DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)You have a Microsoft 365 subscription that contains two users named User1 and User2.You need to ensure that the users can perform the following tasks:User1 must be able to create groups and manage users.User2 must be able to reset passwords for nonadministrative users.The solution must use the principle of least privilege.Which role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.Note: Each correct selection is worth one point.Select and Place:
Answer(s): A
Box 1: User AdministratorUser adminAssign the user admin role to users who you want to access and manage user password resets and manage users and groups. They can also open and manage support requests to Microsoft support.Box 2: Helpdesk AdministratorAssign the Helpdesk admin role to users who want to reset passwords, force users to sign out for any security issues. They can also open and manage support requests to Microsoft support. The Helpdesk admin can only help non-admin users and users assigned these roles: Directory reader, Guest inviter, Helpdesk admin, Message center reader, and Reports reader.
https://docs.microsoft.com/en-us/microsoft-365/admin/add-users/admin-roles-page
HOTSPOT (Drag and Drop is not supported)You have a Microsoft Intune subscription that has the following device compliance policy settings:Mark devices with no compliance policy assigned as: CompliantCompliance status validity period (days): 14On January1, you enroll Windows 10 devices in Intune as shown in the following table.On January 4, you create the following two device compliance policies:Name: Policy1Platform: Windows 10 and laterRequire BitLocker: RequireMark device noncompliant: 5 days after noncomplianceScope (Tags): Tag1Name: Policy2Platform: Windows 10 and laterFirewall: RequireMark device noncompliant: ImmediatelyScope (Tags): Tag2On January 5, you assign Policy1 and Policy2 to Group1.For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.Hot Area:
Box 1: No.Policy1 and Policy2 apply to Group1 which Device1 is a member of. Device1 does not meet the firewall requirement in Policy2 so the device will immediately be marked as non-compliant.Box 2: NoFor the same reason as Box1.Box 3: YesPolicy1 and Policy2 apply to Group1. Device2 is not a member of Group1 so the policies don't apply. The Scope (tags) have nothing to do with whether the policy is applied or not. The tags are used in RBAC.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your company has a Microsoft Entra tenant named contoso.com that contains several Windows 11 devices.When you join new Windows 11 devices to contoso.com, users are prompted to set up a four-digit pin.You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 11 devices to contoso.com.Solution: From the Microsoft Entra admin center, you configure the Authentication methods.Does this meet the goal?
Answer(s): B
Instead, from the Azure Active Directory admin center, you configure automatic mobile device management (MDM) enrollment. From the Endpoint Management admin center, you configure the Windows Hello forBusiness enrollment options.
https://docs.microsoft.com/en-us/intune/protect/windows-hello
You have a Microsoft 365 tenant that contains the objects shown in the following table.You are creating a compliance policy named Compliance1.Which objects can you specify in Compliance1 as additional recipients of noncompliance notifications?
Answer(s): C
Need email address to specify additional recipients of noncompliance notification.Security groups have no email address.
https://docs.microsoft.com/en-us/microsoft-365/admin/create-groups/compare-groups
HOTSPOT (Drag and Drop is not supported)You have an Azure AD tenant named contoso.com that contains a user named User1. User1 has a user principal name (UPN) of user1@contoso.com.You join a Windows 11 device named Client1 to contoso.com.You need to add User1 to the local Administrators group of Client1.How should you complete the command? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Box 1: net localgroupAdd user to group from command line (CMD)Windows provides command line utilities to manager user groups. In this post, learn how to use the command net localgroup to add user to a group from command prompt'.For example, to add a user `John' to administrators group, we can run the below command.net localgroup administrators John /addBox 2: ContosoThe domain of the user is Contoso.
https://www.windows-commandline.com/add-user-to-group-from-command-line/
You have a Microsoft 365 subscription.You need to provide a user the ability Security defaults and create Conditional Access policies. The solution must use the principle of least privilege.Which role should you assign to the user?
To enable security defaults (or confirm they're already enabled) ImportantYou must be a Security Administrator, Conditional Access administrator, or Global Administrator to perform this task.Note: Turn on multi-factor authenticationMulti-factor authentication (MFA) is a very important first step in securing your organization. Microsoft 365 Business Premium includes the option to use security defaults or Conditional Access policies to turn on MFA for your admins and user accounts. For most organizations, security defaults offer a good level of sign-in security. But if your organization must meet more stringent requirements, you can use Conditional Access policies instead.This article provides information about:Security defaults (suitable for most businesses)Conditional Access (for businesses with more stringent security requirements)
https://learn.microsoft.com/en-us/microsoft-365/business-premium/m365bp-turn-on-mfa?
HOTSPOT (Drag and Drop is not supported)In Microsoft Intune, you have the device compliance policies shown in the following table.The Intune compliance policy settings are configured as shown in the following exhibit.On June 1, you enroll Windows 11 devices in Intune as shown in the following table.For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.Hot Area:
Box 1: NoDevice1 has Windows 10, Bitlocker disabled, Windows Defender enabled.Device1 is member of Group1.Policy1 applies to Group1.Policy1 required Bitlocker.Policy1 has a 5 days grace period.Box 2: NoDevice1 would be marked as non-compliant.Box 3: YesDevice2 is Windows 10, Bitlocker disabled, and member of Group2.Policy2 and Policy3 are assigned to Group2.Policy3 required BitLocker.Policy3 has a 10 day grace period.Policy2 is met. Device2 is marked as compliant.
You have a Microsoft 365 subscription that contains a user named User1 and uses Microsoft Intune Suite.You use Microsoft Intune to manage devices that run Windows 11.User provides remote support for 75 devices in the marketing department.You need to add User1 to the Remote Desktop Users group on each marketing department device.What should you configure?
Post your Comments and Discuss Microsoft MD-102 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MD-102 content, but please register or login to continue.