Valid MD-102 Exam Dumps are Your best Choice to Pass

1. You have a Microsoft 365 tenant that contains the objects shown in the following table.





You are creating a compliance policy named Compliance1.

Which objects can you specify in Compliance1 as additional recipients of noncompliance notifications?

2. HOTSPOT

You have a Microsoft Intune subscription that has the following device compliance policy settings:

Mark devices with no compliance policy assigned as: Compliant

Compliance status validity period (days): 14





On January1, you enroll Windows 10 devices in Intune as shown in the following table.





On January 4, you create the following two device compliance policies:

Name: Policy1





Platform: Windows 10 and later





Require BitLocker: Require





Mark device noncompliant: 5 days after noncompliance





Scope (Tags): Tag1





Name: Policy2





Platform: Windows 10 and later





Firewall: Require





Mark device noncompliant: Immediately





Scope (Tags): Tag2





On January 5, you assign Policy1 and Policy2 to Group1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Hot Area:

3. You have a Microsoft 365 tenant that uses Microsoft Intune.

You use the Company Portal app to access and install published apps to enrolled devices. From the Microsoft Intune admin center, you add a Microsoft Store app.

Which two App information types are visible in the Company Portal? NOTE: Each correct selection is worth one point.

E. Privacy URL

F. Information URL

G. Developer

H. Owner

4. You have a Microsoft 365 subscription that contains 1,000 Windows 11 devices enrolled in Microsoft Intune.

You plan to use Intune to deploy an application named App1 that contains multiple installation files.

What should you do first?

D. Prepare the contents of App1 by using the Microsoft Win32 Content Prep Tool.

E. Create an Android application package (APK).

F. Upload the contents of App1 to Intune.

G. Install the Microsoft Deployment Toolkit (MDT).

5. HOTSPOT

Your company has computers that run Windows 10 and are Microsoft Entra joined.

The company purchases an Azure subscription.

You need to collect Windows events from the Windows 10 computers in Azure. The solution must enable you to create alerts based on the collected events.

What should you create in Azure and what should you configure on the computers? To answer, select the appropriate options in the answer area.

Hot Area:

6. DRAG DROP

You have 100 computers that run Windows 10.

You plan to deploy Windows 11 to the computers by performing a wipe and load installation.

You need to recommend a method to retain the user settings and the user data.

Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

7. DRAG DROP

Your network contains an Active Directory domain.

You install the Microsoft Deployment Toolkit (MDT) on a server.

You have a custom image of Windows 11.

You need to deploy the image to 100 devices by using MDT.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

8. DRAG DROP

You have a Microsoft 365 E5 subscription that is linked to a Microsoft Entra tenant named contoso.com.

The subscription contains a user named User1 and a new Windows 11 device named Device1.

User1 must enroll Device1 in Microsoft Intune automatically.

You need to ensure that all other users cannot use automatic enrollment.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

9. Your company implements Microsoft Entra ID, Microsoft 365, Microsoft Intune.

The company's security policy states the following:

Personal devices do not need to be enrolled in Intune.





Users must authenticate by using a PIN before they can access corporate email data.





Users can use their personal iOS and Android devices to access corporate cloud services.





Users must be prevented from copying corporate email data to a cloud storage service other than Microsoft OneDrive for Business.





You need to configure a solution to enforce the security policy.

What should you create?

E. a device configuration profile from the Microsoft Intune admin center

F. a data loss prevention (DLP) policy from the Microsoft Purview compliance portal

G. an insider risk management policy from the Microsoft Purview compliance portal

H. an app protection policy from the Microsoft Intune admin center

10. HOTSPOT

You have a Microsoft 365 subscription that includes Microsoft Intune.

From the Microsoft Intune admin center, you add the apps shown in the following table.





You need to configure the apps to meet the following requirements:

App1 must automatically install for all users in the marketing department on any Windows 11 device enrolled in Intune. If a user receives a new device, App1 must install automatically.





App2 must be available for download for any user in the HR department from a personal Android device that is not enrolled in Intune.





Which assignment should you configure for each app? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

11. You are implementing Microsoft Intune Suite.

You enroll devices in Intune as shown in the following table.





The performance of which devices can be analyzed by using Endpoint analytics?

12. HOTSPOT

You have the Microsoft Deployment Toolkit (MDT) installed in three sites as shown in the following table.





You use Distributed File System (DFS) Replication to replicate images in a share named Production.

You configure the following settings in the Bootstrap.ini file.





You plan to deploy Windows 10 to the computers shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Hot Area:

13. You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

You use Intune to manage devices.

You need to review details about device wipes initiated through Intune.

Which report should you review?

E. Noncompliant devices

F. Assignment status

G. Windows health attestation report

H. Device actions

14. HOTSPOT

You have a Microsoft 365 E5 subscription.

You need to review and implement Microsoft 365 Defender device onboarding. The solution must meet the following requirements:

View onboarded devices that have the Chromium-based version for Microsoft Edge installed.

Download an onboarding package for a Windows 11 device.

Minimize administrative effort.

Which two settings should you use in the Microsoft 365 Defender portal? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

15. HOTSPOT

You have 200 computers that run Windows 10. The computers are joined to Microsoft Entra and enrolled in Microsoft Intune.

You need to configure an Intune device configuration profile to meet the following requirements:

Prevent Microsoft Office applications from launching child processes.





Block users from transferring files over FTP.





Which two settings should you configure in the Endpoint protection configuration profile? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

16. You have a Microsoft 365 subscription that contains 500 Android Enterprise devices.

All the devices are enrolled in Microsoft Intune.

You need to deliver bookmarks to the Chrome browser on the devices.

What should you create?

C. a compliance policy

D. a configuration profile

E. an app protection policy

F. an app configuration policy

17. You need to implement mobile device management (MDM) for personal devices that run Windows 11. The solution must meet the following requirements:

Ensure that you can manage the personal devices by using Microsoft Intune.





Ensure that users can access company data seamlessly from their personal devices.





Ensure that users can only sign in to their personal devices by using their personal account.





What should you use to add the devices to Microsoft Entra?

18. You have a Microsoft 365 tenant that contains the devices shown in the following table.





The devices are managed by using Microsoft Intune.

You create a compliance policy named Policy1 and assign Policy1 to Group1. Policy1 is configured to mark a device as Compliant only if the device security settings match the settings specified in the policy.

You discover that devices that are not members of Group1 are shown as Compliant.

You need to ensure that only devices that are assigned a compliance policy can be shown as Compliant. All other devices must be shown as Not compliant.

What should you do from the Microsoft Intune admin center?

19. You have a Hyper-V host that contains the virtual machines shown in the following table.





On which virtual machines can you install Windows 11?

20. DRAG DROP

You have a Microsoft 365 E5 subscription and a computer that runs Windows 11.

You need to create a customized installation of Microsoft 365 Apps for enterprise.

Which four actions should you perform in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

Select and Place:

21. HOTSPOT

You have a Microsoft 365 ES subscription and use Microsoft Intune Suite.

You manage the following types of devices:

Windows 11





Android





iOS





You need to implement Microsoft Tunnel for Mobile Application Management (MAM) to provide the devices with access to on-premises company apps.

What should you deploy first, and which device types can use Tunnel for MAM? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

22. HOTSPOT

You have a Microsoft 365 subscription.

Users have iOS devices that are not enrolled in Microsoft Intune.

You create an app protection policy for the Microsoft Outlook app as shown in the exhibit. (Click the Exhibit tab.)





You need to configure the policy to meet the following requirements:

Prevent the users from using the Outlook app if the operating system version is less than 12.0.0.

Require the users to use an alphanumeric passcode to access the Outlook app.

What should you configure in an app protection policy for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

23. HOTSPOT

You have a hybrid Azure AD tenant.

You configure a Windows Autopilot deployment profile as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Hot Area:

24. You have a Microsoft Intune subscription associated to a Microsoft Entra tenant named contoso.com.

Users use one of the following three suffixes when they sign in to the tenant: us.contoso.com, eu.contoso.com, or contoso.com.

You need to ensure that the users are NOT required to specify the mobile device management (MDM) enrollment URL as part of the enrollment process. The solution must minimize the number of changes.

Which DNS records do you need?

25. HOTSPOT

You have computers that run Windows 10 and are configured by using Windows Autopilot.

A user performs the following tasks on a computer named Computer1:

Creates a VPN connection to the corporate network





Installs a Microsoft Store app named App1





Connections to a Wi-Fi network





You perform a Windows Autopilot Reset on Computer1.

What will be the state of the computer when the user signs in? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

26. DRAG DROP

Your company has a Microsoft 365 E5 tenant.

All the devices of the company are enrolled in Microsoft Intune.

You need to create advanced reports by using custom queries and visualizations from raw Microsoft Intune data.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

27. You plan to deploy Windows 11 Pro to 200 new computers by using the Microsoft Deployment Toolkit (MDT) and Windows Deployment Services (WDS).

The company has a Volume Licensing Agreement and uses a product key to activate Windows 11.

You need to ensure that the new computers will be configured to have the correct product key during the installation.

What should you configure?

28. HOTSPOT

You have a Microsoft 365 E5 subscription that uses Microsoft Intune.

You have the Windows 11 devices shown in the following table.





You deploy the device compliance policy shown in the exhibit. (Click the Exhibit tab.)





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Hot Area:

29. You have a Microsot Entra tenant named contoso.com.

You have a workgroup computer named Computer1 that runs Windows 11.

You need to add Computer1 to contoso.com.

What should you use?

30. You have a Microsoft 365 E5 subscription that contains a group named Group1.

You need to ensure that only the members of Group1 can join devices to the Microsoft Entra tenant.

What should you configure in the Microsoft Entra admin center?

- Device settings

- Mobility

- Enterprise State Roaming

- User settings

31. HOTSPOT

You have devices that are not rooted enrolled in Microsoft Intune as shown in the following table.





The devices are members of a group named Group1.

In Intune, you create a device compliance location that has the following configurations:

Name: Network1





IPv4 range: 192.168.0.0/16





In Intune, you create a device compliance policy for the Android platform. The policy has the following configurations:

Name: Policy1





Device health: Rooted devices: Block





Locations: Location: Network1





Mark device noncompliant: Immediately





Assigned: Group1





The Intune device compliance policy has the following configurations:

Mark devices with no compliance policy assigned as: Compliant





Enhanced jailbreak detection: Enabled





Compliance status validity period (days): 20





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Hot Area:

32. You have a hybrid deployment of Microsoft Entra that contains 50 Windows 10 devices. All the devices are enrolled in Microsoft Intune.

You discover that Group Policy settings override the settings configured in Microsoft Intune policies.

You need to ensure that the settings configured in Microsoft Intune override the Group Policy settings.

What should you do?

C. From Group Policy Management Editor, configure the Computer Configuration settings in the Default Domain Policy.

D. From the Microsoft Intune admin center, create a custom device profile.

E. From the Microsoft Intune admin center, create an Administrative Templates device profile.

F. From Group Policy Management Editor, configure the User Configuration settings in the Default Domain Policy.

33. You have a Microsoft 365 subscription that includes Microsoft Intune.

You have an update ring named UpdateRing1 that contains the following settings:

Automatic update behavior: Auto install and restart at a scheduled time





Automatic behavior frequency: First week of the month





Scheduled install day: Tuesday





Scheduled install time: 3 AM





From the Microsoft Intune admin center, you select Uninstall for the feature updates of UpdateRing1. When will devices start to remove the feature updates?

* when a user approves the uninstall

* as soon as the policy is received

* next Tuesday

* the first Tuesday of the next month

34. HOTSPOT

You have two Windows 10 devices enrolled in Microsoft Intune as shown in the following table.





The Compliance policy settings are configured as shown in the following exhibit.





On August 1, you create a compliance policy as shown in the following exhibit.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Hot Area:

35. HOTSPOT

You have a Microsoft 365 subscription.

All computers are enrolled in Microsoft Intune.

You have business requirements for securing your Windows 11 environment as shown in the following table.





What should you implement to meet each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

36. You have a Microsoft 365 E5 subscription that contains devices enrolled in Microsoft Intune.

You plan to use Device query to provide on-demand information about the state of the devices. The solution must minimize costs.

What should you do first?

G. Use the Collect diagnostics remote action.

H. Purchase the Intune Advanced Analytics add-on.

I. Purchase the Intune Suite add-on.

J. Onboard the devices to Endpoint analytics.

37. You have a Microsoft 365 tenant that contains the objects shown in the following table.





In the Microsoft Intune admin center, you are creating a Microsoft 365 Apps app named App1. To which objects can you assign App1?

F. Group3 and Group4 only

G. Admin1, Group3, and Group4 only

H. Group1, Group3, and Group4 only

I. Group1, Group2, Group3, and Group4 only

J. Admin1, Group1, Group2, Group3, and Group4

38. You implement Boundary1 based on the planned changes.

Which devices have a network boundary of 192.168.1.0/24 applied?

* Device2 only

* Device3 only

* Device1, Device2, and Device5 only

* Device1, Device2, Device3, and Device4 only

39. HOTSPOT

You have a Microsoft 365 tenant that uses Microsoft Intune to manage personal and corporate devices. The tenant contains Windows 10 devices as shown in the following exhibit.





How will Intune classify each device after the devices are enrolled in Intune automatically? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

40. You have a Microsoft 365 subscription.

You use app protection policies to protect corporate data on Android devices.

You need to ensure that any user connecting from an Android device can only access the corporate data if they connect from an app that supports mobile application management (MAM).

What should you configure?

F. an app configuration policy

G. a Conditional Access policy

H. a device configuration profile

I. a device compliance policy

41. You have a Microsoft 365 E5 subscription that contains 150 hybrid Microsoft Entra joined Windows devices.

All the devices are enrolled in Microsoft Intune.

You need to configure Delivery Optimization on the devices to meet the following requirements:

• Allow downloads from the internet and from other computers on the local network.

• Limit the percentage of used bandwidth to 50.

What should you use?

42. You have a Microsoft 365 subscription that includes Microsoft Intune. The subscription contains corporate-owned, fully managed Android Enterprise devices.

You plan to deploy a configuration profile that will have a device restrictions profile type named Profile1.

Profile1 will assign maintenance windows for system updates.

What should you configure from the Configuration settings for Profile1?

E. Device experience

F. General

G. Connectivity

H. Power Settings

43. You have a Microsoft 365 E5 subscription.

You use Microsoft Intune to manage all devices.

You need to prepare a Win32 app named App1.exe for deployment.

What should you do first?

44. You have a Microsoft 365 subscription.

You have devices enrolled in Microsoft Intune as shown in the following table.





To which devices can you deploy apps by using Intune?

E. Device1 only

F. Device1 and Device2 only

G. Device1 and Device3 only

H. Device1, Device2, and Device3 only

I. Device1, Device2, Device3, and Device4

45. You have a Microsoft Entra tenant that contains the devices shown in the following table.





On which devices can you implement Endpoint Privilege Management (EPM)?

C. Device1 only

D. Device1 and Device2 only

E. Device1 and Device3 only

F. Device1, Device3, and Device4 only

G. Device1, Device2, Device3, and Device4

46. HOTSPOT

You have an Azure AD tenant named contoso.com that contains the devices shown in the following table.





All devices contain an app named App1 and are enrolled in Microsoft Intune.

You need to prevent users from copying data from App1 and pasting the data into other apps.

Which type of policy and how many policies should you create in Intune? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

47. Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 11.

You need to enable the Windows Remote Management (WinRM) service on Computer1 and perform the following configurations:

For the WinRM service, set Startup type to Automatic.





Create a listener that accepts requests from any IP address.





Enable a firewall exception for WS-Management communications.





Which PowerShell cmdlet should you use?

48. HOTSPOT

You have a Microsoft 365 subscription.

You use Microsoft Intune Suite to manage devices.

You have the iOS app protection policy shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Hot Area:

49. HOTSPOT

You have a Microsoft Entra tenant.

You are creating a dynamic device group named Group1.

Group1 will include only Windows devices that are Microsoft Entra registered.

How should you configure the dynamic membership rule for Group1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

50. HOTSPOT

You have a Microsoft Entra tenant named contoso.com that contains the users shown in the following table.





You have a computer named Computer1 that runs Windows 10. Computer1 is in a workgroup and has the local users shown in the following table.





UserA joins Computer1 to Microsoft Entra ID by using [email protected].

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Hot Area:

51. DRAG DROP

You have a Microsoft 365 subscription that contains the devices shown in the following table.





You need to ensure that only devices running trusted firmware or operating system builds can access network resources.

Which compliance policy setting should you configure for each device? To answer, drag the appropriate settings to the correct devices. Each setting may be used once, more than once, or not at all. You may

need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Select and Place:

52. HOTSPOT

You have the devices shown in the following table.





You need to migrate app data from Device1 to Device2. The data must be encrypted and stored on Server1 during the migration.

Which command should you run on each device? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

53. You have computers that run Windows 10 and are managed by using Microsoft Intune.

Users store their files in a folder named D:Folder1.

You need to ensure that only a trusted list of applications is granted write access to D:Folder1.

What should you configure in the device configuration profile?

F. Microsoft Defender Exploit Guard

G. Microsoft Defender Application Guard

H. Microsoft Defender SmartScreen

D. Microsoft Defender Application Control

54. You use Microsoft Defender for Endpoint to protect computers that run Windows 10.

You need to assess the differences between the configuration of Microsoft Defender for Endpoint and the Microsoft-recommended configuration baseline.

Which tool should you use?

4) Microsoft Defender for Endpoint Power BI app

5) Microsoft Secure Score

6) Endpoint Analytics

7) Microsoft 365 Defender portal

55. HOTSPOT

You have a Microsoft 365 tenant that uses Microsoft Intune to manage the devices shown in the following table.





You need to deploy a compliance solution that meets the following requirements:

Marks the devices as Not Compliant if they do not meet compliance policies Remotely locks noncompliant devices







What is the minimum number of compliance policies required, and which devices support the remote lock action? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

56. You have a Microsoft 365 E5 subscription. The subscription contains 25 computers that run Windows 11 and are enrolled in Microsoft Intune.

You need to onboard the devices to Microsoft Defender for Endpoint.

What should you create in the Microsoft Intune admin center?

57. HOTSPOT

You have a server named Server1 and computers that run Windows 10. Server1 has the Microsoft Deployment Toolkit (MDT) installed.

You plan to upgrade the Windows 10 computers to Windows 11 by using the MDT deployment wizard.

You need create a deployment share on Server1.

What should you do on Server1, and what are the minimum components you should add to the MDT deployment share? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

58. HOTSPOT

You have a Microsoft Entra tenant that contains the users shown in the following table.





You have devices enrolled in Microsoft Intune as shown in the following table.





From Intune, you create and send a custom notification named Notification1 to Group1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Hot Area:

59. Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains 100 client computers that run Windows 10.

Currently, your company does NOT have a deployment infrastructure.

The company purchases Windows 11 licenses through a volume licensing agreement.

You need to recommend how to upgrade the computers to Windows 11. The solution must minimize licensing costs.

What should you include in the recommendation?

60. You have an on-premises server named Server1 that hosts a Microsoft Deployment Toolkit (MDT) deployment share named MDT1.

You need to ensure that MDT1 supports multicast deployments.

What should you install on Server1?

61. HOTSPOT

To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

62. You have a Microsoft Intune subscription.

You have devices enrolled in Intune as shown in the following table.





An app named App1 is installed on each device.

What is the minimum number of app configuration policies required to manage App1?

E. 1

F. 2

G. 3

H. 4

I. 5

63. HOTSPOT

You have devices enrolled in Microsoft Intune as shown in the following table.





Intune includes the device compliance policies shown in the following table.





The device compliance policies has the assignments shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Hot Area:

64. Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.

After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.

You have a Microsoft Entra tenant named contoso.com.

You purchase an Android device named Device1.

You need to register Device1 in contoso.com.

Solution: You use the Microsoft Intune Company Portal app.

Does this meet the goal?

E. Yes

F. No

65. HOTSPOT

You have a Microsoft 365 subscription.

You plan to enroll devices in Microsoft Intune that have the platforms and versions shown in the following table.





You need to configure device enrollment to meet the following requirements:

Ensure that only devices that have approved platforms and versions can enroll in Microsoft Intune. Ensure that devices are added to Microsoft Entra groups based on a selection made by users during the enrollment.







Which device enrollment setting should you configure for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

66. You have a Microsoft 365 subscription. All devices run Windows 10.

You need to prevent users from enrolling the devices in the Windows Insider Program.

What two configurations should you perform from the Microsoft Intune admin center? Each correct answer is a complete solution. NOTE: Each correct selection is worth one point.

E. a device restrictions device configuration profile

F. an app configuration policy

G. a Windows 10 and later security baseline

H. a custom device configuration profile

I. a Windows 10 and later update ring

67. You need to ensure that computer objects can be created as part of the Windows Autopilot deployment.

The solution must meet the technical requirements.

To what should you grant the right to create the computer objects?

68. Apps, and then Monitor

69. DRAG DROP

You have 500 Windows 10 devices enrolled in Microsoft Intune.

You plan to use Exploit protection in Microsoft Intune to enable the following system settings on the devices:

Data Execution Prevention (DEP)

Force randomization for images (Mandatory ASLR)

You need to configure a Windows 10 device that will be used to create a template file.

Which protection areas on the device should you configure in the Windows Security app before you create the template file? To answer, drag the appropriate protection areas to the correct settings. Each protection area may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Select and Place:

70. You have a Microsoft Entra tenant named contoso.com.

You plan to purchase 25 computers that run Windows 11. You plan to deliver the computers directly to users.

You need to ensure that during the out-of-box experience (OBE), users are prompted to sign in, and then the computers are configured to use Microsoft Intune.

Which two components should you configure? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

71. You have a Microsoft 365 subscription that includes Microsoft Intune.

You need to deploy a custom app to Android devices. The app uses the APK file format.

Which type of app should you select for the deployment?

72. You have a Microsoft 365 subscription that contains 1,000 iOS devices and includes Microsoft Intune.

You need to prevent the printing of corporate data from managed apps on the devices.

What should you configure?

E. an app configuration policy

F. a security baseline

G. an app protection policy

H. an iOS app provisioning profile

73. You have a Microsoft 365 E5 subscription.

You need to create a dynamic device group that will contain any device that has the word Marketing in its name.

Which device membership rule should you use?

E. (device.displayName -in "Marketing")

F. (device.displayName -in "*Marketing*")

G. (device.displayName -contains "Marketing")

H. (device.displayName -contains "*Marketing*")

74. You have the devices shown in the following table.





You plan to implement Microsoft Defender for Endpoint.

You need to identify which devices can be onboarded to Microsoft Defender for Endpoint.

What should you identify?

D: Device1 only

E: Device2 only

F: Device1, Device2 only

G: Device1, Device2, and Device3 only

H: Device1, Device2, Device3, and Device4

75. DRAG DROP

You have a Microsoft 365 subscription that contains devices enrolled in Microsoft Intune.

You need to create Endpoint security policies to enforce the following requirements:

Computers that run macOS must have FileVault enabled.

Computers that run Windows 10 must have Microsoft Defender Credential Guard enabled.





Computers that run Windows 10 must have Microsoft Defender Application Control enabled.





Which Endpoint security feature should you use for each requirement? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Select and Place:

76. You have a Microsoft Entra group named Group1. Group1 contains two Windows 10 Enterprise devices named Device1 and Device2.

You create a device configuration profile named Profile1. You assign Profile1 to Group1. You need to ensure that Profile1 applies to Device1 only.

What should you modify in Profile1?

E. Assignments

F. Settings

E. Scope (Tags)

F. Applicability Rules

77. You have a Microsoft Deployment Toolkit (MDT) deployment share.

You plan to deploy Windows 11 by using the Standard Client Task Sequence template.

You need to modify the task sequence to perform the following actions:

Format disks to support Unified Extensible Firmware Interface (UEFI).





Create a recovery partition.





Which phase of the task sequence should you modify?

78. Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10.

You have the groups shown in the following table.





Which groups can you add to Group4?

79. You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

You use Microsoft Intune to manage devices.

Auto-enrollment in Intune is configured.

You have 100 Windows 11 devices in a workgroup.

You need to connect the devices to the corporate wireless network and enroll 100 new Windows 11 devices in Intune.

What should you use?

80. 1, 2, 3, and 4

81. You are replacing 100 company-owned Windows devices.

You need to use the Microsoft Deployment Toolkit (MDT) to securely wipe and decommission the devices.

The solution must meet the following requirements:

Back up the user state.





Minimize administrative effort.





Which task sequence template should you use?

82. HOTSPOT

Your network contains an Active Directory domain named adatum.com, a workgroup, and computers that run Windows 10. The computers are configured as shown in the following table.





The local Administrator accounts on Computer1, Computer2, and Computer3 have the same user name and password.

On Computer1, Windows Defender Firewall is configured as shown in the following exhibit.





The services on Computer1 have the following states.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Hot Area:

83. You have a Microsoft 365 subscription that contains 100 devices enrolled in Microsoft Intune.

You need to review the startup processes and how often each device restarts.

What should you use?

E: Endpoint analytics

F: Device Management

G: Azure Monitor

H: Intune Data Warehouse

84. DRAG DROP

You have a Microsoft 365 subscription. The subscription contains computers that run Windows 11 and are enrolled in Microsoft Intune.

You need to create a compliance policy that meets the following requirements:

Requires BitLocker Drive Encryption (BitLocker) on each device Requires a minimum operating system version







Which setting of the compliance policy should you configure for each requirement? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Select and Place:

85. You have a Microsoft 365 subscription that contains Windows 11 devices enrolled in Microsoft Intune.

You need to use Device query to identify whether a critical security patch was installed on a device.

Which table should you target?

E. WindowsQfe

F. WindowsRegistry

G. FileInfo

H. OsVersion

I. SystemInfo

86. HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Hot Area:

87. HOTSPOT

You have 100 computers that run Windows 10. You have no servers. All the computers are joined to a Microsoft Entra tenant.

The computers have different update settings, and some computers are configured for manual updates.

You need to configure Windows Update. The solution must meet the following requirements:

The configuration must be managed from a central location.





Internet traffic must be minimized.





Costs must be minimized.





How should you configure Windows Update? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

88. You have a Microsoft 365 subscription. The subscription contains 500 computers that run Windows 11 and are enrolled in Microsoft Intune.

You need to manage the deployment of monthly security updates. The solution must meet the following requirements:

Updates must be deployed to a group of test computers for quality assurance.





Updates must be deployed automatically 15 days after the quality assurance testing.





What should you create in the Microsoft Intune admin center?

E. a device configuration profile

F. a feature update policy

G. a security baseline

H. an update ring

89. You use a Microsoft Intune subscription to manage iOS devices.

You configure a device compliance policy that blocks jailbroken iOS devices.

You need to enable Enhanced jailbreak detection.

What should you configure?

90. Your network contains an Active Directory domain named contoso.com. The domain contains two computers named Computer1 and Computer2 that run Windows 10.

On Computer1, you need to run the Invoke-Command cmdlet to execute several PowerShell commands on Computer2.

What should you do first?

91. From the local Group Policy, enable the Turn on Script Execution setting.

92. You have a Microsoft 365 subscription that includes Microsoft Intune.

You plan to use Windows Autopilot to deploy Windows 11 devices.

You need to meet the following requirements during Autopilot provisioning:

Display the app and profile configuration progress.





Block users from using the devices until all apps and profiles are installed





What should you configure?

- an app configuration policy

- an app protection policy

- an enrollment device platform restriction

- an enrollment status page

93. You have a Microsoft Intune subscription.

You have devices enrolled in Intune as shown in the following table.





An app named App1 is installed on each device.

What is the minimum number of app configuration policies required to manage App1?

94. You have a Microsoft 365 subscription that contains 1,000 Android devices enrolled in Microsoft Intune.

You create an app configuration policy that contains the following settings:

Device enrollment type: Managed devices





Profile Type: All Profile Types





Platform: Android Enterprise





Which two types of apps can be associated with the policy? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

F. Android Enterprise system app

G. Web link

F. Android store app

G. Managed Google Play store app

H. Built-in Android app

95. HOTSPOT

You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

You use Intune to manage devices.

You need to assess device performance during startup and identify any device models that take longer than average to start.

What should you use to assess the device performance, and which portal should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

96. HOTSPOT

You have a Microsoft 365 subscription that uses Microsoft Intune.

You plan to manage Windows updates by using Intune.

You create an update ring for Windows 10 and later and configure the User experience settings for the ring as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Hot Area: