You have a Microsoft Entra tenant named contoso.com.You need to ensure that users are not added automatically to the local Administrators group when they join their Windows 11 device to contoso.com.What should you configure?
Answer(s): D
Your company has devices enrolled in Microsoft Intune as shown in the following table.In Microsoft Intune admin center, you define the company's network as a location named Location1.Which devices can use network location-based compliance policies?
Answer(s): E
Intune supported operating systemsIntune supports devices running the following operating systems (OS):iOSAndroidWindowsmacOSNote: View the device compliance settings for the different device platforms:Android device administratorAndroid EnterpriseiOSmacOSWindows Holographic for BusinessWindows 8.1 and laterWindows
https://docs.microsoft.com/en-us/mem/intune/fundamentals/supported-devices-browsers https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started
You have an Azure subscription.You have an on-premises Windows 11 device named Device1.You plan to monitor Device1 by using Azure Monitor.You create a data collection rule (DCR) named DCR1 in the subscription.To what should you associate DCR1?
The Data Collection rules can only target the Azure AD tenant scope, i.e. all DCRs associated to the tenant (via Monitored Object) will apply to all Windows client machines within that tenant with the agent installed using this client installer. Granular targeting using DCRs is not supported for Windows client devices yet Create and associate a 'Monitored Object'You need to create a 'Monitored Object' (MO) that creates a representation for the Azure AD tenant within Azure Resource Manager (ARM). This ARM entity is what Data Collection Rules are then associated with. This Monitored Object needs to be created only once for any number of machines in a single AAD tenant. Currently this association is only limited to the Azure AD tenant scope, which means configuration applied to the AAD tenant will be applied to all devices that are part of the tenant and running the agent installed via the client installer. Agents installed as virtual machine extension will not be impacted by this. The image below demonstrates how this works:
https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-windows-client
You manage 1,000 devices by using Microsoft Intune.You review the Device compliance trends report.For how long will the report display trend data?
Answer(s): B
You have a Microsoft 365 subscription that contains a user named User1.You use Microsoft Intune to manage devices that run Windows 11.You need to remove User1 from the local Administrators group on all enrolled devices. The solution must minimize administrative effort.What should you configure?
Account protection policy for endpoint security in IntuneUse Intune endpoint security policies for account protection to protect the identity and accounts of your users and manage the built-in group memberships on devices.Manage local groups on Windows devicesUse the Local user group membership (preview) profile to manage the users that are members of the built-in local groups on devices that run Windows 10 20H2 and later, and Windows 11 devices.
https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-account-protection-policy
HOTSPOT (Drag and Drop is not supported)You have a Microsoft 365 subscription.You need to enable passwordless authentication for all users. The solution must meet the following requirements:Users in the research department cannot use mobile devices and must authenticate from unmanaged Linuxdevices by using an alternative method.To access services, users in the sales department must authenticate by using their mobile phone.Administrative effort must be minimized.Which authentication method should you use for each department? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: Microsoft AuthenticatorTo access services, users in the sales department must authenticate by using their mobile phone.Enable passwordless sign-in with Microsoft AuthenticatorMicrosoft Authenticator can be used to sign in to any Microsoft Entra account without using a password. Microsoft Authenticator uses key-based authentication to enable a user credential that is tied to a device, where the device uses a PIN or biometric. Windows Hello for Business uses a similar technology.This authentication technology can be used on any device platform, including mobile. This technology can also be used with any app or website that integrates with Microsoft Authentication Libraries.Box 2: FIDO2 security keysUsers in the research department cannot use mobile devices and must authenticate from unmanaged Linuxdevices by using an alternative method.Browser support of FIDO2 passwordless authenticationSupported browsersThis table shows support for authenticating Microsoft Entra ID and Microsoft Accounts (MSA). Microsoft accounts are created by consumers for services such as Xbox, Skype, or Outlook.com.
https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-passwordless- phonehttps://learn.microsoft.com/en-us/azure/active-directory/authentication/fido2-compatibility
DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)Your company has a Microsoft 365 E5 tenant.All the devices of the company are enrolled in Microsoft Intune.You need to create advanced reports by using custom queries and visualizations from raw Microsoft Intune data.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Select and Place:
Step 1: Purchase an Azure subscription.Complex reporting functionality require an Azure subscription.Step 2: Create a Log Analytics workspace.Each Azure resource requires its own diagnostic setting. The diagnostic setting defines the following for a resource:* One or more destinations to send the logs. Current destinations include Log Analytics workspace, Event Hubs, and Azure Storage.* Categories of logs and metric data sent to the destinations defined in the setting. The available categories will vary for different resource types.* Retention policy for data stored in Azure Storage.Step 3: Add diagnostic settings.You can create and view custom reports using the following steps:1. Sign in to the Microsoft Endpoint Manager admin center.2. Select Reports > Diagnostic settings add a diagnostic setting.3. Etc.
https://docs.microsoft.com/en-us/mem/intune/fundamentals/reports
You are implementing Microsoft Intune Suite.You enroll devices in Intune as shown in the following table.The performance of which devices can be analyzed by using Endpoint analytics?
Endpoint analyticsPrerequisitesYou can enroll devices via Configuration Manager or Microsoft Intune.To enroll devices via Intune requires:* Intune enrolled or co-managed devices running the following:Windows 10 version 1903 or laterJuly 2021 cumulative update or later* Pro, Pro Education, Enterprise, or Education. Home and long-term servicing channel (LTSC) aren't supported.* Windows devices must be Azure AD joined or hybrid Azure AD joined. Workplace joined or Azure AD registered devices aren't supported.Network connectivity from devices to the Microsoft public cloud.Note: Endpoint analytics is part of the Microsoft Adoption Score. These analytics give you insights for measuring how your organization is working and the quality of the experience you're delivering to your users.Endpoint analytics can help identify policies or hardware issues that may be slowing down devices and help you proactively make improvements before end-users generate a help desk ticket.
https://learn.microsoft.com/en-us/mem/analytics/overview
Post your Comments and Discuss Microsoft MD-102 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MD-102 content, but please register or login to continue.