MD-102 practice questions 361–370

1. Question 361 · 383 in bank

   You have a hybrid deployment of Azure AD that contains 50 Windows 10 devices. All the devices are enrolled in Microsoft Intune. You discover that Group Policy settings override the settings configured in Microsoft Intune policies. You need to ensure that the settings configured in Microsoft Intune override the Group Policy settings. What should you do?

   • AFrom Group Policy Management Editor, configure the Computer Configuration settings in the Default Domain Policy.
   • BFrom the Microsoft Intune admin center, create a custom device profile.
   • CFrom the Microsoft Intune admin center, create an Administrative Templates device profile.
   • DFrom Group Policy Management Editor, configure the User Configuration settings in the Default Domain Policy.

   Show answer

   Answer: B

   Explanation

   B is correct Sign in to the Microsoft Endpoint Manager admin center (Endpoint.Microsoft.coom) Select Devices -> Windows -> Configuration profiles > Create profile. In Create Profile, You can select Platform: Windows 10 and later and Profile: Select Settings catalog (preview). Click on Create button. In Configuration Settings, select Add settings and use the following search keyword “MDM Wins Over GP.” You need to choose the MDM Wins Over GP policy from the list. https://www.anoopcnair.com/mdm-wins-over-gpo-group-policy-intune-policy/#:~:text=Option%20%231%20(New%20Method)%20%E2%80%93%20Intune%20Settings%20Catalog%20%7C%20Create%20MDM%20Wins%20Over%20GPO%20Policy

   Source: Adapted from community discussion — Darkfire

   References

   • Microsoft Learn

   Next question

2. Question 362 · 383 in bank

   You have a Microsoft 365 subscription that uses Microsoft Intune Suite. You use Microsoft Intune to manage devices. You need to ensure that the startup performance of managed Windows 11 devices is captured and available for review in the Intune admin center. What should you configure?

   • Athe Azure Monitor agent
   • Ba device compliance policy
   • Ca Conditional Access policy
   • Dan Intune data collection policy

   Show answer

   Answer: D

   Explanation

   D. an Intune data collection policy. Similar to how Log Analytics Workspaces work, you need a data collection rule/policy to forward data from the source (Windows 11 devices) to a datastore (aka database or workspace). Ref: https://learn.microsoft.com/en-us/mem/analytics/data-collection#:~:text=For%20Intune%2Dmanaged%20devices%2C%20this%20step%20configures%20the%20Intune%20data%20collection%20policy. Ref: https://learn.microsoft.com/en-us/mem/analytics/data-collection#:~:text=totalBootTimeInMilliseconds%3A%20Total%20boot%20time

   Source: Adapted from community discussion — Merrybob

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 363 · 383 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription that uses Microsoft Intune. Devices are enrolled in Intune as shown in the following table.

   

   The devices are the members of groups as shown in the following table.

   

   You create an iOS/iPadOS update profile as shown in the following exhibit.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   2: Device 2 is in the included and excluded group, but excluded takes precedence. So there is no applicable update policy for it. 3: You can only manage software updates for iOS/iPad devices that are enrolled through Apple's Automated Device Enrollment (ADE).

   Source: Adapted from community discussion — Fortind1974

   

   Next question

4. Question 364 · 383 in bank

   You have a Microsoft Intune deployment that contains the resources shown in the following table.

   

   You create a policy set named Set1 and add Comply1 to Set1. Which additional resources can you add to Set1?

   • AConf1 only
   • BComply2 only
   • CComply2 and Conf1 only
   • DCA1, Conf1, and Office1 only
   • EComply2, CA1, Conf1, and Office1

   Show answer

   Answer: C

   Explanation

   C - policy sets can be assigned cross-platform it can include also app policy named office 1 but not listed in possible answers cant contain CA policies https://learn.microsoft.com/en-us/mem/intune/fundamentals/policy-sets

   Source: Adapted from community discussion — belyo

   References

   • Microsoft Learn

   Next question

5. Question 365 · 383 in bank

   You use Microsoft Defender for Endpoint to protect computers that run Windows 10. You need to assess the differences between the configuration of Microsoft Defender for Endpoint and the Microsoft-recommended configuration baseline. Which tool should you use?

   • AMicrosoft Defender for Endpoint Power BI app
   • BMicrosoft Secure Score
   • CEndpoint Analytics
   • DMicrosoft 365 Defender portal

   Show answer

   Answer: B

   Explanation

   I also tend to B. It's also chatGPTs choice: B. Microsoft Secure Score Microsoft Secure Score is a tool that helps organizations assess their security posture across various Microsoft products, including Microsoft Defender for Endpoint. It provides recommendations and best practices based on Microsoft's security baseline configurations. By using Microsoft Secure Score, you can evaluate the configuration of Microsoft Defender for Endpoint against the recommended configuration baseline and identify areas where improvements can be made to enhance your overall security posture.

   Source: Adapted from community discussion — Crismo

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

6. Question 366 · 383 in bank

   You have a Microsoft 365 E5 subscription that contains 1,000 Windows 11 devices. All the devices are enrolled in Microsoft Intune. You plan to integrate Intune with Microsoft Defender for Endpoint. You need to establish a service-to-service connection between Intune and Defender for Endpoint. Which settings should you configure in the Microsoft Intune admin center?

   • APremium add-ons
   • BConnectors and tokens
   • CTenant enrollment
   • DMicrosoft Tunnel Gateway

   Show answer

   Answer: B

   Explanation

   B. Connectors and tokens Connectors and Tokens: This setting allows you to create and manage the connection between Intune and other services, including Microsoft Defender for Endpoint. By configuring connectors and tokens, you establish the integration between Intune and Defender for Endpoint, enabling them to communicate and share security information.

   Source: Adapted from community discussion — CJL324

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 367 · 383 in bank

   DRAG DROP - You have a Microsoft Intune subscription that is configured to use a PFX certificate connector to an on-premises Enterprise certification authority (CA). You need to use Intune to configure autoenrollment for Android devices by using public key pair (PKCS) certificates. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Agreed 1) Obtain the root certificate https://docs.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure#export-the-root-certificate-from-the-enterprise-ca 2) From the Microsoft Endpoint Manager admin center, create a trusted certificate configuration profile https://docs.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure#create-a-trusted-certificate-profile 3) From the Microsoft Endpoint Manager admin center, create a PKCS certificate configuration profile https://docs.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure#create-a-pkcs-certificate-profile

   Source: Adapted from community discussion — Casticod

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 368 · 383 in bank

   Your company uses Microsoft Intune. More than 500 Android and iOS devices are enrolled in the Intune tenant. You plan to deploy new Intune policies. Different policies will apply depending on the version of Android or iOS installed on the device. You need to ensure that the policies can target the devices based on their version of Android or iOS. What should you configure first?

   • Agroups that have dynamic membership rules in Azure AD
   • BDevice categories in Intune
   • CCorporate device identifiers in Intune
   • DDevice settings in Azure AD

   Show answer

   Answer: A

   Explanation

   A is correct You can configure Android or iOS version to a Dynamic Group. Which then adds the device to the dynamic group based on the devices version. With Device Categories you can't. https://learn.microsoft.com/en-us/archive/blogs/pauljones/dynamic-group-membership-in-azure-active-directory-part-2

   Source: Adapted from community discussion — Darkfire

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 369 · 383 in bank

   Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. You have a Microsoft 365 E5 subscription. The subscription contains devices that are Microsoft Entra joined and enrolled in Microsoft Intune. You create a user named User1. You need to ensure that User1 can rotate BitLocker recovery keys by using Intune. Solution: From the Microsoft Entra admin center, you assign the Cloud Device Administrator role to User1. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Next question

10. Question 370 · 383 in bank

    You have a Microsoft 365 subscription and use the Microsoft Intune Suite. You have the devices shown in the following table.

    

    All the devices are enrolled in Intune. Which devices can you query by using Device query?

    • ADevice1 only
    • BDevice1 and Device2 only
    • CDevice1, Device2, and Device3 only
    • DDevice1, Device2, and Device4 only
    • EDevice1, Device2, Device3, and Device4

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MD-102 practice, question 361. 383 questions available.