Practice Free MD-102 Exam Online Questions

HOTSPOT

You have a Microsoft 365 E5 subscription that uses Microsoft Intune.

You need to ensure that users can only enroll devices that meet the following requirements:

• Android devices that support the use of work profiles.

• iOS devices that run iOS 11.0 or later.

Which two restrictions should you modify? To answer, select the restrictions in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Box 1: Android device administrator, Platform: Block

Restrict devices running on the following platforms:

• Android device administrator

• Android Enterprise work profile

• iOS/iPadOS

• macOS

• Windows

Note: If you allow both Android platforms for the same group, devices that support work profile will enroll with a work profile. Devices that don’t support it will enroll on the Android device administrator platform. Neither work profile nor device administrator enrollment will work until you complete all prerequisites for Android enrollment.

Box 2: iOS/PadOS, Allow min/max Range: Min

Reference: https://docs.microsoft.com/en-us/mem/intune/enrollment/enrollment-restrictions-set

You have a Microsoft 365 subscription.

You have devices enrolled in Microsoft Intune as shown in the following table.

To which devices can you deploy apps by using Intune?

Reveal Solution Hide Solution

You have a Microsoft 365 E5 subscription and 100 unmanaged iPad devices.

You need to deploy a specific iOS update to the devices. Users must be prevented from manually installing a more recent version of iOS.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

In the Microsoft 365 Apps admin center, you create a Microsoft Office customization.

Which users can download the Office customization file from the admin center?

Reveal Solution Hide Solution

You have a Microsoft 365 subscription that includes Microsoft Intune.

You plan to use Windows Autopilot to deploy Windows 11 devices.

You need to meet the following requirements during Autopilot provisioning:

• Display the app and profile configuration progress.

• Block users from using the devices until all apps and profiles are installed

What should you configure?

Reveal Solution Hide Solution

You have a Microsoft 365 E5 subscription.

All devices are enrolled in Microsoft Intune.

You create a Conditional Access policy named Policy1 that requires multifactor authentication (MFA).

You need to ensure that Policy1 only applies to devices marked as noncompliant.

Which settings of Policy1 should you configure?

Reveal Solution Hide Solution

HOTSPOT

You have a Microsoft 365 subscription that contains a user named User1.

The subscription contains devices enrolled in Microsoft Intune as shown in the following table.

Microsoft Edge is available on all the devices.

Intune has the device compliance policies shown in the following table.

The Compliance policy settings are configured as shown in the exhibit. (Click the Exhibit tab.)

You create the following Conditional Access policy:

• Name: Policy1

• Assignments

o Users and groups: User1

o Cloud apps or actions: Office 365 SharePoint Online

• Access controls

o Grant Require device to be marked as compliant

• Enable policy: On

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Box 1: Yes

Device1 is member of Group1.

No compliance policy applies to Group1.

From the Compliance policy settings exhibit we see: Mark devices with no compliance policy assigned as:

Compliant

Device1 is marked as compliant.

Policy1 is assigned to User1.

User1 on Device1 will be granted access to SharePoint online through Policy1.

Box 2: Yes

Device2 is member of Group2.

Compliance1 is applied to Group2.

Compliance1 requires encryption of data storage on device.

Device2 has disk encryption configured.

Compliance1 marks Device2 as compliant.

User1 on Device2 will be granted access to SharePoint online through Policy1.

Box 3: No

Device3 is member of Group3.

Compliance2 is applied to Group3.

Compliance2 requires encryption of data storage on device.

Device3 has not disk encryption configured.

Compliance1 marks Device3 as non-compliant.

Policy1 will not grant User1 access through Device3.

Reference: https://learn.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started

HOTSPOT

You have the Microsoft Deployment Toolkit (MDT) installed in three sites as shown in the following table.

You use Distributed File System (DFS) Replication to replicate images in a share named Production.

You configure the following settings in the Bootstrap.ini file.

You plan to deploy Windows 10 to the computers shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Box 1: No

Box 2: Yes

Box 3: Yes

Reference: https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/build-a-distributed-environment-for-windows-10-deployment

You have a Microsoft 365 subscription that contains 1,000 Android devices enrolled in Microsoft Intune.

You create an app configuration policy that contains the following settings:

• Device enrollment type: Managed devices

• Profile Type: All Profile Types

• Platform: Android Enterprise

Which two types of apps can be associated with the policy? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

HOTSPOT

You have a Microsoft 365 subscription.

You plan to enroll devices in Microsoft Intune that have the platforms and versions shown in the following table.

You need to configure device enrollment to meet the following requirements:

• Ensure that only devices that have approved platforms and versions can enroll in Microsoft Intune.

• Ensure that devices are added to Microsoft Entra groups based on a selection made by users during the enrollment.

Which device enrollment setting should you configure for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Box 1: Enrollment restrictions

As an Intune administrator, you can create and manage enrollment restrictions that define what devices can enroll into management with Intune, including the:

Number of devices.

Operating systems and versions.

Box 2: Device categories

To make managing devices easier, you can use Microsoft Intune device categories to automatically add devices to groups based on categories that you define.

Device categories use the following workflow:

Create categories that users can choose from when they enroll their device.

When users of iOS/iPadOS and Android devices enroll a device, they must choose a category from the list of categories you configured. To assign a category to a Windows device, users must use the Company Portal website.

You can then deploy policies and apps to these groups.

You can create any device categories you want. For example:

– Point-of-sale device

– Demonstration device

– Sales

– Accounting

– Manager

Reference:

https://docs.microsoft.com/en-us/mem/intune/enrollment/enrollment-restrictions-set

https://docs.microsoft.com/en-us/mem/intune/enrollment/device-group-mapping