MD-101 Online Practice Questions and Answers

Your company has a Microsoft 365 subscription configured for their environment. All devices in the environment have Windows 10 installed.

You have been instructed to make sure that users are not allowed to enroll devices in the Windows Insider Program.

To achieve your goal, you access Microsoft 365 Device Management.

Which of the following actions should you take?

A. You should configure a Windows 10 security baseline.

B. You should configure an app protection policy.

C. You should configure device restriction policy.

D. You should configure a Windows 10 update ring.

Your company plans to deploy tablets to 50 meeting rooms.

The tablets run Windows 10 and are managed by using Microsoft Intune. The tablets have an application named App1.

You need to configure the tablets so that any user can use App1 without having to sign in. Users must be prevented from using other applications on the tablets.

Which device configuration profile type should you use?

A. Kiosk

B. Endpoint protection

C. Identity protection

D. Device restrictions

You have a Microsoft 365 tenant

You have devices enrolled in Microsoft intune.

You assign a conditional access policy nan-ted Policy1 to a group named Group1. Policy1 restricts devices marked as noncompliant from accessing Microsoft OneDrive for Business.

You need to identify which noncompliant devices attempt to access OneDrive for Business.

What should you do?

A. From the Microsoft Endpoint Manager admin center, review the Setting compliance report.

B. From the Microsoft Endpoint Manager admin center, review the Noncompliant devices reporter.

C. From the Microsoft Endpoint Manager admin center, review Device compliance report.

D. From the Azure Active Directory admin center, review the Conditional Access Insights and Reporting workbook.

Your company has 200 computers that run Windows 10. The computers are managed by using Microsoft Intune.

Currently, Windows updates are downloaded without using Delivery Optimization.

You need to configure the computers to use Delivery Optimization.

What should you create in Intune?

A. a device configuration profile

B. a device compliance policy

C. an app protection policy

D. a Windows 10 update ring

You have a public computer named Public1 that runs Windows 10.

Users use Public1 to browse the internet by using Microsoft Edge.

You need to view events associated with website phishing attacks on Public1.

Which Event Viewer log should you view?

A. Applications and Services Logs > Microsoft\Windows > DeviceGuard > Operational

B. Applications and Services Logs > Microsoft > Windows > Security-Mitigations > User Mode

C. Applications and Services Logs > Microsoft > Windows > SmartScreen > Debug

D. Applications and Services Logs > Microsoft > Windows > Windows Defender > Operational

You have an Azure Active Directory (Azure AD) tenant and 100 Windows 10 devices that are Azure AD joined and managed by using Microsoft Intune. You need to configure Microsoft Defender Firewall and Microsoft Defender Antivirus on the devices. The solution must minimize administrative effort. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Endpoint protection settings.

B. To configure Microsoft Defender Firewall, crate a device configuration profile and configure the Device restrictions settings.

C. To configure Microsoft Defender Firewall, create a Group Policy Object (GPO) and configure Windows Defender Firewall with Advanced Security.

D. To configure Microsoft Defender Antivirus, create a Group Policy Object (GPO) and configure Windows Defender Antivirus settings.

E. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Device restrictions settings.

F. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Endpoint protection settings.

Your network contains an Active Directory domain. The domain contains 10 computers that run Windows 8.1 and use local user profiles.

You deploy 10 new computers that run Windows 10 and join the computers to the domain.

You need to migrate the user profiles from the Windows 8.1 computers to the Windows 10 computers.

What should you do?

A. From the Windows 8.1 computer of each user, run imagex.exe/capture, and then from the Windows 10 computer of each user, run imagex.exe/apply.

B. Configure roaming user profiles for the users. Instruct the users to first sign in to and out of their Windows 8.1 computer and then to sign in to their Windows 10 computer.

C. From the Windows 8.1 computer of each user, run scanstate.exe, and then from the Windows 10 computer of each user, run loadstate.exe.

D. Configure Folder Redirection for the users. Instruct the users to first sign in to and out of their Windows 8.1 computer, and then to sign in to their Windows 10 computer.

You are replacing 100 company-owned Windows devices.

You need to use the Microsoft Deployment Toolkit (MDT) to securely wipe and decommission the devices. The solution must meet the following requirements:

1.

Back up the user state.

2.

Minimize administrative effort.

Which task sequence template should you use?

A. Litetouch OEM Task Sequence

B. Sysprep and Capture

C. Standard Client Replace Task Sequence

D. Standard Client Task Sequence

DRAG DROP

Your network contains an Active Directory domain.

You install the Microsoft Deployment Toolkit (MDT) on a server.

You have a custom image of Windows 10.

You need to deploy the image to 100 devices by using MDT.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

HOTSPOT

Your company uses Microsoft System Center Configuration Manager (Current Branch) and purchases 365 subscription.

You need to set up Desktop Analytics for Configuration Manager.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

HOTSPOT

Your company uses Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). Microsoft Defender ATP includes the machine groups shown in the following table.

You onboard a computer to Microsoft Defender ATP as shown in the following exhibit.

What is the effect of the Microsoft Defender ATP configuration? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

HOTSPOT

Your network contains an Active Directory domain. Active Directory is synced with Microsoft Azure Active Directory (Azure AD).

There are 500 Active Directory domain-joined computers that run Windows 10 and are enrolled in Microsoft Intune.

You plan to implement Microsoft Defender Exploit Guard.

You need to create a custom Microsoft Defender Exploit Guard policy, and then distribute the policy to all the computers.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

HOTSPOT

You have a Microsoft 365 tenant.

You have a Windows 10 update ring named Policy1 as shown in the following exhibit.

A Windows 10 Feature update deployment named Policy2 is configured as shown in the following exhibit.

You have devices enrolled in Microsoft Intune as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

HOTSPOT

You have the device configuration profile shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Hot Area:

You are evaluating which devices are compliant.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area: