Valid MD-102 Exam Dumps are Your best Choice to Pass

1. You have 200 computers that run Windows 10. The computers are joined to Microsoft Entra and enrolled in Microsoft Intune.

You need to enable self-service password reset on the sign-in screen.

Which settings should you configure from the Microsoft Intune admin center?

2. You use Microsoft Defender for Endpoint to protect computers that run Windows 10.

You need to assess the differences between the configuration of Microsoft Defender for Endpoint and the Microsoft-recommended configuration baseline.

Which tool should you use?

3. HOTSPOT

You have a Microsoft 365 E5 subscription that uses Microsoft Intune.

Devices are enrolled in Intune as shown in the following table.





The devices are the members of groups as shown in the following table.





You create an iOS/iPadOS update profile as shown in the following exhibit.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

4. HOTSPOT

You have a Microsoft 365 E5 subscription. All devices are enrolled in Microsoft Intune.

You have a device group named Group1 that contains five Windows 11 devices.

You need to ensure that the devices in Group1 automatically receive new Windows 11 builds before the builds are released to the public.

What should you configure in Intune? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

5. DRAG DROP

You have a Microsoft 365 subscription that uses Microsoft Intune.

You plan to use Windows Autopilot to provision 25 Windows 11 devices.

You need to meet the following requirements during device provisioning:

• Display the progress of app and profile deployments.

• Join the devices to Azure AD.

What should you configure to meet each requirement? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

6. You have a Microsoft 365 E5 subscription that contains 100 iOS devices enrolled in Microsoft Intune.

You need to ensure that notifications of iOS updates are deferred for 30 days after the updates are released.

What should you create?

7. You have a Microsoft 365 E5 subscription that contains 100 iOS devices enrolled in Microsoft Intune.

You need to deploy a custom line-of-business (LOB) app to the devices by using Intune.

Which extension should you select for the app package file?

8. DRAG DROP

You have a Microsoft 365 subscription that contains the devices shown in the following table.





You need to ensure that only devices running trusted firmware or operating system builds can access network resources.

Which compliance policy setting should you configure for each device? To answer, drag the appropriate settings to the correct devices. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

9. You have a Microsoft 365 subscription that uses Microsoft Intune.

You have five new Windows 11 Pro devices.

You need to prepare the devices for corporate use.

The solution must meet the following requirements:

• Install Windows 11 Enterprise on each device.

• Install a Windows Installer (MSI) package named App1 on each device.

• Add a certificate named Certificate1 that is required by App1.

• Join each device to Azure AD.

Which three provisioning options can you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

10. HOTSPOT

You have an Azure subscription that is linked to a Microsoft Entra tenant.

The tenant contains the devices shown in the following table.





You install the Azure Monitor Agent on all supported devices.

You create a monitored object (MO) and associate the MO to a data collection rule (DCR) named DCR1.

You configure DCR1 as shown in the following exhibit.





For each of the following statements, select Yes if the statement is true. Otherwise, select No.

11. You have 200 computers that run Windows 10 and are joined to an Active Directory domain.

You need to enable Windows Remote Management (WinRM) on all the computers by using Group Policy.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

12. HOTSPOT

You have a Microsoft 365 subscription that contains the devices shown in the following table.





You plan to enroll the devices in Microsoft Intune.

How often will the compliance policy check-ins run after each device is enrolled in Intune? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

13. You have a Microsoft 365 subscription that contains 1,000 iOS devices and includes Microsoft Intune.

You need to prevent the printing of corporate data from managed apps on the devices.

What should you configure?

14. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has a Microsoft Entra tenant named contoso.com that contains several Windows 10 devices.

When you join new Windows 10 devices to contoso.com, users are prompted to set up a four-digit pin.

You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 10 devices to contoso.com.

Solution: From the Microsoft Entra admin center, you modify the User settings and the Device settings.

Does this meet the goal?

15. HOTSPOT

You have 100 computers that run Windows 10. You have no servers. All the computers are joined to a Microsoft Entra tenant.

The computers have different update settings, and some computers are configured for manual updates.

You need to configure Windows Update.

The solution must meet the following requirements:

• The configuration must be managed from a central location.

I• nternet traffic must be minimized.

• Costs must be minimized.

How should you configure Windows Update? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

16. HOTSPOT

Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant.

You have a Microsoft 365 subscription.

You plan to use Windows Autopilot to deploy new Windows devices.

You plan to create a deployment profile.

You need to ensure that the deployment meets the following requirements:

• Devices must be joined to AD DS regardless of their current working location.

• Users in the marketing department must have a line-of-business (LOB) app installed during the deployment.

The solution must minimize administrative effort.

What should you do for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

17. HOTSPOT

You have a Microsoft 365 subscription that contains 1,000 iOS devices.

The devices are enrolled in Microsoft Intune as follows:

• Two hundred devices are enrolled by using the Intune Company Portal.

• Eight hundred devices are enrolled by using Apple Automated Device Enrollment (ADE).

You create an iOS/iPadOS software updates policy named Policy 1 that is configured to install iOS/iPadOS 15.5.

How many iOS devices will Policy1 update, and what should you configure to ensure that only iOS/iPadOS 15.5 is installed? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

18. You have a Microsoft 365 subscription that includes Microsoft Intune.

You have an update ring named UpdateRing1 that contains the following settings:

• Automatic update behavior: Auto install and restart at a scheduled time

• Automatic behavior frequency: First week of the month

• Scheduled install day: Tuesday

• Scheduled install time: 3 AM

From the Microsoft Intune admin center, you select Uninstall for the feature updates of UpdateRing1.

When will devices start to remove the feature updates?

19. HOTSPOT

Your network contains an Active Directory domain named adatum.com, a workgroup, and computers that run Windows 10.

The computers are configured as shown in the following table.





The local Administrator accounts on Computer1, Computer2, and Computer3 have the same user name and password.

On Computer1, Windows Defender Firewall is configured as shown in the following exhibit.





The services on Computer1 have the following states.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

20. You have the Windows 10 devices shown in the following table.





You plan to upgrade the devices to Windows 11 Enterprise.

On which devices can you perform a direct in-place upgrade to Windows 11 Enterprise?

21. You have a Microsoft 365 E5 subscription.

All Windows devices are enrolled in Microsoft Intune.

You need to deploy the Remote Help app to all the devices. The solution must minimize administrative effort.

Which type of app should you deploy?

22. You have a Hyper-V host that contains the virtual machines shown in the following table.





On which virtual machines can you install Windows 11?

23. Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10.

You have the groups shown in the following table.





Which groups can you add to Group4?

24. You have computers that run Windows 11 Pro. The computers are joined to Microsoft Entra and enrolled in Microsoft Intune.

You need to upgrade the computers to Windows 11 Enterprise.

What should you configure in Intune?

25. You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

You use Microsoft Intune to manage devices.

You use Windows Autopilot to deploy Windows 11 to devices.

A support engineer reports that when a deployment fails, they cannot collect deployment logs from failed device.

You need to ensure that when a deployment fails, the deployment logs can be collected.

What should you configure?

26. You have a Microsoft 365 tenant that contains the objects shown in the following table.





You are creating a compliance policy named Compliance1.

Which objects can you specify in Compliance1 as additional recipients of noncompliance notifications?

27. You have a Microsoft 365 E5 subscription.

You need to configure the automated investigation and response (AIR) remediation level for a device named Device1 to require approval for all folders.

What should you create?

28. HOTSPOT

You have a Microsoft Intune subscription that has the following device compliance policy settings:

• Mark devices with no compliance policy assigned as: Compliant

• Compliance status validity period (days): 14

On January1, you enroll Windows 10 devices in Intune as shown in the following table.





On January 4, you create the following two device compliance policies:

• Name: Policy1

• Platform: Windows 10 and later

• Require BitLocker: Require

• Mark device noncompliant: 5 days after noncompliance

• Scope (Tags): Tag1

• Name: Policy2

• Platform: Windows 10 and later

• Firewall: Require

• Mark device noncompliant: Immediately

• Scope (Tags): Tag2

On January 5, you assign Policy1 and Policy2 to Group1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

29. You have a Microsoft 365 E5 subscription.

You need to enroll Android Enterprise devices in Microsoft Intune by using zero-touch enrollment.

What should you do first?

30. HOTSPOT

Your network contains an Active Directory domain.

The domain contains four computers named Computer1, Computer2, Computer3, and Computer4 that run Windows 10.

You perform the following actions:

• On Computer1, you install Windows Admin Center and configure Windows Defender Firewall to allow incoming communication over TCP ports 80,443, and 6516.

• On Computer2, you run the Enable-PSRemoting cmdlet.

• On Computer3, you configure Windows Defender Firewall to allow Windows Remote Management (WinRM) traffic.

• On Computer4, you run the winrm quickconfig command.

You need to manage the computers remotely by using Windows Admin Center.

From which computers can you connect to Windows Admin Center, and which computers can you manage by using Windows Admin Center? To answer, select the appropriate options in the answer are. NOTE: Each correct selection is worth one point.

31. You have a Microsoft Entra tenant and 100 Windows 10 devices that are Microsoft Entra joined and managed by using Microsoft Intune.

You need to configure Microsoft Defender Firewall and Microsoft Defender Antivirus on the devices. The solution must minimize administrative effort.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

32. HOTSPOT

To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

33. HOTSPOT

You have a Microsoft 365 subscription.

All computers are enrolled in Microsoft Intune.

You have business requirements for securing your Windows 11 environment as shown in the following table.





What should you implement to meet each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

34. Your company implements Microsoft Entra ID, Microsoft 365, Microsoft Intune.

The company's security policy states the following:

• Personal devices do not need to be enrolled in Intune.

• Users must authenticate by using a PIN before they can access corporate email data.

• Users can use their personal iOS and Android devices to access corporate cloud services.

• Users must be prevented from copying corporate email data to a cloud storage service other than Microsoft OneDrive for Business.

You need to configure a solution to enforce the security policy.

What should you create?

35. Your network contains an Active Directory domain named contoso.com. The domain contains two computers named Computer1 and Computer2 that run Windows 10.

On Computer1, you need to run the Invoke-Command cmdlet to execute several PowerShell commands on Computer2.

What should you do first?

36. You need to assign the same deployment profile to all the computers that are configured by using Windows Autopilot.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

37. HOTSPOT

You have a Microsoft 365 subscription that contains the devices shown in the following table.





All the devices will be reimaged and licensed by using subscription activation.

The devices are assigned to the users shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

38. You use Windows Admin Center to remotely administer computers that run Windows 10.

When connecting to Windows Admin Center, you receive the message shown in the following exhibit.





You need to prevent the message from appearing when you connect to Windows Admin Center.

To which certificate store should you import the certificate?

39. You have a Microsoft Deployment Toolkit (MDT) deployment share named DS1.

In the Out-of-Box Drivers node, you create folders that contain drivers for different hardware models.

You need to configure the Inject Drivers MDT task to use PnP detection to install the drivers for one of the hardware models.

What should you do first?

40. You have a Microsoft 365 subscription that contains devices enrolled in Microsoft Intune as shown in the following table.





On which devices can you use Device query?

41. DRAG DROP

You have an on-premises Active Directory domain that syncs to a Microsoft Entra tenant.

The tenant contains computers that run Windows 10. The computers are hybrid Microsoft Entra joined and enrolled in Microsoft Intune.

The Microsoft Office settings on the computers are configured by using a Group Policy Object (GPO).

You need to migrate the GPO to Intune.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

42. You have a Microsoft Intune subscription.

You have devices enrolled in Intune as shown in the following table.





An app named App1 is installed on each device.

What is the minimum number of app configuration policies required to manage App1?

43. You have a Microsoft 365 subscription that contains a user named User1 and uses Microsoft Intune Suite.

You use Microsoft Intune to manage devices that run Windows 11.

User provides remote support for 75 devices in the marketing department.

You need to add User1 to the Remote Desktop Users group on each marketing department device.

What should you configure?

44. You are implementing Microsoft Intune Suite.

You enroll devices in Intune as shown in the following table.





The performance of which devices can be analyzed by using Endpoint analytics?

45. HOTSPOT

You have a Microsoft 365 subscription.

You need to enable passwordless authentication for all users.

The solution must meet the following requirements:

• Users in the research department cannot use mobile devices and must authenticate from unmanaged Linux devices by using an alternative method.

• To access services, users in the sales department must authenticate by using their mobile phone.

• Administrative effort must be minimized.

Which authentication method should you use for each department? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

46. You have a Microsoft 365 E5 subscription that contains a user named User1 and a web app named App1.

Security defaults are disabled for the subscription.

App1 must only accept modern authentication requests.

You plan to create a Conditional Access policy named CAPolicy1 that will have the following settings:

Assignments

- Users or workload identities: User1

- Cloud apps or actions: App1

• Access controls

- Grant: Block access

You need to block only legacy authentication requests to App1.

Which condition should you add to CAPolicy1?

47. DRAG DROP

You have a Microsoft 365 subscription that contains two users named User1 and User2.

You need to ensure that the users can perform the following tasks:

• User1 must be able to create groups and manage users.

• User2 must be able to reset passwords for nonadministrative users.

The solution must use the principle of least privilege.

Which role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

48. You have a Microsoft 365 E5 subscription.

All Windows devices are enrolled in Microsoft Intune.

You need to create an app protection policy named Policy1 and apply Policy1 to the devices.

What can you protect by using Policy1?

49. You have a Microsoft 365 E5 subscription.

You need to download a report that lists all the devices that are NOT enrolled in Microsoft Intune and are assigned an app protection policy.

What should you select in the Microsoft Intune admin center?

50. Computer1 is enrolled in Microsoft Intune.

You need to deploy an app named App1 to Computer1. The App1 installation will use multiple files.

What should you use to package App1, and which file format will be used? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

51. HOTSPOT

You have a Microsoft Intune subscription.

You are creating a Windows Autopilot deployment profile named Profile1 as shown in the following exhibit.

Profile1 will be deployed to Windows 10 devices.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

52. HOTSPOT

You have a hybrid environment that contains a Microsoft Entra tenant and an on-premises Active Directory Domain Services (AD DS) domain.

The environment contains the devices shown in the following table.





Which Microsoft Entra join type can each device use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

53. You have a Microsoft 365 E5 subscription. The subscription contains 25 computers that run Windows 11 and are enrolled in Microsoft Intune.

You need to onboard the devices to Microsoft Defender for Endpoint.

What should you create in the Microsoft Intune admin center?

54. You have a Microsoft Deployment Toolkit (MDT) deployment share.

You plan to deploy Windows 11 by using the Standard Client Task Sequence template.

You need to modify the task sequence to perform the following actions:

• Format disks to support Unified Extensible Firmware Interface (UEFl).

• Create a recovery partition.

Which phase of the task sequence should you modify?

55. You have a Microsoft 365 subscription that contains 500 computers that run Windows 11. The computers are Azure AD joined and are enrolled in Microsoft Intune.

You plan to manage Microsoft Defender Antivirus on the computers.

You need to prevent users from disabling Microsoft Defender for Endpoint.

What should you do?

56. You have a Microsoft Entra group named Group1. Group1 contains two Windows 10 Enterprise devices named Device1 and Device2.

You create a device configuration profile named Profile1. You assign Profile1 to Group1. You need to ensure that Profile1 applies to Device1 only.

What should you modify in Profile1?

57. HOTSPOT

You have a Microsoft 365 E5 subscription that uses Microsoft Intune.

You have the Windows 11 devices shown in the following table.





You deploy the device compliance policy shown in the exhibit. (Click the Exhibit tab.)





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

58. HOTSPOT

You have a Microsoft 365 E5 subscription.

You need to review and implement Microsoft 365 Defender device onboarding.

The solution must meet the following requirements:

• View onboarded devices that have the Chromium-based version of Microsoft Edge installed,

• Download an onboarding package for a Windows 11 device.

• Minimize administrative effort.

Which two settings should you use in the Microsoft 365 Defender portal? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

59. HOTSPOT

You have a Microsoft Entra tenant that contains the users shown in the following table.





When you sign in to the tenant, the available verification methods are shown in the following exhibit.





Which users will be prompted for the verification code method, and which users will be prompted for the text method? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

60. HOTSPOT

You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.





The subscription contains the dynamic device groups shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

61. You have a Microsoft 365 subscription.

You need to provide a user the ability Security defaults and create Conditional Access policies. The solution must use the principle of least privilege.

Which role should you assign to the user?

62. Your network contains an on-premises Active Directory domain and an Azure AD tenant.

The Default Domain Policy Group Policy Object (GPO) contains the settings shown in the following table.





You need to migrate the existing Default Domain Policy GPO settings to a device configuration profile.

Which device configuration profile type template should you use?

63. HOTSPOT

You have a Microsoft 365 E5 subscription.

You create an app protection policy for Android device named Policy1 as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

64. You have a Microsoft 365 tenant that contains the devices shown in the following table.





The devices are managed by using Microsoft Intune.

You create a compliance policy named Policy1 and assign Policy1 to Group1. Policy1 is configured to mark a device as Compliant only if the device security settings match the settings specified in the policy.

You discover that devices that are not members of Group1 are shown as Compliant.

You need to ensure that only devices that are assigned a compliance policy can be shown as Compliant. All other devices must be shown as Not compliant.

What should you do from the Microsoft Intune admin center?

65. HOTSPOT

You use the Microsoft Deployment Toolkit (MDT) to deploy Windows 11.

You need to modify the deployment share to meet the following requirements:

• Ensure that the user who performs the installation is prompted to set the local Administrator password

• Define a rule for how to name computers during the deployment.

The solution must NOT replace the existing WinPE image.

Which file should you modify for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

66. HOTSPOT

You have groups that use the Dynamic Device membership type as shown in the following table.





You are deploying Microsoft 365 apps.

You have devices enrolled in Microsoft Intune as shown in the following table.





In the Microsoft Intune admin center, you create a Microsoft 365 Apps app as shown in the exhibit. (Click the Exhibit tab.)





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

67. HOTSPOT

You have 100 Windows 10 devices enrolled in Microsoft Intune.

You need to configure the devices to retrieve Windows updates from the internet and from other computers on a local network.

Which Delivery Optimization setting should you configure, and which type of Intune object should you create? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

68. HOTSPOT

You have a Microsoft 365 E5 subscription.

You need to route Microsoft Intune logs to an Azure resource that supports the use of visuals, monitoring, and alerting.

Which settings should you configure in Intune, and which resource should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

69. DRAG DROP

You have a computer that runs Windows 10 and contains two local users named User1 and User2.

You need to ensure that the users can perform the following actions:

• User 1 must be able to adjust the date and time.

• User2 must be able to clear Windows logs.

The solution must use the principle of least privilege.

To which group should you add each user? To answer, drag the appropriate groups to the correct users. Each group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

70. You have a Microsoft Deployment Toolkit (MDT) deployment share.

From the Deployment Workbench, you open the New Task Sequence Wizard and select the Standard Client Upgrade Task Sequence task sequence template.

You discover that there are no operating system images listed on the Select OS page as shown in the following exhibit.





You need to be able to select an operating system image to perform a Windows 11 in-place upgrade.

What should you do?

71. You are creating a device configuration profile in Microsoft Intune.

You need to configure specific OMA-URI settings in the profile.

Which profile type template should you use?

72. You have a Microsoft 365 E5 subscription.

You need to create a dynamic device group that will contain any device that has the word Marketing in its name.

Which device membership rule should you use?

73. Your network contains an Active Directory domain named contoso.com. The domain contains 25 computers that run Windows 11.

You have a Microsoft 365 subscription.

You have a Microsoft Entra tenant that syncs with contoso.com.

You configure hybrid Microsoft Entra join and discover that some of the computers have a registered state of Pending.

You need to ensure that the computers complete the join successfully.

What should you ensure?

74. HOTSPOT

You have a Microsoft 365 subscription.

You use Microsoft Intune Suite to manage devices.

You have the iOS app protection policy shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

75. Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.

After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.

You have a Microsoft Entra tenant named contoso.com.

You purchase an Android device named Device1.

You need to register Device1 in contoso.com.

Solution: You use the Microsoft Intune Company Portal app.

Does this meet the goal?

76. You have a Microsoft 365 tenant that contains the objects shown in the following table.





In the Microsoft Intune admin center, you are creating a Microsoft 365 Apps app named App1. To which objects can you assign App1?

77. You have a Microsoft 365 subscription.

You use app protection policies to protect corporate data on Android devices.

You need to ensure that any user connecting from an Android device can only access the corporate data if they connect from an app that supports mobile application management (MAM).

What should you configure?

78. You have 25 computers that run Windows 10 Pro.

You have a Microsoft 365 E5 subscription that uses Microsoft Intune.

You need to upgrade the computers to Windows 11 Enterprise by using an in-place upgrade. The solution must minimize administrative effort.

What should you use?

79. You have a Microsoft 365 subscription that contains Windows 11 devices enrolled in Microsoft Intune.

You need to use Device query to identify whether a critical security patch was installed on a device.

Which table should you target?

80. You need to implement mobile device management (MDM) for personal devices that run Windows 11.

The solution must meet the following requirements:

• Ensure that you can manage the personal devices by using Microsoft Intune.

• Ensure that users can access company data seamlessly from their personal devices.

• Ensure that users can only sign in to their personal devices by using their personal account.

What should you use to add the devices to Microsoft Entra?

81. HOTSPOT

You have a Microsoft 365 subscription that uses Microsoft Intune and contains the users shown in the following table.





Group2 has been assigned in the Enrollment Status Page.

You have the devices shown in the following table.





You capture and upload the hardware IDs of the devices in the marketing department.

You configure Windows Autopilot.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

82. You plan to deploy Windows 11 Pro to 200 new computers by using the Microsoft Deployment Toolkit (MDT) and Windows Deployment Services (WDS).

The company has a Volume Licensing Agreement and uses a product key to activate Windows 11.

You need to ensure that the new computers will be configured to have the correct product key during the installation.

What should you configure?

83. You have the devices shown in the following table.





You plan to implement Microsoft Defender for Endpoint.

You need to identify which devices can be onboarded to Microsoft Defender for Endpoint.

What should you identify?

84. You have a Microsoft 365 subscription that includes Microsoft Intune. The subscription contains Windows 11 devices enrolled in Intune. The subscription contains three groups named Departement1, Department2, and Department3.

You need to deploy Microsoft 365 Apps to the Windows 11 devices. The solution must meet the following requirements:

• Users in Department1 and Department2 must receive the full Microsoft 365 Apps suite, including Microsoft Project and Visio.

• Users in Department3 must receive the full Microsoft 365 Apps suite, including Microsoft Project, but without Visio.

• All other users must receive the full Microsoft 365 Apps suite without Microsoft Project or Visio.

What is the minimum number of deployments you should create?

85. HOTSPOT

You have a Microsoft 365 subscription.

You have 25 Microsoft Surface Hub devices that you plan to manage by using Microsoft Intune.

You need to configure the devices to meet the following requirements:

• Enable Windows Hello for Business.

• Configure Microsoft Defender SmartScreen to block users from running unverified files.

Which profile type template should you use for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

86. You have a Microsoft 365 E5 subscription.

You use Microsoft Intune to manage all devices.

You need to prepare a Win32 app named App1.exe for deployment.

What should you do first?

87. You have a Microsoft 365 E5 subscription that contains a user named User1 and uses Microsoft Intune Suite.

You use Microsoft Intune to manage devices.

You have a device named Device1 that is enrolled in Intune.

You need to ensure that User1 can use Remote Help from the Intune admin center for Device1.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

88. You have a Windows 11 capable device named Device1 that runs the 64-bit version of Windows 10 Enterprise and has Microsoft Office 2019 installed.

You have the Windows 11 Enterprise images shown in the following table.





Which images can be used to perform an in-place upgrade of Device1?

89. You have a Microsoft 365 subscription.

You have devices enrolled in Microsoft Intune as shown in the following table.





To which devices can you deploy apps by using Intune?

90. DRAG DROP

You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint.

You plan to onboard the following types of devices to Defender for Endpoint:

• macOS

• Linux Server

What should you use to onboard each device? To answer, drag the appropriate tools to the correct device types. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

91. You have a Microsoft 365 subscription.

You use Microsoft Intune to manage Windows 11 devices.

You need to implement passwordless authentication that requires users to use number matching.

Which authentication method should you use?

92. HOTSPOT

You have a Microsoft 365 subscription.

Users have iOS devices that are not enrolled in Microsoft Intune.

You create an app protection policy for the Microsoft Outlook app as shown in the exhibit. (Click the Exhibit tab.)





You need to configure the policy to meet the following requirements:

Prevent the users from using the Outlook app if the operating system version is less than 12.0.0.

Require the users to use an alphanumeric passcode to access the Outlook app.

What should you configure in an app protection policy for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

93. HOTSPOT

You have 200 computers that run Windows 10. The computers are joined to Microsoft Entra and enrolled in Microsoft Intune.

You need to configure an Intune device configuration profile to meet the following requirements:

• Prevent Microsoft Office applications from launching child processes.

• Block users from transferring files over FTP.

Which two settings should you configure in the Endpoint protection configuration profile? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

94. You have a Microsoft 365 E5 subscription and 25 Apple iPads.

You need to enroll the iPads in Microsoft Intune by using the Apple Configurator enrollment method.

What should you do first?

95. You have a Microsoft 365 subscription that includes Microsoft Intune. The subscription contains corporate-owned, fully managed Android Enterprise devices.

You plan to deploy a configuration profile that will have a device restrictions profile type named Profile1.

Profile1 will assign maintenance windows for system updates.

What should you configure from the Configuration settings for Profile1?

96. Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.

After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.

You have a Microsoft Entra tenant named contoso.com.

You purchase an Android device named Device1.

You need to register Device1 in contoso.com.

Solution: You use Microsoft Entra Connect.

Does this meet the goal?

97. HOTSPOT

You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

You use Microsoft Intune to manage devices.

Microsoft Entra joined Windows devices enroll automatically in Intune.

You have the devices shown in the following table.





You are preparing to upgrade the devices to Windows11. All the devices are compatible with Windows 11.

You need to evaluate Windows Autopilot and in-place upgrade as deployment methods to implement Windows 11 Pro on the devices, while retaining all user settings and applications.

Which devices can be upgraded by using each method? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

98. HOTSPOT

You have a Microsoft 365 E5 subscription that contains three Windows devices named Device1, Device2, and Device3.

Each device contains two apps named App1 and App2.

You manage the devices by using Microsoft Intune.

The subscription contains the groups shown in the following table.





You have an Endpoint Privilege Management (EPM) elevation settings policy named Policy1 that has the following settings:

• Endpoint Privilege Management: Enabled

• Default elevation response: Require user confirmation

• Validation: Windows authentication

• Assignments: Group1, Group2

You create an Endpoint Privilege Management elevation rules policy named RulesPolicy1 that has the following settings:

• Rule name: Rule1

• Elevation type: Automatic

• Child process behavior: Deny all

• File name: App1.exe

• Assignments: Group1

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

99. You have a Microsoft Intune subscription associated to a Microsoft Entra tenant named contoso.com.

Users use one of the following three suffixes when they sign in to the tenant: us.contoso.com, eu.contoso.com, or contoso.com.

You need to ensure that the users are NOT required to specify the mobile device management (MDM) enrollment URL as part of the enrollment process. The solution must minimize the number of changes.

Which DNS records do you need?