Microsoft 365 Certified MD-102 Dumps Full Questions with Free PDF Questions to Pass
100% Updated Microsoft MD-102 Enterprise PDF Dumps
NEW QUESTION # 110
You have a Microsoft 365 E5 subscription. The subscription contains devices that are Microsoft Entra joined and enrolled in Microsoft Intune You create a user named User1.
You need to ensure that User1 can rotate BitLocker recovery keys by using Intune.
Solution: From the Microsoft Entra admin center, you assign the Helpdesk Administrator role to User1.
Does this meet the goal?
- A. No
- B. Yes
Answer: B
NEW QUESTION # 111
You use Microsoft Endpoint Manager to manage Windows 10 devices.
You are designing a reporting solution that will provide reports on the following:
* Compliance policy trends
* Trends in device and user enrolment
* App and operating system version breakdowns of mobile devices
You need to recommend a data source and a data visualization tool for the design.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
A screenshot of a computer Description automatically generated
Reference:
https://docs.microsoft.com/en-us/mem/intune/developer/reports-nav-create-intune-reports
https://docs.microsoft.com/en-us/mem/intune/developer/reports-proc-get-a-link-powerbi
NEW QUESTION # 112
You have the devices shown in the following table.
You need to migrate app data from Device1 to Device2. The data must be encrypted and stored on Seryer1 during the migration.
Which command should you run on each device? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 113
Your company has computers that run Windows 10 and are Microsoft Azure Active Directory (Azure AD)-joined.
The company purchases an Azure subscription.
You need to collect Windows events from the Windows 10 computers in Azure. The solution must enable you to create alerts based on the collected events.
What should you create in Azure and what should you configure on the computers? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
A screenshot of a computer Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/log-analytics-agent
NEW QUESTION # 114
You have a Microsoft 365 E5 subscription that uses Microsoft Intune.
You add apps to Intune as shown in the following table.
You need to create an app configuration policy named Policy1 for the Android Enterprise platform.
Which apps can you manage by using Policyl1?
- A. App2 only
- B. App3 only
- C. App1, App2, and App3
- D. App1 and App3 only
- E. App2 and App3 only
Answer: E
Explanation:
Managed Google Play
https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-use-android#:~:text=App%20con Line Of Business
https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-overview#:~:text=To%20support%
NEW QUESTION # 115
Your network contains an Active Directory domain.
You install the Microsoft Deployment Toolkit (MDT) on a server.
You have a custom image of Windows 11.
You need to deploy the image to 100 devices by using MDT.
Which three actions should you perform in sequence? To answer, move answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Install Windows Deployment Services (WDS)
2 - Create a deployment share.
3 - Add the Windows 11 image.
NEW QUESTION # 116
You have a Microsoft Intune subscription.
You have devices enrolled in intune as shown in the following table.
An app named App1 is installed on each device.
What is the minimum number of app configuration policies required to manage Appl ?
- A. 0
- B. 1
- C. 2
- D. 3
- E. 4
Answer: C
Explanation:
The correct answer is B because you need to create two app configuration policies for managed devices, one for iOS/iPadOS devices and one for Android devices1. App configuration policies let you customize the settings of apps for iOS/iPadOS or Android devices1. The settings areassigned to user groups and applied when the app runs1. The app developer or supplier providesthe configuration settings (keys and values) that are exposed to Intune1. You can't use a single app configuration policy for both iOS/iPadOS and Android devices because they have different configuration settings2. References: 1: App configuration policies for Microsoft Intune | Microsoft Learn
https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-overview 2: Add app configuration policies for managed iOS/iPadOS devices | Microsoft Learn
https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-use-ios
NEW QUESTION # 117
You have computers that run Windows 10, are joined to Azure Active Directory (Azure AD), and are enrolled in Microsoft Intune.
You have an Azure web app named App1. App1 only allows connections over HTTPS. App1 uses a certificate from an on-premises certification authority (CA).
You need to ensure that the computers can connect to App1 from Microsoft Edge.
Which type of device configuration profile should you create in Microsoft Endpoint Manager?
- A. trusted certificate
- B. Simple Certificate Enrollment Protocol (SCEP) certificate
- C. public key pair (PKCS) certificate
- D. imported public key pair (PKCS) certificate
Answer: B
Explanation:
Intune supports use of the Simple Certificate Enrollment Protocol (SCEP) to authenticate connections to your apps and corporate resources.
Reference:
https://docs.microsoft.com/en-us/mem/intune/protect/certificates-scep-configure
NEW QUESTION # 118
You have a Microsoft 365 E5 subscription that contains a user named User1 and uses Microsoft Intune Suite.
You use Microsoft Intune to manage devices.
You have a device named Device1 that is enrolled in Intune.
You need to ensure that User1 can use Remote Help from the Intune admin center for Device1.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Deploy the Remote Help app to Device1.
- B. Rerun device onboarding on Device1.
- C. Assign a Microsoft 365 E5 license to User1.
- D. Assign the Help Desk Operator role to User1.
- E. Assign the Remote Help add-on license to User1.
- F. Assign the Intune Administrator role to User1.
Answer: A,D,E
NEW QUESTION # 119
You have 10 computers that run Windows 7 and have the following configurations:
- A single MBR disk
- A disabled TPM chip
- Disabled hardware virtualization
- UEFI firmware running in BIOS mode
- Enabled Data Execution Prevention (DEP)
You plan to upgrade the computers to Windows 10.
You need to ensure that the computers can use Secure Boot.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Enable hardware virtualization
- B. Enable the TPM chip.
- C. Disable DEP
- D. Convert the MBR disk to a GPT disk
- E. Convert the firmware from BIOS to UEFI.
Answer: D,E
Explanation:
Need to use the UEFI mode to get the UEFI Security features.
If you want to ensure that your drive boots into a certain mode, use drives that you've preformatted with the GPT file format for UEFI mode, or the MBR file format for BIOS mode.
When the installation starts, if the PC is booted to the wrong mode, Windows installation will fail.
To fix this, restart the PC in the correct firmware mode.
Reference:
https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/boot-to-uefi-mode-or- legacy-bios-mode
NEW QUESTION # 120
You have devices that are not rooted enrolled in Microsoft Intune as shown in the following table.
The devices are members of a group named Group1.
In Intune, you create a device compliance location that has the following configurations:
* Name: Network1
* IPv4 range: 192.168.0.0/16
In Intune. you create a device compliance policy for the Android platform. The policy has the following configurations:
* Name: Policy1
* Device health: Rooted devices: Block
* Locations: Location: Network1
* Mark device noncompliant: Immediately
* Assigned: Group1
The Intune device compliance policy has the following configurations:
* Mark devices with no compliance policy assigned as: Compliant
* Enhanced jailbreak detection: Enabled
* Compliance status validity period (days): 20
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Device1 is marked as compliant. = No Device2 is marked as compliant. = Yes Device3 is marked as compliant. = No
* Device1 is marked as noncompliant because it is rooted and the device compliance policy Policy1 blocks rooted devices under the Device health setting1.
* Device2 is marked as compliant because it is not rooted and it is within the network location Network1 that is specified in the device compliance policy Policy11.
* Device3 is marked as noncompliant because it is outside the network location Network1 that is specified in the device compliance policy Policy11. The device compliance location setting requires devices to be in a specific network range to be compliant2.
NEW QUESTION # 121
You have a Microsoft 365 tenant that uses Microsoft Intune and contains the devices shown in the following table.
In Microsoft Intune Endpoint security, you need to configure a disk encryption policy for each device.
Which encryption type should you use for each device, and which role-based access control (RBAQ role in Intune should you use to manage the encryption keys? To answer, select the appropriate options m the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Graphical user interface, text, application Description automatically generated
NEW QUESTION # 122
You have a Microsoft 365 subscription that uses Microsoft Intune Suite.
You use Intune to manage devices.
You need to review details about device wipes initiated through Intune.
Which report should you review?
- A. Windows health attestation report
- B. Noncompliant devices
- C. Assignment status
- D. Device actions
Answer: D
NEW QUESTION # 123
You have an Azure AD group named Group1. Group! contains two Windows 10 Enterprise devices named Device1 and Device2. You create a device configuration profile named Profile1. You assign Profile! to Group1. You need to ensure that Profile! applies to Device1 only. What should you modify in Profile 1?
- A. Scope (Tags)
- B. Applicability Rules
- C. Settings
- D. Assignments
Answer: B
Explanation:
To ensure that Profile1 applies to Device1 only, you need to modify the Applicability Rules in Profile1. You can use applicability rules to filter which devices receive a profile based on criteria such as device model, manufacturer, or operating system version. You can create an applicability rule that matches Device1's properties and excludes Device2's properties. References:
https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#applicability-rules
NEW QUESTION # 124
You need to meet the technical requirements for Windows AutoPilot.
Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate settings in the answer area.
NOTE:Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
References:
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot-reset
NEW QUESTION # 125
......
Use Valid Exam MD-102 by BraindumpsPass Books For Free Website: https://www.braindumpspass.com/Microsoft/MD-102-practice-exam-dumps.html
Free Microsoft 365 Certified MD-102 Official Cert Guide PDF Download: https://drive.google.com/open?id=1Z6ojeLNPfutUo_0x_h4foAJKp9U0fJ6C
