Summer Sale- Special Discount Limited Time 65% Offer - Ends in 0d 00h 00m 00s - Coupon code: netdisc

Microsoft MD-102 Endpoint Administrator Exam Practice Test

Page: 1 / 35
Total 346 questions

Endpoint Administrator Questions and Answers

Question 1

You implement the planned changes for Connection1 and Connection2

How many VPN connections will there be for User1 when the user signs in to Device 1 and Devke2? To answer select the appropriate options in the answer area.

NOTE; Each correct selection is worth one point.

Question # 1

Options:

Question 2

User1 and User2 plan to use Sync your settings.

On which devices can the users use Sync your settings? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 2

Options:

Question 3

You need to ensure that computer objects can be created as part of the Windows Autopilot deployment. The solution must meet the technical requirements.

To what should you grant the right to create the computer objects?

Options:

A.

Server2

B.

Server1

C.

GroupA

D.

DC1

Question 4

Which users can purchase and assign App1?

Options:

A.

User3 only

B.

User1 and User3 only

C.

User1, User2, User3, and User4

D.

User1, User3, and User4 only

E.

User3 and User4 only

Question 5

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question # 5

Options:

Question 6

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Question # 6

Options:

Question 7

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Question # 7

Options:

Question 8

Which devices are registered by using the Windows Autopilot deployment service?

Options:

A.

Device1 only

B.

Device3 only

C.

Device1 and Device3 only

D.

Device1, Device2, and Device3

Question 9

You implement Boundary1 based on the planned changes.

Which devices have a network boundary of 192.168.1.0/24 applied?

Options:

A.

Device2 only

B.

Device3 only

C.

Device 1. Device2. and Device5 only

D.

Device 1, Device2, Device3, and Device4 only

Question 10

Which user can enroll Device6 in Intune?

Options:

A.

User4 and User2 only

B.

User4 and User 1 only

C.

User1, User2, User3, and User4

D.

User4. User Land User2 only

Question 11

You need to meet the OOBE requirements for Windows AutoPilot.

Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate settings in the answer area.

NOTE: Each correct selection is worth one point.

Question # 11

Options:

Question 12

You need to meet the technical requirements for Windows AutoPilot.

Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate settings in the answer area.

NOTE: Each correct selection is worth one point.

Question # 12

Options:

Question 13

You need to recommend a solution to meet the device management requirements.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 13

Options:

Question 14

What should you upgrade before you can configure the environment to support co-management?

Options:

A.

the domain functional level

B.

Configuration Manager

C.

the domain controllers

D.

Windows Server Update Services (WSUS)

Question 15

What should you use to meet the technical requirements for Azure DevOps?

Options:

A.

An app protection policy

B.

Windows Information Protection (WIP)

C.

Conditional access

D.

A device configuration profile

Question 16

You need to resolve the performance issues in the Los Angeles office.

How should you configure the update settings? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 16

Options:

Question 17

You need to capture the required information for the sales department computers to meet the technical

requirements.

Which Windows PowerShell command should you run first?

Options:

A.

Install-Module WindowsAutoPilotIntune

B.

Install-Script Get-WindowsAutoPilotInfo

C.

Import-AutoPilotCSV

D.

Get-WindowsAutoPilotInfo

Question 18

You need to meet the device management requirements for the developers.

What should you implement?

Options:

A.

folder redirection

B.

Enterprise State Roaming

C.

home folders

D.

known folder redirection in Microsoft OneDrive

Question 19

What should you configure to meet the technical requirements for the Azure AD-joined computers?

Options:

A.

Windows Hello for Business from the Microsoft Intune blade in the Azure portal.

B.

The Accounts options in an endpoint protection profile.

C.

The Password Policy settings in a Group Policy object (GPO).

D.

A password policy from the Microsoft Office 365 portal.

Question 20

You need to prepare for the deployment of the Phoenix office computers.

What should you do first?

Options:

A.

Extract the hardware ID information of each computer to a CSV file and upload the file from the Devices settings in Microsoft Store for Business.

B.

Generalize the computers and configure the Mobility (MDM and MAM) settings from the Azure ActiveDirectory blade in the Azure portal.

C.

Generalize the computers and configure the Device settings from the Azure Active Directory blade in the Azure portal.

D.

Extract the hardware ID information of each computer to an XLSX file and upload the file from the Devices settings in Microsoft Store for Business.

Question 21

You need to meet the technical requirements for the IT department.

What should you do first?

Options:

A.

From the Azure Active Directory blade in the Azure portal, enable Seamless single sign-on.

B.

From the Configuration Manager console, add an Intune subscription.

C.

From the Azure Active Directory blade in the Azure portal, configure the Mobility (MDM and MAM) settings.

D.

From the Microsoft Intune blade in the Azure portal, configure the Windows enrollment settings.

Question 22

You need to prepare for the deployment of the Phoenix office computers.

What should you do first?

Options:

A.

Generalize the computers and configure the Mobility (MDM and MAM) settings from the Azure Active Directory admin center.

B.

Extract the hardware ID information of each computer to a CSV file and upload the file from the Microsoft Intune blade in the Azure portal.

C.

Extract the hardware ID information of each computer to an XML file and upload the file from the Devices settings in Microsoft Store for Business.

D.

Extract the serial number information of each computer to a CSV file and upload the file from the Microsoft Intune blade in the Azure portal.

Question 23

You need to meet the technical requirements for the iOS devices.

Which object should you create in Intune?

Options:

A.

A compliance policy

B.

An app protection policy

C.

A Deployment profile

D.

A device configuration profile

Question 24

You are evaluating which devices are compliant.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Question # 24

Options:

Question 25

To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 25

Options:

Question 26

You need a new conditional access policy that has an assignment for Office 365 Exchange Online.

You need to configure the policy to meet the technical requirements for Group4.

Which two settings should you configure in the policy? To answer, select the appropriate settings in the answer area.

NOTE: Each correct selection is worth one point.

Question # 26

Options:

Question 27

Your company has an Azure AD tenant named contoso.com that contains several Windows 10 devices.

When you join new Windows 10 devices to contoso.com, users are prompted to set up a four-digit pin.

You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 10 devices to contoso.com.

Solution: From the Microsoft Entra admin center, you modify the User settings and the Device settings.

Does this meet the goal?

Options:

A.

Yes

B.

No

Question 28

You have a Microsoft 365 subscription that contains 500 Android Enterprise devices.

All the devices are enrolled in Microsoft Intune.

You need to deliver bookmarks to the Chrome browser on the devices

What should you create?

Options:

A.

a compliance policy

B.

a configuration profile

C.

an app protection policy

D.

an app configuration policy

Question 29

You have a Microsoft 365 E5 subscription that contains a group named Group1. You need to ensure that only the members of Group1 can join devices to the Microsoft Entra tenant. What should you configure in the Microsoft Entra admin center?

Options:

A.

Enterprise State Roaming

B.

Mobility

C.

Device settings

D.

User settings

Question 30

You have a Microsoft 365 E5 subscription that contains 10 Android Enterprise devices. Each device has a corporate-owned work profile and is enrolled in Microsoft Intune.

You need to configure the devices to run a single app in kiosk mode.

Which Configuration settings should you modify in the device restrictions profile?

Options:

A.

General

B.

Users and Accounts

C.

System security

D.

Device experience

Question 31

You have a Hyper-V host that contains the virtual machines shown in the following table.

Question # 31

On which virtual machines can you install Windows 11?

Options:

A.

VM1 only

B.

VM3only

C.

VM1 and VM2 only

D.

VM2 and VM3 only

E.

VM1, VM2, and VM3

Question 32

You have a Microsoft 365 tenant that contains the objects shown in the following table.

Question # 32

In the Microsoft Intune admin center, you are creating a Microsoft 365 Apps app named App1. To which objects can you assign App1?

Options:

A.

Group3 and Group4 only

B.

Admin1, Group3, and Group4 only

C.

Group1, Group3, and Group4 only

D.

Group1, Group2, Group3, and Group4 only

E.

Admin1, Group1. Group2, Group3, andGroup4

Question 33

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named User1. User1 has a user principal name (UPN) of user1 @contoso.com.

You join a Windows 10 device named Client1 to contoso.com.

You need to add User1 to the local Administrators group of Client1.

How should you complete the command? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 33

Options:

Question 34

You have a Microsoft Entra tenant that contains the devices shown in the following table.

Question # 34

The tenant contains the groups shown in the following table.

Question # 34

You create a Windows Autopilot deployment profile as shown in the Deployment Profile exhibit (Click the Deployment Profile tab.)

Question # 34

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Question # 34

Options:

Question 35

You have a Microsoft 365 subscription.

You have 10 computers that run Windows 10 and are enrolled in mobile device management (MDM).

You need to deploy the Microsoft 36S Apps for enterprise suite to all the computers.

What should you do?

Options:

A.

From the Microsoft Intune admin center, create a Windows 10 device profile.

B.

From Azure AD, add an app registration.

C.

From Azure AD. add an enterprise application.

D.

From the Microsoft Intune admin center, add an app.

Question 36

Your company has an infrastructure that has the following:

• A Microsoft 365 tenant

• An Active Directory forest

• Microsoft Intune

• A Key Management Service (KMS) server

• A Windows Deployment Services (WDS) server

• An Azure AD Premium tenant

The company purchases 100 new client computers that run Windows.

You need to ensure that the new computers are joined automatically to Azure AD by using Windows Autopilot.

What should you use? To answer, select the appropriate options in the answer area,

NOTE: Each correct selection is worth one point.

Question # 36

Options:

Question 37

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.

After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.

You have a Microsoft 365 E5 subscription. The subscription contains devices that are Microsoft Entra joined and enrolled in Microsoft Intune.

You create a user named User1.

You need to ensure that User1 can rotate BitLocker recovery keys by using Intune.

Solution: From the Microsoft Entra admin center, you assign the Cloud Device Administrator role to User1.

Does this meet the goal?

Options:

A.

Yes

B.

No

Question 38

You have an Azure AD group named Group1. Group! contains two Windows 10 Enterprise devices named Device1 and Device2. You create a device configuration profile named Profile1. You assign Profile! to Group1. You need to ensure that Profile! applies to Device1 only. What should you modify in Profile 1?

Options:

A.

Assignments

B.

Settings

C.

Scope (Tags)

D.

Applicability Rules

Question 39

You have a Microsoft 365 subscription that contains Windows 11 devices enrolled in Microsoft Intune.

You need to use Device query to identify whether a critical security patch was installed on a device.

Which table should you target?

Options:

A.

Fileinfo

B.

OsVersion

C.

WindowsQfe

D.

Systemlnfo

E.

WindowsRegistry

Question 40

You have a Microsoft 365 E5 subscription that contains 100 Windows 10 devices enrolled in Microsoft Intune.

You plan to use Endpoint analytics.

You need to create baseline metrics.

What should you do first?

Options:

A.

Create an Azure Monitor workbook.

B.

Onboard 10 devices to Endpoint analytics.

C.

Create a Log Analytics workspace.

D.

Modify the Baseline regression threshold.

Question 41

You have a Microsoft 365 subscription that includes Microsoft Intune.

You need to implement a Microsoft Defender for Endpoint solution that meets the following requirements:

• Enforces compliance for Defender for Endpoint by using Conditional Access

• Prevents suspicious scripts from running on devices

What should you configure? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Question # 41

Options:

Question 42

-

You have a Microsoft 365 subscription that contains the devices shown in the following table.

Question # 42

All the devices will be reimaged and licensed by using subscription activation.

The devices are assigned to the users shown in the following table.

Question # 42

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Question # 42

Options:

Question 43

You use Microsoft Defender for Endpoint to protect computers that run Windows 10.

You need to assess the differences between the configuration of Microsoft Defender for Endpoint and the Microsoft-recommended configuration baseline.

Which tool should you use?

Options:

A.

Microsoft Defender for Endpoint Power 81 app

B.

Microsoft Secure Score

C.

Endpoint Analytics

D.

Microsoft 365 Defender portal

Question 44

You have a Microsoft 365 E5 subscription. The subscription contains devices that are Microsoft Entra joined and enrolled in Microsoft Intune.

You create a user named User1.

You need to ensure that User1 can rotate Bitlocker recovery keys by using Intune.

Solution: From the Microsoft Intune admin center, you assign the Help Desk Operator role to User1.

Does this meet the goal?

Options:

A.

Yes

B.

No

Question 45

You have a Microsoft Deployment Toolkit (MDT) deployment shore.

You plan to deploy Windows 11 by using the Standard Client Task Sequence template.

You need to modify the task sequence to perform the following actions:

• Format disks to support Unified Extensible Firmware Interface (UEFl).

• Create a recovery partition.

Which phase of the Task sequence should you modify?

Options:

A.

Preinstall

B.

Install

C.

Initialization

D.

Post Install

Question 46

Your company has a Microsoft 365 subscription.

All the users in the finance department own personal devices that run iOS or Android. All the devices are enrolled in Microsoft Intune.

The finance department adds new users each month.

The company develops a mobile application named App1 for the finance department users.

You need to ensure that only the finance department users can download Appl.

What should you do first?

Options:

A.

Register App1 in Microsoft Entra.

B.

Add App1 to the vendor stores for iOS and Android applications.

C.

Add App1 to a Microsoft Deployment Toolkit (MDT) deployment share.

D.

Add App1 to Intune.

Question 47

You have devices enrolled in Microsoft Intune as shown in the following table.

Question # 47

Intune includes the device compliance policies shown in the following table.

Question # 47

The device compliance policies have the assignments shown in the following table.

Question # 47

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question # 47

Options:

Question 48

Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10. You have the groups shown in the following table.

Question # 48

Which groups can you add to Group4?

Options:

A.

Group2only

B.

Group1 and Group2 only

C.

Group2 and Group3 only

D.

Group1, Group2, and Group3

Question 49

You have the Windows 10 devices shown in the following table.

Question # 49

You plan to upgrade the devices to Windows 11 Enterprise.

On which devices can you perform a direct in-place upgrade to Windows 11 Enterprise?

Options:

A.

Device3 only

B.

Device 3 and Device 4 only

C.

Device2. Device3. and Devtce4 only

D.

Device1. Device3, and Devtce4 only

E.

Device1, Device2. Device3. and Devke4 only

Question 50

You have a Microsoft 365 E5 subscription.

You create an app protection policy for Android devices named Policy1 as shown in the following exhibit.

Question # 50

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

Question # 50

Options:

Question 51

Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 8.1.

Computer1 has apps that are compatible with Windows 10.

You need to perform a Windows 10 in-place upgrade on Computer1.

Solution: You copy the Windows 10 installation media to a network share. You start Computer1 from Windows PE (WinPE), and then you run setup.exe from the network share.

Does this meet the goal?

Options:

A.

Yes

B.

No

Question 52

You have an Azure AD tenant that contains the devices shown in the following table.

Question # 52

You purchase Windows 11 Enterprise E5 licenses.

Which devices can use Subscription Activation to upgrade to Windows 11 Enterprise?

Options:

A.

Device1 only

B.

Device1 and Device2 only

C.

Device1 and Device3 only

D.

Device1, Device2, Device3, and Device4

Page: 1 / 35
Total 346 questions