Microsoft MD-102 Exam Dumps

Endpoint Administrator

Microsoft MD-102 Sample Questions

Question # 1

You have a Microsoft 365 subscription.You have devices enrolled in Microsoft Intune as shown in the following table.To which devices can you deploy apps by using Intune?

A. Device1 only
B. Device1 and Device2 only
C. Device1 and Device3 only
D. Device1, Device2, and Device3 only
E. Device1, Device2, Device3, and Device4

Show Answer

Question # 2

You have a computer named Computer! that runs Windows 11.A user named User1 plans to use Remote Desktop to connect to Computer1.You need to ensure that the device of User1 is authenticated before the Remote Desktopconnection is established and the sign in page appears.What should you do on Computer1?

A. Turn on Reputation-based protection.
B. Enable Network Level Authentication (NLA).
C. Turn on Network Discovery. 
D. Configure the Remote Desktop Configuration service.

Show Answer

Question # 3

Your company uses Microsoft Intune.More than 500 Android and iOS devices are enrolled in the Intune tenant.You plan to deploy new Intune policies. Different policies will apply depending on the version of Android or iOS installed on the device.You need to ensure that the policies can target the devices based on their version ofAndroid or iOS.What should you configure first?

A. groups that have dynamic membership rules in Azure AD
B. Device categories in Intune
C. Corporate device identifiers in Intune
D. Device settings in Azure AD

Show Answer

Question # 4

You have a Microsoft 365 subscription that uses Microsoft Intune Suite.You use Microsoft Intune to manage devices.You have a Windows 11 device named Device1 that is enrolled in Intune. Device1 hasbeen offline for 30 days.You need to remove Device1 from Intune immediately. The solution must ensure that if thedevice checks in again, any apps and data provisioned by Intune are removed. Userinstalled apps, personal data, and OEM-installed apps must be retained.What should you use?

A. a Delete action
B. a Retire action
C. a Fresh Start action
D. an Autopilot Reset action 

Show Answer

Question # 5

You have a Windows 10 device named Device! that is joined to Active Directory andenrolled in Microsoft Intune.Device1 is managed by using Group Policy and Intune.You need to ensure that the Intune settings override the Group Policy settings.What should you configure?

A. a device configuration profile
B. a device compliance policy
C. an MDM Security Baseline profile
D. a Group Policy Object (GPO)

Show Answer

Question # 6

You have a Microsoft 365 subscription that includes Microsoft Intune.You have an update ring named UpdateRing1 that contains the following settings:• Automatic update behavior: Auto install and restart at a scheduled time• Automatic behavior frequency: First week of the month• Scheduled install day: Tuesday• Scheduled install time: 3 AMFrom the Microsoft Intone admin center, you select Uninstall for the feature updates ofUpdateRing1. When will devices start to remove the feature updates?

A. when a user approves the uninstall
B. as soon as the policy is received
C. next Tuesday
D. the first Tuesday of the next month 

Show Answer

Question # 7

You need to implement mobile device management (MDM) for personal devices that runWindows 11. The solution must meet the following requirements:• Ensure that you can manage the personal devices by using Microsoft Intune.• Ensure that users can access company data seamlessly from their personal devices.• Ensure that users can only sign in to their personal devices by using their personalaccount.What should you use to add the devices to Azure AD?

A. Azure AD registered Most Voted
B. hybrid Azure AD join. 
C. Azure AD joined

Show Answer

Question # 8

Your network contains an Active Directory domain. The domain contains 10 computers thatrun Windows 10. Users in the finance department use the computers.You have a computer named Computer1 that runs Windows 10.From Computer1, you plan to run a script that executes Windows PowerShell commandson the finance department computers.You need to ensure that you can run the PowerShell commands on the finance departmentcomputers from Computer.What should you do on the finance department computers?

A. From Windows PowerShell, run the Enable-MMAgent cmdlet.
B. From the local Group Policy, enable the Allow Remote Shell Access setting.
C. From Windows PowerShell, run the Enable-PSRemoting cmdlet.
D. From the local Group Policy, enable the Turn on Script Execution setting

Show Answer

Question # 9

You have a computer named Computed that has Windows 10 installed.You create a Windows PowerShell script named config.psl.You need to ensure that config.psl runs after feature updates are installed on Computer5.Which file should you modify on Computer5?

A. LiteTouch.wsf
B. SetupConfig.ini
C. Unattendb*
D. Unattend.xml 

Show Answer

Question # 10

You use Microsoft Defender for Endpoint to protect computers that run Windows 10.You need to assess the differences between the configuration of Microsoft Defender forEndpoint and the Microsoft-recommended configuration baseline.Which tool should you use?

A. Microsoft Defender for Endpoint Power 81 app
B. Microsoft Secure Score
C. Endpoint Analytics
D. Microsoft 365 Defender portal 

Show Answer

Question # 11

You have a Microsoft 365 E5 subscription and 25 Apple iPads.You need to enroll the iPads in Microsoft Intune by using the Apple Configurator enrollmentmethod.What should you do first?x

You have a Microsoft 365 E5 subscription and 25 Apple iPads.You need to enroll the iPads in Microsoft Intune by using the Apple Configurator enrollmentmethod.What should you do first?A. Upload a file that has the device identifiers for each iPad.
B. Modify the enrollment restrictions.
C. Configure an Apple MDM push certificate.
D. Add your user account as a device enrollment manager (DEM).

Show Answer

Question # 12

You have a Microsoft 365 E5 subscription.All devices are enrolled in Microsoft Intune.You need to ensure that devices that have NOT checked in for 30 days are deleted fromintune.What should you configure from the Microsoft Intune admin center?

A. a device limit restriction
B. automatic enrollment
C. a device clean-up rule
D. a configuration profile

Show Answer

Question # 13

You have a Microsoft 365 subscription that uses Microsoft Intune.You need to ensure that you can deploy apps to Android Enterprise devices.What should you do first?

A. Create a configuration profile.
B. Add a certificate connector.
C. Configure the Partner device management settings.
D. Link your managed Google Play account to Intune.

Show Answer

Question # 14

Your company has an Azure AD tenant named contoso.com that contains several Windows10 devices.When you join new Windows 10 devices to contoso.com, users are prompted to set up afour-digit pin.You need to ensure that the users are prompted to set up a six-digit pin when they join theWindows 10 devices to contoso.com.Solution: From the Microsoft Entra admin center, you modify the User settings and theDevice settings.Does this meet the goal?

A. Yes
B. No

Show Answer

Question # 15

You have computers that run Windows 10 and are managed by using Microsoft Intune.Users store their files in a folder named D:\Folder1.You need to ensure that only a trusted list of applications is granted write access toD:\Folder1.What should you configure in the device configuration profile?

A. Microsoft Defender Exploit Guard
B. Microsoft Defender Application Guard
C. Microsoft Defender SmartScreen
D. Microsoft Defender Application Control.

Show Answer

Question # 16

You have a Microsoft 365 subscription that contains 100 devices enrolled in MicrosoftIntune.You need to review the startup processes and how often each device restarts.What should you use?

A. Endpoint analytics
B. Intune Data Warehouse
C. Azure Monitor 
D. Device Management

Show Answer

Question # 17

You have a Microsoft 365 subscription that contains a user named User1. User! isassigned a Windows 10/11 Enterprise E3 license. You use Microsoft Intune Suite tomanage devices. User1 activates the following devices:• Device1: Windows 11 Enterprise• Device2: Windows 10 Enterprise• Device3: Windows 11 EnterpriseHow many more devices can User1 activate?

A. 2
B. 3
C. 7
D. 8

Show Answer

Question # 18

You have a Microsoft 365 subscription that uses Microsoft Intune Suite.You use Microsoft Intune to manage Windows 11 devices.You create a new policy set named Set and add five device configuration profiles forWindows 10 and later.You create a device compliance policy named Policy1.You need to ensure that when users are assigned the device configuration profiles in Set1,they are always assigned Policy1 also.What should you configure?

A. the assignments of Policy1
B. the Policy1 configurations
C. the assignments of Set1
D. the Set1 configurations 

Show Answer

Question # 19

You have a Microsoft 365 subscription that uses Microsoft Intune Suite.You use Microsoft Intune to manage devices.Auto-enrollment in Intune is configured.You have 100 Windows 11 devices in a workgroup.You need to connect the devices to the corporate wireless network and enroll 100 newWindows devices in Intune.What should you use?

A. a provisioning package
B. a Group Policy Object (GPO)
C. mobile device management (MDM) automatic enrollment.
D. a device configuration policy

Show Answer

Question # 20

Your company uses Microsoft Intune to manage devices.You need to ensure that only Android devices that use Android work profiles can enroll inintune.Which two configurations should you perform in the device enrollment restrictions? Eachcorrect answer presents part of the solution.NOTE Each correct selection is worth one point.

A. From Platform Settings, set Android device administrator Personally Owned to Block.
B. From Platform Settings, set Android Enterprise (work profile) to Allow.
C. From Platform Settings, set Android device administrator Personally Owned to Allow
D. From Platform Settings, set Android device administrator to Block.

Show Answer

Question # 21

You have a Microsoft 365 Business Standard subscription and 100 Windows 10 Prodevices.You purchase a Microsoft 365 E5 subscription.You need to upgrade the Windows 10 Pro devices to Windows 10 Enterprise. The solutionmust minimize administrative effort.Which upgrade method should you use?

A. Windows Autopilot
B. a Microsoft Deployment Toolkit (MDT) lite-touch deployment
C. Subscription Activation
D. an in-place upgrade by using Windows installation media 

Show Answer

Question # 22

You are creating a device configuration profile in Microsoft IntuYou need to configure specific OMA-URI settings in the profile.Which profile type template should you use?

A. Device restrictions (Windows 10 Team)
B. Identity protection
C. Custom
D. Device restrictions 

Show Answer

Question # 23

You have a Microsoft 365 E5 subscription that contains a user named User! and a web appnamed Appl.App1 must only accept modern authentication requests.You plan to create a Conditional Access policy named CAPolicy1 that will have thefollowing settings:• Assignments° Users or workload identities: User1° Cloud apps or actions: App1• Access controls° Grant: Block accessYou need to block only legacy authentication requests to Appl. Which condition should youadd to CAPolicy1?

A. Filter for devices
B. Device platforms
C. User risk
D. Sign-in risk
E. Client apps 

Show Answer

Question # 24

Your company has 200 computers that run Windows 10. The computers are managed by using Microsoft Intune. Currently, Windows updates are downloaded without using DeliveryOptimization. You need to configure the computers to use Delivery Optimization. Whatshould you create in Intune?

A. a device compliance policy
B. a Windows 10 update ring
C. a device configuration profile
D. an app protection policy 

Show Answer

Question # 25

You have a Microsoft 365 E5 subscription that contains 100 Windows 10 devices enrolled in Microsoft Intune.You plan to use Endpoint analytics.You need to create baseline metrics.What should you do first?

A. Create an Azure Monitor workbook. 
B. Onboard 10 devices to Endpoint analytics.
C. Create a Log Analytics workspace.
D. Modify the Baseline regression threshold.

Show Answer

Question # 26

You have a Microsoft 365 subscription that includes Microsoft Intune. The subscriptioncontains corporate-owned, fully managed Android Enterprise devices.You plan to deploy a configuration profile that will have a device restrictions profile typenamed Profile1. Profile1 will assign maintenance windows for system updates.What should you configure from the Configuration settings for Profile1?

A. Device experience
B. General
C. Connectivity
D. Power Settings 

Show Answer

Question # 27

You have an Azure AD tenant named contoso.com.You plan to purchase 25 computers that run Windows 11. You plan to deliver thecomputers directly to users.You need to ensure that during the out-of-box experience (OBE), users are prompted tosign in, and then the computers are configured to use Microsoft Intune.Which two components should you configure? Each correct answer presents part of thesolution.NOTE: Each correct selection is worth one point.

A. a provisioning package
B. automatic enrollment
C. an unattend.xml answer file
D. a Windows Autopilot deployment profile for self-deploying mode
E. a Windows Autopilot deployment profile for user-driven mode 

Show Answer