You have a Microsoft Entra tenant named contoso.com that contains a group named Contoso Help Desk.You need to ensure that Contoso Help Desk is added to the local Administrators group whenever a Windows device is joined to contoso.com.What should you do?
Answer(s): B
The Microsoft Entra Joined Device Local Administrator role allows members of a group to be automatically added to the local Administrators group on Windows devices that are joined to the Microsoft Entra tenant. By assigning this role to the Contoso Help Desk group, you ensure that members of this group are granted local administrator privileges on all devices joined to contoso.com.
HOTSPOT (Drag and Drop is not supported)You have a Microsoft Entra tenant.You are creating a dynamic device group named Group1.Group1 will include only Windows devices that are Microsoft Entra registered.How should you configure the dynamic membership rule for Group1? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Answer(s): A
First dropdown: device.deviceTrustTypeSecond dropdown: "Workplace"To configure the dynamic membership rule for Group1 to include only Windows devices that are Microsoft Entra registered, you would use the following logic:The OS type should be "Windows."The deviceTrustType should be set to "Workplace," which indicates that the device is Microsoft Entra registered (as opposed to "AzureAd," which would indicate Microsoft Entra joined).
HOTSPOT (Drag and Drop is not supported)You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.The subscription contains the dynamic device groups shown in the following table.For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.Hot Area:
Device1 is a member of Group1 only:No. Device1 is Microsoft Entra hybrid joined, not AzureAD joined (which is required for Group1 membership).Therefore, Device1 is not a member of Group1.Device2 is a member of Group1 and Group2:Yes. Device2 is Microsoft Entra joined, so it meets the AzureAD trust type condition for Group1. It does not meet the conditions for Group2 because it is not Workplace (Microsoft Entra registered), so it's a member of Group1 only.Device3 is a member of Group2 only:Yes. Device3 is Microsoft Entra registered, which aligns with the Workplace trust type condition required for Group2 membership.
HOTSPOT (Drag and Drop is not supported)You have a hybrid environment that contains a Microsoft Entra tenant and an on-premises Active Directory Domain Services (AD DS) domain. The environment contains the devices shown in the following table.Which Microsoft Entra join type can each device use? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Device1: Microsoft Entra registered, Microsoft Entra joined, or Microsoft Entra hybrid joined Device2: Microsoft Entra registered onlyDevice1 (Windows 11, Workgroup): This device is not joined to an Active Directory domain, which means it can only be Microsoft Entra registered or Microsoft Entra joined. Since it is not part of a hybrid domain, it cannot be Microsoft Entra hybrid joined. The correct option is Microsoft Entra registered, Microsoft Entra joined, or Microsoft Entra hybrid joined.Device2 (iOS, Not applicable): iOS devices cannot be fully joined to a domain like Windows devices, so they can only be Microsoft Entra registered. The correct option for Device2 is Microsoft Entra registered only.
You have a Microsoft 365 E5 subscription that contains a group named Group1.You need to ensure that only the members of Group1 can join devices to the Microsoft Entra tenant.What should you configure in the Microsoft Entra admin center?
In the Microsoft Entra admin center, the Device settings allow you to control which users or groups can join devices to the Microsoft Entra tenant. By configuring the device settings, you can specify that only members of Group1 are allowed to join devices to the tenant.
You have a Microsoft Entra tenant named contoso.com that contains a Windows 11 device named Device1 and a user named User1.User1 registers Device1 in contoso.com.Which capability is available to Device1 after registering in contoso.com?
When a device is Microsoft Entra registered, it gains the ability to authenticate to cloud resources (such as Microsoft 365) using single sign-on (SSO). This allows the device and user to access cloud apps without repeatedly signing in. However, the device is not fully managed, meaning it cannot enforce compliance policies, software updates, or hard drive encryption (which are features associated with Microsoft Entra joined or Intune-enrolled devices).
HOTSPOT (Drag and Drop is not supported)You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.You need to create two dynamic device groups named Group1 and Group2. The solution must meet the following requirements:Group1 must contain Device1 and Device2 only.Group2 must contain Device1 and Device3 only.Which device membership rule should you configure for each group? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Group1: (device.displayName -startsWith "Device") and (device.deviceOSType -eq "Windows")Group2: (device.deviceTrustType -eq "AzureAD") or (device.deviceOSType -eq "iPhone")
You have a Microsoft 365 E5 subscription.You need to create a dynamic device group that will contain any device that has the word Marketing in its name.Which device membership rule should you use?
Answer(s): C
To create a dynamic device group that includes any device with the word "Marketing" in its name, you should use the -contains operator. This operator ensures that the rule captures any device whose display name contains the string "Marketing". Wildcards (such as *) are not required when using -contains in dynamic group rules.
Post your Comments and Discuss Microsoft MD-102 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MD-102 content, but please register or login to continue.