You have a Microsoft Intune deployment that contains the resources shown in the following table.You create a policy set named Set1 and add Comply1 to Set1.Which additional resources can you add to Set1?
Answer(s): C
You can include the following management objects in a policy set:AppsApp configuration policiesApp protection policiesDevice configuration profiles (Conf1)Device compliance policies (Comply1)Windows autopilot deployment profilesEnrollment status pageSettings catalog policiesNote: Use policy sets to group collections of management objects Policy sets allow you to create a bundle of references to already existing management entities that need to be identified, targeted, and monitored as a single conceptual unit. A policy set is an assignable collection of apps, policies, and other management objects you've created. Creating a policy set enables you to select many different objects at once, and assign them from a single place. As your organization changes, you can revisit a policy set to add or remove its objects and assignments. You can use a policy set to associate and assign existing objects, such as apps, policies, and VPNs in a single package.
https://learn.microsoft.com/en-us/mem/intune/fundamentals/policy-sets
HOTSPOT (Drag and Drop is not supported)You have a Microsoft 365 E5 subscription that uses Microsoft Intune.Devices are enrolled in Intune as shown in the following table.The devices are the members of groups as shown in the following table.You create an iOS/iPadOS update profile as shown in the following exhibit.For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: YesDevice1 is on iOS, and is enrolled by Apple Automated Device Enrollment (ADE).Device1 is member of Group1.The iOS/iPadOS update profile Profile1 applies to Group1.Note:On the Update policy settings tab, configure the following options:Select version to install. You can choose from:a) Latest update: Deploys the most recently released update for iOS/iPadOS. Any previous version that is available in the dropdown box. If you select a previous version, you must also deploy a device configuration policy to delay visibility of software updates.Schedule type: Configure the schedule for this policy:B) Update at next check-in: The update installs on the device the next time it checks in with Intune. This option is the simplest and has no extra configurations.Update during scheduled time: You configure one or more windows of time during which the update will install upon check-in.*-> Update outside of scheduled time: You configure one or more windows of time during which the updates won't install upon check-in.Box 2: NoDevice2 is on iPadOS, and is enrolled by Apple Automated Device Enrollment (ADE).Device2 is member of Group1 and of Group2.The iOS/iPadOS update profile Profile1 applies to Group1, but also Group2 is excluded from Profile1.Note: Specify a schedule that determines when the update installs. Schedules can be as simple as installing updates the next time that the device checks in, or creating date and time ranges during which updates can install or are blocked from installing.By default, devices check in with Intune about every 8 hours. If an update is available through an update policy, the device downloads the update. The device then installs the update upon next check-in within your schedule configuration.Box 3: NoDevice3 is on iOS, and is enrolled by Apple Automated Device Enrollment (ADE).Device3 is member of Group1.The iOS/iPadOS update profile Profile1 applies to Group1.The update will be installed on Saturday 11 PM.
https://learn.microsoft.com/en-us/mem/intune/protect/software-updates-ios
You use Microsoft Defender for Endpoint to protect computers that run Windows 10.You need to assess the differences between the configuration of Microsoft Defender for Endpoint and the Microsoft-recommended configuration baseline.Which tool should you use?
Answer(s): B
You have a Microsoft 365 E5 subscription that contains 1,000 Windows 11 devices. All the devices are enrolled in Microsoft Intune.You plan to integrate Intune with Microsoft Defender for Endpoint.You need to establish a service-to-service connection between Intune and Defender for Endpoint.Which settings should you configure in the Microsoft Intune admin center?
Microsoft Defender for Endpoint Important Service and Endpoint Settings You Should Configure Right Now.As a prerequisite, however, head to tenant administration > connectors and tokens > Microsoft Defender for Endpoint and confirm the connection is enabled. You previously set this up in the advanced settings of Microsoft 365 Defender.
https://petri.com/microsoft-defender-for-endpoint-which-settings-configure-right-now/
Your company uses Microsoft Intune.More than 500 Android and iOS devices are enrolled in the Intune tenant.You plan to deploy new Intune policies. Different policies will apply depending on the version of Android or iOS installed on the device.You need to ensure that the policies can target the devices based on their version of Android or iOS.What should you configure first?
We can create dynamic groups by using the deviceOSVersion or deviceOSType properties, and then apply Intune configuration policies to those groups.
https://docs.microsoft.com/en-us/archive/blogs/pauljones/dynamic-group-membership-in-azure-active- directory-part-2https://docs.microsoft.com/en-ie/mem/intune/enrollment/device-group-mapping
DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)You have 500 Windows 11 devices enrolled in Microsoft Intune.You plan to use Exploit protection in Microsoft Intune to enable the following system settings on the devices:Data Execution Prevention (DEP)Force randomization for images (Mandatory ASLR)You need to configure a Windows 11 device that will be used to create a template file.Which protection areas on the device should you configure in the Windows Security app before you create the template file? To answer, drag the appropriate protection areas to the correct settings. Each protection area may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.Note: Each correct selection is worth one point.Select and Place:
Box 1: App & browser controlNote: Data Execution Prevention (DEP): This mitigation prevents code from being run from data-only memory pages.Box 2: App & browser controlForce randomization for images (Mandatory ASLR). This mitigation forcibly relocates images not compiled with /DYNAMICBASE.
https://support.microsoft.com/en-us/windows/app-browser-control-in-windows-security-8f68fb65-ebb4-3cfb- 4bd7-ef0f376f3dc3
HOTSPOT (Drag and Drop is not supported)You have a Microsoft 365 subscription that includes Microsoft Intune.You have computers that run Windows 11 as shown in the following table.You have the groups shown in the following table.You create and assign the compliance policies shown in the following table.The next day, you review the compliance status of the computers.For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.Hot Area:
Box 1: YesComputer1 is Azure AD joined, Intune enrolled, BitLocker disabled, Firewall enabled.Computer1 is in Group1.Policy1 is assigned to Group1.Policy1 requires BitLocker to be enabled. Action is mark device as noncompliant after 10 days.As per microsoft if any device marked non-compliant with the given grace period then non-compliant device should go into 10 days grace period.In-grace period: (This status isn't supported by Linux) The device is targeted with one or more device compliance policy settings. But, the user hasn't applied the policies yet. This status means the device is not- compliant, but it's in the grace period defined by the admin.Box 2: YesComputer1 is registered, Intune enrolled, BitLocker enabled, Firewall enabled.Computer2 is in Group1.Policy1 is assigned to Group1.Policy1 requires BitLocker to be enabled. Action is mark device as noncompliant after 10 days.Box 3: NoComputer3 is not enrolled.The Device compliance status chart shows the compliance states for all Intune enrolled devices.
https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-monitor
You have a Microsoft 365 subscription that uses Microsoft Intune Suite.You use Microsoft Intune to deploy and manage Windows devices.You have 100 devices from users that left your company.You need to repurpose the devices for new users by removing all the data and applications installed by the previous users. The solution must minimize administrative effort.What should you do?
Windows Autopilot Reset takes the device back to a business-ready state, allowing the next user to sign in and get productive quickly and simply. Specifically, Windows Autopilot Reset:Removes personal files, apps, and settings.Reapplies a device's original settings.Sets the region, language, and keyboard to the original values.Maintains the device's identity connection to Azure AD.Maintains the device's management connection to Intune.The Windows Autopilot Reset process automatically keeps information from the existing device:Wi-Fi connection details.Provisioning packages previously applied to the device.A provisioning package present on a USB drive when the reset process is started.Azure Active Directory device membership and MDM enrollment information.SCEP certificates.Windows Autopilot Reset blocks the user from accessing the desktop until this information is restored, including reapplying any provisioning packages. For devices enrolled in an MDM service, Windows Autopilot Reset also blocks until an MDM sync is completed. When Autopilot reset is used on a device, the device's primary user is removed. The next user who signs in after the reset will be set as the primary user.
https://learn.microsoft.com/en-us/mem/autopilot/windows-autopilot-reset
Post your Comments and Discuss Microsoft MD-102 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MD-102 content, but please register or login to continue.