Real Updated MD-101 Managing Modern Desktops Dumps

1. Your company has a Microsoft 365 tenant.

Users sign in to Windows 10 devices by using their Microsoft 365 account.

On a computer, you open Sync your settings as shown in the exhibit. (Click the Exhibit tab.)

2. DRAG DROP

You have a Microsoft Intune subscription that is configured to use a PFX certificate connector to an on-premises Enterprise certification authority (CA).

You need to use Intune to configure autoenrollment for Android devices by using public key pair (PKCS) certificates.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

3. You have a Microsoft 365 subscription.

A remote user purchases a laptop from a retail store. The laptop is intended for company use and has Windows 10 Pro edition installed.

You need to configure the laptop to meet the following requirements:

✑ Modify the layout of the Start menu

✑ Upgrade Windows 10 to Windows 10 Enterprise

✑ Join the laptop to a Microsoft Azure Active Directory (Azure AD) domain named contoso.com

What should you do?

4. You have a Microsoft 365 subscription.

You have 20 computers that run Windows 10 and are joined to Microsoft Azure Active Directory (Azure AD).

You plan to replace the computers with new computers that run Windows 10. The new computers will be

joined to Azure AD.

You need to ensure that the desktop background, the favorites, and the browsing history are available on the new computers.

What should you use?

5. Your network contains an Active Directory domain.

The domain contains computers that run Windows 8.1 and the users shown in the following table.





You plan to use the Microsoft Assessment and Planning (MAP) Toolkit to collect inventory data.

The MAP Toolkit has the following configurations:

✑ Inventory scenario: Windows computers

✑ Discovery method: Use Active Directory Domain Services (AD DS)

You need to identify which user to use for the MAP Toolkit inventory discovery. The solution must use principle of least privilege.

What should you identify?

6. HOTSPOT

You have a workgroup computer named Computer1 that runs Windows 10 and has the users shown in the following table.





Group1 is a member of Group3.

You are creating a file named Kiosk.xml that specifies a lockdown profile for a multi-app kiosk.

Kiosk.xml contains the following section.





You apply Kiosk.xml to Computer1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

7. HOTSPOT

STION NO: 92 HOTSPOT

Your company has a Microsoft Azure Active Directory (Azure AD) tenant and computers that run Windows 10.

The company uses Microsoft Intune to manage the computers.

The Azure AD tenant has the users shown in the following table.





The device type restrictions in Intune are configured as shown in the following table:





User3 is a device enrollment manager (DEM) in Intune.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

8. You have a Microsoft 365 subscription.

You need to deploy Microsoft Office 365 ProPlus applications to Windows 10 devices.

What should you do first?

9. You have an Azure Active Directory (Azure AD) tenant named adatum.com that contains two computers named Computer1 and Computer2. The computers run Windows 10 and are members of a group named GroupA.

The tenant contains a user named User1 that is a member of a group named Group1.

You need to ensure that if User1 changes the desktop background on Computer1, the new desktop background will appear when User1 signs in to Computer2.

What should you do?

10. HOTSPOT

You have an Azure Active Directory (Azure AD) tenant named adatum.com that contains the users shown in the following table.





You configure the following device settings for the tenant:

✑ Users may join devices to Azure AD: User1

✑ Additional local administrators on Azure AD joined devices: None

You install Windows 10 on a computer named Computer1.

You need to identify which users can join Computer1 to adatum.com, and which users will be added to the Administrators group after joining adatum.com.

Which users should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

11. You have computers that run Windows 10 and are managed by using Microsoft Intune.

Users store their files in a folder named D:Folder1.

You need to ensure that only a trusted list of applications is granted write access to D:Folder1.

What should you configure in the device configuration profile?

12. You need to enable Windows Defender Credential Guard on computers that run Windows 10.

What should you install on the computers?

13. HOTSPOT

Your company uses Microsoft System Center Configuration Manager (Current Branch) and purchases 365 subscription.

You need to set up Desktop Analytics for Configuration Manager.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

14. HOTSPOT

You have a hybrid Microsoft Azure Active Directory (Azure AD) tenant.

You configure a Windows Autopilot deployment profile as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

15. HOTSPOT

You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune.

You need to set a custom image as the wallpaper and sign-in screen.

Which two settings should you configure in Device restrictions? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

16. DRAG DROP

You have 100 computers that run Windows 8.1.

You plan to deploy Windows 10 to the computers by performing a wipe and load installation.

You need to recommend a method to retain the user settings and the user data.

Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

17. Your network contains an Active Directory domain named contoso.com that syncs to Azure Active Directory (Azure AD).

Existing on-premises computers are managed by using Microsoft System Center Configuration Manager (Current Branch). You configure contoso.com for co-management.

You deploy 100 new devices that run Windows 10. The devices are joined to Azure AD and enrolled in Microsoft Intune.

You need to ensure that the devices are co-managed.

What should you create in Intune first?

18. Your network contains an Active Directory domain named contoso.com. The domain contains computers that run Windows 10 and are joined to the domain.

The domain is synced to Microsoft Azure Active Directory (Azure AD).

You create an Azure Log Analytics workspace and deploy the Device Health solution.

You need to enroll the computers in Windows Analytics.

Which Group Policy setting should you configure?

19. You have devices enrolled in Microsoft Intune as shown in the following table.





On which devices can you apply app configuration policies?

20. You have a Microsoft 365 tenant that contains the objects shown in the following table.





In the Microsoft Endpoint Manager admin center, you are creating a Microsoft 365 Apps app named App1.

To which objects can you assign App1?

21. You have a Microsoft Azure Log Analytics workplace that collects all the event logs from the computers at your company.

You have a computer named Computer1 than runs Windows 10. You need to view the events collected from Computer1.

Which query should you run in Log Analytics?

22. HOTSPOT

You have 200 computers that run Windows 10.

You need to create a provisioning package to configure the following tasks:

✑ Remove the Microsoft News and the Xbox Microsoft Store apps.

✑ Add a VPN connection to the corporate network.

Which two customizations should you configure? To answer, select the appropriate customizations in the answer area. NOTE: Each correct selection is worth one point.

23. Your company plans to deploy Windows 10 to device that will be configured for Englis use and other devices that will be configured for Korean use.

You need to create a single multivariate provisioning for the planned for the planned devices.

You create the provisioning package.

What should do you next to add the language settings to the package?

24. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a computer that runs Windows 8.1.

Two days ago, you upgraded the computer to Windows 10.

You need to downgrade the computer to Windows 8.1.

Solution: From Windows Update in the Settings app, you use the Advanced options.

Does this meet the goal?

25. HOTSPOT

Your network contains an Active Directory domain. Active Directory is synced with Microsoft Azure Active Directory (Azure AD).

There are 500 Active Directory domain-joined computers that run Windows 10 and are enrolled in Microsoft Intune.

You plan to implement Microsoft Defender Exploit Guard.

You need to create a custom Microsoft Defender Exploit Guard policy, and then distribute the policy to all the computers.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

26. HOTSPOT

Your network contains an Active Directory domain named constoso.com that is synced to Microsoft Azure Active Directory (Azure AD). All computers are enrolled in Microsoft Intune.

The domain contains the computers shown in the following table.





You are evaluating which Intune actions you can use to reset the computers to run Windows 10 Enterprise with the latest update.

Which computers can you reset by using each action? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

27. You have a Microsoft Intune subscription.

You have devices enrolled in Intune as shown in the following table.





An app named App1 is installed on each device.

What is the minimum number of app configuration policies required to manage App1?

28. HOTSPOT

Your network contains an Active Directory domain named contoso.com that syncs to Azure Active Directory (Azure AD).

The domain contains the users shown in the following table.





Enterprise State Roaming is enabled for User2.

You have the computers shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

29. HOTSPOT

You have a Microsoft 365 tenant that contains the users shown in the following table.





You have Windows 10 devices enrolled in Microsoft Intune as shown in the following table.





You create a Windows 10 update ring that has the following settings:

✑ Basics:

- Name: Ring1

✑ Update ring settings:

- Active hours start: 8 AM

- Active hours end: 8 PM

✑ Assignments:

- Included Groups: All devices

- Excluded Groups: Group1

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

30. You manage 1,000 computers that run Windows 10. All the computers are enrolled in Microsoft Intune. You manage the servicing channel settings of the computers by using Intune.

You need to review the servicing status of a computer.

What should you do?

31. You have 10 computers that run Windows 7 and have the following configurations:

✑ A single MBR disk

✑ A disabled TPM chip

✑ Disabled hardware virtualization

✑ UEFI firmware running in BIOS mode

✑ Enabled Data Execution Prevention (DEP) You plan to upgrade the computers to Windows 10.

You need to ensure that the computers can use Secure Boot.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

32. You use Microsoft Intune to manage client computers.

The computers run one of the following operating systems:

✑ Windows 8.1

✑ Windows 10 Pro

✑ Windows 10 Enterprise

✑ Windows 10 Enterprise LTSC

You plan to manage Windows updates on the computers by using update rings.

Which operating systems support update rings?

33. You have a Microsoft 365 tenant that uses Microsoft Intune for mobile device management (MDM).

You associate a Microsoft Store for Business account with Intune.

You purchase an app named Appl from the Microsoft Store for Business.

You need to ensure that Appl can be deployed by using Intune.

What should you do?

34. HOTSPOT

You network contains an Active Directory domain. The domain contains 200 computers that run Windows 8.1. You have a Microsoft Azure subscription.

You plan to upgrade the computers to Windows 10.

You need to generate an Upgrade Readiness report for the computers.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

35. Your company has several Windows 10 devices that are enrolled in Microsoft Inline.

You deploy a new computer named Computer1 that runs Windows 10 and is in a workgroup.

You need to enroll Computer1 in Intune.

Solution: From Computer1, you sign in to https://portal.azure.com and use the Windows enrollment blade.

Does this meet the goal?

36. Your company uses Microsoft Intune.

More than 500 Android and iOS devices are enrolled in the Intune tenant.

You plan to deploy new Intune policies. Different policies will apply depending on the version of Android or iOS installed on the device.

You need to ensure that the policies can target the devices based on their version of Android or iOS.

What should you configure first?

37. HOTSPOT

You have a Microsoft 365 tenant that uses Microsoft Intune.

From the Microsoft Endpoint Manager admin center, you plan to create a baseline to monitor the Startup score and the App reliability score of enrolled Windows 10 devices.

You need to identify which tool to use to create the baseline and the minimum number of devices required to create the baseline.

What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

38. You have computers that run Windows 10 and are joined to Azure Active Directory (Azure AD).

All users sign in to the computers by using their Azure AD account.

Enterprise State Roaming is enabled.

From the Settings app, a user named User1 adds a Microsoft account.

Which account will be used for the Synchronizing Windows setting?

39. DRAG DROP

You have a Microsoft Deployment Toolkit (MDT) deployment share named DS1.

You import a Windows 10 image to DS1.

You have an executable installer for an application named App1.

You need to ensure that App1 will be installed for all the task sequences that deploy the image.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

40. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has an Azure Active Directory (Azure AD) tenant named contoso.com that contains several Windows 10 devices.

When you join new Windows 10 devices to contoso.com, users are prompted to set up a four-digit pin.

You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 10 devices to contoso.com.

Solution: From the Azure Active Directory admin center, you configure automatic mobile device management (MDM) enrollment. From the Device Management admin center, you configure the Windows Hello for Business enrollment options.

Does this meet the goal?

41. HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains Windows 10 devices that are managed by using Microsoft Endpoint Configuration Manager.

You plan to deploy Microsoft 365 Apps for enterprise to the devices by using Configuration Manager.

You create a Configuration.xml file as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

42. You have a Microsoft 365 subscription. All devices run Windows 10.

You need to prevent users from enrolling the devices in the Windows Insider Program.

What two configurations should you perform from Microsoft 365 Device Management? Each correct answer is a complete solution. NOTE: Each correct selection is worth one point.

43. HOTSPOT

Your company has computers that run Windows 10. The employees at the company use the computers.

You plan to monitor the computers by using the Update Compliance solution.

You create the required resources in Azure.

You need to configure the computers to send enhanced Update Compliance data.

Which two Group Policy settings should you configure? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

44. Your company has a Microsoft Azure Active Directory (Azure AD) tenant. All users in the company are

licensed for Microsoft Intune.

You need to ensure that the users enroll their iOS device in Intune.

What should you configure first?

45. Your network contains an Active Directory named contoso.com. The domain contains two computers named Computer1 and Computer2 that run Windows 10.

Folder Redirection is configured for a domain user named User1. The AppDataRoaming folder and the

Desktop folder are redirected to a network share.

User1 signs in to Computer1 and performs the following tasks:

✑ Configures screen saver to start after five minutes of inactivity

✑ Modifies the default save location for Microsoft Word

✑ Creates a file named File1.docx on the desktop

✑ Modifies the desktop background

You need to identify what will be retained when User1 signs in to Computer2.

What should you identify?

46. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a computer that runs Windows 8.1.

Two days ago, you upgraded the computer to Windows 10.

You need to downgrade the computer to Windows 8.1.

Solution: From View update history in the Settings app, you select Uninstall updates.

Does this meet the goal?

47. You use Windows Admin Center to remotely administer computers that run Windows 10.

When connecting to Windows Admin Center, you receive the message shown in the following exhibit.





You need to prevent the message from appearing when you connect to Windows Admin Center.

To which certificate store should you import the certificate?

48. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company uses Windows Update for Business.

The research department has several computers that have specialized hardware and software installed.

You need to prevent the video drivers from being updated automatically by using Windows Update.

Solution: From the Windows Update settings in a Group Policy object (GPO), you enable Do not include drivers with Windows Updates.

Does this meet the goal?

49. HOTSPOT

You have a computer named Computer1 that runs Windows 10.

The Wi-Fi network profile for Computer1 is configured as shown in the following exhibit.





From which computers will Computer1 will receive updates and to which computers will Computer1 provide updates? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

50. You have a shared computer that runs Windows 10.

The computer is infected with a virus.

You discover that a malicious TTF font was used to compromise the computer.

You need to prevent this type of threat from affecting the computer in the future.

What should you use?

51. HOTSPOT

Your company has an infrastructure that has the following:

✑ A Microsoft 365 tenant

✑ An Active Directory forest

✑ Microsoft Store for Business

✑ A Key Management Service (KMS) server

✑ A Windows Deployment Services (WDS) server

✑ A Microsoft Azure Active Directory (Azure AD) Premium tenant

The company purchases 100 new computers that run Windows 10.

You need to ensure that the new computers are joined automatically to Azure AD by using Windows AutoPilot.

What should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

52. You have computers that run Windows 10 Pro. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune.

You need to upgrade the computers to Windows 10 Enterprise.

What should you configure in Intune?

53. DRAG DROP

Your company has a Microsoft Azure Active Directory (Azure AD) tenant.

The company uses Microsoft Intune to manage iOS, Android, and Windows 10 devices.

The company plans to purchase 1,000 iOS devices. Each device will be assigned to a specific user.

You need to ensure that the new iOS devices are enrolled automatically in Intune when the assigned user signs in for the first time.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

54. HOTSPOT

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.





Contoso.com contains the devices shown in the following table.





In Intune, you create the app protection policies shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

55. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You need to ensure that feature and quality updates install automatically during a maintenance window.

Solution: From the Windows Update settings, you enable Configure Automatic Updates, select 3 C Auto download and notify for Install, and then enter a time.

Does this meet the goal?

56. Your network contains an Active Directory domain. The functional level of the forest and the domain is

Windows Server 2012 R2.

The domain contains 500 computers that run Windows 10. All the computers are managed by using Microsoft System Center 2012 R2 Configuration Manager.

You need to enable co-management.

What should you do first?

57. HOTSPOT

You have a Microsoft 365 subscription.

All computers are enrolled in Microsoft Intune.

You have business requirements for securing your Windows 10 environment as shown in the following table.





What should you implement to meet each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

58. HOTSPOT

A company named A-Datum Corporation uses Microsoft Endpoint Configuration Manager, Microsoft Intune, and Desktop Analytics.

A-Datum purchases a company named Contoso, Ltd. Contoso has devices that run the following operating systems:

✑ Windows 8.1

✑ Windows 10

✑ Android

✑ iOS

A-Datum plans to use Desktop Analytics to monitor the Contoso devices.

You need to identify which devices can be monitored by using Desktop Analytics and how to add the devices to Desktop Analytics.

What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

59. You have the 64-bit computers shown in the following table.





You plan to perform an in-place upgrade to the 64-bit version of Windows 10.

Which computers can you upgrade to the 64-bit version of Windows 10 in their current state?

60. HOTSPOT

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the devices shown in the following table.





All devices contain an app named App1 and are enrolled in Microsoft Intune.

You need to prevent users from copying data from App1 and pasting the data into other apps.

Which type of policy and how many policies should you create in Intune? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

61. You install a feature update on a computer that runs Windows 10.

How many days do you have to roll back the update?

62. You have a public computer named Public1 that runs Windows 10.

Users use Public1 to browse the Internet by using Microsoft Edge.

You need to view events associated with website phishing attacks on Public1.

Which Event Viewer log should you view?

63. HOTSPOT

You have 1,000 computers that run Windows 10 and are members of an Active Directory domain.

You create a workspace in Microsoft Azure Log Analytics.

You need to capture the event logs from the computers to Azure.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

64. HOTSPOT

You have a Microsoft Intune subscription that has the following device compliance policy settings:

Mark devices with no compliance policy assigned as: Compliant

Compliance status validity period (days): 14

On January 1, you enroll Windows 10 devices in Intune as shown in the following table.





On January 4, you create the following two device compliance policies:

✑ Name: Policy1

✑ Platform: Windows 10 and later

✑ Require BitLocker: Require

✑ Mark device noncompliant: 5 days after noncompliance

✑ Scope (Tags): Tag1

✑ Name: Policy2

✑ Platform: Windows 10 and later

✑ Firewall: Require

✑ Mark device noncompliant: Immediately

✑ Scope (Tags): Tag2

On January 5, you assign Policy1 and Policy2 to Group1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

65. HOTSPOT

Your network contains an on-premises Active Directory domain named contoso.com that syncs to Azure Active Directory (Azure AD).

A user named User1 uses the domain-joined devices shown in the following table.





In the Azure Active Directory admin center, you assign a Windows 10 Enterprise E5 license to User1.

You need to identify what will occur when User1 next signs in to the devices.

What should you identify for each device? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

66. HOTSPOT

Your company has 1,000 Windows 10 devices that are enrolled in Windows Analytics.

You need to view the following information:

✑ The number of devices that are vulnerable to Spectre and Meltdown vulnerabilities

✑ The number of devices that have Windows Defender real-time protection turned off

Which Windows Analytics solutions should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

67. Your network contains an Active Directory domain. The domain contains computers that run Windows 10.

All users use Roaming User Profiles.

You have a user named Public1 that is used to sign-in to a public computer.

You need to prevent changes to the user settings of Public1 from being saved to the user profile.

What should you do?

68. You have a Microsoft Intune subscription associated to an Azure Active Directory (Azure AD) tenant named contoso.com.

Users use one of the following three suffixes when they sign in to the tenant:

us.contoso.com, eu.contoso.com, or contoso.com.

You need to ensure that the users are NOT required to specify the mobile device management (MDM)

enrollment URL as part of the enrollment process. The solution must minimize the number of changes.

Which DNS records do you need?

69. HOTSPOT

You have computers that run Windows 10 as shown in the following table.





Computer2 and Computer3 are enrolled in Microsoft Intune.

In a Group Policy object (GPO) linked to the domain, you enable the Computer Configuration/Administrative Templates/Windows Components/Search/Allow Cortana setting.

In an Intune device configuration profile, you configure the following:

✑ Device/Vendor/MSFT/Policy/Config/ControlPolicyConflict/MDMWinsOverGP to a value of 1

✑ Experience/AllowCortana to a value of 0.

Each of the following statement, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

70. HOTSPOT

You have two computers that run Windows 10.

The computers are enrolled in Microsoft Intune as shown in the following table.





Windows 10 update rings are defined in Intune as shown in the following table.





You assign the update rings as shown in the following table.





What is the effect of the configurations on Computer1 and Computer2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

71. Your company standardizes on Windows 10 Enterprise for all users.

Some users purchase their own computer from a retail store. The computers run Windows 10 Pro.

You need to recommend a solution to upgrade the computers to Windows 10 Enterprise, join the computers to Microsoft Azure Active Directory (Azure AD), and install several Microsoft Store apps.

The solution must meet the following requirements:

✑ Ensure that any applications installed by the users are retained.

✑ Minimize user intervention.

What is the best recommendation to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

72. Topic 1, Litware inc



This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.



General Overview

Litware, Inc. is an international manufacturing company that has 3,000 employees. The company has sales, marketing, research, human resources (HR), development, and IT departments.

Litware has two main offices in New York and Los Angeles. Litware has five branch offices in Asia.



Existing Environment

Current Business Model

The Los Angeles office has 500 developers. The developers work flexible hours ranging from 11 AM to 10 PM.

Litware has a Microsoft System Center 2012 R2 Configuration Manager deployment.

During discovery, the company discovers a process where users are emailing bank account information of its customers to internal and external recipients.



Current Environment

The network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD). The functional level of the forest and the domain is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.



Litware has the computers shown in the following table.







The development department uses projects in Azure DevOps to build applications.

Most of the employees in the sales department are contractors. Each contractor is assigned a computer that runs Windows 10. At the end of each contract, the computer is assigned to a different contractor. Currently, the computers are re-provisioned manually by the IT department.



Problem Statements

Litware identifies the following issues on the network:

- Employees in the Los Angeles office report slow Internet performance when updates are downloading. The employees also report that the updates frequently consume considerable resources when they are installed. The Update settings are configured as shown in the Updates exhibit. (Click the Updates button.)

- Management suspects that the source code for the proprietary applications in Azure DevOps in being shared externally.

- Re-provisioning the sales department computers is too time consuming.



Requirements

Business Goals

Litware plans to transition to co-management for all the company-owned Windows 10 computers.

Whenever possible, Litware wants to minimize hardware and software costs.



Device Management Requirements

Litware identifies the following device management requirements:

- Prevent the sales department employees from forwarding email that contains bank account information.

- Ensure that Microsoft Edge Favorites are accessible from all computers to which the developers sign in.

- Prevent employees in the research department from copying patented information from trusted applications to untrusted applications.



Technical Requirements

Litware identifies the following technical requirements for the planned deployment:

- Re-provision the sales department computers by using Windows AutoPilot.

- Ensure that the projects in Azure DevOps can be accessed from the corporate network only.

- Ensure that users can sign in to the Azure AD-joined computers by using a PIN. The PIN must expire every 30 days.

- Ensure that the company name and logo appears during the Out of Box Experience (OOBE) when using Windows AutoPilot.



Exhibits

Updates







What should you configure to meet the technical requirements for the Azure AD-joined computers?

73. What should you use to meet the technical requirements for Azure DevOps?

74. HOTSPOT

You need to meet the OOBE requirements for Windows AutoPilot.

Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

75. You need to meet the device management requirements for the developers.

What should you implement?

76. HOTSPOT

You need to recommend a solution to meet the device management requirements.

What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

77. What should you upgrade before you can configure the environment to support co-management?

78. HOTSPOT

You need to resolve the performance issues in the Los Angeles office.

How should you configure the update settings? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

79. HOTSPOT

You need to meet the technical requirements for Windows AutoPilot.

Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

80. You need to capture the required information for the sales department computers to meet the technical requirements.

Which Windows PowerShell command should you run first?

81. Topic 2, Contoso Ltd



This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.



Overview

Contoso, Ltd, is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York.



Contoso has the users and computers shown in the following table.





The company has IT, human resources (HR), legal (LEG), marketing (MKG) and finance (FIN) departments.

Contoso uses Microsoft Store for Business and recently purchased a Microsoft 365 subscription.

The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office will work from home.



Existing Environment

The network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

All member servers run Windows Server 2016. All laptops and desktop computers run Windows 10 Enterprise.

The computers are managed by using Microsoft Endpoint Configuration Manager. The mobile devices are managed by using Microsoft Intune.

The naming convention for the computers is the department acronym, followed by a hyphen, and then four numbers, for example, FIN-6785. All the computers are joined to the on-premises Active Directory domain.

Each department has an organizational unit (OU) that contains a child OU named Computers. Each computer account is in the Computers OU of its respective department.



Intune Configuration

The domain has the users shown in the following table.





User2 is a device enrollment manager (DEM) in Intune.



The devices enrolled in Intune are shown in the following table.







The device compliance policies in Intune are configured as shown in the following table.







The device compliance policies have the assignments shown in the following table.







The device limit restrictions in Intune are configured as shown in the following table.







Requirements

Planned Changes

Contoso plans to implement the following changes:

- Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro preinstalled and were purchased already.

- Start using a free Microsoft Store for Business app named App1.

- Implement co-management for the computers.



Technical Requirements :

Contoso must meet the following technical requirements:

- Ensure that the users in a group named Group4 can only access Microsoft Exchange Online from devices that are enrolled in Intune.

- Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows Autopilot.

- Monitor the computers in the LEG department by using Windows Analytics.

- Create a provisioning package for new computers in the HR department.

- Block iOS devices from sending diagnostic and usage telemetry data.

- Use the principle of least privilege whenever possible.

- Enable the users in the MKG department to use App1.

- Pilot co-management for the IT department.



HOTSPOT

You are evaluating which devices are compliant.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

82. HOTSPOT

You need to meet the technical requirements for the new HR department computers.

How should you configure the provisioning package? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

83. HOTSPOT

What is the maximum number of devices that User1 and User2 can enroll in Intune? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

84. HOTSPOT

You need a new conditional access policy that has an assignment for Office 365 Exchange Online.

You need to configure the policy to meet the technical requirements for Group4.

Which two settings should you configure in the policy? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

85. You need to prepare for the deployment of the Phoenix office computers.

What should you do first?

86. You need to prepare for the deployment of the Phoenix office computers.

What should you do first?

87. HOTSPOT

To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

88. You need to meet the requirements for the MKG department users.

What should you do?

89. You need to meet the technical requirements for the iOS devices.

Which object should you create in Intune?

90. DRAG DROP

You need to meet the technical requirements for the LEG department computers.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

91. You need to meet the technical requirements for the IT department.

What should you do first?

92. Topic 3, Contoso, Ltd. (NEW)



Case Study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.



Overview

Contoso, Ltd. is a consulting company that has a main office in Montreal and branch offices in Seattle and New York.

Contoso has a Microsoft 365 E5 subscription.



Network Environment

The network contains an on-premises Active domain named Contoso.com.

The domain contains the servers shown in the following table.





Contoso has a hybrid Azure Active Directory (Azure AD) tenant named Contoso.com.

Contoso has a Microsoft Store for Business instance.



Users and Groups

The Contoso.com tenant contains the users shown in the following table.





All users are assigned a Microsoft Office 365 license and an Enterprise Mobility + Security E3 license.

Enterprise State Roaming is enabled for Group1 and GroupA.

Group and Group have a Membership type of Assign



Devices

Contoso has the Windows 10 devices shown in the following table.





The Windows 10 devices are joined to Azure AD and enrolled in Microsoft intune.

The Windows 10 devices are configured as shown in the following table.





All the Azure AD joined devices have an executable file named C:AppA.exe and a folder named D:Folder 1.



Microsoft Endpoint Manager Configuration

Microsoft Endpoint Manager has the compliance policies shown in the following table.

The Compliance policy settings are shown in the following exhibit.





The Automatic Enrolment settings have the following configurations:

• MDM user scope GroupA

• MAM user scope: GroupB

You have an Endpoint protection configuration profile that has the following Controlled folder access settings:

• Name: Protection1

• Folder protection: Enable

• List of apps that have access to protected folders: CVAppA.exe

• List of additional folders that need to be protected: D:Folderi1

• Assignments



Windows Autopilot Configuration





Currently, there are no devices deployed by using Window Autopilot

The Intune connector tor Active Directory is installed on Server 1.



Planned Changes

Contoso plans to implement the following changes:

• Purchase a new Windows 10 device named Device6 and enroll the device in Intune.

• New computers will be deployed by using Windows Autopilot and will be hybrid Azure AO joined.

• Deploy a network boundary configuration profile that will have the following settings:

• Name Boundary 1

• Network boundary 192.168.1.0/24

• Scope tags: Tag 1

• Assignments;

• included groups: Group 1. Group2

• Deploy two VPN configuration profiles named Connection! and Connection that will have the following settings:

• Name: Connection 1

• Connection name: VPNI

• Connection type: L2TP

• Assignments:

• Included groups: Group1. Group2, GroupA

• Excluded groups: ―

• Name: Connection

• Connection name: VPN2

• Connection type: IKEv2 i Assignments:

• included groups: GroupA

• Excluded groups: GroupB

• Purchase an app named App1 that is available in Microsoft Store for Business and to assign the app to all the users.



Technical Requirements

Contoso must meet the following technical requirements:

• Users in GroupA must be able to deploy new computers.

• Administrative effort must be minimized.



HOTSPOT

User1 and User2 plan to use Sync your settings.

On which devices can the users use Sync your settings? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

93. Which users can purchase and assign App1?

94. Which user can enroll Device6 in Intune?

95. DRAG DROP

You have an Azure Active Directory (Azure AD) tenant that syncs to an on-premises Active Directory domain.

The tenant contains computers that run Windows 10. The computers are hybrid Azure AD joined and enrolled in Microsoft Intune. The Microsoft Office settings on the computers are configured by using a Group Policy Object (GPO).

You need to migrate the GPO to Intune.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.