Microsoft MD-102 Exam Dumps

Microsoft MD-102 Sample Question Answers

Microsoft MD-102 Sample Questions

Question # 1

You have a Microsoft 365 subscription.You have devices enrolled in Microsoft Intune as shown in the following table.To which devices can you deploy apps by using Intune?

A. Device1 only
B. Device1 and Device2 only
C. Device1 and Device3 only
D. Device1, Device2, and Device3 only
E. Device1, Device2, Device3, and Device4

Answer: D

Show Answer

Question # 2

You have a computer named Computer! that runs Windows 11.A user named User1 plans to use Remote Desktop to connect to Computer1.You need to ensure that the device of User1 is authenticated before the Remote Desktopconnection is established and the sign in page appears.What should you do on Computer1?

A. Turn on Reputation-based protection.
B. Enable Network Level Authentication (NLA).
C. Turn on Network Discovery. 
D. Configure the Remote Desktop Configuration service.

Answer: B

Show Answer

Question # 3

Your company uses Microsoft Intune.More than 500 Android and iOS devices are enrolled in the Intune tenant.You plan to deploy new Intune policies. Different policies will apply depending on the version of Android or iOS installed on the device.You need to ensure that the policies can target the devices based on their version ofAndroid or iOS.What should you configure first?

A. groups that have dynamic membership rules in Azure AD
B. Device categories in Intune
C. Corporate device identifiers in Intune
D. Device settings in Azure AD

Answer: A

Show Answer

Question # 4

You have a Microsoft 365 subscription that uses Microsoft Intune Suite.You use Microsoft Intune to manage devices.You have a Windows 11 device named Device1 that is enrolled in Intune. Device1 hasbeen offline for 30 days.You need to remove Device1 from Intune immediately. The solution must ensure that if thedevice checks in again, any apps and data provisioned by Intune are removed. Userinstalled apps, personal data, and OEM-installed apps must be retained.What should you use?

A. a Delete action
B. a Retire action
C. a Fresh Start action
D. an Autopilot Reset action 

Answer: B

Show Answer

Question # 5

You have a Windows 10 device named Device! that is joined to Active Directory andenrolled in Microsoft Intune.Device1 is managed by using Group Policy and Intune.You need to ensure that the Intune settings override the Group Policy settings.What should you configure?

A. a device configuration profile
B. a device compliance policy
C. an MDM Security Baseline profile
D. a Group Policy Object (GPO)

Answer: A

Show Answer

Question # 6

You have a Microsoft 365 subscription that includes Microsoft Intune.You have an update ring named UpdateRing1 that contains the following settings:• Automatic update behavior: Auto install and restart at a scheduled time• Automatic behavior frequency: First week of the month• Scheduled install day: Tuesday• Scheduled install time: 3 AMFrom the Microsoft Intone admin center, you select Uninstall for the feature updates ofUpdateRing1. When will devices start to remove the feature updates?

A. when a user approves the uninstall
B. as soon as the policy is received
C. next Tuesday
D. the first Tuesday of the next month 

Answer: B

Show Answer

Question # 7

You need to implement mobile device management (MDM) for personal devices that runWindows 11. The solution must meet the following requirements:• Ensure that you can manage the personal devices by using Microsoft Intune.• Ensure that users can access company data seamlessly from their personal devices.• Ensure that users can only sign in to their personal devices by using their personalaccount.What should you use to add the devices to Azure AD?

A. Azure AD registered Most Voted
B. hybrid Azure AD join. 
C. Azure AD joined

Answer: A

Show Answer

Question # 8

Your network contains an Active Directory domain. The domain contains 10 computers thatrun Windows 10. Users in the finance department use the computers.You have a computer named Computer1 that runs Windows 10.From Computer1, you plan to run a script that executes Windows PowerShell commandson the finance department computers.You need to ensure that you can run the PowerShell commands on the finance departmentcomputers from Computer.What should you do on the finance department computers?

A. From Windows PowerShell, run the Enable-MMAgent cmdlet.
B. From the local Group Policy, enable the Allow Remote Shell Access setting.
C. From Windows PowerShell, run the Enable-PSRemoting cmdlet.
D. From the local Group Policy, enable the Turn on Script Execution setting

Answer: C

Show Answer

Question # 9

You have a computer named Computed that has Windows 10 installed.You create a Windows PowerShell script named config.psl.You need to ensure that config.psl runs after feature updates are installed on Computer5.Which file should you modify on Computer5?

A. LiteTouch.wsf
B. SetupConfig.ini
C. Unattendb*
D. Unattend.xml 

Answer: B

Show Answer

Question # 10

You use Microsoft Defender for Endpoint to protect computers that run Windows 10.You need to assess the differences between the configuration of Microsoft Defender forEndpoint and the Microsoft-recommended configuration baseline.Which tool should you use?

A. Microsoft Defender for Endpoint Power 81 app
B. Microsoft Secure Score
C. Endpoint Analytics
D. Microsoft 365 Defender portal 

Answer: B

Show Answer

Question # 11

You have a Microsoft 365 E5 subscription and 25 Apple iPads.You need to enroll the iPads in Microsoft Intune by using the Apple Configurator enrollmentmethod.What should you do first?x

You have a Microsoft 365 E5 subscription and 25 Apple iPads.You need to enroll the iPads in Microsoft Intune by using the Apple Configurator enrollmentmethod.What should you do first?A. Upload a file that has the device identifiers for each iPad.
B. Modify the enrollment restrictions.
C. Configure an Apple MDM push certificate.
D. Add your user account as a device enrollment manager (DEM).

Answer: C

Show Answer

Question # 12

You have a Microsoft 365 E5 subscription.All devices are enrolled in Microsoft Intune.You need to ensure that devices that have NOT checked in for 30 days are deleted fromintune.What should you configure from the Microsoft Intune admin center?

A. a device limit restriction
B. automatic enrollment
C. a device clean-up rule
D. a configuration profile

Answer: C

Show Answer

Question # 13

You have a Microsoft 365 subscription that uses Microsoft Intune.You need to ensure that you can deploy apps to Android Enterprise devices.What should you do first?

A. Create a configuration profile.
B. Add a certificate connector.
C. Configure the Partner device management settings.
D. Link your managed Google Play account to Intune.

Answer: D

Show Answer

Question # 14

Your company has an Azure AD tenant named contoso.com that contains several Windows10 devices.When you join new Windows 10 devices to contoso.com, users are prompted to set up afour-digit pin.You need to ensure that the users are prompted to set up a six-digit pin when they join theWindows 10 devices to contoso.com.Solution: From the Microsoft Entra admin center, you modify the User settings and theDevice settings.Does this meet the goal?

A. Yes
B. No

Answer: B

Show Answer

Question # 15

You have computers that run Windows 10 and are managed by using Microsoft Intune.Users store their files in a folder named D:\Folder1.You need to ensure that only a trusted list of applications is granted write access toD:\Folder1.What should you configure in the device configuration profile?

A. Microsoft Defender Exploit Guard
B. Microsoft Defender Application Guard
C. Microsoft Defender SmartScreen
D. Microsoft Defender Application Control.

Answer: A

Show Answer