Microsoft MD-102 Exam Practice Questions (P. 2)
- Full Access (370 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #11
You have a Microsoft 365 E5 subscription that contains 100 iOS devices enrolled in Microsoft Intune.
You need to deploy a custom line-of-business (LOB) app to the devices by using Intune.
Which extension should you select for the app package file?
You need to deploy a custom line-of-business (LOB) app to the devices by using Intune.
Which extension should you select for the app package file?
- A.intunemac
- B.ipaMost Voted
- C.apk
- D.appx
Correct Answer:
B
B

When deploying a line-of-business (LOB) application to iOS devices via Microsoft Intune, the correct file extension to use is .ipa. The choice of .ipa is necessary because it is the standard packaging format for iOS applications, ensuring compatibility and seamless installation on the enrolled devices.
send
light_mode
delete
Question #12
You have a Microsoft 365 E5 subscription that contains a user named User1 and a web app named App1.
App1 must only accept modern authentication requests.
You plan to create a Conditional Access policy named CAPolicy1 that will have the following settings:
Assignments -
Users or workload identities: User1
Cloud apps or actions: App1 -
Access controls -
Grant: Block access -
You need to block only legacy authentication requests to App1.
Which condition should you add to CAPolicy1?
App1 must only accept modern authentication requests.
You plan to create a Conditional Access policy named CAPolicy1 that will have the following settings:
Assignments -
Users or workload identities: User1
Cloud apps or actions: App1 -
Access controls -
Grant: Block access -
You need to block only legacy authentication requests to App1.
Which condition should you add to CAPolicy1?
- AFilter for devices
- BDevice platforms
- CUser risk
- DSign-in risk
- EClient appsMost Voted
Correct Answer:
E
E

To ensure App1 only accepts modern authentication requests and blocks legacy ones, select the 'Client apps' condition in the Conditional Access policy setup. This setting allows you to specify access control on the basis of the type of client app used, effectively enabling you to block legacy authentication methods while allowing modern authentication. This approach ensures that only secure and updated authentication methods are permitted, thus enhancing the security posture of your app environment.
send
light_mode
delete
Question #13
HOTSPOT -
All users have Microsoft 365 apps deployed.
You need to configure Microsoft 365 apps to meet the following requirements:
Enable the automatic installation of WebView2 Runtime.
Prevent users from submitting feedback.
Which two settings should you configure in the Microsoft 365 Apps admin center? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
All users have Microsoft 365 apps deployed.
You need to configure Microsoft 365 apps to meet the following requirements:
Enable the automatic installation of WebView2 Runtime.
Prevent users from submitting feedback.
Which two settings should you configure in the Microsoft 365 Apps admin center? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.

send
light_mode
delete
Question #14
You have a Microsoft 365 subscription.
You have 10 computers that run Windows 10 and are enrolled in mobile device management (MDM).
You need to deploy the Microsoft 365 Apps for enterprise suite to all the computers.
What should you do?
You have 10 computers that run Windows 10 and are enrolled in mobile device management (MDM).
You need to deploy the Microsoft 365 Apps for enterprise suite to all the computers.
What should you do?
- AFrom the Microsoft Intune admin center, create a Windows 10 device profile.
- BFrom Azure AD, add an app registration.
- CFrom Azure AD, add an enterprise application.
- DFrom the Microsoft Intune admin center, add an app.Most Voted
Correct Answer:
A
A

To deploy Microsoft 365 Apps for enterprise suite to devices already enlisted in MDM via Microsoft Intune, it is effective to add the application directly within the Intune admin center. This aligns with commonly employed practices and existing functionalities offered by Intune for application management and deployment. Although creating a device profile is an action generally associated with Intune, in this context where applications need to be rolled out to pre-configured systems, adding the application through Intune is the direct approach towards ensuring all selected devices receive the required software efficiently.
send
light_mode
delete
Question #15
You have a Microsoft 365 subscription that uses Microsoft Intune Suite.
You use Microsoft Intune to manage devices.
You have a Windows 11 device named Device1 that is enrolled in Intune. Device1 has been offline for 30 days.
You need to remove Device1 from Intune immediately. The solution must ensure that if the device checks in again, any apps and data provisioned by Intune are removed. User-installed apps, personal data, and OEM-installed apps must be retained.
What should you use?
You use Microsoft Intune to manage devices.
You have a Windows 11 device named Device1 that is enrolled in Intune. Device1 has been offline for 30 days.
You need to remove Device1 from Intune immediately. The solution must ensure that if the device checks in again, any apps and data provisioned by Intune are removed. User-installed apps, personal data, and OEM-installed apps must be retained.
What should you use?
- Aa Delete actionMost Voted
- Ba Retire action
- Ca Fresh Start action
- Dan Autopilot Reset action
Correct Answer:
B
B

The 'Retire' action in Microsoft Intune is perfectly suited for this scenario. When you opt for this action, it ensures that if the device, such as Device1, which has been offline, re-connects, it will automatically purge all company apps and data while preserving user-installed apps and personal information. This aligns with the need to remove the device from management without affecting the personal data and apps installed by the user or OEM.
send
light_mode
delete
Question #16
You have a Microsoft 365 subscription that uses Microsoft Intune Suite.
You use Microsoft Intune to manage devices.
You need to review the startup times and restart frequencies of the devices.
What should you use?
You use Microsoft Intune to manage devices.
You need to review the startup times and restart frequencies of the devices.
What should you use?
- AAzure Monitor
- BIntune Data Warehouse
- CMicrosoft Defender for Endpoint
- DEndpoint analyticsMost Voted
Correct Answer:
D
D

The correct tool to use when you want to review startup times and restart frequencies of devices managed by Microsoft Intune is Endpoint analytics. This feature in Microsoft Endpoint Manager offers deep insights into both device performance and user experience, specifically targeting metrics such as startup times, shutdown times, and restart frequencies. Utilizing Endpoint analytics enables you to identify and address issues that impact device performance, ensuring optimal functioning and improved user experiences.
send
light_mode
delete
Question #17
HOTSPOT -
You have a Microsoft 365 E5 subscription.
You create a new update rings policy named Policy1 as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
You have a Microsoft 365 E5 subscription.
You create a new update rings policy named Policy1 as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

send
light_mode
delete
Question #18
You have computers that run Windows 10 and connect to an Azure Log Analytics workspace. The workspace is configured to collect all available events from the Windows event logs.
The computers have the logged events shown in the following table.

Which events are collected in the Log Analytics workspace?
The computers have the logged events shown in the following table.

Which events are collected in the Log Analytics workspace?
- A1 only
- B2 and 3 only
- C1 and 3 only
- D1, 2, and 4 onlyMost Voted
- E1, 2, 3, and 4
Correct Answer:
D
D
send
light_mode
delete
Question #19
You have a Microsoft 365 E5 subscription that contains 10 Android Enterprise devices. Each device has a corporate-owned work profile and is enrolled in Microsoft Intune.
You need to configure the devices to run a single app in kiosk mode.
Which Configuration settings should you modify in the device restrictions profile?
You need to configure the devices to run a single app in kiosk mode.
Which Configuration settings should you modify in the device restrictions profile?
- AUsers and Accounts
- BGeneral
- CSystem security
- DDevice experienceMost Voted
Correct Answer:
D
D

When setting up Android Enterprise devices in Microsoft Intune for kiosk mode to operate a single app, it's crucial to adjust the settings within the “Device experience” section. Specifically, you'll be looking at options like “Enrollment type - Dedicated” and “Kiosk Mode - Single App” under Device Restrictions. This ensures the device is limited to running only the predefined application, aligning perfectly with corporate requirements for focused and secure device usage.
send
light_mode
delete
Question #20
You have a Microsoft 365 E5 subscription that contains 500 macOS devices enrolled in Microsoft Intune.
You need to ensure that you can apply Microsoft Defender for Endpoint antivirus policies to the macOS devices. The solution must minimize administrative effort.
What should you do?
You need to ensure that you can apply Microsoft Defender for Endpoint antivirus policies to the macOS devices. The solution must minimize administrative effort.
What should you do?
- AOnboard the macOS devices to the Microsoft Purview compliance portal.
- BFrom the Microsoft Intune admin center, create a security baseline.
- CInstall Defender for Endpoint on the macOS devices.Most Voted
- DFrom the Microsoft Intune admin center, create a configuration profile.
Correct Answer:
C
C

User comment 1 provides the clearest reasoning for why choice C is indeed the most straightforward and correct answer. Here's the gist: Microsoft Defender for Endpoint needs to be installed on the macOS devices first to ensure that these devices can then receive and apply antivirus policies. Without installation, merely configuring policies via profiles won't make Defender functional on the devices. Installation, in this context, clearly aligns with the requirement of enabling these devices to utilize Defender for Endpoint’s capabilities efficiently, directly addressing the query's need with minimal fuss.
send
light_mode
delete
All Pages