Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Microsoft
Microsoft 365 Certified: Endpoint Administrator Associate
MD-102
Endpoint Administrator Questions and Answers

Pass the Microsoft 365 Certified: Endpoint Administrator Associate MD-102 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam MD-102 Premium Access

View all detail and faqs for the MD-102 exam

Go to Exam

893 Students Passed

95% Average Score

96% Same Questions

Viewing page 10 out of 11 pages

Viewing questions 91-100 out of questions

Questions # 91:

You need to meet the technical requirements for the IT department.

What should you do first?

Options:

From the Azure Active Directory blade in the Azure portal, enable Seamless single sign-on.

From the Configuration Manager console, add an Intune subscription.

From the Azure Active Directory blade in the Azure portal, configure the Mobility (MDM and MAM) settings.

From the Microsoft Intune blade in the Azure portal, configure the Windows enrollment settings.

Answer

Explanation

[Reference:, https://docs.microsoft.com/en-us/sccm/comanage/tutorial-co-manage-clients, , , ]

Questions # 92:

You need to meet the technical requirements for the LEG department computers.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question # 92

Options:

Answer

Answer:

Explanation

[Reference:, https://docs.microsoft.com/en-us/windows/deployment/update/windows-analytics-azure-portal, , , ]

Questions # 93:

You need to meet the technical requirements for the new HR department computers.

How should you configure the provisioning package? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 93

Options:

Answer

Answer:

Explanation

[Reference:, https://docs.microsoft.com/en-us/windows/configuration/wcd/wcd-accounts, , , ]

Questions # 94:

What should you use to meet the technical requirements for Azure DevOps?

Options:

An app protection policy

Windows Information Protection (WIP)

Conditional access

A device configuration profile

Answer

Explanation

[References:, https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/manage-conditional-access?, view=azure-devops, , ]

Questions # 95:

You need to meet the OOBE requirements for Windows AutoPilot.

Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate settings in the answer area.

NOTE: Each correct selection is worth one point.

Question # 95

Options:

Answer

Answer:

Explanation

[Reference:, https://blogs.msdn.microsoft.com/sgern/2018/10/11/intune-intune-and-autopilot-part-3-preparing-your-environment/, , https://blogs.msdn.microsoft.com/sgern/2018/11/27/intune-intune-and-autopilot-part-4-enroll-your-first-device/, , , ]

Questions # 96:

You need to meet the device management requirements for the developers.

What should you implement?

Options:

folder redirection

Enterprise State Roaming

home folders

known folder redirection in Microsoft OneDrive

Answer

Explanation

Litware identifies the following device management requirements:

Ensure that Microsoft Edge Favorites are accessible from all computers to which the developers sign in.

Enterprise State Roaming allows for the synchronization of Microsoft Edge browser setting, including favorites and reading list, across devices.

[Reference:, https://docs.microsoft.com/en-us/azure/active-directory/devices/enterprise-state-roaming-windows-settings-reference, ]

Questions # 97:

You need to resolve the performance issues in the Los Angeles office.

How should you configure the update settings? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 97

Options:

Answer

Answer:

Explanation

[Reference:, https://docs.microsoft.com/en-us/windows/deployment/update/waas-delivery-optimization, https://2pintsoftware.com/delivery-optimization-dl-mode/, , ]

Questions # 98:

What should you upgrade before you can configure the environment to support co-management?

Options:

the domain functional level

Configuration Manager

the domain controllers

Windows Server Update Services (WSUS)

Answer

Explanation

[References:, https://docs.microsoft.com/en-us/sccm/comanage/tutorial-co-manage-clients, , , ]

Questions # 99:

You have a Microsoft 365 subscription that contains the devices shown in the following table.

Question # 99

You plan to enroll the devices in Microsoft Intune.

How often will the compliance policy check-ins run after each device is enrolled in Intune? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 99

Options:

Answer

Answer:

Explanation

Box 1: Every three minutes for 15 minutes, then every 15 minutes for two hours, and then around every eight hours

If devices recently enroll, then the compliance, non-compliance, and configuration check-in runs more frequently. The check-ins are estimated at:

Windows 10: Every 3 minutes for 15 minutes, then every 15 minutes for 2 hours, and then around every 8 hours

Box 2: Every 15 minutes for one hour, and then every eight hours

iOS/iPadOS: Every 15 minutes for 1 hour, and then around every 8 hours

[Reference: https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-troubleshoot, , , , ]

Questions # 100:

You have a Microsoft 365 subscription that contains the devices shown in the following table.

Question # 100

You need to ensure that only devices running trusted firmware or operating system builds can access network resources.

Which compliance policy setting should you configure for each device? To answer, drag the appropriate settings to the correct devices. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Question # 100

Options:

Answer

Answer:

Explanation

Box 1:

Device Compliance settings for Windows 10/11 in Intune

There are the different compliance settings you can configure on Windows devices in Intune. As part of your mobile device management (MDM) solution, use these settings to require BitLocker, set a minimum and maximum operating system, set a risk level using Microsoft Defender for Endpoint, and more.

Note: Windows Health Attestation Service evaluation rules

Require BitLocker:

Windows BitLocker Drive Encryption encrypts all data stored on the Windows operating system volume. BitLocker uses the Trusted Platform Module (TPM) to help protect the Windows operating system and user data. It also helps confirm that a computer isn't tampered with, even if its left unattended, lost, or stolen. If the computer is equipped with a compatible TPM, BitLocker uses the TPM to lock the encryption keys that protect the data. As a result, the keys can't be accessed until the TPM verifies the state of the computer.

Not configured (default) - This setting isn't evaluated for compliance or non-compliance.

Require - The device can protect data that's stored on the drive from unauthorized access when the system is off, or hibernates.

Box 2: Prevent jailbroken devices from having corporate access

Device Compliance settings for iOS/iPadOS in Intune

There are different compliance settings you can configure on iOS/iPadOS devices in Intune. As part of your mobile device management (MDM) solution, use these settings to require an email, mark rooted (jailbroken) devices as not compliant, set an allowed threat level, set passwords to expire, and more.

Device Health

Jailbroken devices

Supported for iOS 8.0 and later

Not configured (default) - This setting isn't evaluated for compliance or non-compliance.

Block - Mark rooted (jailbroken) devices as not compliant.

Box 3: Prevent rooted devices from having corporate access.

Device compliance settings for Android Enterprise in Intune

There are different compliance settings you can configure on Android Enterprise devices in Intune. As part of your mobile device management (MDM) solution, use these settings to mark rooted devices as not compliant, set an allowed threat level, enable Google Play Protect, and more.

Device Health - for Personally-Owned Work Profile

Rooted devices

Not configured (default) - This setting isn't evaluated for compliance or non-compliance.

Block - Mark rooted devices as not compliant.

[Reference: https://docs.microsoft.com/en-us/mem/intune/protect/compliance-policy-create-windows, https://docs.microsoft.com/en-us/mem/intune/protect/compliance-policy-create-android-for-work, https://docs.microsoft.com/en-us/mem/intune/protect/compliance-policy-create-ios, , , ]

Viewing page 10 out of 11 pages

Viewing questions 91-100 out of questions