MD-102 Online Practice Questions and Answers

Correct Answer: C

App configuration policies for Microsoft Intune

You can create and use app configuration policies to provide configuration settings for both iOS/iPadOS or Android apps.

Reference:

https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-overview

Correct Answer: D

Detection rules in Win32 apps are telling Intune how to tell if the application has been installed or not. Configure a dependency in the win32 app deployment screen even has this wording: "Software dependencies are applications that must be installed before this application can be installed"

Configure App1 first so that it'll be selectable in the dependencies section

Correct Answer: C

"Error Code: DLG_FLAGS_INVALID_CA" while login to Admin Console after enabling HTTPS in PowerCenter.

Solution

To resolve this issue, add the CA-signed certificates to the "Trusted Root Certification Authorities" in the browser. After adding the certificates, restart the browser.

Reference:

https://knowledge.informatica.com/s/article/578585

Correct Answer: B

How to Perform an In-Place Upgrade on Windows 11.

To perform an in-place upgrade, you need to do two things. Firstly, you need to download the latest Windows 11 ISO file. Then, you need to run the setup from the ISO file, pick the appropriate in-place upgrade option, and proceed.

1.

Download the Windows 11 ISO Image File

First of all, you need to grab the Windows 11 ISO image file. If you don't already have one on hand, check out how to download a Windows ISO without the Media Creation tool for some easy methods.

2.

Perform an In-Place Upgrade Using the Windows11 ISO Image File

Etc.

Reference:

https://www.makeuseof.com/in-place-upgrade-windows-11/

Correct Answer: C

Windows subscription activation The subscription activation feature enables you to "step-up" from Windows Pro edition to Enterprise or Education editions. You can use this feature if you're subscribed to Windows Enterprise E3 or E5 licenses. Subscription activation also supports step-up from Windows Pro Education edition to Education edition.

Devices must be Azure AD-joined or hybrid Azure AD joined. Workgroup-joined or Azure AD registered devices aren't supported.

Reference: https://learn.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation

Correct Answer: D

https://learn.microsoft.com/en-us/mem/analytics/data-collection https://learn.microsoft.com/en-us/mem/analytics/enroll-intune#bkmk_onboard

Correct Answer: C

You can include the following management objects in a policy set:

Apps App configuration policies App protection policies Device configuration profiles (Conf1) Device compliance policies (Comply1) Windows autopilot deployment profiles Enrollment status page Settings catalog policies

Note: Use policy sets to group collections of management objects Policy sets allow you to create a bundle of references to already existing management entities that need to be identified, targeted, and monitored as a single conceptual unit. A policy set is an assignable collection of apps, policies, and other management objects you've created. Creating a policy set enables you to select many different objects at once, and assign them from a single place. As your organization changes, you can revisit a policy set to add or remove its objects and assignments. You can use a policy set to associate and assign existing objects, such as apps, policies, and VPNs in a single package.

Reference: https://learn.microsoft.com/en-us/mem/intune/fundamentals/policy-sets

Correct Answer: C

Reference: https://docs.microsoft.com/en-us/microsoft-365/admin/create-groups/compare-groups

Correct Answer: E

https://learn.microsoft.com/en-us/mem/intune/configuration/vpn-settings-configure#step-2---create-the-profile

Correct Answer: BC

C: Add a Managed Google Play store app in the Managed Google Play console (Alternative)

If you prefer to synchronize a Managed Google Play app with Intune rather than adding it directly using Intune, use the following steps.

1.

Go to the Managed Google Play store. Sign in with the same account you used to configure the connection between Intune and Android Enterprise.

2.

Search the store and select the app you want to assign by using Intune.

3.

On the page that displays the app, click Approve.

In the following example, the Microsoft Excel app has been chosen.

A window for the app opens asking you to give permissions for the app to perform various operations.

4.

Select Approve to accept the app permissions and continue.

5.

Select an option for handling new app permission requests, and then select Save.

(B) The app is approved, and it is displayed in your IT admin console. Next, you can Sync a Managed Google Play app with Intune.

Reference:

https://learn.microsoft.com/en-us/mem/intune/apps/apps-add-android-for-work

Correct Answer: A

Azure AD registered devices are personal devices that are associated with Azure AD. This allows users to access company data from their personal devices without having to join the devices to the company's domain. Additionally, Azure AD registered devices can be managed by Microsoft Intune.

Correct Answer: B

The Enable-PSRemoting cmdlet configures the computer to receive PowerShell remote commands that are sent by using the WS-Management technology. WS-Management based PowerShell remoting is currently supported only on Windows platform.

Syntax

Enable-PSRemoting [-Force] [-SkipNetworkProfileCheck] [-WhatIf] [-Confirm] []

Parameters include:

* -SkipNetworkProfileCheck

Indicates that this cmdlet enables remoting on client versions of the Windows operating system when the computer is on a public network. This parameter enables a firewall rule for public networks that allows remote access only from

computers in the same local subnet.

Reference:

https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/enable-psremoting

Correct Answer: C

Creating a policy set enables you to select many different objects at once, and assign them from a single place.

You can include the following management objects in a policy set:

Apps

App configuration policies

App protection policies *-> Device configuration profiles *-> Device compliance policies Windows autopilot deployment profiles Enrollment status page Settings catalog policies

Note: Use policy sets to group collections of management objects Policy sets allow you to create a bundle of references to already existing management entities that need to be identified, targeted, and monitored as a single conceptual unit. A policy set is an assignable collection of apps, policies, and other management objects you've created. Creating a policy set enables you to select many different objects at once, and assign them from a single place. As your organization changes, you can revisit a policy set to add or remove its objects and assignments. You can use a policy set to associate and assign existing objects, such as apps, policies, and VPNs in a single package.

Policy sets don't replace existing concepts or objects. You can continue to assign individual objects and you can also reference individual objects as part of a policy set. Therefore, any changes to those individual objects will be reflected in the policy set.

You can use policy sets to:

Group objects that need to be assigned together Assign your organization's minimum configuration requirements on all managed devices Assign commonly used or relevant apps to all users

Reference: https://learn.microsoft.com/en-us/mem/intune/fundamentals/policy-sets

Correct Answer: C

Pending devices in Azure Active Directory

How a device gets stuck in a pending state:

There are two scenarios in which a device can be stuck in a pending state.

Sync a new on-premises domain joined device to Azure AD

A new on-premises device can get stuck in a pending state if it can't complete the device registration process. This problem can be caused by several factors, such as that the *device can't connect to the registration service*.

To troubleshoot a device registration problem, see:

Troubleshooting hybrid Azure Active Directory joined devices

*-> Test Device Registration Connectivity

Note: Pending devices are devices that are synced to Azure Active Directory (Azure AD) from your on-premises Active Directory, but haven't completed registration with the Azure AD device registration service. When the registered state of a

device is pending, the device can't complete any authorization or authentication requests, such as requesting a Primary Refresh token for single sign-on, or applying device-based Conditional Access policies.

Reference:

https://learn.microsoft.com/en-us/troubleshoot/azure/active-directory/pending-devices

Correct Answer: A