MD-102 practice questions 41–50

1. Question 41 · 383 in bank

   You have a Microsoft 365 subscription that uses Microsoft Intune Suite. You use Microsoft Intune to manage devices. Auto-enrollment in Intune is configured. You have 100 Windows 11 devices in a workgroup. You need to connect the devices to the corporate wireless network and enroll 100 new Windows 11 devices in Intune. What should you use?

   • Aa provisioning package
   • Ba Group Policy Object (GPO)
   • Cmobile device management (MDM) automatic enrollment
   • Da device configuration policy

   Show answer

   Answer: A

   Explanation

   https://learn.microsoft.com/en-us/mem/intune/enrollment/windows-bulk-enroll "" Join new Windows devices to Microsoft Entra ID and Intune. To bulk enroll devices for your Microsoft Entra tenant, you create a provisioning package with the Windows Configuration Designer (WCD) app. Applying the provisioning package to corporate-owned devices joins the devices to your Microsoft Entra tenant and enrolls them for Intune management. Once the package is applied, it's ready for your Microsoft Entra users to sign in. ""

   Source: Adapted from community discussion — Krayzr

   References

   • Microsoft Learn

   Next question

2. Question 42 · 383 in bank

   HOTSPOT - You have a Microsoft 365 tenant that uses Microsoft Intune to manage personal and corporate devices. The tenant contains Windows 10 devices as shown in the following exhibit.

   

   How will Intune classify each device after the devices are enrolled in Intune automatically? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

3. Question 43 · 383 in bank

   You have a Microsoft 365 subscription that uses Microsoft Intune Suite. You use Microsoft Intune to manage devices. All devices are in the same time zone. You create an update rings policy and assign the policy to all Windows devices. On the November 1, you pause the update rings policy. All devices remain online. Without further modification to the policy, on which date will the devices next attempt to update?

   • ADecember 1
   • BDecember 6
   • CNovember 15
   • DNovember 22

   Show answer

   Answer: B

   Explanation

   Pause Select Pause to prevent assigned devices from receiving feature or quality updates for up to 35 days from the time you pause the ring. After the maximum days have passed, pause functionality automatically expires and the device scans Windows Updates for applicable updates. Following this scan, you can pause the updates again. If you resume a paused update ring, and then pause that ring again, the pause period resets to 35 days.

   Source: Adapted from community discussion — LiamAzure

   References

   • Microsoft Learn

   Next question

4. Question 44 · 383 in bank

   You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

   

   All devices have Microsoft Edge installed. From the Microsoft Intune admin center, you create a Microsoft Edge Baseline profile named Edge1. You need to apply Edge1 to all the supported devices. To which devices should you apply Edge1?

   • ADevice1 only
   • BDevice1 and Device2 only
   • CDevice1, Device2, and Device3 only
   • DDevice1, Device2, and Device4 only
   • EDevice1, Device2, Device3, and Device4

   Show answer

   Answer: B

   Explanation

   B. Device1 and Device2 only Microsoft Edge Baseline profiles are typically designed to enforce security and compliance settings for Microsoft Edge on Windows devices. Since Device3 is an Android device and Device4 is an iOS device, they wouldn't typically be managed using Microsoft Edge Baseline profiles from the Microsoft Intune admin center.

   Source: Adapted from community discussion — CJL324

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 45 · 383 in bank

   HOTSPOT - You have a Microsoft 365 subscription that uses Microsoft Intune. You plan to manage Windows updates by using Intune. You create an update ring for Windows 10 and later and configure the User experience settings for the ring as shown in the following exhibit.

   

   Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Automatic restarts are blocked between 8 AM - 5 PM. A restart will be forced on a device 1 day after the deadline. https://learn.microsoft.com/en-us/mem/intune/protect/windows-update-settings

   Source: Adapted from community discussion — Fortind1974

   References

   • Microsoft Learn

   

   Next question

6. Question 46 · 383 in bank

   You have a Microsoft 365 subscription. You have 10 computers that run Windows 10 and are enrolled in mobile device management (MDM). You need to deploy the Microsoft 365 Apps for enterprise suite to all the computers. What should you do?

   • AFrom the Microsoft Intune admin center, create a Windows 10 device profile.
   • BFrom Azure AD, add an app registration.
   • CFrom Azure AD, add an enterprise application.
   • DFrom the Microsoft Intune admin center, add an app.

   Show answer

   Answer: D

   Explanation

   To deploy the Microsoft 365 Apps for enterprise suite to all the computers enrolled in mobile device management (MDM), you should: D. From the Microsoft Intune admin center, add an app Here's a step-by-step guide: Sign in to the Microsoft Intune admin center. Navigate to "Apps" > "All apps". Click on "Add". Select the app type as "Windows 10" and choose "Microsoft 365 Apps". Configure the app information and settings as required. Assign the app to the groups or devices you want to deploy it to. This method leverages Microsoft Intune to manage and deploy applications to your enrolled devices, ensuring they receive the necessary Microsoft 365 Apps for enterprise suite.

   Source: Adapted from community discussion — veliyath

   References

   • Microsoft Learn

   Next question

7. Question 47 · 383 in bank

   You have a Microsoft 365 tenant. You have devices enrolled in Microsoft Intune. You assign a conditional access policy named Policy1 to a group named Group1. Policy1 restricts devices marked as noncompliant from accessing Microsoft OneDrive for Business. You need to identify which noncompliant devices attempt to access OneDrive for Business. What should you do?

   • AFrom the Microsoft Entra admin center, review the Conditional Access Insights and Reporting workbook.
   • BFrom the Microsoft Intune admin center, review Device compliance report.
   • CFrom the Microsoft Intune admin center, review the Noncompliant devices report.
   • DFrom the Microsoft Intune admin center, review the Setting compliance report.

   Show answer

   Answer: A

   Explanation

   If the question have ended at "You need to identify noncompliant devices", then B would have been correct. But you need to know which non-compliant device "Accessed OneDrive for Business". That can only be done by A. Also there is no such thing as "noncompliant device report" in MS Intune > Reports. Stop copying answers from ChatGPT and use your research and test tenants.

   Source: Adapted from community discussion — oopspruu

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 48 · 383 in bank

   HOTSPOT - You use Microsoft Intune to manage Windows 10 devices. You are designing a reporting solution that will provide reports on the following: • Compliance policy trends • Trends in device and user enrollment • App and operating system version breakdowns of mobile devices You need to recommend a data source and a data visualization tool for the design. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

9. Question 49 · 383 in bank

   Your network contains an Active Directory domain. The domain contains 2,000 computers that run Windows 10. You implement hybrid Azure AD and Microsoft Intune. You need to automatically register all the existing computers to Azure AD and enroll the computers in Intune. The solution must minimize administrative effort. What should you use?

   • Aan Autodiscover address record
   • Ba Group Policy object (GPO)
   • Can Autodiscover service connection point (SCP)
   • Da Windows Autopilot deployment profile

   Show answer

   Answer: B

   Explanation

   Here's why: GPOs are the most efficient way to automate registration and enrollment for existing devices in a hybrid Azure AD environment. They allow you to apply settings to a large number of devices centrally, minimizing the administrative effort involved. Here's how it works: Create a GPO: Use the Group Policy Management Console (GPMC) to create a new GPO that targets the computers you want to enroll. Enable automatic MDM enrollment: Within the GPO, enable the policy setting for "Enable automatic MDM enrollment using default Azure AD credentials." Configure MDM user scope: Specify whether the enrollment applies to all users or a specific group of users. Apply the GPO: Link the GPO to the appropriate Active Directory organizational unit (OU) to apply it to the targeted computers.

   Source: Adapted from community discussion — Krayzr

   References

   • Microsoft Learn

   Next question

10. Question 50 · 383 in bank

    HOTSPOT - You have two computers that run Windows 10. The computers are enrolled in Microsoft Intune as shown in the following table.

    

    Windows 10 update rings are defined in Intune as shown in the following table.

    

    You assign the update rings as shown in the following table.

    

    What is the effect of the configurations on Computer1 and Computer2? To answer, select the appropriate options in the answer area.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    I'm not sure this is correct. If a device is assigned to both Group 1 and Group 2, the quality update will be deferred for 10 days. I though this is because when multiple update policies are applied to a single device, the policy with the longest deferral period takes precedence. Can someone point me to documentation that states assigning two groups cancel the policy all together?

    Source: Adapted from community discussion — OyYaGotta

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MD-102 practice, question 41. 383 questions available.