HOTSPOT (Drag and Drop is not supported)Your network contains an Active Directory domain.The domain contains four computers named Computer1, Computer2, Computer3, and Computer4 that run Windows 10.You perform the following actions:On Computer1, you install Windows Admin Center and configure Windows Defender Firewall to allowincoming communication over TCP ports 80,443, and 6516.On Computer2, you run the Enable-PSRemoting cmdlet.On Computer3, you configure Windows Defender Firewall to allow Windows Remote Management(WinRM) traffic.On Computer4, you run the winrm quickconfig command.You need to manage the computers remotely by using Windows Admin Center.From which computers can you connect to Windows Admin Center, and which computers can you manage by using Windows Admin Center? To answer, select the appropriate options in the answer are.Note: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: Computer1 onlyConnected from:Computer1 - YesOn Computer1, you install Windows Admin Center and configure Windows Defender Firewall to allow incoming communication over TCP ports 80,443, and 6516.Networking configurationWindows Admin Center communicates outbound securely to endpoints over TCP port 443. By default, theWindows Admin Center gateway and browser uses the default route to the internet to perform actions. You can optionally configure the gateway to use a proxy server if your network requires it.Computer2 - NoOn Computer2, you run the Enable-PSRemoting cmdlet.Computer3 - NoOn Computer3, you configure Windows Defender Firewall to allow Windows Remote Management (WinRM) traffic.Computer4 - NoOn Computer4, you run the winrm quickconfig command.Installation and configuration for Windows Remote Management For Windows Remote Management (WinRM) scripts to run, and for the Winrm command-line tool to perform data operations, WinRM has to be both installed and configured.Box 2: Computer1, Computer 2, and Computer4 onlyComputer 1 - YesOn Computer1, you install Windows Admin Center and configure Windows Defender Firewall to allow incoming communication over TCP ports 80,443, and 6516.Computer 2 - YesOn Computer2, you run the Enable-PSRemoting cmdlet.Windows Remote Management is one component of the Windows Hardware Management features that manage server hardware locally and remotely. These features include a service that implements the WS- Management protocol, hardware diagnosis and control through baseboard management controllers (BMCs), and a COM API and scripting objects that allow you to write applications that communicate remotely through the WS-Management protocol.Computer3 - NoOn Computer3, you configure Windows Defender Firewall to allow Windows Remote Management (WinRM) traffic.Need to enable remote management as well.Computer 4 - YesQuick default configurationEnable the WS-Management protocol on the local computer, and set up the default configuration for remote management with the command winrm quickconfig.The winrm quickconfig command (which can be abbreviated to winrm qc) performs these operations:Starts the WinRM service, and sets the service startup type to auto-start. Configures a listener for the ports that send and receive WS-Management protocol messages using either HTTP or HTTPS on any IP address.Defines ICF exceptions for the WinRM service, and opens the ports for HTTP and HTTPS.
https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/deploy/network-requirements https://learn.microsoft.com/en-us/windows/win32/winrm/about-windows-remote-management
You have a Hyper-V host. The host contains virtual machines that run Windows 10 as shown in following table.Which virtual machines can be upgraded to Windows 11?
Answer(s): B
Before you can enable Hyper-V on your Windows 11 machine, you need to make sure that your system is compatible. Here are the system requirements for Hyper-V on Windows 11:Windows 11 Pro or Enterprise 64-bit Operating SystemA 64-bit processor with Second Level Address Translation (SLAT) A minimum of 4 GB of RAMBIOS-level hardware virtualization supportIncorrect:* VM3Need two virtual processors or more.* VM1Windows 11 requires generation 2.Windows guest operating system supportThe following table shows which 64-bit versions of Windows you can use as a guest operating system for generation 1 and generation 2 virtual machines.
https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/plan/should-i-create-a-generation-1-or- 2-virtual-machine-in-hyper-vhttps://techcommunity.microsoft.com/t5/educator-developer-blog/step-by-step-how-to-create-a-windows-11- vm-on-hyper-v-via/ba-p/3754100
You have a Microsoft 365 subscription that has Windows 365 Enterprise licenses.You plan to use a custom Windows 11 image as a template for Cloud PCs.You have a Hyper-V virtual machine that runs Windows 11 and has the following configurations:Name: VM1Disk size: 64 GBDisk format: VHDXDisk type: Fixed sizeGeneration: Generation 2You need to ensure that you can use VM1 as a source for the custom image.What should you do on VM1 first?
Windows 365 uses both default and custom operating system images to automatically create the virtual Cloud PCs that you provide to your end users. The default images are available from the gallery in Microsoft Intune as a part of creating your provisioning policy. You can also upload custom images that you create.Image requirementsBoth marketplace and custom images must meet the following requirements:* Windows 10 Enterprise version 21H2 or later.* Windows 11 Enterprise 21H2 or later.(not C) * Generation 2 images.NoteWe recently made the change to generation 2 (Gen2) virtual machine images. Newly created custom images must be Gen2. Existing custom images uploaded based on generation 1 will remain active.* Generalized VM image.* Single Session VM images (multi-session isn't supported).* No recovery partition. For information about how to remove a recovery partition, see the Windows Server command: delete partition.(A) *-> Default 64-GB OS disk size. The OS disk size is automatically adjusted to the size specified in SKU description of the Windows 365 license.A custom image must also meet the following extra requirements:Exist in an Azure subscription.* Is stored as a managed image in Azure.* Storing a managed image on Azure incurs storage costs. However, customers can delete the managed image from Azure once they've successfully uploaded it as a Custom Image to Microsoft Intune.
https://learn.microsoft.com/en-us/windows-365/enterprise/device-images
HOTSPOT (Drag and Drop is not supported)Your on-premises network contains an Active Directory domain named contoso.com. The domain contains a user account named Admin1 and the resources shown in the following table.You have a Microsoft 365 E5 subscription.You have a Microsoft Entra tenant that syncs with contoso.com.Admin1 plans to use Windows Autopilot to deploy 100 Windows 11 devices. The deployment must meet the following requirements:The devices must be Microsoft Entra hybrid joined during the deployment.Computer objects must be created in OU1.You need to configure Server1 and Active Directory delegation to support the deployment.How should you configure Server 1, and on which resource should you configure delegated permissions? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Box 1: Install the Intune Connector for Active DirectoryServer1Deploy Microsoft Entra hybrid joined devices by using Intune and Windows Autopilot Intune connector server prerequisitesThe Intune Connector for Active Directory must be installed on a computer that's running Windows Server 2016 or later with .NET Framework version 4.7.2 or later.The server hosting the Intune Connector must have access to the internet and your Active Directory.Box 2: OU1ResourceThe organizational unit that has the rights to create computers must match:The organizational unit entered in the Domain Join profile.If no profile is selected, the computer's domain name for your domain.1. Open Active Directory Users and Computers (DSA.msc).2. Right-click the organizational unit to use to create Microsoft Entra hybrid joined computers > Delegate Control.3. In the Delegation of Control wizard, select Next > Add > Object Types.4. In the Object Types pane, select the Computers > OK.5. In the Select Users, Computers, or Groups pane, in the Enter the object names to select box, enter the name of the computer where the Connector is installed.6. Select Check Names to validate your entry > OK > Next.7. Select Create a custom task to delegate > Next.8. Select Only the following objects in the folder > Computer objects.9. Select Create selected objects in this folder and Delete selected objects in this folder.10. Select Next.11. Under Permissions, select the Full Control check box. This action selects all the other options.12. Select Next > Finish.
https://learn.microsoft.com/en-us/autopilot/windows-autopilot-hybrid
HOTSPOT (Drag and Drop is not supported)You have a Microsoft Entra tenant that contains the devices shown in the following table.The tenant contains the groups shown in the following table.You create a Windows Autopilot deployment profile as shown in the Deployment Profile exhibit. (Click theDeployment Profile tab.)For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.Hot Area:
Box 1: NoNo - Device1 is registered for Autopilot.Device1 is Microsoft Entra Registered, which prevent it from being registered for Autopilot.Note: ImportantThe following type of devices shouldn't be registered as a Windows Autopilot device:* -> Microsoft Entra registered devices, also known as "workplace joined" devices.* Intune MDM-only enrollment devices.These options are intended for users to join personally owned devices to their organization's network. Windows Autopilot registered devices are registered as corporate owned devices.If a device is already one of these two types of devices, to register is as a Windows Autopilot device, first remove it from Microsoft Intune and Microsoft Entra ID.Box 2: YesYes - Device2 is registered for Autopilot.Device2 is Microsoft Entra joined.Device2 is Windows 10, and ownership is Corporate.Device2 is in Group1.Note Profile:Profile includes Group1, and excludes Group2.Box 3: NoNo - Device3 is registered for Autopilot.Device3 is Microsoft Entra joined.Device3 is Windows 11, and ownership is Corporate.Device3 is in Group2.The profile excludes Group2.Note: Windows Autopilot registration
https://learn.microsoft.com/en-us/autopilot/registration-overview
You have a Microsoft 365 Business Standard subscription and 100 Windows 10 Pro devices that are joined to Microsoft Entra.You purchase Microsoft 365 E5 licenses for all users.You need to upgrade the Windows 10 Pro devices to Windows 10 Enterprise. The solution must minimize administrative effort.Which upgrade method should you use?
Windows Subscription ActivationWindows 10 Pro supports the Subscription Activation feature, enabling users to "step-up" from Windows 10 Pro or Windows 11 Pro to Windows 10 Enterprise or Windows 11 Enterprise, respectively, if they are subscribed to Windows Enterprise E3 or E5.
https://docs.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation
You have a Microsoft 365 E5 subscription.You need to enroll Android Enterprise devices in Microsoft Intune by using zero-touch enrollment.What should you do first?
Answer(s): C
Before you can enroll Android Enterprise devices using zero-touch enrollment in Microsoft Intune, the first step is to link a Managed Google Play account to Microsoft Intune. This is necessary because Android Enterprise management, including zero-touch enrollment, relies on the Managed Google Play account to manage and deploy apps and policies to Android devices. After linking the account, you can proceed with setting up the zero-touch configuration.
DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)You have a Microsoft 365 E5 subscription that is linked to a Microsoft Entra tenant named contoso.com. The subscription contains a user named User1 and a new Windows 11 device named Device1.User1 must enroll Device1 in Microsoft Intune automatically.You need to ensure that all other users cannot use automatic enrollment.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Select and Place:
The correct sequence of actions is:Create a group named Group1 and add User1 to Group1.Configure the mobile device management (MDM) user scope.Instruct User1 to join Device1 to contoso.com.Create a group named Group1 and add User1 to Group1: This step ensures that User1 is in a group that can be targeted for enrollment settings.Configure the mobile device management (MDM) user scope: Configure the MDM scope to include only Group1. This will allow only members of Group1 (in this case, User1) to automatically enroll devices into Intune.Instruct User1 to join Device1 to contoso.com: After configuring the MDM scope and adding User1 to the appropriate group, User1 can then join Device1 to Microsoft Entra, which will trigger the automatic enrollment in Intune.
Post your Comments and Discuss Microsoft MD-102 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MD-102 content, but please register or login to continue.