MD-102 Free Practice Questions — Page 7

Question 24

DRAG DROP - You have a Microsoft 365 E5 subscription and a computer that runs Windows 11. You need to create a customized installation of Microsoft 365 Apps for enterprise. Which four actions should you perform in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

Question 25

You have the Windows 10 devices shown in the following table. You plan to upgrade the devices to Windows 11 Enterprise. On which devices can you perform a direct in-place upgrade to Windows 11 Enterprise?

Question 26

You have a Microsoft 365 subscription and use Microsoft Intune. You need to implement Microsoft Tunnel for Mobile Application Management (MAM) for personal Android devices. You perform the following actions: • Configure Microsoft Tunnel for managed devices. • Validate that user devices meet the prerequisites for Tunnel for MAM. • Create app configuration policies for Microsoft Defender and Microsoft Edge. What should you configure next?

Question 26

You have a Microsoft 365 Subscription that uses Microsoft Intune. You add apps to Intune as shown in the following table. You need to create an app configuration policy named Policy1 for the Android Enterprise platform. Which apps can you manage by using Policy1?

Question 27

HOTSPOT - You have a Microsoft 365 subscription that includes Microsoft Intune. Users have iOS devices that use Microsoft Outlook. You need to configure Outlook. The solution must meet the following requirements: • Restrict copy and paste actions from Outlook other apps. • Enable S/MIME for Outlook. Which type of policy should you configure for each requirement? To answer, select the appropriate options in the answer area NOTE: Each correct selection is worth one point.

Question 27

You have a Microsoft 365 E5 subscription that contains the devices shown in the following table. All devices have Microsoft Edge installed. From the Microsoft Intune admin center, you create a Microsoft Edge Baseline profile named Edge1. You need to apply Edge1 to all the supported devices. To which devices should you apply Edge1?

Question 28

HOTSPOT - You have a hybrid environment that contains a Microsoft Entra tenant and an on-premises Active Directory Domain Services (AD DS) domain. You purchase the devices shown in the following table. Which Microsoft Entra join type can each device use? To answer, select the appropriate options in the answer area NOTE: Each correct selection is worth one point.

Question 28

You have an Azure AD tenant that contains the devices shown in the following table. You purchase Windows 11 Enterprise E5 licenses. Which devices can use Subscription Activation to upgrade to Windows 11 Enterprise?

Question 29

Case study - Overview - Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York. Contoso has the users and computers shown in the following table. The company has IT, human resources (HR), legal (LEG), marketing (MKG), and finance (FIN) departments. Contoso recently purchased a Microsoft 365 subscription. The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office will work from home. Existing Environment - The network contains an Active Directory domain named contoso.com that is synced to Azure AD. All member servers run Windows Server 2016. All laptops and desktop computers run Windows 10 Enterprise. The computers are managed by using Microsoft Configuration Manager. The mobile devices are managed by using Microsoft Intune. The naming convention for the computers is the department acronym, followed by a hyphen, and then four numbers, for example FIN-6785. All the computers are joined to the on-premises Active Directory domain. Each department has an organizational unit (OU) that contains a child OU named Computers. Each computer account is in the Computers OU of its respective department. Intune Configuration - The domain has the users shown in the following table. User2 is a device enrollment manager (DEM) in Intune. The devices enrolled in Intune are shown in the following table. The device compliance policies in Intune are configured as shown in the following table. The device compliance policies have the assignments shown in the following table. The device limit restrictions in Intune are configured as shown in the following table. Requirements - Planned changes - Contoso plans to implement the following changes: • Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro preinstalled and were purchased already. • Implement co-management for the computers. Technical Requirements - Contoso must meet the following technical requirements: • Ensure that the users in a group named Group4 can only access Microsoft Exchange Online from devices that are enrolled in Intune. • Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows Autopilot. • Create a provisioning package for new computers in the HR department. • Block iOS devices from sending diagnostic and usage telemetry data. • Use the principle of least privilege whenever possible. • Enable the users in the MKG department to use App1. • Pilot co-management for the IT department. You need to prepare for the deployment of the Phoenix office computers. What should you do first?

Question 30

HOTSPOT - You have a Microsoft 365 E5 subscription that contains three Windows devices named Device1, Device2, and Device3. The devices are managed by using Microsoft Intune. Each device contains a file named Script1.ps1. Users do NOT have local administrator permissions for the devices. The subscription contains the groups shown in the following table. You create two Endpoint Privilege Management (EPM) elevation settings policies that have the following settings: • Name: Policy1 • Endpoint Privilege Management: Enabled o Default elevation response: Deny all requests o Allow Elevation Detection: No o Send elevation data for reporting: No • Assignments: o Included groups: Group1 • Name: Policy2 • Endpoint Privilege Management: Require support approval o Allow Elevation Detection: No o Send elevation data for reporting: No • Assignments: o Included groups: Group3 You create an EPM elevation rules policy named RulesPolicy1 that has the following settings: • Rule name: Rule1 o Elevation type: Automatic o Child process behavior: Deny all o File name: Script1.ps1 o File hash: