MD-102 Free Practice Questions — Page 3

Question 21

You have a Microsoft 365 E5 subscription. You purchase the devices shown in the following table. Which devices can be enrolled in Microsoft Intune by using automatic enrollment?

Question 23

HOTSPOT - You have a Microsoft 365 subscription that contains the users shown in the following table. You have the devices shown in the following table. The Windows Enrollment settings have the following configurations: • MDM user scope: Group1 • Windows Information Protection (WIP) user scope: Group2 You configure Microsoft Intune enrollment restrictions as shown in the exhibit. (Click the Exhibit tab.) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 24

You have a Microsoft 365 subscription and use the Microsoft Intune Suite. You have the devices shown in the following table. All the devices are enrolled in Intune. Which devices can you query by using Device query?

Question 25

You have a Microsoft 365 subscription and use Microsoft Intune. You need to implement Microsoft Tunnel for Mobile Application Management (MAM) for personal Android devices. You perform the following actions: • Configure Microsoft Tunnel for managed devices. • Validate that user devices meet the prerequisites for Tunnel for MAM. • Create app configuration policies for Microsoft Defender and Microsoft Edge. What should you configure next?

Question 26

HOTSPOT - You have a Microsoft 365 subscription that includes Microsoft Intune. Users have iOS devices that use Microsoft Outlook. You need to configure Outlook. The solution must meet the following requirements: • Restrict copy and paste actions from Outlook other apps. • Enable S/MIME for Outlook. Which type of policy should you configure for each requirement? To answer, select the appropriate options in the answer area NOTE: Each correct selection is worth one point.

Question 27

HOTSPOT - You have a hybrid environment that contains a Microsoft Entra tenant and an on-premises Active Directory Domain Services (AD DS) domain. You purchase the devices shown in the following table. Which Microsoft Entra join type can each device use? To answer, select the appropriate options in the answer area NOTE: Each correct selection is worth one point.

Question 29

HOTSPOT - You have a Microsoft 365 E5 subscription that contains three Windows devices named Device1, Device2, and Device3. The devices are managed by using Microsoft Intune. Each device contains a file named Script1.ps1. Users do NOT have local administrator permissions for the devices. The subscription contains the groups shown in the following table. You create two Endpoint Privilege Management (EPM) elevation settings policies that have the following settings: • Name: Policy1 • Endpoint Privilege Management: Enabled o Default elevation response: Deny all requests o Allow Elevation Detection: No o Send elevation data for reporting: No • Assignments: o Included groups: Group1 • Name: Policy2 • Endpoint Privilege Management: Require support approval o Allow Elevation Detection: No o Send elevation data for reporting: No • Assignments: o Included groups: Group3 You create an EPM elevation rules policy named RulesPolicy1 that has the following settings: • Rule name: Rule1 o Elevation type: Automatic o Child process behavior: Deny all o File name: Script1.ps1 o File hash:

Question 30

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. You have a Microsoft 365 E5 subscription. The subscription contains devices that are Microsoft Entra joined and enrolled in Microsoft Intune. You create a user named User1. You need to ensure that User1 can rotate BitLocker recovery keys by using Intune. Solution: From the Microsoft Entra admin center, you assign the Cloud Device Administrator role to User1. Does this meet the goal?

Question 31

SIMULATION - Username and password - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and select the username below. To enter your password, place your cursor in the Enter password box and select the password below. Microsoft 365 Username: Microsoft 365 Password: i7A4$3o^HGD3L~=c[9xuOhM%^4:s11Ai If the Microsoft Edge browser or Microsoft 365 portal does not load successfully, select the Microsoft Edge browser icon from the task bar, type the URL “https://portal.office.com”, and press Enter. The following information is for technical support purposes only: Lab Instance: 48262079 - You need to create a compliance policy to validate whether all the Windows 10 or later devices enrolled in Microsoft Intune have BitLocker Drive Encryption (BitLocker) enabled.

Question 32

HOTSPOT - You have a Microsoft Entra tenant named contoso.com that contains the users shown in the following table. You purchase the devices shown in the following table. Administrators perform the following actions: • Join Device1 to contoso.com by using the credentials of Admin1. • Register Device2 in contoso.com by using the credentials of Admin2. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.