QUESTION: 233 Exam Topic: Manage and Protect Devices Questions

HOTSPOT (Drag and Drop is not supported)
Your network contains an Active Directory domain. Active Directory is synced with Microsoft Azure Active Directory (Azure AD).

There are 500 Active Directory domain-joined computers that run Windows 10 and are enrolled in Microsoft Intune.

You plan to implement Microsoft Defender Exploit Guard.
You need to create a custom Microsoft Defender Exploit Guard policy, and then distribute the policy to all the computers.

What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Reference:

https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml#manage-or-deploy-a-configuration
https://docs.microsoft.com/en-us/intune/endpoint-protection-windows-10
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection

Reveal Solution Next Question

QUESTION: 234 Exam Topic: Manage and Protect Devices Questions

You have 100 devices that run Windows 10 and are joined to Microsoft Azure Active Directory (Azure AD). You need to prevent users from joining their home computer to Azure AD.
What should you do?

From the Device enrollment blade in the Intune admin center, modify the Enrollment restriction settings.
From the Devices blade in the Azure Active Directory admin center, modify the Device settings.
From the Device enrollment blade in the Intune admin center, modify the Device enrollment manages settings.
From the Mobility (MDM and MAM) blade in the Azure Active Directory admin center, modify the Microsoft Intune enrollment settings.

Answer(s): A

Reference:

https://docs.microsoft.com/en-us/intune/enrollment-restrictions-set

Reveal Solution Next Question

QUESTION: 235 Exam Topic: Manage and Protect Devices Questions

Your company has a Microsoft 365 subscription.
A new user named Admin1 is responsible for deploying Windows 10 to computers and joining the computers to Microsoft Azure Active Directory (Azure AD). Admin1 successfully joins computers to Azure AD.
Several days later, Admin1 receives the following error message: “This user is not authorized to enroll. You can try to do this again or contact your system administrator with the error code (0x801c0003).”

You need to ensure that Admin1 can join computers to Azure AD and follow the principle of least privilege. What should you do?

Assign the Global administrator role to Admin1.
Modify the Device settings in Azure AD.
Assign the Cloud device administrator role to Admin1.
Modify the User settings in Azure A

Answer(s): B

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal

Reveal Solution Next Question

QUESTION: 236 Exam Topic: Manage and Protect Devices Questions

Your network contains an Active Directory domain named contoso.com. The domain contains computers that run Windows 10 and are joined to the domain.

The domain is synced to Microsoft Azure Active Directory (Azure AD).

You create an Azure Log Analytics workspace and deploy the Update Compliance solution.
You need to enroll the computers in the Update Compliance solution.
Which Group Policy setting should you configure?

Specify intranet Microsoft update service location
Allow Telemetry
Configure the Commercial ID
Connected User Experiences and Telemetry

Answer(s): C

Explanation:

Microsoft uses a unique commercial ID to map information from user computers to your Azure workspace. Copy your commercial ID key from any of the Windows Analytics solutions you have added to your Windows Portal, and then deploy it to user computers.

Reference:

https://docs.microsoft.com/en-us/windows/deployment/update/update-compliance-get-started

Reveal Solution Next Question

Free MD-101 Exam Braindumps (page: 59)

QUESTION: 233 Exam Topic: Manage and Protect Devices Questions

Explanation:

Reference:

QUESTION: 234 Exam Topic: Manage and Protect Devices Questions

Reference:

QUESTION: 235 Exam Topic: Manage and Protect Devices Questions

Reference:

QUESTION: 236 Exam Topic: Manage and Protect Devices Questions

Explanation:

Reference: