MD-101 practice questions
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Directory group named Group1 that contains Windows 10 Enterprise devices and Windows 10 Pro devices.
From Microsoft Intune, you create a device configuration profile named Profile1.
You need to ensure that Profile1 applies to only the Windows 10 Enterprise devices in Group1.
Solution: You create a scope tag, and then you add the scope tag to the Windows 10 Enterprise devices and Profile1.
Does this meet the goal?
A. Yes
B. No
Discussion forum
Question
Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. All users have computers that run Windows 10. The computers are joined to Azure AD and managed by using Microsoft Intune.
You need to ensure that you can centrally monitor the computers by using the Update Compliance solution.
What should you create in Intune?
A. a device configuration profile
B. a conditional access policy
C. a device compliance policy
D. an update policy
Discussion forum
Question
Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. All users have computers that run Windows 10. The computers are joined to Azure AD and managed by using Microsoft Intune.
You need to ensure that you can centrally monitor the computers by using Windows Analytics.
What should you create in Intune?
A. a device configuration profile
B. a conditional access policy
C. a device compliance policy
D. an update policy
Discussion forum
Question
You need to assign the same deployment profile to all the computers that are configured by using Windows Autopilot.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Join the computers to Microsoft Azure Active Directory (Azure AD)
B. Assign a Windows Autopilot deployment profile to a group
C. Join the computers to an on-premises Active Directory domain
D. Create a Microsoft Azure Active Directory (Azure AD) group that has dynamic membership rules and uses the operatingSystem tag
E. Create a Group Policy object (GPO) that is linked to a domain
F. Create a Microsoft Azure Active Directory (Azure AD) group that has dynamic membership rules and uses the ZTDID tag
Discussion forum
Question
Your company has a Microsoft 365 subscription.
The company uses Microsoft Intune to manage all devices.
The company uses conditional access to restrict access to Microsoft 365 services for devices that do not comply with the company’s security policies.
You need to identify which devices will be prevented from accessing Microsoft 365 services.
What should you use?
A. The Device tab in Desktop Analytics.
B. Microsoft Defender Security Center.
C. The Device compliance blade in the Microsoft Endpoint Manager admin center.
D. The Conditional access blade in the Azure Active Directory admin center.
Discussion forum
Question
Your company plans to deploy tablets to 50 meeting rooms.
The tablets run Windows 10 and are managed by using Microsoft Intune. The tablets have an application named App1.
You need to configure the tablets so that any user can use App1 without having to sign in. Users must be prevented from using other applications on the tablets.
Which device configuration profile type should you use?
A. Kiosk
B. Endpoint protection
C. Identity protection
D. Device restrictions
Discussion forum
Question
You have an Azure Active Directory group named Group1. Group1 contains two Windows 10 Enterprise devices named Device1 and Device2.
You create a device configuration profile named Profile1. You assign Profile1 to Group1.
You need to ensure that Profile1 applies to Device1 only.
What should you modify in Profile1?
A. Scope (Tags)
B. Settings
C. Applicability Rules
D. Assignments
Discussion forum
Question
You are creating a device configuration profile in Microsoft Intune.
You need to implement an ADMX-backed policy.
Which profile type should you use?
A. Identity protection
B. Custom
C. Device restrictions
D. Device restrictions (Windows 10 Team)
Discussion forum
Question
You have computers that run Windows 10 Pro. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune.
You need to upgrade the computers to Windows 10 Enterprise.
What should you configure in Intune?
A. A device enrollment policy
B. A device cleanup rule
C. A device compliance policy
D. A device configuration profile
Discussion forum
Question
Your company uses Microsoft Intune.
More than 500 Android and iOS devices are enrolled in the Intune tenant.
You plan to deploy new Intune policies. Different policies will apply depending on the version of Android or iOS installed on the device.
You need to ensure that the policies can target the devices based on their version of Android or iOS.
What should you configure first?
A. Corporate device identifiers in Intune
B. Device settings in Microsoft Azure Active Directory (Azure AD)
C. Device categories in Intune
D. Groups that have dynamic membership rules in Microsoft Azure Active Directory (Azure AD)
Discussion forum
Question
Your company has an internal portal that uses a URL of http://contoso.com.
The network contains computers that run Windows 10. The default browser on all the computers is Microsoft Edge.
You need to ensure that all users only use Internet Explorer to connect to the internal portal. The solution must ensure that Microsoft Edge can be used to connect to all other websites.
What should you do from each computer?
A. From Internet Explorer, configure the Compatibility View settings
B. From the local policy, configure Enterprise Mode
C. From Microsoft Edge, configure the Advanced Site Settings
D. From the Settings app, configure the default web browser settings
Discussion forum
Question
You have a Microsoft 365 Business Standard subscription and 100 Windows 10 Pro devices.
You purchase a Microsoft 365 E5 subscription.
You need to upgrade the Windows 10 Pro devices to Windows 10 Enterprise. The solution must minimize administrative effort.
Which upgrade method should you use?
A. Subscription Activation
B. an in-place upgrade by using Windows installation media
C. a Microsoft Deployment Toolkit (MDT) lite-touch deployment
D. Windows Autopilot
Discussion forum
Question
You have a Microsoft Deployment Toolkit (MDT) deployment share.
You plan to deploy Windows 10 by using the Standard Client Task Sequence template.
You need to modify the task sequence to perform the following actions:
✑ Format disks to support Unified Extensible Firmware Interface (UEFI).
✑ Create a recovery partition.
Which phase of the task sequence should you modify?
A. Initialization
B. Install
C. PostInstall
D. Preinstall
Discussion forum
Question
You have 25 computers that run Windows 8.1 Pro.
You have a Microsoft 365 E5 subscription that uses Microsoft Intune.
You need to upgrade the computers to Windows 10 Enterprise by using an in-place upgrade. The solution must minimize administrative effort.
What should you use?
A. Microsoft Endpoint Configuration Manager and a custom image of Windows 10 Enterprise
B. Subscription Activation
C. Microsoft Deployment Toolkit (MDT) and a default image of Windows 10 Enterprise
D. Windows Autopilot
Discussion forum
Question
You use the Microsoft Deployment Toolkit (MDT) to manage Windows 10 deployments.
From Deployment Workbench, you modify the WinPE settings and add PowerShell support.
You need to generate a new set of WinPE boot image files that contain the updated settings.
What should you do?
A. From the Operating Systems node, import a new operating system.
B. From the Deployment Shares node, update the deployment share.
C. From the Packages node, import a new operating system package.
D. From the Advanced Configuration node, create new media.
Discussion forum
Question