MD-102 practice questions 21–30

1. Question 21 · 383 in bank

   You have a Microsoft 365 subscription that uses Microsoft Intune Suite. You use Microsoft Intune to manage devices. You have the devices shown in the following table.

   

   Which devices can be changed to Windows 11 Enterprise by using subscription activation?

   • ADevice3 only
   • BDevice2 and Device3 only
   • CDevice1 and Device2 only
   • DDevice1, Device2, and Device3

   Show answer

   Answer: B

   Explanation

   The correct answer is B. Read the note that states. Note Subscription activation is available for qualifying devices running Windows 10 or Windows 11. You can't use subscription activation to upgrade from Windows 10 to Windows 11. https://learn.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation

   Source: Adapted from community discussion — Gillactus

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 22 · 383 in bank

   HOTSPOT - Your network contains an Active Directory domain named adatum.com. The domain contains two computers named Computer1 and Computer2 that run Windows 10. Remote Desktop is enabled on Computer2. The domain contains the user accounts shown in the following table.

   

   Computer2 contains the local groups shown in the following table.

   

   The relevant user rights assignments for Computer2 are shown in the following table.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   A user with “Deny logon locally” permissions can still connect via Remote Desktop Services, as these are two separate permissions. On the other hand, the “Deny logon through Remote Desktop Services” policy determines which users are prevented from logging on to the device through a Remote Desktop connection. This means that the user cannot log in remotely via Remote Desktop Services.

   Source: Adapted from community discussion — picho707

   

   Next question

3. Question 23 · 383 in bank

   You have two computers named Computer1 and Computer2 that run Windows 10. Computer2 has Remote Desktop enabled. From Computer1, you connect to Computer2 by using Remote Desktop Connection. You need to ensure that you can access the local drives on Computer1 from within the Remote Desktop session. What should you do?

   • AFrom Computer2, configure the Remote Desktop settings.
   • BFrom Windows Defender Firewall on Computer1, allow Remote Desktop.
   • CFrom Windows Defender Firewall on Computer2, allow File and Printer Sharing.
   • DFrom Computer1, configure the Remote Desktop Connection settings.

   Show answer

   Answer: D

   Explanation

   D is correct as anyone using Windows 10 for 8 years would know. Setting from the originating device within the repair app

   Source: Adapted from community discussion — Sprocket10

   Next question

4. Question 24 · 383 in bank

   You have a Microsoft 365 E5 subscription that contains a user named User1 and a web app named App1. App1 must only accept modern authentication requests. You plan to create a Conditional Access policy named CAPolicy1 that will have the following settings: Assignments - Users or workload identities: User1 Cloud apps or actions: App1 - Access controls - Grant: Block access - You need to block only legacy authentication requests to App1. Which condition should you add to CAPolicy1?

   • AFilter for devices
   • BDevice platforms
   • CUser risk
   • DSign-in risk
   • EClient apps

   Show answer

   Answer: E

   Explanation

   Here's a step-by-step guide: Go to the Microsoft 365 admin center. Navigate to "Security" and then "Conditional Access." Create a new Conditional Access policy (CAPolicy1) and configure the following: Assignments: Users or workload identities: User1 Cloud apps or actions: Include App1 Conditions: Client apps: Modern authentication clients Access controls: Grant: Block access

   Source: Adapted from community discussion — mohdAj

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 25 · 383 in bank

   Select 3

   You have a Microsoft 365 subscription that uses Microsoft Intune. You have five new Windows 11 Pro devices. You need to prepare the devices for corporate use. The solution must meet the following requirements: • Install Windows 11 Enterprise on each device. • Install a Windows Installer (MSI) package named App1 on each device. • Add a certificate named Certificate1 that is required by App1. • Join each device to Azure AD. Which three provisioning options can you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • Asubscription activation
   • Ba custom Windows image
   • Can in-place upgrade
   • DWindows Autopilot
   • Eprovisioning packages

   Show answer

   Answer: BDE

   Explanation

   A, D, E. Install Windows 11 Enterprise on each device: Subscription activation Install a Windows Installer (MSI) package named App1 on each device: Provisioning packages Add a certificate named Certificate1 that is required by App1: Provisioning packages Join each device to Azure AD: Autopilot

   Source: Adapted from community discussion — someone1337

   References

   • Microsoft Learn

   Next question

6. Question 26 · 383 in bank

   DRAG DROP - You have a Microsoft Deployment Toolkit (MDT) deployment share named DS1. You import a Windows 11 image to DS1. You have an executable installer for an application named App1. You need to ensure that App1 will be installed for all the task sequences that deploy the image. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

7. Question 27 · 383 in bank

   HOTSPOT - You have the devices shown in the following table.

   

   You need to migrate app data from Device1 to Device2. The data must be encrypted and stored on Server1 during the migration. Which command should you run on each device? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 28 · 383 in bank

   You have a Microsoft 365 subscription. You plan to use Windows Autopilot to provision 25 Windows 11 devices. You need to configure the Out-of-box experience (OOBE) settings. What should you create in the Microsoft Intune admin center?

   • Aan enrollment status page (ESP)
   • Ba deployment profile
   • Ca compliance policy
   • Da PowerShell script
   • Ea configuration profile

   Show answer

   Answer: B

   Explanation

   Correct B. a deployment profile. In the Microsoft Intune admin center, a deployment profile allows you to configure various settings for the Autopilot deployment, including the Out-of-box experience (OOBE) settings. Within the deployment profile, you can define options such as language and region settings, privacy settings, Wi-Fi configuration, and more to customize the initial setup experience for the provisioned devices.

   Source: Adapted from community discussion — CJL324

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 29 · 383 in bank

   You have an Azure AD tenant that contains the devices shown in the following table.

   

   You purchase Windows 11 Enterprise E5 licenses. Which devices can use Subscription Activation to upgrade to Windows 11 Enterprise?

   • ADevice1 only
   • BDevice1 and Device2 only
   • CDevice1 and Device3 only
   • DDevice1, Device2, Device3, and Device4

   Show answer

   Answer: A

   Explanation

   Should be A Devices must be Microsoft Entra joined or Microsoft Entra hybrid joined. Workgroup-joined or Microsoft Entra registered devices aren't supported. https://learn.microsoft.com/en-us/windows/deployment/windows-subscription-activation#:~:text=for%20identity%20management.-,Devices%20must%20be%20Microsoft%20Entra%20joined%20or%20Microsoft%20Entra%20hybrid%20joined.%20Workgroup%2Djoined%20or%20Microsoft%20Entra%20registered%20devices%20aren%27t%20supported.,-For%20Microsoft%20customers The Suibscription does NOT upgrade Windows 10 pro to windows 11 Enterprise

   Source: Adapted from community discussion — Darkfire

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 30 · 383 in bank

    You have a Microsoft 365 Subscription that uses Microsoft Intune. You add apps to Intune as shown in the following table.

    

    You need to create an app configuration policy named Policy1 for the Android Enterprise platform. Which apps can you manage by using Policy1?

    • AApp2 only
    • BApp3 only
    • CApp1 and App3 only
    • DApp2 and App3 only
    • EApp1, App2, and App3

    Show answer

    Answer: B

    Explanation

    In theory answer B is correct, but only because is not explained that the LOB apps is wrapped with intune SDK. So without making assumptions the B is correct, but in real word the D is the correct answer

    Source: Adapted from community discussion — Alex_UC

    References

    • Microsoft Learn
    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MD-102 practice, question 21. 383 questions available.