Download Endpoint Administrator.MD-102.PassLeader.2024-10-10.119q.vcex

Vendor: Microsoft
Exam Code: MD-102
Exam Name: Endpoint Administrator
Date: Oct 10, 2024
File Size: 8 MB
Downloads: 24

How to open VCEX files?

Files with VCEX extension can be opened by ProfExam Simulator.

Demo Questions

Question 1
You need to capture the required information for the sales department computers to meet the technical requirements. 
Which Windows PowerShell command should you run first? 
  1. Install-Module WindowsAutoPilotIntune 
  2. Install-Script Get-WindowsAutoPilotInfo 
  3. Import-AutoPilotCSV 
  4. Get-WindowsAutoPilotInfo  
Correct answer: A
Explanation:
Re-provision the sales department computers by using Windows AutoPilot. Windows Autopilot Deployment for existing devices, install required modules: Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force Install-Module AzureAD -Force Install-Module WindowsAutopilotIntune -Force Install-Module Microsoft.Graph.Intune -Force Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/existing-devices   
Re-provision the sales department computers by using Windows AutoPilot. 
Windows Autopilot Deployment for existing devices, install required modules: 
  • Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force 
  • Install-Module AzureAD -Force 
  • Install-Module WindowsAutopilotIntune -Force 
  • Install-Module Microsoft.Graph.Intune -Force 
Reference: 
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/existing-devices 
 
 
Question 2
What should you configure to meet the technical requirements for the Azure AD-joined computers? 
 
  1. Windows Hello for Business from the Microsoft Intune blade in the Azure portal.
  2. The Accounts options in an endpoint protection profile. 
  3. The Password Policy settings in a Group Policy object (GPO). 
  4. A password policy from the Microsoft Office 365 portal.  
Correct answer: A
Explanation:
Ensure that users can sign in to the Azure AD-joined computers by using a PIN. The PIN must expire every 30 days. Group Policy settings for Windows Hello for Business. These policy settings are available in User configuration and Computer Configuration under Policies > Administrative Templates > Windows Components > Windows Hello for Business. Reference: https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-manage-in-organization 
Ensure that users can sign in to the Azure AD-joined computers by using a PIN. The PIN must expire every 30 days. 
Group Policy settings for Windows Hello for Business. 
These policy settings are available in User configuration and Computer Configuration under Policies > Administrative Templates > Windows Components > Windows Hello for Business. 
Reference: 
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-manage-in-organization 
Question 3
What should you use to meet the technical requirements for Azure DevOps? 
  1. An app protection policy
  2. Windows Information Protection (WIP) 
  3. Conditional access 
  4. A device configuration profile  
Correct answer: C
Explanation:
Ensure that the projects in Azure DevOps can be accessed from the corporate network only. Reference: https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/manage-conditional-access?view=azure-devops
Ensure that the projects in Azure DevOps can be accessed from the corporate network only. 
Reference: 
https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/manage-conditional-access?view=azure-devops
Question 4
You need to resolve the performance issues in the Los Angeles office. 
How should you configure the update settings? To answer, select the appropriate options in the answer area. 
NOTE: Each correct selection is worth one point. 
Correct answer: To work with this question, an Exam Simulator is required.
Explanation:
The Los Angeles office has 500 developers. The developers work flexible hours ranging from 11 AM to 10 PM. 
The Los Angeles office has 500 developers. The developers work flexible hours ranging from 11 AM to 10 PM. 
Question 5
You need to meet the OOBE requirements for Windows AutoPilot. 
Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate settings in the answer area. 
NOTE: Each correct selection is worth one point. 
Correct answer: To work with this question, an Exam Simulator is required.
Explanation:
From the scenario: Ensure that the company name and logo appears during the Out of Box Experience (OOBE) when using Windows AutoPilot. Company Branding: When you use Windows AutoPilot to deploy new devices, you want the process to be friendly and familiar for the users going through the process. One of the ways that is done is by customizing the logon experience to include logos and company-specific text. The basic steps: Sign into the Azure Portal as a tenant admin. Navigate to Azure Active Directory -> Company branding. Click Edit to configure the needed settings. Fill in all the customizations (Including the company logo and company name) Properties: you can set that value in the Name field of the Azure AD tenant properties: Reference: https://blogs.technet.microsoft.com/mniehaus/2017/12/22/windows-autopilot-azure-ad-branding/ 
From the scenario: 
Ensure that the company name and logo appears during the Out of Box Experience (OOBE) when using Windows AutoPilot. 
Company Branding: When you use Windows AutoPilot to deploy new devices, you want the process to be friendly and familiar for the users going through the process. One of the ways that is done is by customizing the logon experience to include logos and company-specific text. 
The basic steps: 
  1. Sign into the Azure Portal as a tenant admin. 
  2. Navigate to Azure Active Directory -> Company branding. 
  3. Click Edit to configure the needed settings. 
  4. Fill in all the customizations (Including the company logo and company name) 
Properties: you can set that value in the Name field of the Azure AD tenant properties: 
Reference: 
https://blogs.technet.microsoft.com/mniehaus/2017/12/22/windows-autopilot-azure-ad-branding/ 
Question 6
You need to recommend a solution to meet the device management requirements. 
What should you include in the recommendation? To answer, select the appropriate options in the answer area. 
NOTE: Each correct selection is worth one point. 
Correct answer: To work with this question, an Exam Simulator is required.
Explanation:
Box 1: Employees in the research department must be prevented from copying patented information from trusted applications to untrusted applications. This requires an App protection policy. App protection policies make sure that the app-layer protections are in place. For example, you can: Require a PIN to open an app in a work context Control the sharing of data between apps Prevent the saving of company app data to a personal storage location  Box 2: Employees in the sales department must be prevented from forwarding email that contains bank account information. Azure Information Protection is a cloud-based solution that helps an organization to classify and optionally, protect its documents and emails by applying labels. Labels can be applied automatically by administrators who define rules and conditions, manually by users, or a combination where users are given recommendations.  Reference: https://docs.microsoft.com/en-us/intune/app-protection-policy https://docs.microsoft.com/en-us/azure/information-protection/what-is-information-protection 
Box 1: 
Employees in the research department must be prevented from copying patented information from trusted applications to untrusted applications. This requires an App protection policy. 
App protection policies make sure that the app-layer protections are in place. For example, you can: 
  • Require a PIN to open an app in a work context 
  • Control the sharing of data between apps 
Prevent the saving of company app data to a personal storage location 
 
Box 2: 
Employees in the sales department must be prevented from forwarding email that contains bank account information. 
Azure Information Protection is a cloud-based solution that helps an organization to classify and optionally, protect its documents and emails by applying labels. 
Labels can be applied automatically by administrators who define rules and conditions, manually by users, or a combination where users are given recommendations. 
 
Reference: 
https://docs.microsoft.com/en-us/intune/app-protection-policy 
https://docs.microsoft.com/en-us/azure/information-protection/what-is-information-protection 
Question 7
You need to meet the technical requirements for the iOS devices. 
Which object should you create in Intune? 
 
  1. A compliance policy 
  2. An app protection policy 
  3. A deployment profile 
  4. A device configuration profile  
Correct answer: D
Explanation:
Scenario: Technical requirements include: Block iOS devices from sending diagnostic and usage telemetry data. Intune includes device restriction policies that help administrators control Android, iOS, macOS, and Windows devices. These restrictions let you control a wide range of settings and features to protect your organization's resources. For example, administrators can: Allow or block the device camera Control access to Google Play, app stores, viewing documents, and gaming Block built-in apps, or create a list of apps that allowed or prohibited Allow or prevent backing up files to cloud and storage accounts Set a minimum password length, and block simple passwords  Reference: https://docs.microsoft.com/en-us/intune/device-restrictions-configure https://docs.microsoft.com/en-us/mem/intune/configuration/device-restrictions-ios#settings-apply-to-all-enrollment-types-4 
Scenario: Technical requirements include: Block iOS devices from sending diagnostic and usage telemetry data. 
Intune includes device restriction policies that help administrators control Android, iOS, macOS, and Windows devices. These restrictions let you control a wide range of settings and features to protect your organization's resources. For example, administrators can: 
  • Allow or block the device camera 
  • Control access to Google Play, app stores, viewing documents, and gaming 
  • Block built-in apps, or create a list of apps that allowed or prohibited 
  • Allow or prevent backing up files to cloud and storage accounts 
  • Set a minimum password length, and block simple passwords 
 
Reference: 
https://docs.microsoft.com/en-us/intune/device-restrictions-configure 
https://docs.microsoft.com/en-us/mem/intune/configuration/device-restrictions-ios#settings-apply-to-all-enrollment-types-4 
Question 8
You need to meet the technical requirements for the IT department. 
What should you do first?  
  1. From the Azure Active Directory blade in the Azure portal, enable Seamless single sign-on. 
  2. From the Configuration Manager console, add an Intune subscription. 
  3. From the Azure Active Directory blade in the Azure portal, configure the Mobility (MDM and MAM) settings. 
  4. From the Microsoft Intune blade in the Azure portal, configure the Windows enrollment settings.  
Correct answer: C
Explanation:
MDM and MAM are not under Azure portal anymore. You have to go to Endpoint > Devices > Enroll devices | Windows enrollment > Automatic Enrollment. https://docs.microsoft.com/en-us/sccm/comanage/tutorial-co-manage-clients 
MDM and MAM are not under Azure portal anymore. You have to go to Endpoint > Devices > Enroll devices | Windows enrollment > Automatic Enrollment. 
https://docs.microsoft.com/en-us/sccm/comanage/tutorial-co-manage-clients 
Question 9
To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area. 
NOTE: Each correct selection is worth one point. 
Correct answer: To work with this question, an Exam Simulator is required.
Explanation:
Box 1: Device 3 only Policy1 applies to Device3 (Android)  Box 2: Device 4 only Policy2 applies to Device4 (iOS)  Reference: https://docs.microsoft.com/en-us/intune/device-profile-assign
Box 1: Device 3 only 
Policy1 applies to Device3 (Android) 
 
Box 2: Device 4 only 
Policy2 applies to Device4 (iOS) 
 
Reference: 
https://docs.microsoft.com/en-us/intune/device-profile-assign
Question 10
What is the maximum number of devices that User1 and User2 can enroll in Intune? To answer, select the appropriate options in the answer area. 
NOTE: Each correct selection is worth one point. 
Correct answer: To work with this question, an Exam Simulator is required.
Explanation:
Box 1: 10 devices User1 is a member of GroupA. GroupA device limit is 10.  Box 2: 15 devices User2 is a member of GroupB. GroupB device limit is 15.  https://docs.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-manager-enroll#limitations-of-devices-that-are-enrolled-with-a-dem-account 
Box 1: 10 devices 
User1 is a member of GroupA. GroupA device limit is 10. 
 
Box 2: 15 devices 
User2 is a member of GroupB. GroupB device limit is 15. 
 
https://docs.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-manager-enroll#limitations-of-devices-that-are-enrolled-with-a-dem-account 
HOW TO OPEN VCE FILES

Use VCE Exam Simulator to open VCE files
Avanaset

HOW TO OPEN VCEX AND EXAM FILES

Use ProfExam Simulator to open VCEX and EXAM files
ProfExam Screen

ProfExam
ProfExam at a 20% markdown

You have the opportunity to purchase ProfExam at a 20% reduced price

Get Now!