MD-102 Free Practice Questions — Page 12

Question 116

You have a Microsoft 365 E5 subscription that contains the devices shown in the following table. All the devices are enrolled in Microsoft Intune and have Microsoft 365 Apps for enterprise installed. On which devices can you use the Cloud Policy service for Microsoft 365 to manage Microsoft 365 Apps for enterprise?

Question 117

HOTSPOT - You have a Microsoft 365 E5 subscription that includes Microsoft Intune. You need to configure a compliance policy for the iOS/iPadOS platform. The solution must meet the following requirements: • Require jailbroken devices to be marked as noncompliant. • Mark devices without a password lock as noncompliant. Which compliance policy settings should you configure for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 118

HOTSPOT - You have a Microsoft 365 E5 subscription. You need to route Microsoft Intune logs to an Azure resource that supports the use of visuals, monitoring, and alerting. Which settings should you configure in Intune, and which resource should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 119

You have a Microsoft 365 E5 subscription. You need to configure the automated investigation and response (AIR) remediation level for a device named Device1 to require approval for all folders. What should you create?

Question 120

HOTSPOT - You have a Microsoft 365 E5 subscription and use Microsoft Intune. You purchase 50 Windows devices. You configure automatic enrollment to Intune for Microsoft Entra joined devices. You need to use a provisioning package to join the devices to Microsoft Entra. What should you use to create the provisioning package, and what is the maximum amount of time you can use the package for bulk enrollment? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 121

HOTSPOT - Your network contains an on-premises Active Directory Domain Services (AD DS) domain. You have a Microsoft 365 E5 subscription that includes Microsoft Intune and syncs with the AD DS domain. Windows Local Administrator Password Solution (Windows LAPS) is enabled in Microsoft Entra ID. The subscription has the custom roles shown in the following table. Microsoft Entra contains the users shown in the following table. You have the devices shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 122

HOTSPOT - You have a Microsoft 365 tenant that uses Microsoft Intune to manage the devices shown in the following table. You need to deploy a compliance solution that meets the following requirements: • Marks the devices as Not Compliant if they do not meet compliance policies • Remotely locks noncompliant devices What is the minimum number of compliance policies required, and which devices support the remote lock action? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 123

HOTSPOT - You have a Microsoft Entra tenant that contains the devices shown in the following table. The tenant contains the groups shown in the following table. You create a Windows Autopilot deployment profile as shown in the Deployment Profile exhibit. (Click the Deployment Profile tab.) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 124

You have a Microsoft 365 E5 subscription. All devices are enrolled in Microsoft Intune. You create a Conditional Access policy named Policy1 that requires multifactor authentication (MFA). You need to ensure that Policy1 only applies to devices marked as noncompliant. Which settings of Policy1 should you configure?

Question 125

You have a Microsoft 365 E5 subscription. All devices are enrolled in Microsoft Intune. You need to ensure that devices that have NOT checked in for 30 days are deleted from Intune. What should you configure from the Microsoft Intune admin center?