MD-102 practice questions 281–290

1. Question 281 · 383 in bank

   Select 2

   You have a Microsoft 365 subscription. You plan to enroll 25 new devices in Microsoft Intune. You need to configure an enrollment notification for the new devices. Which two types of notifications can you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • ASMS
   • BMicrosoft Teams message
   • Cphone call
   • Dpush
   • Eemail

   Show answer

   Answer: DE

   Explanation

   Applies to: Android, iOS/iPadOS, macOS, Windows 10, Windows 11 Set up enrollment notifications in Microsoft Intune to notify employees of newly enrolled devices. Enrollment notifications are sent to assigned users via your selected method: email or push notification. Within a notification, you can: Add a custom message for the user, with information about how to report an unrecognized device. Apply your tenant's branding and customization settings (email notifications only). https://learn.microsoft.com/en-us/mem/intune/enrollment/enrollment-notifications

   Source: Adapted from community discussion — SinnCity

   References

   • Microsoft Learn

   Next question

2. Question 282 · 383 in bank

   HOTSPOT - You have a Microsoft Entra tenant named contoso.com that contains the users shown in the following table.

   

   For contoso.com, you configure the following Microsoft Entra join and registration settings: • Users may join devices to Microsoft Entra: Selected o Selected: Group1 You purchase the devices shown in the following table.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Y Y N Admin1 can join Device1 to contoso.com • Global Admins can always join devices to Microsoft Entra, even if they are not in the selected group. • Device1 is Windows 11, which supports Microsoft Entra join. • Answer: Yes

   Source: Adapted from community discussion — Meek_Learner

   

   Next question

3. Question 283 · 383 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription that contains a Windows device named Device1. Device1 was onboarded to Microsoft Defender for Endpoint by using a local script. You use Microsoft Intune to manage Device1. You plan to use the machine risk score in a compliance policy. You need to ensure that the machine risk score is evaluated based on data from Defender for Endpoint. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

4. Question 284 · 383 in bank

   HOTSPOT - You have a Microsoft 365 subscription and use Microsoft Intune. You have the Endpoint Privilege Management (EPM) elevation settings policy shown in the following exhibit.

   

   No EPM elevation rules policies are configured. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Correct answer: Be denied. Only diagnostic data. "By default, this option isn't configured. If no setting is delivered, the EPM components fall back to their built-in default, which is to deny all requests." Ref: https://learn.microsoft.com/en-us/mem/intune-service/protect/epm-policies#:~:text=By%20default%2C%20this%20option%20isn%27t%20configured.%20If%20no%20setting%20is%20delivered%2C%20the%20EPM%20components%20fall%20back%20to%20their%20built%2Din%20default%2C%20which%20is%20to%20deny%20all%20requests. Please, follow next comment.

   Source: Adapted from community discussion — Knight_Of_Peace

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

5. Question 285 · 383 in bank

   You have a Microsoft 365 E5 subscription that contains the following types of devices: • Windows 11 • Android • iOS All the devices are enrolled in Microsoft Intune. You need to use Intune to deploy apps from the Enterprise App Catalog. To which device types can you deploy the apps?

   • AWindows 11 only
   • BWindows 11 and Android only
   • CWindows 11 and is only
   • DAndroid and iOS only
   • EWindows 11, Android, and iOS

   Show answer

   Answer: A

   Explanation

   The Enterprise App Catalog is a collection of prepackaged Win32 apps that have been designed and prepared by Microsoft to support Intune. The catalog contains both Microsoft apps and third-party apps. An Enterprise App Catalog app is a Windows app that you can add via the Enterprise App Catalog in Intune. This app type leverages the Win32 platform and has support for customizable capabilities. Ref: https://learn.microsoft.com/en-us/mem/intune/apps/apps-add-enterprise-app#:~:text=The%20Enterprise%20App,for%20customizable%20capabilities.

   Source: Adapted from community discussion — Knight_Of_Peace

   References

   • Microsoft Learn

   Next question

6. Question 286 · 383 in bank

   You have a Microsoft 365 E5 subscription and use Microsoft Intune Suite. You plan to use Intune to run remediation script packages. What should you do first in the Microsoft Intune admin center?

   • AEnable Windows diagnostic data in processor configuration.
   • BEnable Windows license verification.
   • CConfigure the Derived Credential settings.
   • DUpload a Windows enterprise certificate.

   Show answer

   Answer: B

   References

   • Microsoft Learn

   Next question

7. Question 287 · 383 in bank

   HOTSPOT - You have a Microsoft 365 subscription that contains 5,000 Windows devices enrolled in Microsoft Intune. You plan to use the Sync and Collect diagnostics bulk device actions. What is the maximum number of devices you can include in each action? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Given answer is correct. Tested on Microsoft Intune: Sync: 0 devices selected (100 max) Collect diagnostics: 0 devices selected (25 max)

   Source: Adapted from community discussion — Knight_Of_Peace

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 288 · 383 in bank

   HOTSPOT - You manage devices by using Microsoft Intune. Automatic Intune enrollment is disabled. Users report that they must enter the mobile device management (MDM) server address during device enrollment. To reduce user interaction during device enrollment, you plan to create the following CNAME DNS hostname records: • EnterpriseEnrollment.contoso.com • EnterpriseRegistration.contoso.com You need to configure a fully qualified domain name (FQDN) for each CNAME record to redirect enrollment requests to the Intune servers. How should you configure each FQDN? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

9. Question 289 · 383 in bank

   DRAG DROP - You have a Microsoft 365 subscription. The subscription contains computers that run Windows 11 and are enrolled in Microsoft Intune. You need to create a compliance policy that meets the following requirements: Requires BitLocker Drive Encryption (BitLocker) on each device Requires a minimum operating system version Which setting of the compliance policy should you configure for each requirement? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The Answer Is Device Health > Device Properties. But I just want to say that this question is dumb as bricks. It basically boils down to "What is the setting syntax called" and no tech I know has this memorized by heart. Pointless Question if you ask me

   Source: Adapted from community discussion — TylerSivis

   References

   • Microsoft Learn

   

   Next question

10. Question 290 · 383 in bank

    You have a Microsoft 365 E5 subscription and use Microsoft Intune. You need to use a Sync bulk device action on all corporate-owned Windows devices. What is the maximum number of devices you can include the action?

    • A25
    • B50
    • C100
    • D500
    • E1000

    Show answer

    Answer: C

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MD-102 practice, question 281. 383 questions available.