MD-101 : Managing Modern Desktops : Part 01

MD-101 : Managing Modern Desktops : Part 01

1. Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

   Your company Windows 10 computers that are enrolled in Microsoft Intune. You make use of Intune to manage the servicing channel settings of all company computers.

   You receive an enquiry regarding the servicing status of a specific computer.

   You need to review the necessary policy report.

   Solution: You navigate to device status via Device configuration.

   Does the solution meet the goal?

   • Yes
   • No

2. Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

   Your company Windows 10 computers that are enrolled in Microsoft Intune. You make use of Intune to manage the servicing channel settings of all company computers.

   You receive an enquiry regarding the servicing status of a specific computer.

   You need to review the necessary policy report.

   Solution: You navigate to the audit logs via Software updates.

   Does the solution meet the goal?

   • Yes
   • No

3. You have been tasked with reusing a Windows 10 computer that was assigned to a user who is no longer with the company.

   The computer will be assigned to a new user. You plan to make use of Windows AutoPilot to redeploy the computer.

   Which of the following actions should you take FIRST?

   • Reset the computer.
   • Wipe the computer.
   • Create a HTML file containing the computer info.
   • Create a CSV file containing the computer info.

4. DRAG DROP

   Your company has a number of Windows 7 computers that you want to upgrade to Windows 10.

   The computers all have a single MBR disk, and a disabled TPM chip. Also, the computers have hardware virtualization disabled, Data Execution Prevention (DEP) enabled, and UEFI firmware running in BIOS mode.

   You have been tasked with making sure that Secure Boot can be used by the computers.

   Which of the following actions should you take? Answer by dragging the correct options from the list to the answer area. Choose two.

   

   

5. Your company has an Active Directory domain that includes a large number of Windows 10 computers.

   You have recently configured hybrid Microsoft Azure Active Directory (Azure AD) and Microsoft Intune in the environment.

   You want to make sure that all the current computers are automatically registered to Azure AD, as well as enrolled in Intune. The strategy that you employ should reduce the administrative effort required to achieve your goal.

   Which of the following actions should you take?

   • You should make use of Windows Reset.
   • You should make use of a Windows AutoPilot deployment profile.
   • You should make use of a n Autodiscover service connection point (SCP).
   • You should make use of a device configuration profile.

6. You need to consider the underlined segment to establish whether it is accurate.

   You have recently created a provisioning package that uses Comp%RAND:1% as the device name.

   You will be able to successfully run the package on as much as 5 devices.

   Select “No adjustment required” if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

   • No adjustment required
   • 10
   • 15
   • 20
   Explanation:
   The device name uses a single random number (applied by %RAND:1%). This allows for 10 unique values (0 – 9).

7. Your company has an Active Directory domain, named weylandindustries.com. The domain is synced to Microsoft Azure Active Directory (Azure AD) and all company computers have been enrolled in Microsoft Intune.

   You are preparing to perform a Wipe action on certain company devices.

   Which of the following operating systems support the Wipe action? Choose all that apply

   • Windows Vista
   • Windows 8.1
   • Windows 10
   • iOS

8. Your company has an Active Directory domain, named weylandindustries.com. The domain is synced to Microsoft Azure Active Directory (Azure AD) and all company computers have been enrolled in Microsoft Intune.

   You are preparing to perform a Fresh Start action on certain company devices.

   Which of the following operating systems support the Fresh Start action? Choose all that apply.

   • Windows Vista
   • Windows 8.1
   • Windows 10
   • iOS

9. Your company has a number of Windows 10 Microsoft Azure Active Directory (Azure AD) joined workstations. These workstations have been enrolled in Microsoft Intune.

   You have been tasked with making sure that the has self-service password reset enabled on the logon screen. You have navigated to the Microsoft Intune blade.

   Which of the following is the setting you should configure?

   • The Device configuration settings.
   • The Device compliance settings
   • The Windows AutoPilot deployment settings
   • The App protection settings

10. You need to consider the underlined segment to establish whether it is accurate.

    Your company’s Microsoft Azure subscription includes an Azure Log Analytics workspace.

    After deploying a new Windows 10 computer, which belongs to a workgroup, you are tasked with making sure that you are able to utilize Log Analytics to query events from the new computer.

    You configure the new computer’s commercial ID.

    Select “No adjustment required” if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

    What should you do on Computer1?

    • No adjustment required.
    • install the Azure Diagnostic extension on the new computer
    • install the Dependency agent on the new computer
    • install the Microsoft Monitoring Agent on the new computer

11. You need to consider the underlined segment to establish whether it is accurate.

    After installing a feature update on a Windows 10 computer, you have 7 days to roll back the update

    Select “No adjustment required” if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

    • No adjustment required.
    • 10
    • 90
    • 30
    Explanation:
    Microsoft has changed the time period associated with operating system rollbacks with Windows 10 version 1607, decreasing it to 10 days. Previously, Windows 10 had a 30-day rollback period.

12. Your company has a Microsoft 365 subscription configured for their environment. All devices in the environment have Windows 10 installed.

    You have been instructed to make sure that users are not allowed to enroll devices in the Windows Insider Program.

    To achieve your goal, you access Microsoft 365 Device Management.

    Which of the following actions should you take?

    • You should configure a Windows 10 security baseline.
    • You should configure an app protection policy.
    • You should configure device restriction policy.
    • You should configure a Windows 10 update ring.

13. Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

    Your company has a hybrid configuration of Microsoft Azure Active Directory (Azure AD). Your company also has a Microsoft 365 subscription.

    After creating a conditional access policy for Microsoft Exchange Online, you are tasked with configuring the policy to block access to Exchange Online. However, the policy should allow access for hybrid Azure AD-joined devices

    Solution: You should configure the Device platforms settings.

    Does the solution meet the goal?

    • Yes
    • No

14. Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

    Your company has a hybrid configuration of Microsoft Azure Active Directory (Azure AD). Your company also has a Microsoft 365 subscription.

    After creating a conditional access policy for Microsoft Exchange Online, you are tasked with configuring the policy to block access to Exchange Online. However, the policy should allow access for hybrid Azure AD-joined devices

    Solution: You should configure the Client apps settings.

    Does the solution meet the goal?

    • Yes
    • No

15. Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

    Your company has a hybrid configuration of Microsoft Azure Active Directory (Azure AD). Your company also has a Microsoft 365 subscription.

    After creating a conditional access policy for Microsoft Exchange Online, you are tasked with configuring the policy to block access to Exchange Online. However, the policy should allow access for hybrid Azure AD-joined devices

    Solution: You should configure the Device state settings.

    Does the solution meet the goal?

    • Yes
    • No

16. Your company makes use of Microsoft Intune to manage computers.

    You have been tasked with configuring Windows Hello for Business. You are preparing to create an Intune profile to achieve your goal.

    Which of the following is an operating system that supports Windows Hello for Business?

    • Windows Vista
    • Windows 8.1
    • Windows 10
    • macOS

17. Your company has a large number of Android and iOS devices, which are enrolled in Intune.

    You are preparing to deploy new Intune policies will apply to devices, based on the version of Android or iOS that is being run.

    You are required to make sure that the policies are able to target the devices according to your plan.

    Which of the following actions should you take?

    • You should start by accessing Intune and configuring corporate device identifiers.
    • You should start by accessing Microsoft Azure Active Directory (Azure AD) and configuring Device settings.
    • You should start by accessing Microsoft Azure Active Directory (Azure AD) and configuring Application settings.
    • You should start by creating a distribution group.

18. You need to consider the underlined segment to establish whether it is accurate.

    Your company has Microsoft Azure Active Directory (Azure AD) joined Windows 10 Pro computers that have been enrolled in Microsoft Intune.

    You have been tasked with making sure that the computers are upgraded to Windows 10 Enterprise.

    You start by configuring a device enrollment policy in Intune.

    Select “No adjustment required” if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

    What should you configure in Intune?

    • No adjustment required
    • an app protection policy
    • a Windows AutoPilot deployment profile
    • A device configuration profile

19. Your company has a Microsoft 365 subscription.

    You have enrolled all the company computers in Microsoft Intune.

    You have been tasked with making sure that Microsoft Exchange Online is only accessible from known locations.

    Which of the following actions should you take?

    • You should create a device configuration profile.
    • You should create a device compliance policy.
    • You should create a Windows AutoPilot deployment profile.
    • You should create a conditional access policy.

20. Your company has a Microsoft 365 subscription.

    You have enrolled all the company computers in Microsoft Intune.

    You have been tasked with making sure that devices with a high Windows Defender Advanced Threat Protection (Windows Defender ATP) risk score are locked.

    Which of the following actions should you take?

    • You should create a device configuration profile.
    • You should create a device compliance policy.
    • You should create a Windows AutoPilot deployment profile.
    • You should create a conditional access policy.