Update 2022 Microsoft MD-101 Practice Exam Questions Online

1. Your network contains an on-premises Active Directory domain and an Azure Active Directory (Azure AD) tenant.

The Default Domain Policy Group Policy Object (GPO) contains the settings shown in the following table.





You need to migrate the existing Default Domain Poky GPO swings w a device configuration profile .

Which type of device configuration profile should you create?

2. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

You have a Microsoft 365 subscription.

You have 20 computers that run Windows 10 and are joined to Microsoft Azure Active Directory (Azure AD).

You plan to replace the computers with new computers that run Windows 10. The new computers will be

joined to Azure AD.

You need to ensure that the desktop background, the favorites, and the browsing history are available on the new computers.

Solution: You configure roaming user profiles.

Does this meet the goal?

3. 5.5.1=London

[NewYork]

DeployRoot=\MDT1Production$

[London]

DeployRoot=\MDT2Production$

KeyboardLocale=en-gb

[Default]

DeployRoot=\MDT3Production$

KeyboardLocale=en-us

You plan to deploy Windows 10 to the computers shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

4. Your network contains an Active Directory domain named contoso.com.

You create a provisioning package named Package1 as shown in the following exhibit.





What is the maximum number of devices on which you can run Package1 successfully?

5. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has an Azure Active Directory (Azure AD) tenant named contoso.com and a Microsoft Intune subscription.

Contoso.com contains a user named [email protected].

You have a computer named Computer1 that runs Windows 8.1.

You need to perform an in-place upgrade of Computer1 to Windows 10.

Solution: You start Computer1 from the Windows 10 installation media and use the Install option.

Does this meet the goal?

6. HOTSPOT

Your company uses Windows Defender Advanced Threat Protection (Windows Defender ATP).

Windows Defender ATP includes the machine groups shown in the following table.





You onboard a computer to Windows Defender ATP as shown in the following exhibit.





What is the effect of the Windows Defender ATP configuration? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

7. HOTSPOT

You need to meet the OOBE requirements for Windows AutoPilot.

Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

8. HOTSPOT

You have a computer named Computer1 that runs Windows 10.

The Wi-Fi network profile for Computer1 is configured as shown in the following exhibit.





From which computers will Computer1 will receive updates and to which computers will Computer1 provide updates? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

9. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

You need to ensure that feature and quality updates install automatically during a maintenance window.

Solution: From the Maintenance Scheduler settings, you configure Automatic Maintenance Activation

Boundary.

Does this meet the goal?

10. You have a Microsoft 365 tenant that uses Microsoft Intune for mobile device management (MDM).

You associate a Microsoft Store for Business account with Intune.

You purchase an app named Appl from the Microsoft Store for Business.

You need to ensure that Appl can be deployed by using Intune.

What should you do?

11. You have computers that run Windows 8.1 or Windows 10. All the computers are enrolled in Microsoft Intune, Endpoint Configuration Manager, and Desktop Analytics. Co-management is enabled for your environment.

You plan to upgrade the Windows 8.1 computers to Windows 10.

You need to identify which Windows 8.1 computers do NOT have supported Windows 10 drivers.

What should you use?

12. You need to ensure that feature and quality updates install automatically on a Windows to compute during a maintenance window.

Solution: in Group Policy. from the Windows Update settings, you enable Configure Automatic Updates, select 4 - Auto download and schedule the Install, and then enter a time.

Does this meet the goal?

13. You need to enable Windows Defender Credential Guard on computers that run Windows 10.

What should you install on the computers?

14. You have an Azure Active Directory (Azure AD) tenant named adatum.com The tenant contains Windows 10 devices that are enrolled in Microsoft Intune.

You create an Azure Log Analytics workspace and add the Device Health solution to the workspace.

You need to create a custom device configuration profile that will enroll the Windows 10 devices in Device Health.

Which OMA-URI should you add to the profile?

15. HOTSPOT

To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

16. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain. The domain contains member computers that run Windows 8.1 and are enrolled in Microsoft Intune.

You need to identify which computers can be upgraded to Windows 10.

Solution: You install the Microsoft Assessment and Planning Toolkit. From the Microsoft Assessment and Planning Toolkit, you collect inventory data and run the Windows 8.1 Readiness scenario.

Does this meet the goal?

17. DRAG DROP

You have an Azure Active Directory (Azure AD) tenant that syncs to an on-premises Active Directory domain.

The tenant contains computers that run Windows 10. The computers are hybrid Azure AD joined and enrolled in Microsoft Intune. The Microsoft Office settings on the computers are configured by using a Group Policy Object (GPO).

You need to migrate the GPO to Intune.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

18. Your company has several Windows 10 devices that are enrolled in Microsoft Inline.

You deploy a new computer named Computer1 that runs Windows 10 and is in a workgroup.

You need to enroll Computer1 in Intune.

Solution: You install the Company Portal app on Computer1 and use the Devices tab from the app.

Does this meet the goal?

19. Your company purchases new computers that run Windows 10. The computers have cameras that support Windows Hello for Business.

You configure the Windows Hello for Business Group Policy settings as shown in the following exhibit.





What are two valid methods a user can use to sign in? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

20. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a computer named Computer1 that runs Windows 10.

You save a provisioning package named Package1 to a folder named C:Folder1.

You need to apply Package1 to Computer1.

Solution: From the Settings app, you select Access work or school, and then you select Add or remove a provisioning package.

Does this meet the goal?

21. You have a hybrid deployment of Azure Active Directory (Azure AD) that contains 50 Windows 10 devices. All the devices are enrolled in Microsoft Endpoint Manager.

You discover that Group Policy settings override the settings configured in Microsoft Endpoint Manager policies.

You need to ensure that the settings configured in Microsoft Endpoint Manager override the Group Policy

settings.

What should you do?

22. You have devices enrolled in Microsoft Intune as shown in the following table.





On which devices can you apply app configuration policies?

23. Your network contains an Active Directory domain. The functional level of the forest and the domain is

Windows Server 2012 R2.

The domain contains 500 computers that run Windows 10. All the computers are managed by using Microsoft System Center 2012 R2 Configuration Manager.

You need to enable co-management.

What should you do first?

24. Your network contains an Active Directory domain. The domain contains 5,000 computers that run Windows 10. All users use Roaming User Profiles-Some users report that it takes a long hme to sign in to the computers. You discover that the users have user profiles that are larger than 1 GB. You need to reduce the amount of time it takes for the users to sign in .

What should you configure?

25. Your network contains an on-premises Active Directory domain named contoso.com that syncs to Azure Active Directory (Azure AD).

You have the Windows 10 devices shown in the following table.





You need to ensure that you can use co-management to manage all the Windows 10 devices.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

26. You have a Microsoft 365 tenant that contains the devices shown in the following table.





You need to assign app protection settings to the devices.

What is the minimum number of app protection policies required?

27. Your company has an internal portal that uses a URL of http://contoso.com.

The network contains computers that run Windows 10. The default browser on all the computers is Microsoft Edge.

You need to ensure that all users only use Internet Explorer to connect to the internal portal. The solution must ensure that Microsoft Edge can be used to connect to all other websites.

What should you do from each computer?

28. DRAG DROP

You have a Microsoft Intune subscription that is configured to use a PFX certificate connector to an on-premises Enterprise certification authority (CA).

You need to use Intune to configure autoenrollment for Android devices by using public key pair (PKCS) certificates.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

29. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Directory group named Group1 that contains Windows 10 Enterprise devices and Windows 10 Pro devices.

From Microsoft Intune, you create a device configuration profile named Profile1.

You need to ensure that Profile1 applies to only the Windows 10 Enterprise devices in Group1.

Solution: You configure an applicability rule for Profile1. You assign Profile1 to Group1.

Does this meet the goal?

30. You have 100 computers that run Windows 8.1.

You need to create a report that will assess the Windows 10 readiness of the computers.

What should you use?

31. Your company has several Windows 10 devices that are enrolled in Microsoft Inline.

You deploy a new computer named Computer1 that runs Windows 10 and is in a workgroup.

You need to enroll Computer1 in Intune.

Solution: From Computer1, you sign in to https://portal.azure.com and use the Windows enrollment blade.

Does this meet the goal?

32. HOTSPOT

You have a Microsoft 365 tenant that uses Microsoft Intune to manage the devices shown in the following table.





You need to deploy a compliance solution that meets the following requirements:

✑ Marks the devices as Not Compliant if they do not meet compliance policies

✑ Remotely locks noncompliant devices

What is the minimum number of compliance policies required, and which devices support the remote lock action? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

33. Your network contains an Active Directory domain. The domain contains 10 computers that run Windows 8.1 and use local user profiles.

You deploy 10 new computers that run Windows 10 and join the computers to the domain.

You need to migrate the user profiles from the Windows 8.1 computers to the Windows 10 computers.

What should you do?

34. You have a Microsoft 365 subscription.

You have 10 computers that run Windows 10 and are enrolled in mobile device management (MDM)

You need to deploy the Microsoft Office 365 ProPlus suite to all the computers .

What should you do?

35. HOTSPOT

You have the devices shown in the following table.





You plan to implement Desktop Analytics.

You need to identify which devices support the following:

✑ Compatibility insights

✑ App usage insights

Which devices should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

36. Your company has a Microsoft Azure Active Directory (Azure AD) tenant.

The company has a Volume Licensing Agreement and uses a product key to activate Windows 10.

You plan to deploy Windows 10 Pro to 200 new computers by using the Microsoft Deployment Toolkit (MDT) and Windows Deployment Services (WDS).

You need to ensure that the new computers will be configured to have the correct product key during the

installation.

What should you configure?

37. HOTSPOT

You network contains an Active Directory domain. The domain contains 200 computers that run Windows 8.1. You have a Microsoft Azure subscription.

You plan to upgrade the computers to Windows 10.

You need to generate an Upgrade Readiness report for the computers.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

38. You manage a Microsoft 365 environment that has co-management enabled.

All computers run Windows 10 and are deployed by using the Microsoft Deployment Toolkit (MDT).

You need to recommend a solution to deploy Microsoft Office 365 ProPlus to new computers. The latest version must always be installed. The solution must minimize administrative effort.

What is the best tool to use for the deployment? More than one answer choice may achieve the goal. Select the BEST answer.

39. You have devices enrolled in Microsoft Intune as shown in the following table.





You create an app protection policy named Policy1 that has the following settings:

✑ Platform: Windows 10

✑ Protected apps: App1

✑ Exempt apps: App2

✑ Network boundary: Cloud resources, IPv4 ranges

You assign Policy1 to Group1 and Group2. You exclude Group3 from Policy1.

Which devices will apply Policy1?

40. You have a Microsoft Intune subscription associated to an Azure Active Directory (Azure AD) tenant named contoso.com.

Users use one of the following three suffixes when they sign in to the tenant:

us.contoso.com, eu.contoso.com, or contoso.com.

You need to ensure that the users are NOT required to specify the mobile device management (MDM)

enrollment URL as part of the enrollment process. The solution must minimize the number of changes.

Which DNS records do you need?

41. HOTSPOT

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named User1.

User1 has the devices shown in the following table.





On September 5, 2019, you create and enforce a terms of use (ToU) in contoso.com.

The ToU has the following settings:

✑ Name: Terms1

✑ Display name: Terms name

✑ Require users to expand the terms of use: Off

✑ Require users to consent on every device: On

✑ Expire consents: On

✑ Expire starting on: October 10, 2019

✑ Frequency Monthly

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

42. You are replacing 100 company-owned Windows devices.

You need to use the Microsoft Deployment Toolkit (MDT) to securely wipe and decommission the devices.

The solution must meet the following requirements:

✑ Back up the user state.

✑ Minimize administrative effort.

Which task sequence template should you use?

43. DRAG DROP

You have a Microsoft Deployment Toolkit (MDT) deployment share named DS1.

You import a Windows 10 image to DS1.

You have an executable installer for an application named App1.

You need to ensure that App1 will be installed for all the task sequences that deploy the image.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

44. You need to meet the requirements for the MKG department users.

What should you do?

45. You have 100 devices that run Windows 10 and are joined to Microsoft Azure Active Directory (Azure AD).

You need to prevent users from joining their home computer to Azure AD.

What should you do?

46. HOTSPOT

You need to recommend a solution to meet the device management requirements.

What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

47. Topic 3, Contoso, Ltd. (NEW)



Case Study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.



Overview

Contoso, Ltd. is a consulting company that has a main office in Montreal and branch offices in Seattle and New York.

Contoso has a Microsoft 365 E5 subscription.



Network Environment

The network contains an on-premises Active domain named Contoso.com.

The domain contains the servers shown in the following table.





Contoso has a hybrid Azure Active Directory (Azure AD) tenant named Contoso.com.

Contoso has a Microsoft Store for Business instance.



Users and Groups

The Contoso.com tenant contains the users shown in the following table.





All users are assigned a Microsoft Office 365 license and an Enterprise Mobility + Security E3 license.

Enterprise State Roaming is enabled for Group1 and GroupA.

Group and Group have a Membership type of Assign



Devices

Contoso has the Windows 10 devices shown in the following table.





The Windows 10 devices are joined to Azure AD and enrolled in Microsoft intune.

The Windows 10 devices are configured as shown in the following table.





All the Azure AD joined devices have an executable file named C:AppA.exe and a folder named D:Folder 1.



Microsoft Endpoint Manager Configuration

Microsoft Endpoint Manager has the compliance policies shown in the following table.

The Compliance policy settings are shown in the following exhibit.





The Automatic Enrolment settings have the following configurations:

• MDM user scope GroupA

• MAM user scope: GroupB

You have an Endpoint protection configuration profile that has the following Controlled folder access settings:

• Name: Protection1

• Folder protection: Enable

• List of apps that have access to protected folders: CVAppA.exe

• List of additional folders that need to be protected: D:Folderi1

• Assignments



Windows Autopilot Configuration





Currently, there are no devices deployed by using Window Autopilot

The Intune connector tor Active Directory is installed on Server 1.



Planned Changes

Contoso plans to implement the following changes:

• Purchase a new Windows 10 device named Device6 and enroll the device in Intune.

• New computers will be deployed by using Windows Autopilot and will be hybrid Azure AO joined.

• Deploy a network boundary configuration profile that will have the following settings:

• Name Boundary 1

• Network boundary 192.168.1.0/24

• Scope tags: Tag 1

• Assignments;

• included groups: Group 1. Group2

• Deploy two VPN configuration profiles named Connection! and Connection that will have the following settings:

• Name: Connection 1

• Connection name: VPNI

• Connection type: L2TP

• Assignments:

• Included groups: Group1. Group2, GroupA

• Excluded groups: ―

• Name: Connection

• Connection name: VPN2

• Connection type: IKEv2 i Assignments:

• included groups: GroupA

• Excluded groups: GroupB

• Purchase an app named App1 that is available in Microsoft Store for Business and to assign the app to all the users.



Technical Requirements

Contoso must meet the following technical requirements:

• Users in GroupA must be able to deploy new computers.

• Administrative effort must be minimized.



HOTSPOT

User1 and User2 plan to use Sync your settings.

On which devices can the users use Sync your settings? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

48. You have an Azure Active Directory (Azure AD) tenant named adatum.com that contains two computers named Computer1 and Computer2. The computers run Windows 10 and are members of a group named GroupA.

The tenant contains a user named User1 that is a member of a group named Group1.

You need to ensure that if User1 changes the desktop background on Computer1, the new desktop background will appear when User1 signs in to Computer2.

What should you do?

49. You have a Microsoft 365 subscription. All devices run Windows 10.

You need to prevent users from enrolling the devices in the Windows Insider Program.

What should you configure from Microsoft 365 Device Management? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

50. You have a Microsoft Azure subscription that contains an Azure Log Analytics workspace.

You deploy a new computer named Computer1 that runs Windows 10. Computer1 is in a workgroup.

You need to ensure that you can use Log Analytics to query events from Computer1.

What should you do on Computer1?

51. You need to meet the device management requirements for the developers.

What should you implement?

52. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Directory group named Group1 that contains Windows 10 Enterprise devices and Windows 10 Pro devices.

From Microsoft Intune, you create a device configuration profile named Profile1.

You need to ensure that Profile1 applies to only the Windows 10 Enterprise devices in Group1.

Solution: You create a scope tag, and then you add the scope tag to the Windows 10 Enterprise devices. You edit the settings of Profile1.

Does this meet the goal?

53. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has an Azure Active Directory (Azure AD) tenant named contoso.com and a Microsoft Intune subscription.

Contoso.com contains a user named [email protected].

You have a computer named Computer1 that runs Windows 8.1.

You need to perform an in-place upgrade of Computer1 to Windows 10.

Solution: You assign a Windows 10 license to User1. You instruct User1 to sign in to Computer1.

Does this meet the goal?

54. HOTSPOT

Your company has an infrastructure that has the following:

✑ A Microsoft 365 tenant

✑ An Active Directory forest

✑ Microsoft Store for Business

✑ A Key Management Service (KMS) server

✑ A Windows Deployment Services (WDS) server

✑ A Microsoft Azure Active Directory (Azure AD) Premium tenant

The company purchases 100 new computers that run Windows 10.

You need to ensure that the new computers are joined automatically to Azure AD by using Windows AutoPilot.

What should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

55. DRAG DROP

You have a Microsoft Deployment Toolkit (MDT) deployment share that has a path of D:MDTShare.

You need to add a feature pack to the boot image.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

56. HOTSPOT

Your network contains an Active Directory domain. The domain contains computers that run Windows 10 and are enrolled in Microsoft Intune. Updates are deployed by using Windows Update for Business.

Users in a group named Group1 must meet the following requirements:

✑ Update installations must occur any day only between 00:00 and 05:00.

✑ Updates must be downloaded from Microsoft and from other company computers that already downloaded the updates.

You need to configure the Windows 10 Update Rings in Intune to meet the requirements.

Which two settings should you modify? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

57. HOTSPOT

You need to meet the technical requirements for Windows AutoPilot.

Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

58. HOTSPOT

You have a Microsoft 365 E5 tenant that contains the users shown in the following table.





You provision the private store in Microsoft Store for Business and assign Microsoft Store

for Business roles to the users as shown in the following table.





You configure the following Shopping behavior settings for the Microsoft Store for Business:

✑ Allow users to shop: Yes

✑ Make everyone a Basic Purchaser: Off

✑ Allow app requests: On

✑ Shop offline apps: Off

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

59. You have Windows 10 devices that are managed by using Microsoft Intune. Intune and the Microsoft Store for Business are integrated.

You need to deploy the Remote Desktop modern app as an automatic install to the Windows 10 devices without user interaction.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

60. HOTSPOT

You have 200 computers that run Windows 10.

You need to create a provisioning package to configure the following tasks:

✑ Remove the Microsoft News and the Xbox Microsoft Store apps.

✑ Add a VPN connection to the corporate network.

Which two customizations should you configure? To answer, select the appropriate customizations in the answer area. NOTE: Each correct selection is worth one point.

61. You have 500 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune.

You plan to distribute certificates to the computers by using Simple Certificate Enrollment Protocol (SCEP).

You have the servers shown in the following table.





NDES issues certificates from the subordinate CA.

You are configuring a device profile as shown in the exhibit. (Click the Exhibit tab.)

You need to complete the SCEP profile.

62. HOTSPOT

Your company has 1,000 Windows 10 devices that are enrolled in Windows Analytics.

You need to view the following information:

✑ The number of devices that are vulnerable to Spectre and Meltdown vulnerabilities

✑ The number of devices that have Windows Defender real-time protection turned off

Which Windows Analytics solutions should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

63. DRAG DROP

Your company has a computer named Computer1 that runs Windows 10.

Computer1 was used by a user who left the company.

You plan to repurpose Computer1 and assign the computer to a new user. You need to redeploy Computer1 by using Windows AutoPilot.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

64. HOTSPOT

You have a Microsoft 365 subscription.

You need to configure access to Microsoft Office 365 for unmanaged devices.

The solution must meet the following requirements:

✑ Allow only the Microsoft Intune Managed Browser to access Office 365 web interfaces.

✑ Ensure that when users use the Intune Managed Browser to access Office 365 web interfaces, they can only copy data to applications that are managed by the company.

Which two settings should you configure from the Microsoft Intune blade? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

65. HOTSPOT

You have a computer named Computer1 that runs Windows 10.

Computer1 has the users shown in the following table.





User1 signs in to Computer1, creates the following files, and then signs out:

✑ docx in C:UsersUser1Desktop

✑ docx in C:UsersPublicPublic Desktop

✑ docx in C:UsersDefault Desktop

User3 signs in to Computer1 and creates a file named File4.docx in C:UsersUser3Desktop.

User2 has never signed in to Computer1.

How many DOCX files will appear on the desktop of each user the nest time each user signs in? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

66. HOTSPOT

You have a Microsoft 365 tenant that uses Microsoft Intune.

From the Microsoft Endpoint Manager admin center, you plan to create a baseline to monitor the Startup score and the App reliability score of enrolled Windows 10 devices.

You need to identify which tool to use to create the baseline and the minimum number of devices required to create the baseline.

What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

67. HOTSPOT

You have an Azure Active Directory (Azure AD) tenant named adatum.com that contains the users shown in the following table.





You configure the following device settings for the tenant:

✑ Users may join devices to Azure AD: User1

✑ Additional local administrators on Azure AD joined devices: None

You install Windows 10 on a computer named Computer1.

You need to identify which users can join Computer1 to adatum.com, and which users will be added to the Administrators group after joining adatum.com.

Which users should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.