao

   Next question

3. Question 203 · 383 in bank

   You have a Microsoft 365 E5 subscription. All devices are enrolled in Microsoft Intune. You create a Conditional Access policy named Policy1 that requires multifactor authentication (MFA). You need to ensure that Policy1 only applies to devices marked as noncompliant. Which settings of Policy1 should you configure?

   • ADevice platforms under Conditions
   • BFilter for devices under Conditions
   • CTarget resources
   • DGrant
   • ESession

   Show answer

   Answer: B

   Explanation

   B: To apply the policy to only non-compliant devices would require a device filter rule. Grant would apply to compliant devices. But would also require MFA if the device was not compliant.

   Source: Adapted from community discussion — RFULL

   Next question

4. Question 204 · 383 in bank

   HOTSPOT - You have a Microsoft Entra tenant that contains the devices shown in the following table.

   

   The tenant contains the groups shown in the following table.

   

   You create a Windows Autopilot deployment profile as shown in the Deployment Profile exhibit. (Click the Deployment Profile tab.)

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Appears to be correct Convert all targeted devices to Autopilot is enabled No - Device1 is a registered personal device and therefore excluded from autopilot Yes - Device2 is in Group1 No - Device3 is in Group2, so it's excluded

   Source: Adapted from community discussion — servL

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

5. Question 205 · 383 in bank

   HOTSPOT - You have a Microsoft 365 tenant that uses Microsoft Intune to manage the devices shown in the following table.

   

   You need to deploy a compliance solution that meets the following requirements: • Marks the devices as Not Compliant if they do not meet compliance policies • Remotely locks noncompliant devices What is the minimum number of compliance policies required, and which devices support the remote lock action? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answers are correct Based in the link below https://learn.microsoft.com/en-us/mem/intune/protect/actions-for-noncompliance We are going to need 4 policies Windows 10: Compliance policy to mark as noncompliant. Android Device Administrator: Compliance policy to mark as noncompliant. Android Enterprise: Compliance policy to mark as noncompliant. iOS and iPadOS: Compliance policy to mark as noncompliant. Based in link below: https://learn.microsoft.com/en-us/mem/intune/remote-actions/device-remote-lock Regarding the remote lock action, the supported devices are: Android Device Administrator Android Enterprise iOS iPadOS

   Source: Adapted from community discussion — murcao

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 206 · 383 in bank

   HOTSPOT - Your network contains an on-premises Active Directory Domain Services (AD DS) domain. You have a Microsoft 365 E5 subscription that includes Microsoft Intune and syncs with the AD DS domain. Windows Local Administrator Password Solution (Windows LAPS) is enabled in Microsoft Entra ID. The subscription has the custom roles shown in the following table.

   

   Microsoft Entra contains the users shown in the following table.

   

   You have the devices shown in the following table.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Agree with given answers: Device 1 only on prem and doesn't care about Entra roles User 2 no permissions User 3 has permission through custom role and device is Entra joined

   Source: Adapted from community discussion — chafe

   References

   • Microsoft Learn

   

   Next question

7. Question 207 · 383 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription and use Microsoft Intune. You purchase 50 Windows devices. You configure automatic enrollment to Intune for Microsoft Entra joined devices. You need to use a provisioning package to join the devices to Microsoft Entra. What should you use to create the provisioning package, and what is the maximum amount of time you can use the package for bulk enrollment? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 208 · 383 in bank

   You have a Microsoft 365 E5 subscription. You need to configure the automated investigation and response (AIR) remediation level for a device named Device1 to require approval for all folders. What should you create?

   • Aa security group
   • Ba device group
   • Can administrative unit
   • Dan action group

   Show answer

   Answer: B

   Explanation

   Based in the links below: https://learn.microsoft.com/en-us/defender-xdr/m365d-configure-auto-investigation-response https://learn.microsoft.com/en-us/defender-endpoint/configure-automated-investigations-remediation The answer is correct B -> device group How to do it: > Microsoft Defender > Settings > Endpoints > Device groups. > Add > In the Automation level list, select Require approval for all folders. > Add Device1 to this device group.

   Source: Adapted from community discussion — murcao

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 209 · 383 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription. You need to route Microsoft Intune logs to an Azure resource that supports the use of visuals, monitoring, and alerting. Which settings should you configure in Intune, and which resource should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Based in the link below https://learn.microsoft.com/en-us/mem/intune/fundamentals/review-logs-using-azure-monitor The answers are correct How to do it > Intune admin center. > Tenant administration > Diagnostics settings. > Add diagnostic settings: > Select the logs you want to send (e.g., Audit Logs, Operational Logs, Device Compliance). >Choose destination as Log Analytics workspace. > Choose the place we you want o keep the logs > Save your settings.

   Source: Adapted from community discussion — murcao

   References

   • Microsoft Learn

   

   Next question

10. Question 210 · 383 in bank

    HOTSPOT - You have a Microsoft 365 E5 subscription that includes Microsoft Intune. You need to configure a compliance policy for the iOS/iPadOS platform. The solution must meet the following requirements: • Require jailbroken devices to be marked as noncompliant. • Mark devices without a password lock as noncompliant. Which compliance policy settings should you configure for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MD-102 practice, question 201. 383 questions available.