Your success in Microsoft MD-101 is our sole target and we develop all our MD-101 braindumps in a way that facilitates the attainment of this target. Not only is our MD-101 study material the best you can find, it is also the most detailed and the most updated. MD-101 Practice Exams for Microsoft Microsoft 365 MD-101 are written to the highest standards of technical accuracy.
Free MD-101 Demo Online For Microsoft Certifitcation:
NEW QUESTION 1
You need to meet the OOBE requirements for Windows AutoPilot.
Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
- A. Mastered
- B. Not Mastered
Answer: A
Explanation:
Reference:
https://blogs.msdn.microsoft.com/sgern/2021/10/11/intune-intune-and-autopilot-part-3-preparing-your-environm https://blogs.msdn.microsoft.com/sgern/2021/11/27/intune-intune-and-autopilot-part-4-enroll-your-first-device/
NEW QUESTION 2
Your company has a Microsoft Azure Active Directory (Azure AD) tenant. All users in the company are licensed for Microsoft Intune.
You need to ensure that the users enroll their iOS device in Intune. What should you configure first?
- A. ADevice Enrollment Program (DEP) token.
- B. An Intune device configuration profile.
- C. ADevice enrollment manager (DEM) account.
- D. An Apple MDM Push certificate.
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/intune/device-enrollment-program-enroll-ios
NEW QUESTION 3
You need to recommend a solution to meet the device management requirements.
What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
- A. Mastered
- B. Not Mastered
Answer: A
Explanation:
Reference:
https://github.com/MicrosoftDocs/IntuneDocs/blob/master/intune/app-protection-policy.md https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#do-not-forward-option-fo
NEW QUESTION 4
You have a shared computer that runs Windows 10. The computer is infected with a virus.
You discover that a malicious TTF font was used to compromise the computer. You need to prevent this type of threat from affecting the computer in the future. What should you use?
- A. Windows Defender Exploit Guard
- B. Windows Defender Application Guard
- C. Windows Defender Credential Guard
- D. Windows Defender System Guard
- E. Windows Defender SmartScreen
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploit-guard/windowsd
NEW QUESTION 5
What should you configure to meet the technical requirements for the Azure AD-joined computers?
- A. Windows Hello for Business from the Microsoft Intune blade in the Azure portal.
- B. The Accounts options in an endpoint protection profile.
- C. The Password Policy settings in a Group Policy object (GPO).
- D. A password policy from the Microsoft Office 365 portal.
Answer: A
Explanation:
References:
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-manage-inorgani
NEW QUESTION 6
You need to meet the technical requirements for the IT department. What should you do first?
- A. From the Azure Active Directory blade in the Azure portal, enable Seamless single sign-on.
- B. From the Configuration Manager console, add an Intune subscription.
- C. From the Azure Active Directory blade in the Azure portal, configure the Mobility (MDM and MAM) settings.
- D. From the Microsoft Intune blade in the Azure portal, configure the Windows enrollment settings.
Answer: C
Explanation:
Reference:
https://docs.microsoft.com/en-us/sccm/comanage/tutorial-co-manage-clients
NEW QUESTION 7
Your network contains an Active Directory domain. The domain contains computers that run Windows 10 and are enrolled in Microsoft Intune. Updates are deployed by using Windows Update for Business.
Users in a group named Group1 must meet the following requirements:
Update installations must occur any day only between 00:00 and 05:00. Updates must be downloaded from Microsoft and from other company computers that already downloaded the updates.
You need to configure the Windows 10 Update Rings in Intune to meet the requirements.
Which two settings should you modify? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.
- A. Mastered
- B. Not Mastered
Answer: A
Explanation:
Reference:
https://github.com/MicrosoftDocs/IntuneDocs/blob/master/intune/windows-update-settings.md https://docs.microsoft.com/en-us/intune/delivery-optimization-windows#move-from-existing-update-rings-to-de
NEW QUESTION 8
Your company plans to deploy tablets to 50 meeting rooms.
The tablets run Windows 10 and are managed by using Microsoft Intune. The tablets have an application named App1.
You need to configure the tablets so that any user can use App1 without having to sign in. Users must be prevented from using other applications on the tablets.
Which device configuration profile type should you use?
- A. Kiosk
- B. Endpoint protection
- C. Identity protection
- D. Device restrictions
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/windows/configuration/kiosk-single-app
NEW QUESTION 9
Your network contains an Active Directory domain named contoso.com.
You create a provisioning package named Package1 as shown in the following exhibit.
What is the maximum number of devices on which you can run Package1 successfully?
- A. 1
- B. 10
- C. 25
- D. unlimited
Answer: D
NEW QUESTION 10
Your company has a computer named Computer1 that runs Windows 10 Pro.
The company develops a proprietary Universal Windows Platform (UWP) app named App1. App1 is signed with a certificate from a trusted certification authority (CA).
You need to sideload App1 to Computer1.
What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
- A. Mastered
- B. Not Mastered
Answer: A
Explanation:
Reference:
https://www.windowscentral.com/how-enable-windows-10-sideload-apps-outside-store https://docs.microsoft.com/en-us/windows/application-management/sideload-apps-in-windows-10
NEW QUESTION 11
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to ensure that feature and quality updates install automatically during a maintenance window. Solution: From the Windows Update settings, you enable Configure Automatic Updates, select 4-Auto download and schedule the install, and then enter a time.
Does this meet the goal?
- A. Yes
- B. No
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/sccm/sum/deploy-use/automatically-deploy-software-updates
NEW QUESTION 12
You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (AD) and enrolled in Microsoft Intune.
You need to enable self-service password reset on the sign-in screen. Which settings should you configure from the Microsoft Intune blade?
- A. Device configuration
- B. Device compliance
- C. Device enrollment
- D. Conditional access
Answer: A
Explanation:
References:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-sspr-windows
NEW QUESTION 13
Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD).
You have a Microsoft 365 subscription.
You create a conditional access policy for Microsoft Exchange Online.
You need to configure the policy to prevent access to Exchange Online unless is connecting from a device that is hybrid Azure AD-joined.
Which settings should you configure?
- A. Locations
- B. Device platforms
- C. Sign-in risk
- D. Device state
Answer: D
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/conditions#device-state
NEW QUESTION 14
You manage 1,000 computers that run Windows 10. All the computers are enrolled in Microsoft Intune. You manage the servicing channel settings of the computers by using Intune.
You need to review the servicing status of a computer. What should you do?
- A. From Device configuration- Profiles, view the device status.
- B. From Device compliance, view the device compliance.
- C. From Software updates, view the audit logs.
- D. From Software updates, view the Per update ring deployment state.
Answer: D
Explanation:
References:
https://docs.microsoft.com/en-us/intune/windows-update-compliance-reports
NEW QUESTION 15
You have computers that run Windows 10 Pro. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune.
You need to upgrade the computers to Windows 10 Enterprise. What should you configure in Intune?
- A. A device enrollment policy
- B. A device cleanup rule
- C. A device compliance policy
- D. A device configuration profile
Answer: D
Explanation:
Reference:
https://blogs.technet.microsoft.com/skypehybridguy/2021/09/21/intune-upgrade-windows-from-pro-toenterprise
NEW QUESTION 16
Your company has an infrastructure that has the following: A Microsoft 365 tenant An Active Directory forest Microsoft Store for Business A Key Management Service (KMS) server A Windows Deployment Services (WDS) server A Microsoft Azure Active Directory (Azure AD) Premium tenant
The company purchases 100 new computers that run Windows 10.
You need to ensure that the new computers are joined automatically to Azure AD by using Windows AutoPilot.
What should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
- A. Mastered
- B. Not Mastered
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/intune/enrollment-autopilot
NEW QUESTION 17
Your company has a Microsoft Azure Active Directory (Azure AD) tenant.
The company uses Microsoft Intune to manage iOS, Android, and Windows 10 devices.
The company plans to purchase 1,000 iOS devices. Each device will be assigned to a specific user.
You need to ensure that the new iOS devices are enrolled automatically in Intune when the assigned user signs in for the first time.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
- A. Mastered
- B. Not Mastered
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/intune/device-enrollment-program-enroll-ios
NEW QUESTION 18
Your company has an infrastructure that has the following: 
A Microsoft 365 tenant An Active Directory forest Microsoft Store for Business A Key Management Service (KMS) server A Windows Deployment Services (WDS) server A Microsoft Azure Active Directory (Azure AD) Premium tenant The company purchases 100 new computers that run Windows 10.
You need to ensure that the new computers are joined automatically to Azure AD by using Windows AutoPilot.
What should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
- A. Mastered
- B. Not Mastered
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/intune/enrollment-autopilot
NEW QUESTION 19
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to ensure that feature and quality updates install automatically during a maintenance window. Solution: From the Maintenance Scheduler settings, you configure Automatic Maintenance Random Delay. Does this meet the goal?
- A. Yes
- B. No
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/sccm/sum/deploy-use/automatically-deploy-software-updates
NEW QUESTION 20
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to ensure that feature and quality updates install automatically during a maintenance window. Solution: From the Maintenance Scheduler settings, you configure Automatic Maintenance Activation Boundary.
Does this meet the goal?
- A. Yes
- B. No
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/sccm/sum/deploy-use/automatically-deploy-software-updates
NEW QUESTION 21
Your company purchases new computers that run Windows 10. The computers have cameras that support Windows Hello for Business.
You configure the Windows Hello for Business Group Policy settings as shown in the following exhibit.
What are two valid methods a user can use to sign in? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
- A. Facial recognition
- B. A smartwatch that is Bluetooth-enabled
- C. A PIN
- D. A USB key
Answer: AC
Explanation:
Reference:
https://community.windows.com/en-us/stories/windows-sign-in-options https://fossbytes.com/how-to-unlock-windows-10/
NEW QUESTION 22
Your company uses Microsoft Intune to manage devices. You need to ensure that only Android devices that use Android work profiles can enroll in Intune.
Which two configurations should you perform in the device enrollment restrictions? Each correct answer presents part of the solution.
NOTE: each correct selection is worth one point.
- A. From Select platforms, set Android work profile to Allow.
- B. From Configure platforms, set Android Personally Owned to Block.
- C. From Configure platforms, set Android Personally Owned to Allow.
- D. From Select platforms, set Android to Block.
Answer: AD
Explanation:
https://docs.microsoft.com/en-us/InTune/enrollment-restrictions-set
NEW QUESTION 23
What should you use to meet the technical requirements for Azure DevOps?
- A. An app protection policy
- B. Windows Information Protection (WIP)
- C. Conditional access
- D. A device configuration profile
Answer: C
Explanation:
References:
https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/manage-conditional-access? view=azure-devops
NEW QUESTION 24
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. All Windows 10 devices are enrolled in Microsoft Intune.
You configure the following settings in Windows Information Protection (WIP): Protected apps: App1 Exempt apps: App2 Windows Information Protection mode: Silent App1, App2, and App3 use the same file format.
You create a file named File1 in App1.
You need to identify which apps can open File1.
What apps should you identify? To answer, select the appropriate options in the answer area, NOTE: Each correct selection is worth one point.
- A. Mastered
- B. Not Mastered
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/crea https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/crea
NEW QUESTION 25
You have the 64-bit computers shown in the following table.
You plan to perform an in-place upgrade to the 64-bit version of Windows 10.
Which computers can you upgrade to the 64-bit version of Windows 10 in their current state?
- A. Computer2 and Computer4 only
- B. Computer4 only
- C. Computer3 and Computer4 only
- D. Computer1, Computer2, Computer3 and Computer4
- E. Computer2, Computer3, and Computer4 only
Answer: A
Explanation:
References:
https://docs.microsoft.com/en-us/windows/deployment/windows-10-deployment-scenarios
NEW QUESTION 26
......
P.S. Passcertsure now are offering 100% pass ensure MD-101 dumps! All MD-101 exam questions have been updated with correct answers: https://www.passcertsure.com/MD-101-test/ (97 New Questions)
