MD-102 Online Practice Questions and Answers

Correct Answer: D

https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-endpoint-mac On macOS 11 (Big Sur) and above, Microsoft Defender for Endpoint requires additional configuration profiles. If you are an existing customer upgrading from earlier versions of macOS, make sure to deploy the additional configuration profiles listed on New configuration profiles for macOS Big Sur and newer versions of macOS.

Correct Answer: A

Correct Answer: B

Manage your Windows Update rings

In the portal, navigate to Devices > Windows > Update rings for Windows 10 and later and select the policy that you want to manage. The policy opens to its Overview page.

From this page, you can view the rings assignment status and select the following actions from the top of the Overview pane to manage the update ring:

1.

Delete

2.

Pause

3.

Resume

4.

Extend

5.

Uninstall

Pause Select Pause to prevent assigned devices from receiving feature or quality updates for up to 35 days from the time you pause the ring. After the maximum days have passed, pause functionality automatically expires and the device scans Windows Updates for applicable updates. Following this scan, you can pause the updates again. If you resume a paused update ring, and then pause that ring again, the pause period resets to 35 days.

Reference: https://learn.microsoft.com/en-us/mem/intune/protect/windows-10-update-rings#pause

Correct Answer: C

Reference: https://docs.microsoft.com/en-us/mem/intune/fundamentals/groups-add

Correct Answer: B

Endpoint analytics Prerequisites You can enroll devices via Configuration Manager or Microsoft Intune.

To enroll devices via Intune requires:

*

Intune enrolled or co-managed devices running the following: Windows 10 version 1903 or later July 2021 cumulative update or later

*

Pro, Pro Education, Enterprise, or Education. Home and long-term servicing channel (LTSC) aren't supported.

*

Windows devices must be Azure AD joined or hybrid Azure AD joined. Workplace joined or Azure AD registered devices aren't supported. Network connectivity from devices to the Microsoft public cloud.

Note: Endpoint analytics is part of the Microsoft Adoption Score. These analytics give you insights for measuring how your organization is working and the quality of the experience you're delivering to your users. Endpoint analytics can help identify policies or hardware issues that may be slowing down devices and help you proactively make improvements before end-users generate a help desk ticket.

Reference: https://learn.microsoft.com/en-us/mem/analytics/overview

Correct Answer: B

Explanation: SetupConfig.ini is a file that can be used to customize the behavior of Windows Setup during feature updates. You can use this file to specify commands or scripts that run before or after the installation process. To run a PowerShell script after a feature update, you can use the PostOOBE parameter in SetupConfig.ini and specify the path to the script file. References: [SetupConfig.ini reference]

Correct Answer:

Correct Answer:

Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/machine-groups

Correct Answer:

Box 1: Co-management

Existing Windows 11 devices managed by using Configuration Manager

Co-management enrollment

If you use Configuration Manager, and want to continue to use Configuration Manager, then co-management enrollment is for you. Co-management manages Windows 10/11 devices using Configuration Manager and Microsoft Intune

together. You cloud-attach your existing Configuration Manager environment to Intune. This enrollment option runs some workloads in Configuration Manager, and other workloads in Intune.

Box 2: User enrollment

Personal iOS devices

BYOD: User and Device enrollment

These iOS/iPadOS devices are personal or BYOD (bring your own device) devices that can access organization email, apps, and other data. Starting with iOS 13 and newer, this enrollment option targets users or targets devices. It doesn't

require resetting the devices.

Note: Enroll iOS and iPadOS devices in Microsoft Intune

Personal and organization-owned devices can be enrolled in Intune. Once they're enrolled, they receive the policies and profiles you create. You have the following options when enrolling iOS/iPadOS devices:

Automated device enrollment (ADE)

Apple Configurator

BYOD: User and Device enrollment

Incorrect:

*

Automated Device Enrollment Automated Device Enrollment (ADE) (supervised) Previously called Apple Device Enrollment Program (DEP). Use on devices owned by your organization. This option configures settings using Apple Business Manager (ABM) or Apple School Manager (ASM). It enrolls a large number of devices, without you ever touching the devices. These devices are purchased from Apple, have your preconfigured settings, and can be shipped directly to users or schools. You create an enrollment profile in the Intune admin center, and push this profile to the devices.

*

Apple Configurator Apple Configurator enrollment Use on devices owned by your organization, and includes Direct Enrollment. This option requires you to physically connect iOS/iPadOS devices to a Mac computer using the USB port.

Reference: https://learn.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-enrollment-windows https://learn.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-enrollment-ios-ipados

Correct Answer: