QUESTION: 9 Exam Topic: 1 - Question Set 1

You have Windows 10 Pro devices that are joined to an Active Directory domain. You plan to create a Microsoft 365 tenant and to upgrade the devices to Windows 10 Enterprise.
You are evaluating whether to deploy Windows Hello for Business.
What are two prerequisites of the deployment? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

Microsoft Endpoint Manager enrollment
Microsoft Azure Active Directory (Azure AD)
smartcards
TPM-enabled devices

Answer(s): A,B

Reference:

https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base

Reveal Solution Next Question

QUESTION: 10 Exam Topic: 1 - Question Set 1

You have a Microsoft 365 tenant.
All users are assigned the Enterprise Mobility + Security license.
You need to ensure that when users join their device to Microsoft Azure Active Directory (Azure AD), the device is enrolled in Microsoft Endpoint Manager automatically.
What should you con gure?

Enrollment restrictions from the Endpoint Manager admin center
device enrollment managers from the Endpoint Manager admin center
MAM User scope from the Azure Active Directory admin center
MDM User scope from the Azure Active Directory admin center

Answer(s): D

Reference:

https://docs.microsoft.com/en-us/mem/intune/enrollment/windows-enroll

Reveal Solution Next Question

QUESTION: 11 Exam Topic: 1 - Question Set 1

HOTSPOT (Drag and Drop is not supported).
You have several devices enrolled in Microsoft Endpoint Manager.
You have a Microsoft Azure Active Directory (Azure AD) tenant that includes the users shown in the following table.

The device type restrictions in Endpoint Manager are con gured as shown in the following table.

You add User3 as a device enrollment manager in Endpoint Manager.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1:
No. User1 is in Group1. The two device type policies that apply to Group1 are Policy3 and the Default (All Users) policy. However, Policy3 has a higher priority than the default policy so Policy3 is the only effective policy. Policy3 allows the enrolment of Android and iOS devices only, not Windows.
Box 2:
No. User2 is in Group1 and Group2. The device type policies that apply to Group1 and Group2 are Policy2, Policy3 and the Default (All Users) policy. However,
Policy2 has a higher priority than Policy 3 and the default policy so Policy2 is the only effective policy. Policy2 allows the enrolment of Windows devices only, not
Android.
Box 3:
Yes. User3 is a device enrollment manager. Device restrictions to not apply to a device enrollment manager.

Reference:

https://docs.microsoft.com/en-us/intune/enrollment/enrollment-restrictions-set

Reveal Solution Next Question

QUESTION: 12 Exam Topic: 1 - Question Set 1

HOTSPOT (Drag and Drop is not supported).
You create two device compliance policies for Android devices as shown in the following table.

You have the Android devices shown in the following table.

The users belong to the groups shown in the following table.

The users enroll their device in Microsoft Endpoint Manager.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area: