Why should I go for the MD-101 question answers?You can pass exam very simply and easily with MD-101 question answers.All new questions available now!!! https://www.pass4itsure.com/md-101.html(Updated: Mar 08, 2020) MD-101 PDF File,Free Download, Microsoft MD-101 Practice Test.
Microsoft 365 Certified: Modern Desktop Administrator Associate
Required exams: MD-100,MD-101
MD-101: Managing Modern Desktops
This exam measures your ability to accomplish the following technical tasks: deploy and update operating systems; manage policies and profiles; manage and protect devices; and manage apps and data.
- Deploy and update operating systems (15-20%)
- Manage policies and profiles (35-40%)
- Manage and protect devices (15-20%)
- Manage apps and data (25-30%)
More https://docs.microsoft.com/en-us/learn/certifications/exams/md-101
Latest update Microsoft MD-101 (question answers) Practice Test
QUESTION 1
You need a new conditional access policy that has an assignment for Office 365 Exchange Online.
You need to configure the policy to meet the technical requirements for Group4.
Which two settings should you configure in the policy? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Explanation/Reference:
The policy needs to be applied to Group4 so we need to configure Users and Groups.
The Access controls are set to Block access
We therefore need to exclude compliant devices.
From the scenario:
Ensure that the users in a group named Group4 can only access Microsoft Exchange Online from devices that are
enrolled in Intune.
Note: When a device enrolls in Intune, the device information is updated in Azure AD to include the device compliance
status. This compliance status is used by conditional access policies to block or allow access to e-mail and other
organization resources.
References:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/conditions https://docs.microsoft.com/en-us/intune/device-compliance-get-started
From the scenario:
Ensure that the users in a group named Group4 can only access Microsoft Exchange Online from devices that are
enrolled in Intune.
Note: When a device enrolls in Intune, the device information is updated in Azure AD to include the device compliance
status. This compliance status is used by conditional access policies to block or allow access to e-mail and other
organization resources.
References:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/conditions https://docs.microsoft.com/en-us/intune/device-compliance-get-started
QUESTION 2
Your network contains an Active Directory domain. The domain contains 2,000 computers that run Windows 10.
You implement hybrid Microsoft Azure Active Directory (Azure AD) and Microsoft Intune.
You need to automatically register all the existing computers to Azure AD and enroll the computers in Intune. The
solution must minimize administrative effort.
What should you use?
A. An Autodiscover address record.
B. A Windows AutoPilot deployment profile.
C. An Autodiscover service connection point (SCP).
D. A Group Policy object (GPO).
Correct Answer: B
Reference: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-Autopilot-Hybrid-Azure-AD-join-andautomatic/ba-p/286126
Your network contains an Active Directory domain. The domain contains 2,000 computers that run Windows 10.
You implement hybrid Microsoft Azure Active Directory (Azure AD) and Microsoft Intune.
You need to automatically register all the existing computers to Azure AD and enroll the computers in Intune. The
solution must minimize administrative effort.
What should you use?
A. An Autodiscover address record.
B. A Windows AutoPilot deployment profile.
C. An Autodiscover service connection point (SCP).
D. A Group Policy object (GPO).
Correct Answer: B
Reference: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-Autopilot-Hybrid-Azure-AD-join-andautomatic/ba-p/286126
QUESTION 3
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your company uses Windows AutoPilot to configure the computer settings of computers issued to users.
A user named User1 has a computer named Computer1 that runs Windows 10. User1 leaves the company.
You plan to transfer the computer to a user named User2.
You need to ensure that when User2 first starts the computer, User2 is prompted to select the language setting and to
agree to the license agreement.
Solution: You create a new Windows AutoPilot user-driven deployment profile.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/user-driven
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your company uses Windows AutoPilot to configure the computer settings of computers issued to users.
A user named User1 has a computer named Computer1 that runs Windows 10. User1 leaves the company.
You plan to transfer the computer to a user named User2.
You need to ensure that when User2 first starts the computer, User2 is prompted to select the language setting and to
agree to the license agreement.
Solution: You create a new Windows AutoPilot user-driven deployment profile.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/user-driven
QUESTION 4
You have computers that run Windows 10 as shown in the following table.
Computer2 and Computer3 are enrolled in Microsoft Intune.
In a Group Policy object (GPO) linked to the domain, you enable the Computer Configuration/Administrative
Templates/Windows Components/Search/Allow Cortana setting. In an Intune device configuration profile, you configure
the following:
Device/Vendor/MSFT/Policy/Config/ControlPolicyConflict/MDMWinsOverGP to a value of 1
Experience/AllowCortana to a value of 0.
Each of the following statement, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
In a Group Policy object (GPO) linked to the domain, you enable the Computer Configuration/Administrative
Templates/Windows Components/Search/Allow Cortana setting. In an Intune device configuration profile, you configure
the following:
Device/Vendor/MSFT/Policy/Config/ControlPolicyConflict/MDMWinsOverGP to a value of 1
Experience/AllowCortana to a value of 0.
Each of the following statement, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 5
Your company has a Microsoft 365 subscription.
All the users in the finance department own personal devices that run iOS or Android. All the devices are enrolled in
Microsoft Intune.
The finance department adds new users each month.
The company develops a mobile application named App1 for the finance department users.
You need to ensure that only the finance department users can download App1.
What should you do first?
A. Add App1 to Intune.
B. Add App1 to a Microsoft Deployment Toolkit (MDT) deployment share.
C. Add App1 to Microsoft Store for Business.
D. Add App1 to the vendor stores for iOS and Android applications.
Correct Answer: A
Reference: https://docs.microsoft.com/en-us/intune/apps-add
Your company has a Microsoft 365 subscription.
All the users in the finance department own personal devices that run iOS or Android. All the devices are enrolled in
Microsoft Intune.
The finance department adds new users each month.
The company develops a mobile application named App1 for the finance department users.
You need to ensure that only the finance department users can download App1.
What should you do first?
A. Add App1 to Intune.
B. Add App1 to a Microsoft Deployment Toolkit (MDT) deployment share.
C. Add App1 to Microsoft Store for Business.
D. Add App1 to the vendor stores for iOS and Android applications.
Correct Answer: A
Reference: https://docs.microsoft.com/en-us/intune/apps-add
QUESTION 6
You have a Microsoft 365 subscription.
You need to configure access to Microsoft Office 365 for unmanaged devices. The solution must meet the following requirements:
Allow only the Microsoft Intune Managed Browser to access Office 365 web interfaces.
Ensure that when users use the Intune Managed Browser to access Office 365 web interfaces, they can only copy data
to applications that are managed by the company.
Which two settings should you configure from the Microsoft Intune blade? To answer, select the appropriate settings in
the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
You have a Microsoft 365 subscription.
You need to configure access to Microsoft Office 365 for unmanaged devices. The solution must meet the following requirements:
Allow only the Microsoft Intune Managed Browser to access Office 365 web interfaces.
Ensure that when users use the Intune Managed Browser to access Office 365 web interfaces, they can only copy data
to applications that are managed by the company.
Which two settings should you configure from the Microsoft Intune blade? To answer, select the appropriate settings in
the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 7
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You need to ensure that feature and quality updates install automatically during a maintenance window.
Solution: From the Maintenance Scheduler settings, you configure Automatic Maintenance Random Delay.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
Reference: https://docs.microsoft.com/en-us/sccm/sum/deploy-use/automatically-deploy-software-updates
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You need to ensure that feature and quality updates install automatically during a maintenance window.
Solution: From the Maintenance Scheduler settings, you configure Automatic Maintenance Random Delay.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
Reference: https://docs.microsoft.com/en-us/sccm/sum/deploy-use/automatically-deploy-software-updates
QUESTION 8
You have a computer named Computer5 that has Windows 10 installed.
You create a Windows PowerShell script named config.ps1.
You need to ensure that config.ps1 runs after feature updates are installed on Computer5.
Which file should you modify on Computer5?
A. Unattend.xml
B. Unattend.bat
C. SetupConfig.ini
D. LiteTouch.wsf
Correct Answer: C
QUESTION 9
You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure
AD) and enrolled in Microsoft Intune.
You need to ensure that only applications that you explicitly allow can run on the computers.
What should you use?
A. Windows Defender Credential Guard
B. Windows Defender Exploit Guard
C. Windows Defender Application Guard
D. Windows Defender Antivirus.
Correct Answer: C
Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/introduction-to-deviceguard-virtualization-based-security-and-windows-defender-application-control
You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure
AD) and enrolled in Microsoft Intune.
You need to ensure that only applications that you explicitly allow can run on the computers.
What should you use?
A. Windows Defender Credential Guard
B. Windows Defender Exploit Guard
C. Windows Defender Application Guard
D. Windows Defender Antivirus.
Correct Answer: C
Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/introduction-to-deviceguard-virtualization-based-security-and-windows-defender-application-control
QUESTION 10
You have a Microsoft Azure Log Analytics workplace that collects all the event logs from the computers at your
company. You have a computer named Computer1 than runs Windows 10. You need to view the events collected from
Computer1. Which query should you run in Log Analytics?
A. Event | where Computer = = “Computer1”
B. ETWEvent | where SourceSystem = = “Computer1”
C. ETWEvent | where Computer = = “Computer1”
D. Event | where SourceSystem = = “Computer1”
Correct Answer: A
Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-sources-windows-events
You have a Microsoft Azure Log Analytics workplace that collects all the event logs from the computers at your
company. You have a computer named Computer1 than runs Windows 10. You need to view the events collected from
Computer1. Which query should you run in Log Analytics?
A. Event | where Computer = = “Computer1”
B. ETWEvent | where SourceSystem = = “Computer1”
C. ETWEvent | where Computer = = “Computer1”
D. Event | where SourceSystem = = “Computer1”
Correct Answer: A
Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-sources-windows-events
QUESTION 11
You need to capture the required information for the sales department computers to meet the technical requirements.
Which Windows PowerShell command should you run first?
A. Install-Module WindowsAutoPilotIntune
B. Install-Script Get-WindowsAutoPilotInfo
C. Import-AutoPilotCSV
D. Get-WindowsAutoPilotInfo
Correct Answer: A
References: https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/existing-devices
You need to capture the required information for the sales department computers to meet the technical requirements.
Which Windows PowerShell command should you run first?
A. Install-Module WindowsAutoPilotIntune
B. Install-Script Get-WindowsAutoPilotInfo
C. Import-AutoPilotCSV
D. Get-WindowsAutoPilotInfo
Correct Answer: A
References: https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/existing-devices
QUESTION 12
You need to meet the OOBE requirements for Windows AutoPilot.
Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate
settings in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
QUESTION 13
You have computers that run Windows 10 and are configured by using Windows AutoPilot.
A user performs the following tasks on a computer named Computer1:
Creates a VPN connection to the corporate network
Installs a Microsoft Store app named App1
Connects to a Wi-Fi network
You perform a Windows AutoPilot Reset on Computer1.
What will be the state of the computer when the user signs in? To answer, select the appropriate options in the answer
area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Latest Microsoft MD-101 google drive
[PDF] Free Microsoft MD-101 pdf dumps download from Google Drive:
https://drive.google.com/open?id=1JpLefM5Cw_TVW53_EBHX8YPQ50NWPfVd
Pass4itsure Year-round Discount Code
Tips to help you prepare MD-101 effectively for test :
Summarize:
MD-101 exam dumps can be obtained online, https://www.pass4itsure.com/md-101.html provide you with MD-101 study guide; various MD-101 practice exams, MD-101 Q & A.
