MD-102 practice questions 271–280

1. Question 271 · 383 in bank

   HOTSPOT - You have a Microsoft Entra tenant that contains the devices shown in the following table.

   

   Which devices can be Microsoft Entra joined, and which devices can be Microsoft Entra registered? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   It's important to note that while Windows devices can be both joined and registered, Android, iOS, and iPadOS devices can only be registered with Microsoft Entra ID. Microsoft Entra joined: Device1 only Microsoft Entra registered: Device1, Device2, Device3, and Device4

   Source: Adapted from community discussion — Meek_Learner

   

   Next question

2. Question 272 · 383 in bank

   Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant named contoso.com. You need to deploy 100 Windows 11 devices to contoso.com. The solution must meet the following requirements: • Ensure that from the devices, users can access shares on an on-premises file server without being prompted for credentials. • Minimize reliance on the on-premises infrastructure for device identity management. Which join type should you use?

   • AActive Directory domain-joined
   • BMicrosoft Entra hybrid joined
   • CMicrosoft Entra joined
   • DMicrosoft Entra registered

   Show answer

   Answer: C

   Explanation

   According to the following link, Entra joined devices can access on-prem with SSO. "With a Microsoft Entra joined device, your users already have an SSO experience to the cloud apps in your environment. If your environment has Microsoft Entra ID and on-premises AD DS, you might want to expand the scope of your SSO experience to your on-premises Line Of Business (LOB) apps, file shares, and printers." Ref: https://learn.microsoft.com/en-us/entra/identity/devices/device-sso-to-on-premises-resources#:~:text=With%20a%20Microsoft,shares%2C%20and%20printers.

   Source: Adapted from community discussion — Knight_Of_Peace

   References

   • Microsoft Learn

   Next question

3. Question 273 · 383 in bank

   You have a Microsoft 365 E5 subscription that contains a device named Device1. Device1 is Microsoft Entra joined. You manage Device1 by using Microsoft Intune. You need to use a remote action to reset the device as quickly as possible, if the device is turned off, the action must resume after the device is powered on. Which remote action should you use?

   • AAutopilot reset
   • BWipe
   • CRetire
   • DDelete

   Show answer

   Answer: B

   Explanation

   Wipe Action: The Wipe action resets the device to its factory settings by removing all data, settings, and apps. If the device is powered off when you initiate the wipe, the action will automatically resume when the device is powered back on and connects to the internet.

   Source: Adapted from community discussion — GamingFuntime1985

   Next question

4. Question 274 · 383 in bank

   You have a Microsoft 365 subscription that contains devices enrolled in Microsoft intune as shown in the following table.

   

   You need to use a bulk device action to send custom notifications. To which devices can you send the custom notifications?

   • ADevice1 only
   • BDevice2 only
   • CDevice3 only
   • DDevice2 and Device3 only
   • EDevice1, Device2, and Device3

   Show answer

   Answer: C

   Explanation

   In Microsoft Intune, custom notifications can be sent to iOS/iPadOS and Android devices only, appearing as push notifications through the Company Portal app or Microsoft Intune app on the user's device; macOS and Windows devices do not support custom Intune notifications. Key points about Intune custom notifications: • Supported devices: iOS/iPadOS and Android • Delivery method: Push notifications through the Company Portal app or Microsoft Intune app • Not supported on: macOS and Windows • Enrolment status: MDM

   Source: Adapted from community discussion — Meek_Learner

   References

   • Microsoft Learn

   Next question

5. Question 275 · 383 in bank

   DRAG DROP - You have a Microsoft 365 E5 subscription and use Microsoft Intune. You need to use Microsoft Cloud PKI to deploy personal user certificates to all Windows devices. Which four actions should you perform in sequence? To answer move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

6. Question 276 · 383 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription that uses Microsoft Intune Suite. You need to recommend a solution that meets the following requirements: • Administrators must use a secure connection over a shared screen session to perform remote tasks on a user’s device. • Administrators must have elevated access to perform remote tasks on a user’s device. • The solution must follow the principle of least privilege. What should you include in the recommendation for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Correct answers: Remote Help Help Desk Operator Help Desk Operator permissions: Ref: https://learn.microsoft.com/en-us/mem/intune/fundamentals/role-based-access-control-reference#:~:text=Read-,Remote%20Help%20app,View%20screen,-Remote%20tasks Endpoint Privilege Management (EPM) assigned to standard users. And the question is ask to give permissions to Administrator "Administrators must have elevated access to perform remote tasks on a user’s device." Ref: https://learn.microsoft.com/en-us/mem/intune/protect/epm-overview#:~:text=With%20Microsoft%20Intune%20Endpoint,running%20certain%20Windows%20diagnostics.

   Source: Adapted from community discussion — Knight_Of_Peace

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 277 · 383 in bank

   HOTSPOT - You have a Microsoft 365 subscription that contains devices enrolled in Microsoft Intune as shown in the following table.

   

   You plan to use the following remote actions on the devices: • Collect diagnostics • Locate device • Remote lock Which remote actions does each device support? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Not entirely correct. Locate Device: https://learn.microsoft.com/en-us/mem/intune/remote-actions/device-locate Supported platforms - Android Enterprise - iOS / iPadOS - Windows 10 - Windows 11 Unsupported: Android device administrator Android Enterprise: Personally-owned work profile macOS Windows Holographic for Business Windows Phone Remote Lock: https://learn.microsoft.com/en-us/mem/intune/remote-actions/device-remote-lock Remote lock is supported for the following platforms: Android Android Enterprise kiosk devices Android Enterprise work profile devices Android Enterprise fully managed devices Android Enterprise corporate-owned with work profile devices Android Open Source Project (AOSP) devices iOS macOS Remote lock isn't supported for: Windows 10 desktop Collect Diagnostics: https://learn.microsoft.com/en-us/mem/intune/remote-actions/collect-diagnostics Only supported on Windows

   Source: Adapted from community discussion — Kiwisap

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 278 · 383 in bank

   Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10. You have the groups shown in the following table.

   

   Which groups can you add to Group4?

   • AGroup2 only
   • BGroup1 and Group2 only
   • CGroup2 and Group3 only
   • DGroup1, Group2, and Group3

   Show answer

   Answer: A

   Explanation

   The correct answer is A. Group 4 is a local group therefore Universal Distribution Groups cannot be nested. Group 4 is a local group therefore other local Groups cannot be nested.

   Source: Adapted from community discussion — picho707

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 279 · 383 in bank

   You have a Microsoft 365 subscription and use Microsoft Intune Suite. You plan to use Microsoft Cloud PKI to support the signing and encryption of email messages. What should you do first?

   • ACreate a root certification authority (CA).
   • BCreate a device compliance policy.
   • CCreate device configuration SCEP certificate profiles.
   • DCreate device configuration trusted certificate profiles.
   • ECreate an issuing certification authority (CA).

   Show answer

   Answer: A

   Explanation

   Correct answer: A Configure root and issuing CA for Microsoft Cloud PKI 1- Create root CA 2- Create issuing CA 3- Create certificate profiles 3.1 Create a trusted certificate profile for the Cloud PKI root CA. 3.2 Create a trusted certificate profile for a Cloud PKI issuing CA. 3.3 Create an SCEP certificate profile for a Cloud PKI issuing CA. Ref: https://learn.microsoft.com/en-us/mem/intune/protect/microsoft-cloud-pki-configure-ca

   Source: Adapted from community discussion — Knight_Of_Peace

   References

   • Microsoft Learn

   Next question

10. Question 280 · 383 in bank

    HOTSPOT - You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

    

    You need to implement Microsoft Tunnel for Mobile Application Management (MAM) to provide the devices with access to an on-premises web app named App1. What should you do on each device? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Given answer is correct. 1) Intune device enrolment is not required for Microsoft Tunnel for MAM. "Tunnel for MAM extends the Microsoft Tunnel VPN gateway to support devices that run Android or iOS, and that aren't enrolled with Microsoft Intune. With this solution, your users can use a single device that isn't enrolled with Intune to gain secure access to the organizations on-premises apps and resources using modern authentication, single sign-on, and Conditional Access." Ref: https://learn.microsoft.com/en-us/mem/intune-service/protect/microsoft-tunnel-mam#:~:text=Tunnel%20for%20MAM%20extends,on%2C%20and%20Conditional%20Access. Please, follow next comment.

    Source: Adapted from community discussion — Knight_Of_Peace

    References

    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MD-102 practice, question 271. 383 questions available.