NEW QUESTION 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to ensure that feature and quality updates install automatically during a maintenance window. Solution: From the Windows Update settings, you enable Configure Automatic Updates, select 4-Auto download and schedule the install, and then enter a time.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation:
Reference:
https://docs.microsoft.com/en-us/sccm/sum/deploy-use/automatically-deploy-software-updates

NEW QUESTION 2

You need to meet the technical requirements for the iOS devices. Which object should you create in Intune?

• A. A compliance policy
• B. An app protection policy
• C. ADeployment profile
• D. A device profile

Answer: D

Explanation:
References:
https://docs.microsoft.com/en-us/intune/device-restrictions-configure https://docs.microsoft.com/en-us/intune/device-restrictions-ios

NEW QUESTION 3

Your company uses Microsoft Intune.
More than 500 Android and iOS devices are enrolled in the Intune tenant.
You plan to deploy new Intune policies. Different policies will apply depending on the version of Android or iOS installed on the device.
You need to ensure that the policies can target the devices based on their version of Android or iOS. What should you configure first?

• A. Corporate device identifiers in Intune
• B. Device settings in Microsoft Azure Active Directory (Azure AD)
• C. Device categories in Intune
• D. Groups that have dynamic membership rules in Microsoft Azure Active Directory (Azure AD)

Answer: B

Explanation:
Reference:
https://docs.microsoft.com/en-us/intune/compliance-policy-create-android https://docs.microsoft.com/en-us/intune/compliance-policy-create-ios

NEW QUESTION 4

Your company has an infrastructure that has the following:
A Microsoft 365 tenant
An Active Directory forest
Microsoft Store for Business
A Key Management Service (KMS) server
A Windows Deployment Services (WDS) server
A Microsoft Azure Active Directory (Azure AD) Premium tenant
The company purchases 100 new computers that run Windows 10.
You need to ensure that the new computers are joined automatically to Azure AD by using Windows AutoPilot.
What should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/intune/enrollment-autopilot

NEW QUESTION 5

What is the maximum number of devices that User1 and User2 can enroll in Intune? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 6

You have computers that run Windows 10 Pro. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune.
You need to upgrade the computers to Windows 10 Enterprise. What should you configure in Intune?

• A. A device enrollment policy
• B. A device cleanup rule
• C. A device compliance policy
• D. A device configuration profile

Answer: D

Explanation:
Reference:
https://blogs.technet.microsoft.com/skypehybridguy/2021/09/21/intune-upgrade-windows-from-pro-toenterprise

NEW QUESTION 7

You have 10 computers that run Windows 7 and have the following configurations:
A single MBR disk
A disabled TPM chip
Disabled hardware virtualization
UEFI firmware running in BIOS mode
Enabled Data Execution Prevention (DEP)
You plan to upgrade the computers to Windows 10.
You need to ensure that the computers can use Secure Boot.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A. Convert the MBR disk to a GPT disk
• B. Enable the TPM chip.
• C. Disable DEP
• D. Enable hardware virtualization
• E. Convert the firmware from BIOS to UEFI.

Answer: AE

Explanation:
Reference:
https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/boot-to-uefi-mode-or-legacy-biosmod

NEW QUESTION 8

Your company has a computer named Computer1 that runs Windows 10 Pro.
The company develops a proprietary Universal Windows Platform (UWP) app named App1. App1 is signed with a certificate from a trusted certification authority (CA).
You need to sideload App1 to Computer1.
What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Reference:
https://www.windowscentral.com/how-enable-windows-10-sideload-apps-outside-store https://docs.microsoft.com/en-us/windows/application-management/sideload-apps-in-windows-10

NEW QUESTION 9

Your company has a Microsoft Azure Active Directory (Azure AD) tenant. All users in the company are licensed for Microsoft Intune.
You need to ensure that the users enroll their iOS device in Intune. What should you configure first?

• A. ADevice Enrollment Program (DEP) token.
• B. An Intune device configuration profile.
• C. ADevice enrollment manager (DEM) account.
• D. An Apple MDM Push certificate.

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/intune/device-enrollment-program-enroll-ios

NEW QUESTION 10

You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. All Windows 10 devices are enrolled in Microsoft Intune.
You configure the following settings in Windows Information Protection (WIP):
Protected apps: App1
Exempt apps: App2
Windows Information Protection mode: Silent App1, App2, and App3 use the same file format.
You create a file named File1 in App1.
You need to identify which apps can open File1.
What apps should you identify? To answer, select the appropriate options in the answer area, NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/crea https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/crea

NEW QUESTION 11

Your company has a Microsoft 365 subscription.
The company uses Microsoft Intune to manage all devices.
The company uses conditional access to restrict access to Microsoft 365 services for devices that do not comply with the company’s security policies.
You need to identify which devices will be prevented from accessing Microsoft 365 services.
What should you use?

• A. The Device Health solution in Windows Analytics.
• B. Windows Defender Security Center.
• C. The Device compliance blade in the Intune admin center.
• D. The Conditional access blade in the Azure Active Directory admin center.

Answer: C

NEW QUESTION 12

Your company has a main office and six branch offices. The branch offices connect to the main office by using a WAN link. All offices have a local Internet connection and a Hyper-V host cluster.
The company has a Microsoft System Center Configuration Manager deployment. The main office is the primary site. Each branch has a distribution point. All computers that run Windows 10 are managed by using both Configuration Manager and Microsoft Intune.
You plan to deploy the latest build of Microsoft Office 365 ProPlus to all the computers.
You need to minimize the amount of network traffic on the company’s Internet links for the planned deployment.
What should you include in the deployment plan?

• A. From Intune, configure app assignments for the Office 365 ProPlus suite.In each office, copy the Office 365 distribution files to a Microsoft Deployment Toolkit (MDT) deploymentshare.
• B. From Intune, configure app assignments for the Office 365 ProPlus suite.In each office, copy the Office 365 distribution files to a Configuration Manager distribution point.
• C. From Configuration Manager, create an application deployment.Copy the Office 365 distribution files to a Configuration Manager cloud distribution point.
• D. From Configuration Manager, create an application deployment.In each office, copy the Office 365 distribution files to a Configuration Manager distribution point.

Answer: D

Explanation:
Reference:
https://docs.microsoft.com/en-us/deployoffice/deploy-office-365-proplus-with-system-center-configurationmana

NEW QUESTION 13

You need to capture the required information for the sales department computers to meet the technical requirements.
Which Windows PowerShell command should you run first?

• A. Install-Module WindowsAutoPilotIntune
• B. Install-Script Get-WindowsAutoPilotInfo
• C. Import-AutoPilotCSV
• D. Get-WindowsAutoPilotInfo

Answer: A

Explanation:
References:
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/existing-devices

NEW QUESTION 14

Your network contains an Active Directory domain named contoso.com.
You create a provisioning package named Package1 as shown in the following exhibit.

What is the maximum number of devices on which you can run Package1 successfully?

• A. 1
• B. 10
• C. 25
• D. unlimited

Answer: D

NEW QUESTION 15

Your company purchases new computers that run Windows 10. The computers have cameras that support Windows Hello for Business.
You configure the Windows Hello for Business Group Policy settings as shown in the following exhibit.

What are two valid methods a user can use to sign in? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A. Facial recognition
• B. A smartwatch that is Bluetooth-enabled
• C. A PIN
• D. A USB key

Answer: AC

Explanation:
Reference:
https://community.windows.com/en-us/stories/windows-sign-in-options https://fossbytes.com/how-to-unlock-windows-10/

NEW QUESTION 16

To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/intune/device-profile-assign

NEW QUESTION 17

Your network contains an Active Directory named contoso.com. The domain contains two computers named Computer1 and Computer2 that run Windows 10.
Folder Redirection is configured for a domain user named User1. The AppDataRoaming folder and the Desktop folder are redirected to a network share.
User1 signs in to Computer1 and performs the following tasks:
Configures screen saver to start after five minutes of inactivity
Modifies the default save location for Microsoft Word
Creates a file named File1.docx on the desktop
Modifies the desktop background
You need to identify what will be retained when User1 signs in to Computer2. What should you identify?

• A. File1.docx and the desktop background only
• B. File1.docx, the screen saver settings, the desktop background, and the default save location for Word
• C. File1.docx only
• D. File1.docx, the desktop background, and the default save location for Word only

Answer: B

Explanation:
Reference:
https://docs.microsoft.com/en-us/windows-server/storage/folder-redirection/folder-redirection-rup-overview

NEW QUESTION 18

You manage 1,000 computers that run Windows 10. All the computers are enrolled in Microsoft Intune. You manage the servicing channel settings of the computers by using Intune.
You need to review the servicing status of a computer. What should you do?

• A. From Device configuration- Profiles, view the device status.
• B. From Device compliance, view the device compliance.
• C. From Software updates, view the audit logs.
• D. From Software updates, view the Per update ring deployment state.

Answer: D

Explanation:
References:
https://docs.microsoft.com/en-us/intune/windows-update-compliance-reports

NEW QUESTION 19

You have a Microsoft Azure Log Analytics workplace that collects all the event logs from the computers at your company.
You have a computer named Computer1 than runs Windows 10. You need to view the events collected from Computer1.
Which query should you run in Log Analytics?

• A. Event| where Computer = = "Computer1"
• B. ETWEvent| where SourceSystem = = "Computer1"
• C. ETWEvent| where Computer = = "Computer1"
• D. Event| where SourceSystem = = "Computer1"

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-sources-windows-events

NEW QUESTION 20

You need to meet the technical requirements for the IT department. What should you do first?

• A. From the Azure Active Directory blade in the Azure portal, enable Seamless single sign-on.
• B. From the Configuration Manager console, add an Intune subscription.
• C. From the Azure Active Directory blade in the Azure portal, configure the Mobility (MDM and MAM) settings.
• D. From the Microsoft Intune blade in the Azure portal, configure the Windows enrollment settings.

Answer: C

Explanation:
Reference:
https://docs.microsoft.com/en-us/sccm/comanage/tutorial-co-manage-clients

NEW QUESTION 21

You have a Microsoft 365 subscription.
All computers are enrolled in Microsoft Intune.
You have business requirements for securing your Windows 10 environment as shown in the following table.

What should you implement to meet each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Reference:
https://github.com/MicrosoftDocs/IntuneDocs/blob/master/intune/advanced-threat-protection.md

NEW QUESTION 22

What should you use to meet the technical requirements for Azure DevOps?

• A. An app protection policy
• B. Windows Information Protection (WIP)
• C. Conditional access
• D. A device configuration profile

Answer: C

Explanation:
References:
https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/manage-conditional-access? view=azure-devops

NEW QUESTION 23

You have 1,000 computers that run Windows 10 and are members of an Active Directory domain. You create a workspace in Microsoft Azure Log Analytics.
You need to capture the event logs from the computers to Azure.
What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agent-windows

NEW QUESTION 24

Your company has computers that run Windows 8.1, Windows 10, or macOS. The company uses Microsoft Intune to manage the computers.
You need to create an Intune profile to configure Windows Hello for Business on the computers that support it.
Which platform type and profile type should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/intune/endpoint-protection-configure

NEW QUESTION 25

Your company plans to deploy tablets to 50 meeting rooms.
The tablets run Windows 10 and are managed by using Microsoft Intune. The tablets have an application named App1.
You need to configure the tablets so that any user can use App1 without having to sign in. Users must be prevented from using other applications on the tablets.
Which device configuration profile type should you use?

• A. Kiosk
• B. Endpoint protection
• C. Identity protection
• D. Device restrictions

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/windows/configuration/kiosk-single-app

NEW QUESTION 26
......