Microsoft MD-101 Test Engine Practice Test Questions, Exam Dumps [Q88-Q111]

April 12, 2022 admin 0

4.5/5 - (2 votes)

Microsoft MD-101 Test Engine Practice Test Questions, Exam Dumps

100% Free MD-101 Daily Practice Exam With 280 Questions

How to book the MD-101 Exam

These are following steps for registering the MD-101 exam.
Step 1: Visit to Microsoft Exam Registration
Step 2: Signup/Login to MICROSOFT account
Step 3: Search for MICROSOFT MD-101 Certifications Exam
Step 4: Select Date and Center of examination and confirm with payment value of $165

NEW QUESTION 88
Case Study 1 – Litware inc
Existing Environment
Current Business Model
The Los Angeles office has 500 developers. The developers work flexible hours ranging from 11:00 to 22:00. Litware has a Microsoft System Center 2012 R2 Configuration Manager deployment.
During discovery, the company discovers a process where users are emailing bank account information of its customers to internal and external recipients.
Current Environment
The network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD). The functional level of the forest and the domain is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.
Litware has the computers shown in the following table.

The development department uses projects in Azure DevOps to build applications. Most of the employees in the sales department are contractors. Each contractor is assigned a computer that runs Windows 10. At the end of each contract, the computer is assigned to different contractor.
Currently, the computers are re-provisioned manually by the IT department.
Problem Statements
Litware identifies the following issues on the network:
– Employees in the Los Angeles office report slow Internet performance when updates are downloading. The employees also report that the updates frequently consume considerable resources when they are installed. The Update settings are configured as shown in the Updates exhibit. (Click the Updates button.)
– Management suspects that the source code for the proprietary applications in Azure DevOps in being shared externally.
– Re-provisioning the sales department computers is too time consuming.
Requirements
Business Goals
Litware plans to transition to co-management for all the company-owned Windows 10 computers.
Whenever possible, Litware wants to minimize hardware and software costs.
Device Management Requirements
Litware identifies the following device management requirements:
– Prevent the sales department employees from forwarding email that contains bank account information.
– Ensure that Microsoft Edge Favorites are accessible from all computers to which the developers sign in.
– Prevent employees in the research department from copying patented information from trusted applications to untrusted applications.
Technical Requirements
Litware identifies the following technical requirements for the planned deployment:
– Re-provision the sales department computers by using Windows AutoPilot.
– Ensure that the projects in Azure DevOps can be accessed from the corporate network only.
– Ensure that users can sign in to the Azure AD-joined computers by using a PIN. The PIN must expire every 30 days.
– Ensure that the company name and logo appears during the Out of Box Experience (OOBE) when using Windows AutoPilot.

What should you configure to meet the technical requirements for the Azure AD-joined computers?

Windows Hello for Business from the Microsoft Intune blade in the Azure portal.

The Accounts options in an endpoint protection profile.

The Password Policy settings in a Group Policy object (GPO).

A password policy from the Microsoft Office 365 portal.

https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello- manage-inorganization

NEW QUESTION 89
You have a Microsoft 365 tenant named contoso.com that contains a group named ContosoUsers. All the users in contoso.com are members of ContosoUsers.
You have two Windows 10 devices as shown in the following table.

Both Computer1 and Computer2 contain two apps named App1 and App2.
You configure an app protection policy named AppPolicy1 that has the following settings:
Protected apps: App1
Assignments: ContosoUsers
Enrollment state: Without enrollment
Windows Information Protection mode: Block
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/mem/intune/apps/windows-information-protection-policy-create
https://docs.microsoft.com/en-us/mem/intune/apps/apps-selective-wipe

NEW QUESTION 90
You have 100 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune.
You need to configure the following device restrictions:
* Block users from browsing to suspicious websites.
* Scan all scripts loaded into Microsoft Edge.
Which two settings should you configure in Device restrictions? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.

Explanation

Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-smartscreen/windows-de

NEW QUESTION 91
Hotspot Question
You have a computer named Computer1 that runs Windows 10. Computer1 has the users shown in the following table.

User1 signs in to Computer1, creates the following files, and then signs out:
– docx in C:UsersUser1Desktop
– docx in C:UsersPublicPublic Desktop
– docx in C:UsersDefault Desktop
– User3 signs in to Computer1 and creates a file named File4.docx in C:UsersUser3Desktop.
– User2 has never signed in to Computer1.
How many DOCX files will appear on the desktop of each user the nest time each user signs in?
To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NEW QUESTION 92
Your company uses Microsoft Intune. You have a Microsoft Store for Business account.
You need to ensure that you can deploy Microsoft Store for Business apps by using Intune.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

NEW QUESTION 93
Which users can purchase and assign App1?

User3 only

User1 and User3 only

User1, User2, User3, and User4

User1, User3, and User4 only

User3 and User4 only

Reference:
https://docs.microsoft.com/en-us/microsoft-store/acquire-apps-microsoft-store-for-business
https://docs.microsoft.com/en-us/microsoft-store/assign-apps-to-employees

NEW QUESTION 94
You have 100 devices that run Windows 10 and are joined to Microsoft Azure Active Directory (Azure AD).
You need to prevent users from joining their home computer to Azure AD.
What should you do?

From the Device enrollment blade in the Intune admin center, modify the Enrollment restriction settings.

From the Devices blade in the Azure Active Directory admin center, modify the Device settings.

From the Device enrollment blade in the Intune admin center, modify the Device enrollment manages settings.

From the Mobility (MDM and MAM) blade in the Azure Active Directory admin center, modify the Microsoft Intune enrollment settings.

References:
https://docs.microsoft.com/en-us/intune/enrollment-restrictions-set

NEW QUESTION 95
You have computers that run Windows 10 and are configured by using Windows AutoPilot.
A user performs the following tasks on a computer named Computer1:
* Creates a VPN connection to the corporate network
* Installs a Microsoft Store app named App1
* Connects to a Wi-Fi network
You perform a Windows AutoPilot Reset on Computer1.
What will be the state of the computer when the user signs in? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation

Reference:
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot-reset

NEW QUESTION 96
Your company purchases new computers that run Windows 10. The computers have cameras that support Windows Hello for Business.
You configure the Windows Hello for Business Group Policy settings as shown in the following exhibit.

What are two valid methods a user can use to sign in? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Facial recognition

A smartwatch that is Bluetooth-enabled

A PIN

A USB key

Reference:
https://community.windows.com/en-us/stories/windows-sign-in-options
https://fossbytes.com/how-to-unlock-windows-10/

NEW QUESTION 97
Your company uses Microsoft Intune. You have a Microsoft Store for Business account.
You need to ensure that you can deploy Microsoft Store for Business apps by using Intune.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

1 – From Microsoft Store for Business, add a management tool.
2 – From M icrosoft Store for Business, assign apps to people.
3 – From Intune, sync Microsoft Store for Business.

NEW QUESTION 98
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the devices shown in the following table.

All devices contain an app named App1 and are enrolled in Microsoft Intune.
You need to prevent users from copying data from App1 and pasting the data into other apps.
Which type of policy and how many policies should you create in Intune? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policies
https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policies-configure-windows-10

NEW QUESTION 99
You manage 1,000 computers that run Windows 10. All the computers are enrolled in Microsoft Intune.
You manage the servicing channel settings of the computers by using Intune. You need to review the servicing status of a computer.
What should you do?

From Device configuration-Profiles, view the device status.

From Device compliance, view the device compliance.

From Software updates, view the audit logs.

From Software updates, view the Per update ring deployment state.

https://docs.microsoft.com/en-us/intune/windows-update-compliance-reports

NEW QUESTION 100
You have a Microsoft Intune subscription that has the following device compliance policy settings:
Mark devices with no compliance policy assigned as: Compliant
Compliance status validity period (days): 14
On January 1, you enroll Windows 10 devices in Intune as shown in the following table.

On January 4, you create the following two device compliance policies:
Name: Policy1
Platform: Windows 10 and later
Require BitLocker: Require
Mark device noncompliant: 5 days after noncompliance
Scope (Tags): Tag1
Name: Policy2
Platform: Windows 10 and later
Firewall: Require
Mark device noncompliant: Immediately
Scope (Tags): Tag2
On January 5, you assign Policy1 and Policy2 to Group1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

NEW QUESTION 101
You have a Microsoft 365 subscription.
You have a conditional access policy that requires multi-factor authentication (MFA) for users in a group name Sales when the users sign in from a trusted location. The policy is configured as shown in the exhibit.
(Click the Exhibit tab.)

You create a compliance policy.
You need to ensure that the users are authenticated only if they are using a compliant device.
What should you configure in the conditional access policy?

a condition

a session control

a cloud app

a grant control

Explanation
The device state condition can be used to exclude devices that are hybrid Azure AD joined and/or devices marked as compliant with a Microsoft Intune compliance policy from an organization’s Conditional Access policies.
Device state is located on the Condition tab.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-condition

NEW QUESTION 102
Your network contains an Active Directory domain. Active Directory is synced with Microsoft Azure Active Directory (Azure AD).
There are 500 Active Directory domain-joined computers that run Windows 10 and are enrolled in Microsoft Intune.
You plan to implement Microsoft Defender Exploit Guard.
You need to create a custom Microsoft Defender Exploit Guard policy, and then distribute the policy to all the computers.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml#manage-or-deploy-a-configuration
https://docs.microsoft.com/en-us/intune/endpoint-protection-windows-10
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection

NEW QUESTION 103
Your company has computers that run Windows 10 and are Microsoft Azure Active Directory (Azure AD)-joined.
The company purchases an Azure subscription.
You need to collect Windows events from the Windows 10 computers in Azure. The solution must enable you to create alerts based on the collected events.
What should you create in Azure and what should you configure on the computers? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/log-analytics-agent

NEW QUESTION 104
You have 100 computers that run Windows 8.1.
You plan to deploy Windows 10 to the computers by performing a wipe and load installation.
You need to recommend a method to retain the user settings and the user data.
Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Explanation:
References:
https://docs.microsoft.com/en-us/windows/deployment/windows-10-deployment-scenarios
http://itproguru.com/expert/2016/01/step-by-step-how-to-migrate-users-and-user-data-from-xp-vista-windows-7-or-8-to-windows-10-using-microsoft-tool-usmt-user-state-migration-toolkit/

NEW QUESTION 105
You need to meet the technical requirements for the new HR department computers.
How should you configure the provisioning package? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/windows/configuration/wcd/wcd-accounts

NEW QUESTION 106
Your company has a System Center Configuration Manager deployment that uses hybrid mobile device management (MDM). All Windows 10 devices are Active Directory domain-joined.
You plan to migrate from hybrid MDM to Microsoft Intune standalone.
You successfully run the Intune Data Importer tool.
You need to complete the migration.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

In Intune, add a device enrollment manager (DEM).

Change the tenant MDM authority to Intune.

Assign all users Intune licenses.

Create a new Intune tenant.

https://docs.microsoft.com/en-us/sccm/mdm/deploy-use/migrate-hybridmdm-to-intunesa
https://docs.microsoft.com/en-us/sccm/mdm/deploy-use/migrate-prepare-intune
https://docs.microsoft.com/en-us/sccm/mdm/deploy-use/change-mdm-authority

NEW QUESTION 107
You need to assign the same deployment profile to all the computers that are configured by using Windows Autopilot.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: each correct selection is worth one point.

Join the computers to an on-premises Active Directory domain

Assign a Windows AutoPilot deployment profile to a group

Create a Microsoft Azure Active Directory (Azure AD) group that has dynamic membership rules and uses the ZTDID tag

Create a Microsoft Azure Active Directory (Azure AD) group that has dynamic membership rules and uses the operatingSystem tag

Join the computers to Microsoft Azure Active Directory (Azure AD)

Create a Group Policy object (GPO) that is linked to a domain

NEW QUESTION 108
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company uses Windows Update for Business.
The research department has several computers that have specialized hardware and software installed.
You need to prevent the video drivers from being updated automatically by using Windows Update.
Solution: From the Device Installation settings in a Group Policy object (GPO), you enable Specify search order for device driver source locations, and then you select Do not search Windows Update.
Does this meet the goal?

Yes

References:
https://www.stigviewer.com/stig/microsoft_windows_server_2012_member_server/2013-07-25/finding/WN12- CC-000024

NEW QUESTION 109
Your company has an infrastructure that has the following:
* A Microsoft 365 tenant
* An Active Directory forest
* Microsoft Store for Business
* A Key Management Service (KMS) server
* A Windows Deployment Services (WDS) server
* A Microsoft Azure Active Directory (Azure AD) Premium tenant
The company purchases 100 new computers that run Windows 10.
You need to ensure that the new computers are joined automatically to Azure AD by using Windows AutoPilot.
What should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation

Reference:
https://docs.microsoft.com/en-us/intune/enrollment-autopilot

NEW QUESTION 110
Which user can enroll Device6 in Intune?

User4 and User2 only

User4 and User 1 only

User1, User2, User3, and User4

User4. User Land User2 only

NEW QUESTION 111
You have 100 computers that run Windows 8.1.
You need to create a report that will assess the Windows 10 readiness of the computers.
What should you use?

Windows Assessment and Deployment Kit (Windows ADK)

Microsoft Assessment and Planning (MAP) Toolkit

Windows Deployment Services (WDS)

Microsoft Desktop Optimization Pack (MDOP)

Reference:
https://www.techielass.com/using-maps-azure-readiness/

Loading …

Microsoft MD-101: Career benefits and opportunities

If you are planning to take the Microsoft MD-101 exam, make sure that you give it your 100 percent. Once you ace the test, you will get the sought-after certification, so this will allow you to apply for better jobs. Thus, you will be able to become a Windows Server Administrator, a Desktop Administrator, or a Computer Systems Analyst. Being certified also means that you will have an opportunity to earn a much higher salary as compared to your non-certified peers. Depending on the position you choose, you can earn $50,000-105,000 annually.

Use Valid New MD-101 Test Notes & MD-101 Valid Exam Guide: https://www.vceprep.com/MD-101-latest-vce-prep.html