MD-102 practice questions 61–70

1. Question 61 · 383 in bank

   You have a Microsoft 365 subscription that contains 1,000 iOS devices and includes Microsoft Intune. You need to prevent the printing of corporate data from managed apps on the devices. What should you configure?

   • Aan app configuration policy
   • Ba security baseline
   • Can app protection policy
   • Dan iOS app provisioning profile

   Show answer

   Answer: C

   Explanation

   an app protection policy (APP). Here's why the other options are not ideal: App configuration policy: This focuses on configuring specific app settings within the app itself, and doesn't offer granular control over data-sharing capabilities like printing. Security baseline: This defines overall security standards for devices, but doesn't specifically address app-level data protection like printing restrictions. iOS app provisioning profile: This primarily manages app deployment and doesn't have functionalities for data security measures like printing control. Using an APP, you can specifically configure the "Block printing" setting to prevent users from printing any corporate data from the managed apps. Microsoft documentation on iOS/iPadOS app protection policy settings: https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy-settings-ios Microsoft blog post on using Intune App Protection Policy to protect corporate data: https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy

   Source: Adapted from community discussion — Krayzr

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 62 · 383 in bank

   You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

   

   In the Microsoft 365 Apps admin center, you create a Microsoft Office customization. Which users can download the Office customization file from the admin center?

   • AAdmin3 only
   • BAdmin1 and Admin3 only
   • CAdmin3 and Admin4 only
   • DAdmin1, Admin2, and Admin3 only
   • EAdmin1, Admin2, Admin3, Admin4

   Show answer

   Answer: C

   Explanation

   https://learn.microsoft.com/en-us/deployoffice/admincenter/overview To sign into the admin center, your account must have either the global administrator, security administrator, or Office apps administrator role.

   Source: Adapted from community discussion — Tigasmigas

   References

   • Microsoft Learn

   Next question

3. Question 63 · 383 in bank

   You have a Microsoft 365 E5 subscription. You need to download a report that lists all the devices that are NOT enrolled in Microsoft Intune and are assigned an app protection policy. What should you select in the Microsoft Intune admin center?

   • AReports, and then Device compliance
   • BApps, and then App protection policies
   • CDevices, and then Monitor
   • DApps, and then Monitor

   Show answer

   Answer: D

   Explanation

   I can confirm it is D. I could not check that in my dummy tenant as I have no devices so asked my husband to check his production Intune and under Apps\Monitor\App Protection status, there is a column Management Type and there it tells you "managed" or "unmanaged" which was the key to the question to check if the device is enrolled or not

   Source: Adapted from community discussion — NoursBear

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 64 · 383 in bank

   You have a Microsoft 365 tenant that contains the objects shown in the following table.

   

   In the Microsoft Intune admin center, you are creating a Microsoft 365 Apps app named App1. To which objects can you assign App1?

   • AGroup3 and Group4 only
   • BAdmin1, Group3, and Group4 only
   • CGroup1, Group3, and Group4 only
   • DGroup1, Group2, Group3, and Group4 only
   • EAdmin1, Group1, Group2, Group3, and Group4

   Show answer

   Answer: C

   Explanation

   Answer is correct. Test it in my tenant and can add Microsoft 365 Group, Mail enabled security group and Security group. (No user and distribution group)

   Source: Adapted from community discussion — jangroot

   References

   • Microsoft Learn

   Next question

5. Question 65 · 383 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription. You create an app protection policy for Android device named Policy1 as shown in the following exhibit.

   

   Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

6. Question 66 · 383 in bank

   Select 2

   You have a Microsoft 365 subscription that includes Microsoft Intune. You have 500 corporate-owned Android devices enrolled as fully managed devices. You need to prepare an app named App1 for deployment to the devices. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • AFrom the Intune Company Portal, download App1.
   • BSync App1 with Intune.
   • CFrom the Managed Google Play Store, approve App1.
   • DCreate an OEMConfig profile.

   Show answer

   Answer: BC

   Explanation

   https://learn.microsoft.com/en-us/mem/intune/apps/apps-add-android-for-work A: "From the Intune Company Portal, download App1": Incorrect. This would apply to installing apps on BYOD (Android Enterprise personally owned work profile devices), but the question specifies fully managed devices. Fully managed devices get their apps from the managed Google Play app store, not the intune company portal app. D. "Create an OEM config profile": Incorrect. These profiles manage device settings not installing apps Answer: B & C

   Source: Adapted from community discussion — ckmay

   References

   • Microsoft Learn

   Next question

7. Question 67 · 383 in bank

   You have the Windows 10 devices shown in the following table.

   

   You plan to upgrade the devices to Windows 11 Enterprise. On which devices can you perform a direct in-place upgrade to Windows 11 Enterprise?

   • ADevice3 only
   • BDevice3 and Device 4 only
   • CDevice2, Device3, and Device4 only
   • DDevice1, Device3, and Device4 only
   • EDevice1, Device2, Device3, and Device4 only

   Show answer

   Answer: B

   Explanation

   A, the key in the question is "perform a direct in-place upgrade to Windows 11 Enterprise?" so with a Pro machine you need to then do an edition upgrade. This is why the suggested answer is A only the already Enterprise machine can be directly upgraded.

   Source: Adapted from community discussion — NoursBear

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 68 · 383 in bank

   You have a Microsoft 365 subscription that uses Microsoft Intune Suite. You use Microsoft Intune to manage devices. You need to review the startup times and restart frequencies of the devices. What should you use?

   • AAzure Monitor
   • BIntune Data Warehouse
   • CMicrosoft Defender for Endpoint
   • DEndpoint analytics

   Show answer

   Answer: D

   Explanation

   Endpoint analytics aims to improve user productivity and reduce IT support costs by providing insights into the performance of the hardware and software in your organization. Specifically, it can help you review startup times and restart frequencies of devices managed through Microsoft Intune. Endpoint analytics is part of Microsoft Intune and provides valuable metrics and insights about the devices you manage, including proactive remediation scripts, startup performance, and recommended software to help improve user experience and device performance.

   Source: Adapted from community discussion — Haider_Raza

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 69 · 383 in bank

   HOTSPOT - Your network contains an on-premises Active Directory domain named contoso.com that syncs to Azure AD. A user named User1 uses the domain-joined devices shown in the following table.

   

   In the Microsoft Entra admin center, you assign a Windows 11 Enterprise E5 license to User1. You need to identify what will occur when User1 next signs in to the devices. What should you identify for each device? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Funny to see this answer. Device would not upgrade automatically in any case. Do you wish to see that kind of mess in production if someone just assigned a license to a user? 1. Will not upgrade to Windows 11 ent 2. Will activate as Windows 11 ent

   Source: Adapted from community discussion — Contactfornitish

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

10. Question 70 · 383 in bank

    HOTSPOT - You have a Microsoft Deployment Toolkit (MDT) deployment share named Share1. You add Windows 10 images to Share1 as shown in the following table.

    

    Which images can be used in the Standard Client Task Sequence, and which images can be used in the Standard Client Upgrade Task Sequence? NOTE: Each correct selection is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    References

    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MD-102 practice, question 61. 383 questions available.