How to pass Microsoft MD-101 exam with the help of dumps?

Question # 1

You use Microsoft Intune to manage client computers. The computers run one of the following operating systems:Windows 8.1Windows 10 ProWindows 10 EnterpriseWindows 10 Enterprise LTSCYou plan to manage Windows updates on the computers by using update rings.Which operating systems support update rings?

A. Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Enterprise LTSC only
B. Windows 8.1, Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Enterprise LTSC
C. Windows 10 Enterprise and Windows 10 Enterprise LTSC only
D. Windows 10 Pro and Windows 10 Enterprise only 

Show Answer

Question # 2

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.  Your company has an Azure Active Directory (Azure AD) tenant named contoso.com that contains several Windows 10 devices.When you join new Windows 10 devices to contoso.com, users are prompted to set up a four-digit pin.You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 10 devices to contoso.com.Solution: From the Azure Active Directory admin center, you configure automatic mobile device management (MDM) enrollment. From the Device Management admin center, you create and assign a device restrictions profile.Does this meet the goal?

A. Yes
B. No

Show Answer

Question # 3

You have a Microsoft Azure Log Analytics workplace that collects all the event logs from the computers at your company.You have a computer named Computer1 than runs Windows 10. You need to view theevents collected from Computer1.Which query should you run in Log Analytics?

A. Event| where Computer = = "Computer1"
B. ETWEvent| where SourceSystem = = "Computer1"
C. ETWEvent| where Computer = = "Computer1"
D. Event| where SourceSystem = = "Computer1" 

Show Answer

Question # 4

Your company has computers that run Windows 10. The company uses Microsoft Intune to manage the computers.You have an app protection policy for Microsoft Edge. You assign the policy to a group.On a computer named Computer1, you open Microsoft Edge.You need to verify whether Microsoft Edge on Computer1 is protected by the app protection policy.Which column should you add in Task Manager?

A. Operating system context
B. UAC virtualization
C. Enterprise Context
D. Data Execution Prevention 

Show Answer

Question # 5

You have groups that use the Dynamic Device membership type as shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.

Show Answer

Question # 6

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named User1. User1 has the devices shown in the following table. On September 5, 2019, you create and enforce a terms of use (ToU) in contoso.com. The ToU has the following settings:Name: Terms1Display name: Terms nameRequire users to expand the terms of use: OffRequire users to consent on every device: OnExpire consents: OnExpire starting on: October 10, 2019Frequency MonthlyReferencFor each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.

Show Answer

Question # 7

You have a Microsoft 365 tenant that uses Microsoft Intune for mobile device management (MDM).You associate a Microsoft Store for Business account with Intune.You purchase an app named Appl from the Microsoft Store for Business.You need to ensure that Appl can be deployed by using Intune.What should you do?

A. Sync purchased apps from the Microsoft Store for Business.
B. Integrate the Windows Autopilot Deployment Program into the Microsoft Store for Business.
C. Create an app category in Intune.
D. Create an app protection policy in Intune. 

Show Answer

Question # 8

You have a Microsoft 365 tenant that contains the devices shown in the following tableYou need to assign app protection settings to the devices.What is the minimum number of app protection policies required?

A. 1
B. 2
C. 3
D. 4
E. 5 

Show Answer

Question # 9

You have a Microsoft Intune subscription that is configured to use a PFX certificate connector to an on-premises Enterprise certification authority (CA).You need to use Intune to configure autoenrollment for Android devices by using public key pair (PKCS) certificates.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order

Show Answer

Question # 10

You have two computers that run Windows 10. The computers are enrolled in Microsoft Intune as shown in the following table. What is the effect of the configurations on Computer1 and Computer2? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

Show Answer

Question # 11

You are creating a device configuration profile in Microsoft Intune.You need to implement an ADMX-backed policy.Which profile type should you use?

A. Identity protection
B. Custom
C. Device restrictions
D. Device restrictions (Windows 10 Team)

Show Answer

Question # 12

You have a Microsoft 365 tenant that uses Microsoft Intune.You use the Company Portal app to access and install published apps to enrolled devices.From the Microsoft Endpoint Manager admin center, you add a Microsoft Store app.Which two App information types are visible in the Company Portal?Note: Each correct selection is worth one point.

A. information URL
B. Developer
C. Privacy URL
D. Owner

Show Answer

Question # 13

Your company has computers that run Windows 10. The employees at the company use the computers.You plan to monitor the computers by using the Update Compliance solution.You create the required resources in Azure.You need to configure the computers to send enhanced Update Compliance data.Which two Group Policy settings should you configure? To answer, select the appropriate settings in the answer area.NOTE: Each correct selection is worth one point.

Show Answer

Question # 14

You have a hybrid Microsoft Azure Active Directory (Azure AD) tenant, a Microsoft System Center Configuration Manager (Current Branch) environment, and a Microsoft 365 subscription.You have computers that run Windows 10 as shown in the following table.You plan to use Microsoft 365 Device Management.Which computers support co-management by Configuration Manager and Device Management?

A. Computer1, Computer2, and Computer3
B. Computer3 only
C. Computer1 and Computer2 only
D. Computer2 only

Show Answer

Question # 15

Your network contains an Active Directory domain. The domain contains computers that run Windows 10.All users use Roaming User Profiles.You have a user named Public1 that is used to sign-in to a public computer.You need to prevent changes to the user settings of Public1 from being saved to the user profile.What should you do?

A. Rename the Roaming User Profile folder to Public1.man
B. Rename Ntuser.dat to Ntuser.v6
C. Rename Ntuser.dat to Ntuser.man
D. Rename the Roaming User Profile folder to Public1.v1 

Show Answer

Question # 16

You have a Microsoft 365 subscription.You have 10 computers that run Windows 10 and are enrolled in mobile device management (MDM)You need to deploy the Microsoft Office 365 ProPlus suite to all the computers. What should you do?

A. From Microsoft Azure Active Directory (Azure AD), add an app registration.
B. From the Device Management admin center, add an app.
C. From the Device Management admin center, create a Windows 10 device profile.
D. From Microsoft Azure Active Directory (Azure AD), add an enterprise application

Show Answer

Question # 17

Your company has a Microsoft 365 subscription.The company uses Microsoft Intune to manage all devices.The company uses conditional access to restrict access to Microsoft 365 services for devices that do notcomply with the company’s security policies.You need to identify which devices will be prevented from accessing Microsoft 365 services.What should you use?

A. The Device Health solution in Windows Analytics.
B. Windows Defender Security Center.
C. The Device compliance blade in the Intune admin center.
D. The Conditional access blade in the Azure Active Directory admin center. 

Show Answer

Question # 18

In Microsoft Intune, you have the device compliance policies shown in the following table. The Intune compliance policy settings are configured as shown in the following exhibitFor each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point. 

Show Answer

Question # 19

Your network contains an on-premises Active Directory domain named contoso.com that syncs to Azure Active Directory (Azure AD).A user named User1 uses the domain-joined devices shown in the following table.In the Azure Active Directory admin center, you assign a Windows 10 Enterprise E5 license to User1.You need to identify what will occur when User1 next signs in to the devices.What should you identify for each device? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

Show Answer

Question # 20

Your network contains an Active Directory domain. Active Directory is synced with Microsoft Azure Active Directory (Azure AD).There are 500 Active Directory domain-joined computers that run Windows 10 and are enrolled in Microsoft Intune.You plan to implement Microsoft Defender Exploit Guard.You need to create a custom Microsoft Defender Exploit Guard policy, and then distribute the policy to all the computers.What should you do? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

Show Answer

Question # 21

You have a hybrid Microsoft Azure Active Directory (Azure AD) tenant.You configure a Windows Autopilot deployment profile as shown in the following exhibit. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.NOTE: Each correct selection is worth one point.  

Show Answer

Question # 22

You have computers that run Windows 10 Pro. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune.You need to upgrade the computers to Windows 10 Enterprise.What should you configure in Intune?

A. A device enrollment policy
B. A device cleanup rule
C. A device compliance policy
D. A device configuration profile 

Show Answer

Question # 23

You have 100 computers that run Windows 8.1.You plan to deploy Windows 10 to the computers by performing a wipe and load installation.You need to recommend a method to retain the user settings and the user data.Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Show Answer

Question # 24

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have a computer that runs Windows 8.1.Two days ago, you upgraded the computer to Windows 10.You need to downgrade the computer to Windows 8.1.Solution: From the Settings app, you use the Recovery options.Does this meet the goal? 

A. Yes
B. No 

Show Answer

Question # 25

Your company uses Windows Defender Advanced Threat Protection (Windows Defender ATP). Windows Defender ATP includes the machine groups shown in the following table.You onboard a computer to Windows Defender ATP as shown in the following exhibit.What is the effect of the Windows Defender ATP configuration? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. 

Show Answer

Question # 26

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have a computer that runs Windows 8.1.Two days ago, you upgraded the computer to Windows 10.You need to downgrade the computer to Windows 8.1.Solution: From View update history in the Settings app, you select Uninstall updates. Does this meet the goal? 

A. Yes
B. No 

Show Answer

Question # 27

You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune.You redirect Windows known folders to Microsoft OneDrive for Business.Which folder will be included in the redirection?

A. Saved Games
B. Desktop
C. Music
D. Downloads

Show Answer

Question # 28

You have a Microsoft 365 tenant that contains the devices shown in the following table.The devices are managed by using Microsoft Intune.You create a compliance policy named Policy1 and assign Policy1 to Group1. Policy1 is configured to mark a device as Compliant only if the device security settings match the settings specified in the policy.You discover that devices that are not members of Group1 are shown as Compliant.You need to ensure that only devices that are assigned a compliance policy can be shown as Compliant. All other devices must be shown as Not compliant.What should you do?

A. From Tenant administration, modify the Diagnostic settings.
B. From Device compliance, configure the Compliance policy settings.
C. From Endpoint security, configure the Conditional access
D. From Policy1, modify the actions for noncompliance. 

Show Answer

Question # 29

Your company uses Microsoft Intune to manage devices. You need to ensure that only Android devices that use Android work profiles can enroll in Intune.Which two configurations should you perform in the device enrollment restrictions? Each correct answerpresents part of the solution.NOTE: each correct selection is worth one point.

A. From Select platforms, set Android work profile to Allow.
B. From Configure platforms, set Android Personally Owned to Block.
C. From Configure platforms, set Android Personally Owned to Allow.
D. From Select platforms, set Android to Block. 

Show Answer

Question # 30

Your network contains an Active Directory domain named contoso.com that syncs to Azure Active Directory (Azure AD). The domain contains computers that run Windows 10. The computers are configured as shown in the following table.All the computers are enrolled in Microsoft Intune.You configure the following Maintenance Scheduler settings in the Default Domain Policy:Turn off auto-restart for updates during active hours: EnabledActive hours start: 08:00Active hours end: 22:00In Intune, you create a device configuration profile named Profile1 that has the following OMA-URI settings:./Device/Vendor/MSFT/Policy/Config/ControlPolicyConflict/MDMWinsOverGP setto value 1./Device/Vendor/MSFT/Policy/Config/Update/ActiveHoursStart set to value 9./Device/Vendor/MSFT/Policy/Config/Update/ActiveHoursEnd set to value 21You assign Profile to Group1.How are the active hours configured on Computer1 and Computer2? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

Show Answer

Question # 31

Your company plans to deploy Windows 10 to device that will be configured for Englis use and other devices that will be configured for Korean use.You need to create a single multivariate provisioning for the planned for the planned devices.You create the provisioning package.What should do you next to add the language settings to the package?

A. Create a file named Language.XML that contains a header for Korean.
B. Modify the .ppkg file.
C. Create a file named languages.xml that contains a header for English. 
D. Modify the Customizations xmlfile

Show Answer

Question # 32

Your company uses Microsoft Intune.More than 500 Android and iOS devices are enrolled in the Intune tenant.You plan to deploy new Intune policies. Different policies will apply depending on the version of Android or iOS installed on the device.You need to ensure that the policies can target the devices based on their version of Android or iOS.What should you configure first?

A. Corporate device identifiers in Intune
B. Device settings in Microsoft Azure Active Directory (Azure AD)
C. Device categories in Intune
D. Groups that have dynamic membership rules in Microsoft Azure Active Directory (Azure AD)

Show Answer

Question # 33

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.Your company has an Azure Active Directory (Azure AD) tenant named contoso.com and a Microsoft Intunesubscription.Contoso.com contains a user named user1@contoso.com.You have a computer named Computer1 that runs Windows 8.1.You need to perform an in-place upgrade of Computer1 to Windows 10.Solution: From Windows 8.1, you run setup.exe from the Windows 10 installation media.Does this meet the goal?

A. Yes
B. No 

Show Answer

Question # 34

You have an Azure Active Directory (Azure AD) tenant named adatum.com The tenant contains Windows 10 devices that are enrolled in Microsoft Intune.You create an Azure Log Analytics workspace and add the Device Health solution to the workspace.You need to create a custom device configuration profile that will enroll the Windows 10 devices in Device Health.Which OMA-URI should you add to the profile?

A. ./Vendor/MSFT/DMClient/Provider/MS DM Server/Push
B. ./Vendor/MSFT/DMClient/Provider/MS DM Server/Push/ChannelURI
C. ./Vendor/MSFT/DMClient/Provider/MS DM Server/CommercialID
D. ./Vendor/MSFT/DMClient/Provider/MS DM Server/ManagementServerAddressList 

Show Answer

Question # 35

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain. The domain contains member computers that run Windows 8.1 and are enrolled in Microsoft Intune.You need to identify which computers can be upgraded to Windows 10.Solution: You install the Microsoft Assessment and Planning Toolkit. From the Microsoft Assessment and Planning Toolkit, you collect inventory data and run the Windows 10 Readiness scenario.Does this meet the goal?

A. Yes
B. No

Show Answer

Question # 36

Your network contains an on-premises Active Directory forest named contoso.com. The forest contains a user named User1 and two computers named Computer1 and Computer2 that run Windows 10. User1 is configured as shown in the following exhibit.You rename file \\Server1\Profiles\User1.V6\NTUSER.DAT as NTUSER.MAN.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.

Show Answer

Question # 37

You have the device configuration profile shown in the following exhibit.Use the drop-down menus to select the answer choke that completes each statement based on the information presented in the graphic NOTE: Each correct selection is worth one point.

Show Answer

Question # 38

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company uses Windows Update for Business.The research department has several computers that have specialized hardware and software installed.You need to prevent the video drivers from being updated automatically by using Windows Update.Solution: From the Windows Update settings in a Group Policy object (GPO), you enableDo not include drivers with Windows Updates.Does this meet the goal?

A. Yes 
B. No

Show Answer

Question # 39

Your network contains an Active Directory domain. The domain contains computers that run Windows 8.1 and the users shown in the following table.You plan to use the Microsoft Assessment and Planning (MAP) Toolkit to collect inventory data. The MAP Toolkit has the following configurations:Inventory scenario: Windows computersDiscovery method: Use Active Directory Domain Services (AD DS)You need to identify which user to use for the MAP Toolkit inventory discovery. The solution must use principle of least privilege. What should you identify?

A. User3
B. User1
C. User4
D. User2 

Show Answer

Question # 40

You have an Azure Active Directory (Azure AD) tenant named contoso.com.You create a terms of use (ToU) named Terms1 in contoso.com.You are creating a conditional access policy named Policy1 to assign a cloud app named App1 to the users in contoso.com.You need to configure Policy1 to require the users to accept Terms1.What should you configure in Policy1?

A. Grant in the Access controls section
B. Conditions in the Assignments section
C. Cloud apps or actions in the Assignments section
D. Session in the Access controls section

Show Answer

Question # 41

You have a Microsoft 365 subscription.You need to deploy Microsoft Office 365 ProPlus applications to Windows 10 devices.What should you do first?

A. From Microsoft Azure Active Directory (Azure AD), create an app registration.
B. From the Device Management admin center, create an app.
C. From the Device Management admin center, create an app configuration policy.
D. From the Device Management admin center, enable Microsoft Store for Businesssynchronization

Show Answer

Question # 42

You have 200 computers that run Windows 10.You need to create a provisioning package to configure the following tasks:Remove the Microsoft News and the Xbox Microsoft Store apps.Add a VPN connection to the corporate network.Which two customizations should you configure? To answer, select the appropriatecustomizations in the answer area.NOTE: Each correct selection is worth one point. 

Show Answer

Question # 43

Note: This question is part of a series of questions that present the same scenario.Each question in the series contains a unique solution that might meet the statedgoals. Some question sets might have more than one correct solution, while othersmight not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As aresult, these questions will not appear in the review screen.You have a computer named Computer1 that runs Windows 10.You save a provisioning package named Package1 to a folder named C:\Folder1.You need to apply Package1 to Computer1.Solution: At a command prompt, you change the current folder to C:\Folder1, and then yourun the RegSvr32.exe Package1.ppkg command.Does this meet the goal?

A. Yes
B. No

Show Answer

Question # 44

You have an Azure Active Directory group named Group1. Group1 contains two Windows10 Enterprise devices named Device1 and Device2.You create a device configuration profile named Profile1. You assign Profile1 to Group1.You need to ensure that Profile1 applies to Device1 only. What should you modify inPolicy1?

A. Assignments
B. Applicability Rules
C. Settings
D. Scope (Tags)

Show Answer

Question # 45

You have a computer named Computer1 that runs Windows 10.Computer1 has the users shown in the following table.User1 signs in to Computer1, creates the following files, and then signs out:docx in C:\Users\User1\Desktopdocx in C:\Users\Public\Public Desktopdocx in C:\Users\Default\ DesktopUser3 signs in to Computer1 and creates a file named File4.docx inC:\Users\User3\Desktop.User2 has never signed in to Computer1.How many DOCX files will appear on the desktop of each user the nest time each usersigns in? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

Show Answer

Question # 46

You have 500 computers that run Windows 10. The computers are joined to MicrosoftAzure Active Directory (Azure AD) and enrolled in Microsoft Intune.You plan to distribute certificates to the computers by using Simple Certificate EnrollmentProtocol (SCEP).You have the servers shown in the following table.NDES issues certificates from the subordinate CA.You are configuring a device profile as shown in the exhibit. (Click the Exhibit tab.)You need to complete the SCEP profile

A. Server1
B. Server2
C. Server3
D. Server4

Show Answer

Question # 47

Your company has a main office and six branch offices. The branch offices connect to themain office by using a WAN link. All offices have a local Internet connection and a Hyper-Vhost cluster.The company has a Microsoft System Center Configuration Manager deployment. Themain office is the primary site. Each branch has a distribution point. All computers that runWindows 10 are managed by using both Configuration Manager and Microsoft Intune.You plan to deploy the latest build of Microsoft Office 365 ProPlus to all the computers.You need to minimize the amount of network traffic on the company’s Internet links for theplanned deployment.What should you include in the deployment plan? 

A. From Intune, configure app assignments for the Office 365 ProPlus suite.In each office, copy the Office 365 distribution files to a Microsoft Deployment Toolkit(MDT) deploymentshare.
B. From Intune, configure app assignments for the Office 365 ProPlus suite.In each office, copy the Office 365 distribution files to a Configuration Manager distributionpoint.
C. From Configuration Manager, create an application deployment.Copy the Office 365 distribution files to a Configuration Manager cloud distribution point.
D. From Configuration Manager, create an application deployment.In each office, copy the Office 365 distribution files to a Configuration Manager distributionpoint. 

Show Answer

Question # 48

You have a Microsoft 365 tenant that uses Microsoft Intune to manage the devices shown in the following table.You need to deploy a compliance solution that meets the following requirements:Marks the devices as Not Compliant if they do not meet compliance policiesRemotely locks noncompliant devicesWhat is the minimum number of compliance policies required, and which devices supportthe remote lock action? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

Show Answer

Question # 49

Note: This question is part of a series of questions that present the same scenario. Eachquestion inthe series contains a unique solution that might meet the stated goals. Some question setsmight havemore than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result,thesequestions will not appear in the review screen.Your company has an Azure Active Directory (Azure AD) tenant named contoso.com and aMicrosoft Intunesubscription.Contoso.com contains a user named user1@contoso.com.You have a computer named Computer1 that runs Windows 8.1.You need to perform an in-place upgrade of Computer1 to Windows 10.Solution: You assign a Windows 10 license to User1. You instruct User1 to sign in toComputer1.Does this meet the goal?

A. Yes
B. No

Show Answer

Question # 50

You have a Microsoft Intune subscription.You are creating a Windows Autopilot deployment profile named Profile1 as shown in the following exhibit.  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Show Answer

Question # 51

Your network contains an Active Directory domain that is synced to Microsoft Azure ActiveDirectory (Azure AD).You have a Microsoft 365 subscription.You create a conditional access policy for Microsoft Exchange Online.You need to configure the policy to prevent access to Exchange Online unless isconnecting from a device that is hybrid Azure AD-joined.Which settings should you configure?

A. Locations
B. Device platforms
C. Sign-in risk
D. Device state

Show Answer

Question # 52

You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. AllWindows 10 devices are enrolled in Microsoft Intune.You configure the following settings in Windows Information Protection (WIP):Protected apps: App1Exempt apps: App2Windows Information Protection mode: SilentApp1, App2, and App3 use the same file format.You create a file named File1 in App1.You need to identify which apps can open File1.What apps should you identify? To answer, select the appropriate options in the answerarea,NOTE: Each correct selection is worth one point .

Show Answer

Question # 53

You have a Microsoft 365 tenant that uses Microsoft Intune and contains the devices shown in the following table. In Endpoint security, you need to configure a disk encryption policy for each device.Which encryption type should you use for each device, and which role-based accesscontrol (RBAQ role in Intune should you use to manage the encryption keys? To answer,select the appropriate options m the answer area.NOTE: Each correct selection is worth one point.

Show Answer

Question # 54

You are replacing 100 company-owned Windows devices.You need to use the Microsoft Deployment Toolkit (MDT) to securely wipe anddecommission the devices. Thesolution must meet the following requirements:Back up the user state.Minimize administrative effort.Which task sequence template should you use?

A. Litetouch OEM Task Sequence
B. Sysprep and Capture
C. Standard Client Replace Task Sequence
D. Standard Client Task Sequence

Show Answer

Question # 55

You have a Microsoft Deployment Toolkit (MDT) deployment share that has a path ofD:\MDTShare.You need to add a feature pack to the boot image.Which three actions should you perform in sequence? To answer, move the appropriateactions from the list of actions to the answer area and arrange them in the correct order.

Show Answer

Question # 56

You use the Microsoft Deployment Toolkit (MDT) to deploy Windows 10.You create a new task sequence by using the Standard Client Task Sequence template todeploy Windows 10 Enterprise to new computers. The computers have a single hard disk.You need to modify the task sequence to create a system volume and a data volume.Which phase should you modify in the task sequence?

A. Preinstall
B. State Restore
C. Initialization
D. Postinstall

Show Answer

Question # 57

Note: This question is part of a series of questions that present the same scenario.Each question in the series contains a unique solution that might meet the statedgoals. Some question sets might have more than one correct solution, while othersmight not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As aresult, these questions will not appear in the review screen.You have a computer named Computer1 that runs Windows 10.You save a provisioning package named Package1 to a folder named C:\Folder1.You need to apply Package1 to Computer1.Solution: From the Settings app, you select Access work or school, and then you selectAdd or remove a provisioning package.Does this meet the goal?

A. Yes
 B. No

Show Answer

Question # 58

You use a Microsoft Intune subscription to manage iOS devices.You configure a device compliance policy that blocks jailbroken iOS devices.You need to enable Enhanced jailbreak detection.What should you configure?

A. the device compliance policy
B. the Compliance policy settings
C. a network location
D. a configuration profile 

Show Answer

Question # 59

You have computers that run Windows 10 as shown in the following table. Computer2 and Computer3 are enrolled in Microsoft Intune.In a Group Policy object (GPO) linked to the domain, you enable the ComputerConfiguration/Administrative Templates/Windows Components/Search/Allow Cortanasetting.In an Intune device configuration profile, you configure the following:Device/Vendor/MSFT/Policy/Config/ControlPolicyConflict/MDMWinsOverGP to avalue of 1Experience/AllowCortana to a value of 0 Each of the following statement, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Show Answer

Question # 60

You have 100 computers that run Windows 8.1.You need to identify which computers can be upgraded to Windows 10.What should you use?

A. Microsoft Deployment Toolkit (MDT)
B. Update Compliance Azure
C. Windows Assessment Toolkit
D. Microsoft Assessment and Planning (MAP) Toolkit. 

Show Answer

Question # 61

You need to assign the same deployment profile to all the computers that are configured byusing Windows Autopilot.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: each correct selection is worth one point.

A. Join the computers to Microsoft Azure Active Directory (Azure AD)
B. Assign a Windows AutoPilot deployment profile to a group
C. Join the computers to an on-premises Active Directory domain
D. Create a Microsoft Azure Active Directory (Azure AD) group that has dynamicmembership rules and uses the operatingSystem tag
E. Create a Group Policy object (GPO) that is linked to a domain
F. Create a Microsoft Azure Active Directory (Azure AD) group that has dynamicmembership rules and uses the ZTDID tag 

Show Answer

Question # 62

You have computers that run Windows 10 and are joined to Azure Active Directory (Azure AD). All users sign in to the computers by using their Azure AD account. Enterprise State Roaming is enabled. From the Settings app, a user named User1 adds a Microsoft account.Which account will be used for the Synchronizing Windows setting? 

A. the work account only
B. the Microsoft account only
C. both the Microsoft account and the work account 

Show Answer

Question # 63

Your company purchases new computers that run Windows 10. The computers havecameras that support Windows Hello for Business.You configure the Windows Hello for Business Group Policy settings as shown in thefollowing exhibit.What are two valid methods a user can use to sign in? Each correct answer presents partof the solution.NOTE: Each correct selection is worth one point.

A. Facial recognition
B. A smartwatch that is Bluetooth-enabled
C. A PIN
D. A USB key

Show Answer

Question # 64

Note: This question is part of a series of questions that present the same scenario.Each question in the series contains a unique solution that might meet the statedgoals. Some question sets might have more than one correct solution, while othersmight not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As aresult, thesequestions will not appear in the review screen.You need to ensure that feature and quality updates install automatically during amaintenance window.Solution: From the Maintenance Scheduler settings, you configure Automatic MaintenanceActivationBoundary.Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 65

Note: This question is part of a series of questions that present the same scenario.Each question in the series contains a unique solution that might meet the statedgoals. Some question sets might have more than one correct solution, while othersmight not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As aresult, thesequestions will not appear in the review screen.Your company uses Windows Update for Business.The research department has several computers that have specialized hardware andsoftware installed.You need to prevent the video drivers from being updated automatically by using WindowsUpdate.Solution: From the Device Installation and Restrictions settings in a Group Policy object(GPO), you enable Prevent installation of devices using drivers that match thesedevice setup classes, and then you enter the device GUID.Does this meet the goal?

A. Yes
B. No

Show Answer

Question # 66

You have the Microsoft Deployment Toolkit (MDT) installed in three sites as shown in the following table. You use Distributed File System (DFS) Replication to replicate images in a share namedProduction.You configure the following settings in the Bootstrap.ini file.[Settings]Priority=DefaultGateway, Default[DefaultGateway]10.1.1.1=NewYork10.5.5.1=London[NewYork]DeployRoot=\\MDT1\Production$[London]DeployRoot=\\MDT2\Production$KeyboardLocale=en-gb[Default]DeployRoot=\\MDT3\Production$KeyboardLocale=en-usYou plan to deploy Windows 10 to the computers shown in the following table.For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Show Answer

Question # 67

You create a Windows Autopilot deployment profile.You need to configure the profile settings to meet the following requirements:Automatically enroll new devices and provision system apps without requiring enduser authentication.Include the hardware serial number in the computer name.Which two settings should you configure? To answer, select the appropriate settings in theanswer area.NOTE: Each correct selection is worth one point.

Show Answer

Question # 68

You have a Microsoft Deployment Toolkit (MDT) deployment share named DS1.You import a Windows 10 image to DS1.You have an executable installer for an application named App1.You need to ensure that App1 will be installed for all the task sequences that deploy theimage.Which three actions should you perform in sequence? To answer, move the appropriateactions from the list of actions to the answer area and arrange them in the correct order.

Show Answer

Question # 69

You upgrade three computers from Windows 8.1 to Windows 10 as shown in the followingtable.The in-place upgrade settings used to perform the upgrade are shown in the following table.After the upgrade, you perform the following actions on each computer:Add a local user account named LocalAdmin1.Install Microsoft Office 2019.For each of the following statements, select Yes if the statement is true. Otherwise, selectNo.NOTE: Each correct selection is worth one point.

Show Answer

Question # 70

Your company plans to deploy tablets to 50 meeting rooms.The tablets run Windows 10 and are managed by using Microsoft Intune. The tablets havean applicationnamed App1.You need to configure the tablets so that any user can use App1 without having to sign in.Users must beprevented from using other applications on the tablets.Which device configuration profile type should you use?

A. Kiosk
B. Endpoint protection
C. Identity protection
D. Device restrictions 

Show Answer

Question # 71

You have a Microsoft 365 subscription.You plan to enroll devices in Microsoft Endpoint Manager that have the platforms andversions shown in the following table.You need to configure device enrollment to meet the following requirements:Ensure that only devices that have approved platforms and versions can enroll inEndpoint Manager.Ensure that devices are added to Microsoft Azure Active Directory (Azure AD)groups based on a selection made by users during the enrollment.Which device enrollment setting should you configure for each requirement? To answer,select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. 

Show Answer