MD-102 practice questions 341–350

1. Question 341 · 383 in bank

   HOTSPOT - Your network contains an Active Directory domain named adatum.com, a workgroup, and computers that run Windows 10. The computers are configured as shown in the following table.

   

   The local Administrator accounts on Computer1, Computer2, and Computer3 have the same user name and password. On Computer1, Windows Defender Firewall is configured as shown in the following exhibit.

   

   The services on Computer1 have the following states.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   You need Remote Registry Service to be running for Disk Management, Performance Monitor and Registry itself. That's required. N N N

   Source: Adapted from community discussion — fco168

   

   Next question

2. Question 342 · 383 in bank

   You have a Hyper-V host that contains the virtual machines shown in the following table.

   

   On which virtual machines can you install Windows 11?

   • AVM1 only
   • BVM3 only
   • CVM1 and VM2 only
   • DVM2 and VM3 only
   • EVM1, VM2, and VM3

   Show answer

   Answer: B

   Explanation

   Windows 11 cannot be installed in VM1 because it is generation 1. Windows 11 cannot be installed in VM2 because it only has 1 vCPU. VM3 is the only available option.

   Source: Adapted from community discussion — picho707

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 343 · 383 in bank

   HOTSPOT - You have a Microsoft 365 subscription that uses Microsoft Intune and contains the users shown in the following table.

   

   Group2 has been assigned in the Enrollment Status Page. You have the devices shown in the following table.

   

   You capture and upload the hardware IDs of the devices in the marketing department. You configure Windows Autopilot. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   N Y Y Given answers are correct. 1. no license 2. MS E3 and if no ESP config is assigned the default ESP will take place 3. MS E5 And ESP has been configured

   Source: Adapted from community discussion — ExamKiller020

   References

   • Microsoft Learn

   

   Next question

4. Question 344 · 383 in bank

   QUESTION NO: 77 - You have a Microsoft 365 subscription that contains a user named User1. User1 is assigned a Windows 10/11 Enterprise E3 license. You use Microsoft Intune Suite to manage devices. User1 activates the following devices: • Device1: Windows 11 Enterprise • Device2: Windows 10 Enterprise • Device3: Windows 11 Enterprise How many more devices can User1 activate?

   • A2
   • B3
   • C7
   • D8

   Show answer

   Answer: A

   Explanation

   https://learn.microsoft.com/en-us/mem/intune/enrollment/device-limit-intune-azure#azure-device-limit-restriction The question is poorly worded, and we have to understand that it asks how many Windows devices, if so, the answer is correct, 2 (5 in total)

   Source: Adapted from community discussion — Casticod

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 345 · 383 in bank

   DRAG DROP - Your company has a computer named Computer1 that runs Windows 10. Computer1 was used by a user who left the company. You plan to repurpose Computer1 and assign the computer to a new user. You need to redeploy Computer1 by using Windows Autopilot. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The device detail should already be in intune if it is used by a past employee so why repeat it again? Why is there not a option to wipe the device and login using new users details?

   Source: Adapted from community discussion — Sherpa23

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 346 · 383 in bank

   You use the Microsoft Deployment Toolkit (MDT) to deploy Windows 11. You create a new task sequence by using the Standard Client Task Sequence template to deploy Windows 11 Enterprise to new computers. The computers have a single hard disk. You need to modify the task sequence to create a system volume and a data volume. Which phase should you modify in the task sequence?

   • AInitialization
   • BState Restore
   • CPreinstall
   • DPostinstall

   Show answer

   Answer: C

   Explanation

   To modify the task sequence to create a system volume and a data volume when deploying Windows 11, you should make changes in the: C. Preinstall phase The Preinstall phase is where you can customize the disk partitions and create system and data volumes before the operating system is installed. You can use the "Format and Partition Disk" task in the Preinstall phase to create the desired partitions and volumes according to your requirements.

   Source: Adapted from community discussion — Grg433

   Next question

7. Question 347 · 383 in bank

   HOTSPOT - You have an Azure AD tenant named contoso.com that contains the devices shown in the following table.

   

   All devices contain an app named App1 and are enrolled in Microsoft Intune. You need to prevent users from copying data from App1 and pasting the data into other apps. Which type of policy and how many policies should you create in Intune? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Here's how you can achieve this: Create an App Protection Policy: Create a new App Protection Policy in the Microsoft Endpoint Manager admin center. Configure Data Transfer Settings: Within the App Protection Policy, configure the settings related to data transfer. In your case, you would likely look for settings related to the clipboard or data sharing. Assign the Policy: Assign the App Protection Policy to the specific app (App1) on the targeted platforms (Windows, Android, and iOS). In this scenario, you should create one App Protection Policy per platform. So, you would create: One App Protection Policy for Windows. One App Protection Policy for Android. One App Protection Policy for iOS.

   Source: Adapted from community discussion — mohdAj

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 348 · 383 in bank

   You have a Microsoft Deployment Toolkit (MDT) deployment share. From the Deployment Workbench, you open the New Task Sequence Wizard and select the Standard Client Upgrade Task Sequence task sequence template. You discover that there are no operating system images listed on the Select OS page as shown in the following exhibit.

   

   You need to be able to select an operating system image to perform a Windows 11 in-place upgrade. What should you do?

   • AEnable monitoring for the deployment share.
   • BImport a full set of source files.
   • CImport a custom image file.
   • DRun the Update Deployment Share Wizard.

   Show answer

   Answer: B

   Explanation

   The correct answer is B. Import a full set of source files. Here's why: Enabling monitoring (A) won't resolve the issue of missing operating system images. It only collects information about deployments. Importing a custom image file (C) is only necessary if you have a specific, pre-created image you want to use. In this case, the task requires a full set of source files to build the image. Running the Update Deployment Share Wizard (D) updates the share with changes made elsewhere, but it won't add new images unless they are already available in the source files. Importing a full set of source files (B) provides the necessary components for MDT to create the installation media, including the Windows 11 image. This is the standard way to add new operating systems to MDT deployment shares. Therefore, importing a full set of source files, which contains the Windows 11 installation files, will address the issue of missing images and allow you to proceed with the Windows 11 in-place upgrade task sequence.

   Source: Adapted from community discussion — Krayzr

   References

   • Microsoft Learn

   Next question

9. Question 349 · 383 in bank

   Your company implements Azure AD, Microsoft 365, Microsoft Intune, and Azure Information Protection. The company's security policy states the following: • Personal devices do not need to be enrolled in Intune. • Users must authenticate by using a PIN before they can access corporate email data. • Users can use their personal iOS and Android devices to access corporate cloud services. • Users must be prevented from copying corporate email data to a cloud storage service other than Microsoft OneDrive for Business. You need to configure a solution to enforce the security policy. What should you create?

   • Aa device configuration profile from the Microsoft Intune admin center
   • Ba data loss prevention (DLP) policy from the Microsoft Purview compliance portal
   • Can insider risk management policy from the Microsoft Purview compliance portal
   • Dan app protection policy from the Microsoft Intune admin center

   Show answer

   Answer: D

   Explanation

   Answer is : D. App protection policies also help separate personal data from organization data. For example, you can create policies that block copy-and-paste between apps, require a PIN when opening an app, block backups to personal cloud services, and more. source : https://learn.microsoft.com/en-us/mem/intune/fundamentals/manage-apps

   Source: Adapted from community discussion — Nivla

   References

   • Microsoft Learn

   Next question

10. Question 350 · 383 in bank

    You have a Microsoft 365 subscription that contains 500 Android Enterprise devices. All the devices are enrolled in Microsoft Intune. You need to deliver bookmarks to the Chrome browser on the devices. What should you create?

    • Aa compliance policy
    • Ba configuration profile
    • Can app protection policy
    • Dan app configuration policy

    Show answer

    Answer: D

    Explanation

    I don't agree with sh123df, since his answer is for Windows devices and this question states Android. Answer should be D. https://learn.microsoft.com/en-us/mem/intune/apps/apps-configure-chrome-android#add-app-configuration-for-managed-ae-devices

    Source: Adapted from community discussion — Nozuka

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MD-102 practice, question 341. 383 questions available.