[Jul-2026] Valid Way To Pass Microsoft Exam Dumps with MD-102 Exam Study Guide [Q227-Q242]

July 17, 2026 admin 0

Categories : Uncategorized

Rate this post

[Jul-2026] Valid Way To Pass Microsoft Exam Dumps with MD-102 Exam Study Guide

All MD-102 Dumps and Endpoint Administrator Training Courses Help candidates to study and pass the Exams hassle-free!

NEW QUESTION 227
You have a Microsoft 365 subscription that contains two users named User1 and User2. You need to ensure that the users can perform the following tasks:
* User1 must be able to create groups and manage users.
* User2 must be able to reset passwords for no administrative users.
The solution must use the principle of least privilege.
Which role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Explanation:

Microsoft 365 or Office 365 subscription comes with a set of admin roles that you can assign to users in your organization using the Microsoft 365 admin center. Each admin role maps to common business functions and gives people in your organization permissions to do specific tasks in the admin centers1.
To ensure that User1 can create groups and manage users, you should assign the User Administrator role to User1. This role allows User1 to create and manage all aspects of users and groups, including resetting passwords for non-administrative users1.
To ensure that User2 can reset passwords for non-administrative users, you should assign the Helpdesk Administrator role to User2. This role allows User2 to reset passwords, manage service requests, and monitor service health for non-administrative users1.

NEW QUESTION 228
You have a Microsoft 365 subscription that uses Microsoft Intune Suite.
You use Microsoft Intune to manage Windows 11 devices.
You need to implement passwordless authentication that requires users to use number matching Which authentication method should you use?

Microsoft Authenticator

voice calls

FI002 security keys

text messages

NEW QUESTION 229
You have a Microsoft Intune subscription associated to an Azure Active Directory (Azure AD) tenant named contoso.com.
Users use one of the following three suffixes when they sign in to the tenant: us.contoso.com, eu.contoso.com, or contoso.com.
You need to ensure that the users are NOT required to specify the mobile device management (MDM) enrollment URL as part of the enrollment process. The solution must minimize the number of changes.
Which DNS records do you need?

three TXT records

one CNAME record only

one TXT record only

three CNAME records

To simplify enrollment, create a domain name server (DNS) alias (CNAME record type) that redirects enrollment requests to Intune servers. Otherwise, users trying to connect to Intune must enter the Intune server name during enrollment.
If the company uses more than one UPN suffix, you need to create one CNAME for each domain name and point each one to EnterpriseEnrollment- s.manage.microsoft.com. For example, users at Contoso use the following formats as their email/UPN: [email protected] [email protected] [email protected] Reference:
https://docs.microsoft.com/en-us/mem/intune/enrollment/windows-enroll#simplify-windows- enrollment-without-azure-ad-premium

NEW QUESTION 230
You have a Microsoft 365 subscription that uses Microsoft Intune Suite.
You use Microsoft Intune to manage devices.
You have the devices shown in the following table.

Which devices can be changed to Windows 11 Enterprise by using subscription activation?

Device3 only

Device2 and Device3 only

Device 1 and Device2 only

Device1, Device2, and Device3

https://learn.microsoft.com/en-us/windows/deployment/windows-subscription-activation#subscription-activation

NEW QUESTION 231
Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. All users have computers that run Windows 10. The computers are joined to Azure AD and managed by using Microsoft Intune.
You need to ensure that you can centrally monitor the computers by using Windows Analytics.
What should you create in Intune?

a device configuration profile

a conditional access policy

a device compliance policy

an update policy

To configure the setting go to Device configuration” Profiles > Device Restriction” Properties > Device restrictions > Reporting and Telemetry.

Reference:
https://www.scconfigmgr.com/2019/03/27/windows-analytics-onboarding-with-intune/

NEW QUESTION 232
Your company has a Microsoft 365 E5 tenant.
All the devices of the company are enrolled in Microsoft Intune.
You need to create advanced reports by using custom queries and visualizations from raw Microsoft Intune data.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Explanation:

Step 1: Purchase an Azure subscription.
Complex reporting functionality require an Azure subscription.
Step 2: Create a Log Analytics workspace.
Each Azure resource requires its own diagnostic setting. The diagnostic setting defines the following for a resource:
* One or more destinations to send the logs. Current destinations include Log Analytics workspace, Event Hubs, and Azure Storage.
* Categories of logs and metric data sent to the destinations defined in the setting. The available categories will vary for different resource types.
* Retention policy for data stored in Azure Storage.
Step 3: Add diagnostic settings.
You can create and view custom reports using the following steps:
1. Sign in to the Microsoft Endpoint Manager admin center.
2. Select Reports > Diagnostic settings add a diagnostic setting.
3. Etc.
Reference:
https://docs.microsoft.com/en-us/mem/intune/fundamentals/reports

NEW QUESTION 233
Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.

The domain syncs to a Microsoft Entra tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)

User2 fails to authenticate to the Microsoft Entra tenant when signing in as [email protected].
You need to ensure that User2 can access the resources in Microsoft Entra ID.
Solution: From the on-premises Active Directory domain, you set the UPN suffix for User2 to @contosoxom.
You instruct User2 to sign in as [email protected].
Does this meet the goal?

Yes

NEW QUESTION 234
You have an on-premises Active Directory domain that syncs to Azure AD tenant.
The tenant contains computers that run Windows 10. The computers are hybrid Azure AD joined and enrolled in Microsoft Intune. The Microsoft Office settings on the computers are configured by using an Group Policy Object (GPO).
You need to migrate the GPO to Intune.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Explanation:

NEW QUESTION 235
Your company has an internal portal that uses a URL of http://contoso.com.
The network contains computers that run Windows 10. The default browser on all the computers is Microsoft Edge.
You need to ensure that all users only use Internet Explorer to connect to the internal portal. The solution must ensure that Microsoft Edge can be used to connect to all other websites.
What should you do from each computer?

From Internet Explorer, configure the Compatibility View settings

From the local policy, configure Enterprise Mode

From Microsoft Edge, configure the Advanced Site Settings

From the Settings app, configure the default web browser settings

For Windows 10 and Windows 10 Mobile, Microsoft Edge is the default browser experience.
However, Microsoft Edge lets you continue to use IE11 for sites that are on your corporate intranet or included on your Enterprise Mode Site List.
Using Enterprise Mode means that you can continue to use Microsoft Edge as your default browser, while also ensuring that your apps continue working on IE11.
https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/what-is-enterprise-mode

NEW QUESTION 236
Your network contains an Active Directory domain. The domain contains computers that run Windows 10.
All users use Roaming User Profiles.
You have a user named Public1 that is used to sign-in to a public computer.
You need to prevent changes to the user settings of Public1 from being saved to the user profile.
What should you do?

Rename the Roaming User Profile folder to Public1.man

Rename Ntuser.dat to Ntuser.v6

Rename Ntuser.dat to Ntuser.man

Rename the Roaming User Profile folder to Public1.v1

User profiles become mandatory profiles when the administrator renames the NTuser.dat file (the registry hive) of each user’s profile in the file system of the profile server from NTuser.dat to NTuser.man. The .man extension causes the user profile to be a read-only profile.
Reference:
https://docs.microsoft.com/en-us/windows/client-management/mandatory-user-profile

NEW QUESTION 237
You have a Microsoft 365 E5 subscription that contains a computer named Computer1 that runs Windows 11.
Computer1 is enrolled in Microsoft Intune.
You need to deploy an app named App1 to Computer1. The App1 installation will use multiple files.
What should you use to package App1, and which file format will be used? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation:

“The Microsoft Win32 Content Prep Tool zips all files and subfolders when it creates the .intunewin file. Be sure to keep the Microsoft Win32 Content Prep Tool separate from the installer files and folders, so that you don’t include the tool or other unnecessary files and folders in your .intunewin file.”

NEW QUESTION 238
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named User1. User1 has a user principal name (UPN) of user1 @contoso.com.
You join a Windows 10 device named Client1 to contoso.com.
You need to add User1 to the local Administrators group of Client1.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation:

NEW QUESTION 239
You have a Microsoft 365 subscription.
You plan to enroll devices in Microsoft Endpoint Manager that have the platforms and versions shown in the following table.

You need to configure device enrollment to meet the following requirements:
Ensure that only devices that have approved platforms and versions can enroll in Endpoint Manager.
Ensure that devices are added to Microsoft Azure Active Directory (Azure AD) groups based on a selection made by users during the enrollment.
Which device enrollment setting should you configure for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation:

Reference:
https://docs.microsoft.com/en-us/mem/intune/enrollment/enrollment-restrictions-set
https://docs.microsoft.com/en-us/mem/intune/enrollment/device-group-mapping

NEW QUESTION 240
Your network contains an Active Directory domain named contoso.com. The domain contains two computers named Computer! and Computer2 that run Windows 10. On Computer1, you need to run the Invoke-Command cmdlet to execute several PowerShell commands on Computed. What should you do first?

On Computed, run the Enable-PSRemoting cmdlet.

On Computed, add Computer! to the Remote Management Users group.

From Active Directory, configure the Trusted for Delegation setting for the computer account of Computed.

On Computer1, run the HcK-PSSession cmdlet.

NEW QUESTION 241
You have a Microsoft 365 E5 subscription that contains a group named Group1.
You create a Conditional Access policy named CAPolicy1 and assign CAPolicy1 to Group1.
You need to configure CAPolicy1 to require the members of Group1 to reauthenticate every eight hours when they connect to Microsoft Exchange Online.
What should you configure?

Session access controls

an assignment that uses a User risk condition

an assignment that uses a Sign-in risk condition

Grant access controls

User sign-in frequency
Sign-in frequency defines the time period before a user is asked to sign in again when attempting to access a resource.
The Azure Active Directory (Azure AD) default configuration for user sign-in frequency is a rolling window of 90 days.
Sign-in frequency control
* Sign in to the Azure portal as a global administrator, security administrator, or Conditional Access administrator.
* Browse to Azure Active Directory > Security > Conditional Access.
* Select New policy.
* Give your policy a name. We recommend that organizations create a meaningful standard for the names of their policies.
* Choose all required conditions for customer’s environment, including the target cloud apps.
* Under Access controls > Session.
Select Sign-in frequency.
Choose Periodic reauthentication and enter a value of hours or days or select Every time.
* Save your policy.
Reference:https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-s

NEW QUESTION 242
You have a Microsoft 365 subscription that contains the devices shown in the following table.

You need to ensure that only devices running trusted firmware or operating system build can access network resources.
Which compliance policy setting should you configure for each device? To answer, drag the appropriate settings to the correct devices. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.