MD-101 practice test

1. Question 1 · 1

   Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company Windows 10 computers that are enrolled in Microsoft Intune. You make use of Intune to manage the servicing channel settings of all company computers. You receive an enquiry regarding the servicing status of a specific computer. You need to review the necessary policy report. Solution: You navigate to device status via Device configuration. Does the solution meet the goal?

   Choose one answer.

   • Yes
   • No

2. Question 2 · 1

   You need to consider the underlined segment to establish whether it is accurate. After installing a feature update on a Windows 10 computer, you have 7 days to roll back the update Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

   Choose one answer.

   • No adjustment required.
   • 10
   • 90
   • 30

3. Question 3 · 1

   Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has a hybrid configuration of Microsoft Azure Active Directory (Azure AD). Your company also has a Microsoft 365 subscription. After creating a conditional access policy for Microsoft Exchange Online, you are tasked with configuring the policy to block access to Exchange Online. However, the policy should allow access for hybrid Azure AD-joined devices Solution: You should configure the Client apps settings. Does the solution meet the goal?

   Choose one answer.

   • Yes
   • No

4. Question 4 · 1

   Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has a hybrid configuration of Microsoft Azure Active Directory (Azure AD). Your company also has a Microsoft 365 subscription. After creating a conditional access policy for Microsoft Exchange Online, you are tasked with configuring the policy to block access to Exchange Online. However, the policy should allow access for hybrid Azure AD-joined devices Solution: You should configure the Device state settings. Does the solution meet the goal?

   Choose one answer.

   • Yes
   • No

5. Question 5 · 1

   Your company has a large number of Android and iOS devices, which are enrolled in Intune. You are preparing to deploy new Intune policies will apply to devices, based on the version of Android or iOS that is being run. You are required to make sure that the policies are able to target the devices according to your plan. Which of the following actions should you take?

   Choose one answer.

   • You should start by accessing Intune and configuring corporate device identifiers.
   • You should start by accessing Microsoft Azure Active Directory (Azure AD) and configuring Device settings.
   • You should start by accessing Microsoft Azure Active Directory (Azure AD) and configuring Application settings.
   • You should start by creating a distribution group.

6. Question 6 · 1

   You need to consider the underlined segment to establish whether it is accurate. Your company has Microsoft Azure Active Directory (Azure AD) joined Windows 10 Pro computers that have been enrolled in Microsoft Intune. You have been tasked with making sure that the computers are upgraded to Windows 10 Enterprise. You start by configuring a device enrollment policy in Intune. Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option. What should you configure in Intune?

   Choose one answer.

   • No adjustment required
   • an app protection policy
   • a Windows AutoPilot deployment profile
   • A device configuration profile

7. Question 7 · 1

   Your company has a Microsoft 365 subscription. You have enrolled all the company computers in Microsoft Intune. You have been tasked with making sure that Microsoft Exchange Online is only accessible from known locations. Which of the following actions should you take?

   Choose one answer.

   • You should create a device configuration profile.
   • You should create a device compliance policy.
   • You should create a Windows AutoPilot deployment profile.
   • You should create a conditional access policy.

8. Question 8 · 1

   Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company Windows 10 computers that are enrolled in Microsoft Intune. You make use of Intune to manage the servicing channel settings of all company computers. You receive an enquiry regarding the servicing status of a specific computer. You need to review the necessary policy report. Solution: You navigate to the audit logs via Software updates. Does the solution meet the goal?

   Choose one answer.

   • Yes
   • No

9. Question 9 · 1

   Your company has a Microsoft 365 subscription. You have enrolled all the company computers in Microsoft Intune. You have been tasked with making sure that devices with a high Windows Defender Advanced Threat Protection (Windows Defender ATP) risk score are locked. Which of the following actions should you take?

   Choose one answer.

   • You should create a device configuration profile.
   • You should create a device compliance policy.
   • You should create a Windows AutoPilot deployment profile.
   • You should create a conditional access policy.

10. Question 10 · 1

    All users at your company have Azure AD joined Windows 10 workstations that are managed via Microsoft Intune. You have been tasked with making sure that Windows Analytics is used to monitor the workstations centrally. Which of the following actions should you take?

    Choose one answer.

    • You should create a device configuration profile via Intune.
    • You should create a device compliance policy via Intune.
    • You should create a Windows AutoPilot deployment profile via Intune.
    • You should create an app configuration policy via Intune.

11. Question 11 · 1

    Your company has a number of Windows 10 Microsoft Azure Active Directory (Azure AD) joined workstations. These workstations have been enrolled in Microsoft Intune. You are creating a device configuration profile for the workstations. You have been informed that a custom image should be displayed on the sign-in screen. Which of the following is a Device restriction setting that should be configured?

    Choose one answer.

    • Locked screen experience
    • Personalization
    • Display
    • General

12. Question 12 · 1

    Your company's environment includes the following: ✑ Microsoft Azure Active Directory (Azure AD) ✑ Microsoft 365 ✑ Microsoft Intune ✑ Azure Information Protection. A new security policy declares that enrollment for private devices in Intune is not required. However, to access corporate email information, users have to make use of a PIN for authentication purposes. Also, users are able to access corporate cloud services from their private iOS and Android devices. Furthermore, the copying corporate email information to a cloud storage service should not be allowed, unless users are copying the information to Microsoft OneDrive for Business. You have to make sure that security policy is enforced. Which of the following actions should you take?

    Choose one answer.

    • You should create a data loss prevention (DLP) policy.
    • You should create a device enrollment policy.
    • You should create an app protection policy.
    • You should create a Windows AutoPilot deployment profile.

13. Question 13 · 1

    You have been tasked with reusing a Windows 10 computer that was assigned to a user who is no longer with the company. The computer will be assigned to a new user. You plan to make use of Windows AutoPilot to redeploy the computer. Which of the following actions should you take FIRST?

    Choose one answer.

    • Reset the computer.
    • Wipe the computer.
    • Create a HTML file containing the computer info.
    • Create a CSV file containing the computer info.

14. Question 14 · 1

    Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has a number of Windows 10 Microsoft Azure Active Directory (Azure AD) joined workstations. These workstations have been enrolled in Microsoft Intune. You have been tasked with making sure that the workstations are only able to run applications that you have explicitly permitted. Solution: You make use of Windows Defender Application Guard. Does the solution meet the goal?

    Choose one answer.

    • Yes
    • No

15. Question 15 · 1

    You need to consider the underlined segment to establish whether it is accurate. To enable Windows Defender Credential Guard on Windows 10 computers, the computers must have Hyper-V installed. Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option. What should you install on the computers?

    Choose one answer.

    • No adjustment required.
    • Windows Defender Smartscreen
    • a virtual machine
    • a container cluster

Paid access to all 173 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.