support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Microsoft
  4. MD-102

Free MD-102 Exam Braindumps
Endpoint Administrator Questions 177–184 (page: 24)

Updated On: 7-Apr-2026
Page 24 of 53
PDF with 452 Questions
View Related Case Study

HOTSPOT (Drag and Drop is not supported)

You implement the planned changes for Connection1 and Connection2.

How many VPN connections will there be for User1 when the user signs in to Device1 and Device2? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: 2
Device1 has VPN1 and VPN2.

Box 2: 3
Device2 has VPN1, VPN2 (group assignment), and VPN3.



View Related Case Study

HOTSPOT (Drag and Drop is not supported)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: No
User1 is Cloud Device Administrator (and is a member of GroupA).

Cloud Device Administrator
Users in this role can enable, disable, and delete devices in Azure AD and read Windows 10 BitLocker keys (if present) in the Azure portal. The role does not grant permissions to manage any other properties on the device.

Box 2: Yes
User2 is Azure AD Joined Device Local Administrator.

Azure AD Joined Device Local Administrator
This role is available for assignment only as an additional local administrator in Device settings. Users with this role become local machine administrators on all Windows 10 devices that are joined to Azure Active Directory.

Box 3: No
User3 is Global Reader.


Reference:

https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference



View Related Case Study

You implement Boundary1 based on the planned changes.

Which devices have a network boundary of 192.168.1.0/24 applied?

  1. Device2 only
  2. Device3 only
  3. Device1, Device2, and Device5 only
  4. Device1, Device2, Device3, and Device4 only

Answer(s): D



You have a Microsoft 365 subscription and use Microsoft Intune to manage devices.

You have a Windows 11 device named Device1 that is enrolled in Intune. Device1 has been offline for 30 days.

You need to remove Device1 from Intune immediately. The solution must ensure the following:

Any apps and data provisioned by Intune are removed when the device checks in again.

User-installed apps, personal data, and OEM-installed apps must be retained.

What should you use?

  1. a Delete action
  2. a Retire action
  3. a Fresh Start action
  4. an Autopilot Reset action

Answer(s): A



You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

You use Microsoft Intune to manage devices.

You need to review the startup times and restart frequencies of the devices.

What should you use?

  1. Azure Monitor
  2. Intune Data Warehouse
  3. Microsoft Defender for Endpoint
  4. Endpoint analytics

Answer(s): D

Explanation:

Restart frequency in endpoint analytics.
In endpoint analytics startup performance, we've provided insights into PC boot times, and how to improve the reboot times of poorly performing devices. Reboot frequency can be just as impactful to the user experience since a device that reboots daily because of Stop errors will have a poor user experience even if the boot times are fast. We've recently added insights into restart frequencies within your organization to help you identify problematic devices.
Prerequisites
Devices are enrolled in endpoint analytics.
Enroll Configuration Manager devices
Enroll Intune devices
After enrollment, client devices require a restart to fully enable all analytics.
Etc.


Reference:

https://learn.microsoft.com/en-us/mem/analytics/restart-frequency



HOTSPOT (Drag and Drop is not supported)

You have a Microsoft 365 E5 subscription.

You create a new update rings policy named Policy1 as shown in the following exhibit.



Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: will be installed immediately
Quality update deferral period (days) is here 0 days.

When you use Intune policies for Update rings, you're configuring the Windows settings that manage how and when devices will install Windows updates.

Update settings
Update settings control what bits a device will download, and when.

* Quality update deferral period (days)
Specify the number of days from 0 to 30 for which Quality Updates are deferred. This period is in addition to any deferral period that is part of the service channel you select. The deferral period begins when Microsoft releases the update.

Quality Updates are typically fixes and improvements to existing Windows functionality.

Box 2: 30 days
Feature update deferral period is here 30 days.

* Feature update deferral period (days)
Specify the number of days for which Feature Updates are deferred. This period is in addition to any deferral

period that is part of the service channel you select. The deferral period begins when Microsoft releases the update.


Reference:

https://learn.microsoft.com/en-us/mem/intune/protect/windows-update-settings



You have computers that run Windows 10 and connect to an Azure Log Analytics workspace. The workspace is configured to collect all available events from the Windows event logs.

The computers have the logged events shown in the following table.



Which events are collected in the Log Analytics workspace?

  1. 1 only
  2. 2 and 3 only
  3. 1 and 3 only
  4. 1, 2, and 4 only
  5. 1, 2, 3, and 4

Answer(s): E



You have a Microsoft 365 E5 subscription that contains 10 Android Enterprise devices. Each device has a corporate-owned work profile and is enrolled in Microsoft Intune.

You need to configure the devices to run a single app in kiosk mode.

Which Configuration settings should you modify in the device restrictions profile?

  1. Users and Accounts
  2. General
  3. System security
  4. Device experience

Answer(s): D

Explanation:

Android Enterprise device settings list to allow or restrict features on corporate-owned devices using Intune Device experience
Use these settings to configure a kiosk-style experience on your dedicated devices, or to customize the home screen experiences on your fully managed devices. You can configure devices to run one app, or run many apps. When a device is set with kiosk mode, only the apps you add are available.

Note: You can control and restrict on Android Enterprise devices owned by your organization. As part of your mobile device management (MDM) solution, use these settings to allow or disable features, run apps on dedicated devices, control security, and more.
This feature applies to:
Android Enterprise corporate-owned work profile (COPE)
Android Enterprise corporate owned fully managed (COBO)
Android Enterprise corporate owned dedicated devices (COSU)


Reference:

https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-android-for-work



  PDF
Viewing page 24 of 53
Viewing questions 185 - 192 out of 452 questions


Post your Comments and Discuss Microsoft MD-102 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!