You use Microsoft Intune and Intune Data Warehouse.You need to create a device inventory report that includes the data stored in the data warehouse.What should you use to create the report?
Answer(s): D
Super easy start with reporting and the Intune Data Warehouse Method 1: Load data using OData URLThe first method is loading data by using the OData URL.Method 2: Load data and reports using Power BI file (pbix)The second method is loading data and prebuilt reports using a downloaded Power BI file (pbix). That file contains the connection information for the tenant and contains a set of prebuilt reports based on the Intune Data Warehouse data model.
https://www.petervanderwoude.nl/post/super-easy-start-with-reporting-and-the-intune-data-warehouse/
Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10.You have the groups shown in the following table.Which groups can you add to Group4?
Answer(s): A
DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)You have a Microsoft 365 subscription. The subscription contains computers that run Windows 11 and are enrolled in Microsoft Intune.You need to create a compliance policy that meets the following requirements:Requires BitLocker Drive Encryption (BitLocker) on each deviceRequires a minimum operating system versionWhich setting of the compliance policy should you configure for each requirement? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.Note: Each correct selection is worth one point.Select and Place:
Device Compliance settings for Windows in IntuneAs part of your mobile device management (MDM) solution, use these settings to require BitLocker, set a minimum and maximum operating system, set a risk level using Microsoft Defender for Endpoint, and more.Box 1: Device HealthDevice HealthWindows Health Attestation Service evaluation rulesRequire BitLocker:Windows BitLocker Drive Encryption encrypts all data stored on the Windows operating system volume. BitLocker uses the Trusted Platform Module (TPM) to help protect the Windows operating system and user data. It also helps confirm that a computer isn't tampered with, even if its left unattended, lost, or stolen. If the computer is equipped with a compatible TPM, BitLocker uses the TPM to lock the encryption keys that protect the data. As a result, the keys can't be accessed until the TPM verifies the state of the computer.Not configured (default) - This setting isn't evaluated for compliance or non-compliance. Require - The device can protect data that's stored on the drive from unauthorized access when the system is off, or hibernates.Box 2: Device PropertiesRequires a minimum operating system versionDevice PropertiesOperating System VersionTo discover build versions for all Windows Feature Updates and Cumulative Updates (to be used in some of the fields below), see Windows release information. Be sure to include the appropriate version prefix before the build numbers, like 10.0 for Windows 10 as the following examples illustrate.Minimum OS version:Enter the minimum allowed version in the major.minor.build.revision number format. To get the correct value, open a command prompt, and type ver.Etc.
https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-create-windows
HOTSPOT (Drag and Drop is not supported)You have a Microsoft 365 E5 subscription that uses Microsoft Intune.You have the Windows 11 devices shown in the following table.You deploy the device compliance policy shown in the exhibit. (Click the Exhibit tab.)For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.Hot Area:
Box 1: YesDevice1 has BitLocker enabled.Device1 is member of Group1.We see for Policy1:Require BitLockerIncluded groups: Group1, Group3Excluded groups: Group2Box 2: NoDevice2 has BitLocker disabled.Device2 is member of Group1 and Group3.Box 3: NoDevice3 has BitLocker enabled.Device3 is member of Group1, Group2.Group1 is included, while Group2 is excluded.Note: Exclusion takes precedence over inclusion in the following same group type scenarios:Including user groups and excluding user groups when assigning apps Including device groups and excluding device group when assigning apps
https://learn.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started https://docs.microsoft.com/en-us/intune/apps/apps-inc-exl-assignments
DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)You have a Microsoft 365 subscription that contains the devices shown in the following table.You need to ensure that only devices running trusted firmware or operating system builds can access network resources.Which compliance policy setting should you configure for each device? To answer, drag the appropriate settings to the correct devices. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.Note: Each correct selection is worth one point.Select and Place:
Box 1: Require Secure Boot to be enabled on the deviceWindows 10Require Secure Boot to be enabled on the device:Not configured (default) - This setting isn't evaluated for compliance or non-compliance. Require - The system is forced to boot to a factory trusted state. The core components that are used to boot the machine must have correct cryptographic signatures that are trusted by the organization that manufactured the device. The UEFI firmware verifies the signature before it lets the machine start. If any files are tampered with, which breaks their signature, the system doesn't boot.Box 2: Prevent jailbroken devices from having corporate access.iOSDevice Compliance settings for iOS/iPadOS in IntuneAs part of your mobile device management (MDM) solution, use these settings to require an email, mark rooted (jailbroken) devices as not compliant, set an allowed threat level, set passwords to expire, and more.This feature applies to:iOSiPadOSDevice HealthJailbroken devicesSupported for iOS 8.0 and laterNot configured (default) - This setting isn't evaluated for compliance or non-compliance.Block - Mark rooted (jailbroken) devices as not compliant.Box 3: Prevent rooted devices from having corporate accessAndroid EnterpriseDevice compliance settings for Android Enterprise in IntuneAs part of your mobile device management (MDM) solution, use these settings to mark rooted devices as not compliant, set an allowed threat level, enable Google Play Protect, and more.This feature applies to:Android EnterpriseDevice HealthJailbroken devicesSupported for iOS 8.0 and laterNot configured (default) - This setting isn't evaluated for compliance or non-compliance.Block - Mark rooted (jailbroken) devices as not compliant.
https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-create-windows https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-create-ios
DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)You have a Microsoft 365 subscription that contains 1,000 Windows 11 devices enrolled in Microsoft Intune.You plan to create and monitor the results of a compliance policy used to validate the BIOS version of the devices.Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Select and Place:
Step 1: Create a PowerShell discovery script and a JSON file Discovery script - A PowerShell for Windows or a POSIX-compliant shell script for Linux that you create. The script runs on a device to discover the custom settings defined in your JSON file. The script returns the configuration value of those settings to Intune. You need to upload your script to the Microsoft Intune admin center before you create a compliance policy and then select the script you want to use when creating a policy.JSON file - The JSON file defines the custom settings and the value that is to be considered as compliant and can contain messages for users on how to restore the device to compliance for the setting.Step 2: Upload the PowerShell script to Intune.Step 3: Create and assign a custom compliancy policy.Use compliance policies to set rules for devices you manage with Intune.Create a policy with custom compliance settingsBefore you begin to create a policy that will include custom settings, review the prerequisites.You must first upload an applicable discovery script to Intune, and have a ready JSON to add while creating the policyStep 4: Review the compliance dashboard for results.Monitor results of your Intune Device compliance policiesOpen the compliance dashboard1. Open the Intune Device compliance dashboard:2. Sign in to the Microsoft Intune admin center.3. Select Devices > Overview > Compliance status tab.
https://learn.microsoft.com/en-us/mem/intune/protect/compliance-use-custom-settings https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-monitor
DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)You have a computer that runs Windows 10 and contains two local users named User1 and User2.You need to ensure that the users can perform the following actions:User1 must be able to adjust the date and time.User2 must be able to clear Windows logs.The solution must use the principle of least privilege.To which group should you add each user? To answer, drag the appropriate groups to the correct users. Each group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.Note: Each correct selection is worth one point.Select and Place:
Box 1: Power UsersUser1 must be able to adjust the date and time.The Power Users group is able to install software, manage power and time-zone settings, and install ActiveX controls, actions that limited Users are denied.Box 2: Performance Log UsersUser2 must be able to clear Windows logs.Performance Log UsersMembers of the Performance Log Users group can manage performance counters, logs, and alerts locally on the server and from remote clients without being a member of the Administrators group.Incorrect:* Event Log ReadersMembers of this group can read event logs from local computers.* System Managed AccountsMembership of the System Managed Accounts group is managed by the system.
https://techcommunity.microsoft.com/t5/windows-blog-archive/the-power-in-power-users/ba-p/723522 https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups
HOTSPOT (Drag and Drop is not supported)You have a Microsoft Entra tenant named contoso.com.You have the devices shown in the following table.Which devices can be Microsoft Entra joined, and which devices can be registered in contoso.com? Toanswer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Box 1: Device1 and Device2 onlyAzure AD joinedReview supported devicesHybrid Azure AD join supports a broad range of Windows devices. Because the configuration for devices running older versions of Windows requires other steps, the supported devices are grouped into two categories:Windows current devicesWindows 11Windows 10Windows Server 2016Windows Server 2019Box 2: Device, Device2, Device3, and Device4Registered in contoso.comAzure AD registered devicesThe goal of Azure AD registered - also known as Workplace joined - devices is to provide your users with support for bring your own device (BYOD) or mobile device scenarios. In these scenarios, a user can access your organization's resources using a personal device.Operating Systems: ++Windows 10 or newer, iOS, Android, macOS, Ubuntu 20.04/22.04 LTS
https://learn.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-plan
Post your Comments and Discuss Microsoft MD-102 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MD-102 content, but please register or login to continue.