MD-102 practice questions 351–360

1. Question 351 · 383 in bank

   You have a Microsoft 365 E5 subscription and 100 computers that run Windows 10. You need to deploy Microsoft Office Professional Plus 2019 to the computers by using Microsoft Office Deployment Tool (ODT). What should you use to create a customization file for ODT?

   • Athe Microsoft 365 admin center
   • Bthe Microsoft Intune admin center
   • Cthe Microsoft Purview compliance portal
   • Dthe Microsoft 365 Apps admin center

   Show answer

   Answer: D

   Explanation

   To create a customization file for ODT, you should use the Microsoft 365 Apps admin center. The other options are incorrect: The Microsoft 365 admin center: The Microsoft 365 admin center does not provide a tool for creating customization files for ODT. The Microsoft Intune admin center: The Microsoft Intune admin center is used to manage mobile devices, not desktop computers. The Microsoft Purview compliance portal: The Microsoft Purview compliance portal is used to manage compliance for Microsoft 365 and other Microsoft products. It does not provide a tool for creating customization files for ODT.

   Source: Adapted from community discussion — picho707

   References

   • Microsoft Learn

   Next question

2. Question 352 · 383 in bank

   You have a Microsoft 365 subscription that contains 1,000 Windows 11 devices enrolled in Microsoft Intune. You plan to use Intune to deploy an application named App1 that contains multiple installation files. What should you do first?

   • APrepare the contents of App1 by using the Microsoft Win32 Content Prep Tool.
   • BCreate an Android application package (APK).
   • CUpload the contents of App1 to Intune.
   • DInstall the Microsoft Deployment Toolkit (MDT).

   Show answer

   Answer: A

   Explanation

   For deploying an application that contains multiple installation files to Windows 11 devices enrolled in Microsoft Intune, the first step is: A. Prepare the contents of App1 by using the Microsoft Win32 Content Prep Tool. The Microsoft Win32 Content Prep Tool is used to prepare complex applications, including those with multiple files and dependencies, for deployment via Microsoft Intune. This tool packages the application into a format (.intunewin) that is suitable for uploading to Intune and deploying across your managed devices. This process is necessary for applications that cannot be directly uploaded in their original format due to their complexity or the presence of multiple installation files. After preparing the app with the tool, you can then upload the packaged file to Intune for deployment.

   Source: Adapted from community discussion — BigStan82

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 353 · 383 in bank

   HOTSPOT - You have groups that use the Dynamic Device membership type as shown in the following table.

   

   You are deploying Microsoft 365 apps. You have devices enrolled in Microsoft Intune as shown in the following table.

   

   In the Microsoft Intune admin center, you create a Microsoft 365 Apps app as shown in the exhibit. (Click the Exhibit tab.)

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Group1: Company, Group2: Any private devices. App is for W10, assigned to Group1, where we have only 1 W10, which is LT1 --> YNN

   Source: Adapted from community discussion — BJS78

   

   Next question

4. Question 354 · 383 in bank

   Select 2

   You have a Microsoft 365 subscription. All devices run Windows 10. You need to prevent users from enrolling the devices in the Windows Insider Program. What two configurations should you perform from the Microsoft Intune admin center? Each correct answer is a complete solution. NOTE: Each correct selection is worth one point.

   • Aa device restrictions device configuration profile
   • Ban app configuration policy
   • Ca Windows 10 and later security baseline
   • Da custom device configuration profile
   • Ea Windows 10 and later update ring

   Show answer

   Answer: DE

   Explanation

   To prevent users from enrolling their devices in the Windows Insider Program using Microsoft Intune, you should perform the following two configurations from the Microsoft Intune admin center: A. Create a device restrictions device configuration profile: This profile allows you to enforce restrictions and settings on Windows 10 devices. You can use this to prevent users from joining the Windows Insider Program. E. Create a Windows 10 and later update ring: By configuring an update ring, you can control the release of Windows updates to devices. By setting the update ring to a stable release channel, you can prevent users from receiving Insider Preview builds, which are part of the Windows Insider Program.

   Source: Adapted from community discussion — picho707

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 355 · 383 in bank

   You have a Microsoft 365 E5 subscription that contains 100 Windows 10 devices enrolled in Microsoft Intune. You plan to use Endpoint analytics. You need to create baseline metrics. What should you do first?

   • AModify the Baseline regression threshold.
   • BOnboard 10 devices to Endpoint analytics.
   • CCreate a Log Analytics workspace.
   • DCreate an Azure Monitor workbook.

   Show answer

   Answer: B

   Explanation

   Some very inexperienced answers have been given here and people just go by the default "tick log analytics workspace for any question that says logs". That will not work here unfortunately. The question has nothing to do with Log Analytics workspace. Endpoint analytics is built into Intune already to start getting analytics, you just need to enroll devices into it. To start a baseline to compare with other orgs, you need minimum 10 devices onboarded to Endpoint Analytics. So option B is absolutely correct.

   Source: Adapted from community discussion — oopspruu

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

6. Question 356 · 383 in bank

   You install a feature update on a computer that runs Windows 10. How many days do you have to roll back the update?

   • A5
   • B10
   • C14
   • D30

   Show answer

   Answer: B

   References

   • Microsoft Learn

   Next question

7. Question 357 · 383 in bank

   You have a Microsoft Azure subscription that contains an Azure Log Analytics workspace. You deploy a new computer named Computer1 that runs Windows 10. Computer1 is in a workgroup. You need to ensure that you can use Log Analytics to query events from Computer1. What should you do on Computer1?

   • AJoin Azure AD.
   • BConfigure Windows Defender Firewall.
   • CCreate an event subscription
   • DInstall the Azure Monitor Agent.

   Show answer

   Answer: A

   Explanation

   No, the Azure Monitor Agent cannot be installed on a Windows 10 computer that isn't Azure AD joined. The Azure Monitor Agent uses Azure AD authentication to connect to the Log Analytics workspace, and Azure AD authentication requires the computer to be joined to Azure AD. If you want to collect data from a Windows 10 computer that isn't Azure AD joined, you can use the Microsoft Monitoring Agent (MMA). The MMA is a legacy agent that does not require the computer to be joined to Azure AD. However, the MMA is not as feature-rich as the Azure Monitor Agent, and it is not supported as long. In general, it is recommended to join all Windows 10 computers to Azure AD. This makes it easier to manage and secure the computers, and it enables you to use a variety of Azure services, such as Microsoft Intune and Azure Conditional Access.

   Source: Adapted from community discussion — reastman66

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 358 · 383 in bank

   You have a Microsoft 365 subscription that uses Microsoft Intune Suite. You use Microsoft Intune to manage devices. You plan to deploy two apps named App1 and App2 to all Windows devices. App1 must be installed before App2. From the Intune admin center, you create and deploy two Windows app (Win32) apps. You need to ensure that App1 is installed before App2 on every device. What should you configure?

   • Athe App1 deployment configurations
   • Ba dynamic device group
   • Ca detection rule
   • Dthe App2 deployment configurations

   Show answer

   Answer: D

   Explanation

   correct answer is D. with a detection rule app2 could install before app1, intune would simply call app2 a failed install due to app1 not being detected. the correct answer is app2 deployment configuration (must list app1 as a requirement or dependency) surely?

   Source: Adapted from community discussion — _WTH_

   References

   • Microsoft Learn

   Next question

9. Question 359 · 383 in bank

   Select 2

   You have a Microsoft 365 E5 subscription and 100 unmanaged iPad devices. You need to deploy a specific iOS update to the devices. Users must be prevented from manually installing a more recent version of iOS. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • ACreate a device configuration profile.
   • BEnroll the devices in Microsoft Intune by using the Intune Company Portal.
   • CCreate a compliance policy.
   • DCreate an iOS app provisioning profile.
   • EEnroll the devices in Microsoft Intune by using Apple Business Manager.

   Show answer

   Answer: AE

   Explanation

   Correct. You need to create a configuration profile to avoid users running the update. Also, with the Apple Business Manager you can install a specific iOS Version manually to the device.

   Source: Adapted from community discussion — fco168

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 360 · 383 in bank

    You have a Microsoft 365 subscription that includes Microsoft Intune. You have an update ring named UpdateRing1 that contains the following settings: • Automatic update behavior: Auto install and restart at a scheduled time • Automatic behavior frequency: First week of the month • Scheduled install day: Tuesday • Scheduled install time: 3 AM From the Microsoft Intune admin center, you select Uninstall for the feature updates of UpdateRing1. When will devices start to remove the feature updates?

    • Awhen a user approves the uninstall
    • Bas soon as the policy is received
    • Cnext Tuesday
    • Dthe first Tuesday of the next month

    Show answer

    Answer: B

    Explanation

    Given answer is correct. Windows devices start removal of updates as soon as they receive the change in Intune policy. Update removal isn't limited to maintenance schedules, even when they're configured as part of the update ring. REF: https://learn.microsoft.com/en-us/mem/intune/protect/windows-10-update-rings#uninstall

    Source: Adapted from community discussion — ExamKiller020

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MD-102 practice, question 351. 383 questions available.