HOTSPOT (Drag and Drop is not supported)You have 200 computers that run Windows 11. The computers are joined to Microsoft Entra and enrolled in Microsoft Intune.You need to set a custom image as the wallpaper and sign-in screen.Which two settings should you configure in the Device restrictions configuration profile? To answer, select the appropriate settings in the answer area.Note: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: Locked screen experienceSign-in screen, or Locked screen, image is set under Locked screen experience.Box 2: PersonalizationWallpaper image, or Desktop background picture, URL is set under Personalization.
https://docs.microsoft.com/en-us/intune/device-restrictions-windows-10
HOTSPOT (Drag and Drop is not supported)You have a Microsoft 365 E5 subscription that contains 100 Windows 11 devices enrolled in Microsoft Intune.You need to create Endpoint security policies to meet the following requirements:Hide the Firewall & network protection area in the Windows Security app.Disable the provisioning of Windows Hello for Business on the devices.Which two policy types should you use? To answer, select the policies in the answer area.Note: Each correct selection is worth one point.Hot Area:
Box 1: AntivirusHide the Firewall & network protection area in the Windows Security app.In the Antivirus policy settings, you can hide the Firewall and network protection area in the Windows Security app.Box 2: Account protectionDisable the provisioning of Windows Hello for Business on the devices.Windows Hello for Business settings are configured in Identity protection.Endpoint security Account protection policy: Account protection policies include some of the settings used by Windows Hello.Note: Account protection profilesAccount protection profiles are in preview.Windows profiles:Account protection (preview) Settings for account protection policies help you protect user credentials.The account protection policy is focused on settings for Windows Hello and Credential Guard, which is part of Windows identity and access management.Windows Hello for Business replaces passwords with strong two-factor authentication on PCs and mobile devices.Credential Guard helps protect credentials and secrets that you use with your devices.
https://docs.microsoft.com/en-us/mem/intune/protect/antivirus-security-experience-windows-settings https://docs.microsoft.com/en-us/mem/intune/protect/identity-protection-windows-settings https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-account-protection-policy
You have a Microsoft 365 subscription that contains 100 devices enrolled in Microsoft Intune.You need to review the startup processes and how often each device restarts.What should you use?
Your company has 200 computers that run Windows 11. The computers are managed by using Microsoft Intune.Currently, Windows updates are downloaded without using Delivery Optimization.You need to configure the computers to use Delivery Optimization.What should you create in Intune?
Answer(s): C
With Intune, use Delivery Optimization settings for your Windows devices to reduce bandwidth consumption when those devices download applications and updates. Configure Delivery Optimization as part of your device configuration profiles.
https://docs.microsoft.com/en-us/intune/delivery-optimization-windows
You have a Microsoft 365 subscription that uses Microsoft Intune Suite.You use Microsoft Intune to manage devices. All devices are in the same time zone.You create an update rings policy and assign the policy to all Windows devices.On the November 1, you pause the update rings policy.All devices remain online.Without further modification to the policy, on which date will the devices next attempt to update?
Answer(s): B
Manage your Windows Update ringsIn the portal, navigate to Devices > Windows > Update rings for Windows 10 and later and select the policy that you want to manage. The policy opens to its Overview page.From this page, you can view the rings assignment status and select the following actions from the top of the Overview pane to manage the update ring:DeletePauseResumeExtendUninstallPauseSelect Pause to prevent assigned devices from receiving feature or quality updates for up to 35 days from the time you pause the ring. After the maximum days have passed, pause functionality automatically expires and the device scans Windows Updates for applicable updates. Following this scan, you can pause the updates again. If you resume a paused update ring, and then pause that ring again, the pause period resets to 35 days.
https://learn.microsoft.com/en-us/mem/intune/protect/windows-10-update-rings#pause
You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.All devices have Microsoft Edge installed.From the Microsoft Intune admin center, you create a Microsoft Edge Baseline profile named Edge1.You need to apply Edge1 to all the supported devices.To which devices should you apply Edge1?
Windows 10 and Windows 11 only.
https://learn.microsoft.com/en-us/mem/intune/protect/security-baseline-settings-edge
HOTSPOT (Drag and Drop is not supported)You have a Microsoft 365 subscription that uses Microsoft Intune.You plan to manage Windows updates by using Intune.You create an update ring for Windows 10 and later and configure the User experience settings for the ring as shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.Hot Area:
HOTSPOT (Drag and Drop is not supported)You have two computers that run Windows 11. The computers are enrolled in Microsoft Intune as shown in the following table.Windows 10 and later update rings are defined in Intune as shown in the following table.You assign the update rings as shown in the following table.What is the effect of the configurations on Computer1 and Computer2? To answer, select the appropriate options in the answer area.Hot Area:
Box 1: 3 daysBox 2: No effectSince Computer2 is a member of a group that is excluded in both assignments, neither are applied to Computer2. So 'No effect' for Computer2.
https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#exclude-groups-from-a- profile-assignment
Post your Comments and Discuss Microsoft MD-102 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MD-102 content, but please register or login to continue.