HOTSPOT (Drag and Drop is not supported)You have a Microsoft Entra tenant named contoso.com that contains the users shown in the following table.You have a computer named Computer1 that runs Windows 10. Computer1 is in a workgroup and has the local users shown in the following table.UserA joins Computer1 to Microsoft Entra ID by using user1@contoso.com.For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: NoAdd computer to Azure AD step by stepThe Azure administrator have to accept that users can join their devices to the Azure AD.The device just needs to Azure AD registered.Box 2: YesSecurity AdministratorUsers with this role have permissions to manage security-related features in the Microsoft 365 Defender portal, Azure Active Directory Identity Protection, Azure Active Directory Authentication, Azure Information Protection, and Microsoft Purview compliance portal.In particular he can do:* Microsoft Defender for EndpointAssign rolesManage machine groupsConfigure endpoint threat detection and automated remediation View, investigate, and respond to alertsView machines/device inventoryBox 3: NoCloud Device AdministratorUsers in this role can enable, disable, and delete devices in Azure AD and read Windows 10 BitLocker keys (if present) in the Azure portal. The role does not grant permissions to manage any other properties on the device.
https://learn.microsoft.com/en-us/answers/questions/261596/add-computer-to-azure-ad-step-by-step https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference
Your network contains an Active Directory domain. The domain contains a user named Admin1. All computers run Windows 10.You enable Windows PowerShell remoting on the computers.You need to ensure that Admin1 can establish remote PowerShell connections to the computers. The solution must use the principle of least privilege.To which group should you add Admin1?
Answer(s): D
You have a Microsoft S65 E5 subscription that contains a user named User1.You use Microsoft Intune to manage devices.You have a device named Device1 that is enrolled in Intune.You need to ensure that User1 can use Remote Help from the Intune admin center for Device1.Which three actions should you perform? Each correct answer presents part of the solution.Note: Each correct selection is worth one point.
Answer(s): A,B,F
Note: This question is part of a series of questions that present the same scenario. Each question inthe series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your company has a Microsoft Entra tenant named contoso.com that contains several Windows 11 devices.When you join new Windows 11 devices to contoso.com, users are prompted to set up a four-digit pin.You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 11 devices to contoso.com.Solution: From the Microsoft Entra admin center, you modify the User settings and the Device settings.Does this meet the goal?
Answer(s): B
Instead, from the Azure Active Directory admin center, you configure automatic mobile device management (MDM) enrollment. From the Endpoint Management admin center, you configure the Windows Hello for Business enrollment options.
https://docs.microsoft.com/en-us/intune/protect/windows-hello
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your company has a Microsoft Entra tenant named contoso.com that contains several Windows 11 devices.When you join new Windows 11 devices to contoso.com, users are prompted to set up a four-digit pin.You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 11 devices to contoso.com.Solution: From the Microsoft Entra admin center, you configure automatic mobile device management (MDM) enrollment. From the Microsoft Intune admin center, you create and assign a device restrictions profile.Does this meet the goal?
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your company has a Microsoft Entra tenant named contoso.com that contains several Windows 11 devices.When you join new Windows 11 devices to contoso.com, users are prompted to set up a four-digit pin.You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 11 devices to contoso.com.Solution: From the Microsoft Entra admin center, you configure automatic mobile device management (MDM) enrollment. From the Microsoft Intune admin center, you configure the Windows Hello for Business enrollment options.Does this meet the goal?
Hello for Business is an alternative sign-in method that uses Active Directory or an Azure Active Directory account to replace a password, smart card, or a virtual smart card. It lets you use a user gesture to sign in, instead of a password. A user gesture might be a PIN, biometric authentication such as Windows Hello, or an external device such as a fingerprint reader.Intune integrates with Hello for Business in two ways:An Intune policy can be created under Device enrollment. This policy targets the entire organization (tenant- wide). It supports the Windows AutoPilot out-of-box-experience (OOBE) and is applied when a device enrolls.An identity protection profile can be created under Device configuration. This profile targets assigned users and devices, and is applied during check-in.
You have a Microsoft Entra tenant named contoso.com.You have a workgroup computer named Computer1 that runs Windows 11.You need to add Computer1 to contoso.com.What should you use?
You join a computer to a domain, including an Azure AD domain in the Settings panel in Windows 10, under System->About
You use a Microsoft Intune subscription to manage iOS devices.You configure a device compliance policy that blocks jailbroken iOS devices.You need to enable Enhanced jailbreak detection.What should you configure?
Compliance policy settings include the following settings:* Enhanced jailbreak detection (applies only to iOS/iPadOS)* Etc.
https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started
Post your Comments and Discuss Microsoft MD-102 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MD-102 content, but please register or login to continue.