HOTSPOT
-
You have a Microsoft Entra tenant that contains the groups shown in the following table.
The tenant contains the devices shown in the following table.
The devices have the enrollment restrictions shown in the following table.
For each of the following statements select yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
Yes
No
Explanation: Restriction1 (priority 1) applies to Group1 and overrides Restriction2 for User1. It allows MDM enrollment but blocks personally owned devices. Company Portal enrollment is treated as personally owned, while automatic enrollment is for corporate/Azure AD joined devices. User2 is only in Group2, where Windows 11 meets the minimum version and personally owned devices are allowed.
Question 57
HOTSPOT
-
You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.
You need to implement Microsoft Tunnel for Mobile Application Management (MAM) to provide the devices with access to an on-premises web app named App1.
What should you do on each device? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Device1: Install the Microsoft Defender for Endpoint app.
Device2: Install Edge.
Explanation: Microsoft Tunnel for MAM supports unenrolled BYOD devices, so Android does not require Intune enrollment. Android requires Company Portal (already present) plus Microsoft Defender for Endpoint. On iOS, access to the on-prem web app via Tunnel for MAM requires a supported MAM-enabled app such as Microsoft Edge; device ownership does not need to be changed.
Question 58
HOTSPOT
-
You have a Microsoft 365 subscription that contains the devices shown in the following table.
You need to use the remote actions shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
No
Yes
Explanation: Device1 is not MDM-managed, so Intune remote actions aren't available. Remote lock isn't supported for Windows devices in Intune, so it can't be used on Device2. Remote lock is supported for Intune-managed Android devices, so it can be used on Device3.
Question 59
You have a Microsoft 365 E5 subscription.
You purchase the following types of devices:
• Windows
• Android
• iOS
You plan to enroll the devices in Microsoft Intune.
You need to configure enrollment restrictions.
For which device types can you configure device manufacturer restrictions?
A. Android only
B. Windows only
C. Android and iOS only
D. Windows and iOS only
E. Windows, Android, and iOS
Show Answer
Correct Answer: A
Explanation: Device manufacturer enrollment restrictions in Microsoft Intune are supported only for Android devices. Although the device platform restriction policy applies to multiple platforms, the specific 'Device manufacturer' restriction is applicable only to Android. Windows and iOS do not support manufacturer-based enrollment restrictions.
Question 60
HOTSPOT
-
You have a Microsoft 365 subscription that contains devices enrolled in Microsoft Intune as shown in the following table.
You plan to use the following remote actions on the devices:
• Collect diagnostics
• Locate device
• Remote lock
Which remote actions does each device support? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Device1: Collect diagnostics and Locate device only
Device2: Locate device and Remote lock only
Device3: Remote lock only
Explanation: Collect diagnostics is supported on Windows only. Locate device is supported on Windows and iOS, but not macOS. Remote lock is supported on iOS and macOS, but not Windows desktop.
Question 61
HOTSPOT
-
You have a Microsoft Entra tenant named contoso.com that contains the users shown in the following table.
For contoso.com, you configure the following Microsoft Entra join and registration settings:
• Users may join devices to Microsoft Entra: Selected
o Selected: Group1
You purchase the devices shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
Yes
No
Explanation: Global Administrators can join Windows devices regardless of the selected 'Users may join devices' setting. User1 is in the allowed group and can Microsoft Entra join a Windows 10 device. Android devices support Microsoft Entra registration, not Microsoft Entra join.
Question 62
HOTSPOT
-
You have a Microsoft 365 E5 subscription that uses Microsoft Intune Suite.
You need to recommend a solution that meets the following requirements:
• Administrators must use a secure connection over a shared screen session to perform remote tasks on a user’s device.
• Administrators must have elevated access to perform remote tasks on a user’s device.
• The solution must follow the principle of least privilege.
What should you include in the recommendation for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: For the connection: Remote Help
For elevated access: Help Desk Operator
Explanation: Remote Help provides a secure, shared-screen remote assistance session. The Help Desk Operator Intune RBAC role grants the least-privilege permissions needed to perform Remote Help tasks, including elevation during supported remote assistance, whereas Endpoint Privilege Management is intended for elevating end-user application/process privileges rather than assigning administrator support permissions.
Question 63
You have a Microsoft 365 subscription that contains devices enrolled in Microsoft intune as shown in the following table.
You need to use a bulk device action to send custom notifications.
To which devices can you send the custom notifications?
A. Device1 only
B. Device2 only
C. Device3 only
D. Device2 and Device3 only
E. Device1, Device2, and Device3
Show Answer
Correct Answer: D
Explanation: Bulk custom notifications in Microsoft Intune are supported only for managed iOS/iPadOS and Android devices. They are not supported for Windows or macOS devices. Therefore, the eligible devices are the Android and iOS/iPadOS devices (Device2 and Device3), assuming both are Intune MDM-managed as stated.
Question 64
Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant named contoso.com.
You need to deploy 100 Windows 11 devices to contoso.com. The solution must meet the following requirements:
• Ensure that from the devices, users can access shares on an on-premises file server without being prompted for credentials.
• Minimize reliance on the on-premises infrastructure for device identity management.
Which join type should you use?
A. Active Directory domain-joined
B. Microsoft Entra hybrid joined
C. Microsoft Entra joined
D. Microsoft Entra registered
Show Answer
Correct Answer: C
Explanation: Microsoft Entra joined best satisfies the requirement to minimize reliance on on-premises infrastructure for device identity management. Microsoft Entra joined devices can provide SSO access to on-premises file shares when the appropriate Microsoft Entra Kerberos/SSO configuration is in place, while avoiding traditional AD domain join. Hybrid join continues to rely on on-premises AD for device identity, which conflicts with the stated goal.
Question 65
HOTSPOT
-
You have a Microsoft Entra tenant that contains the devices shown in the following table.
Which devices can be Microsoft Entra joined, and which devices can be Microsoft Entra registered? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Microsoft Entra joined: Device1 only
Microsoft Entra registered: Device1, Device2, Device3, and Device4
Explanation: Microsoft Entra join is supported for Windows devices. Android, iOS, and iPadOS devices are Microsoft Entra registered rather than joined. Windows devices can also be registered.
$19
Get all 373 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.