MD-101

MD-101 practice questions, page 6 of 17, with answer review and explanations.

Question 26

Your company has a number of Windows 10 Microsoft Azure Active Directory (Azure AD) joined workstations. These workstations have been enrolled in Microsoft Intune. You are creating a device configuration profile for the workstations. You have been informed that a custom image should be displayed as the Desktop background picture. Which of the following is a Device restriction setting that should be configured?

  1. Locked screen experience
  2. Personalization
  3. Display
  4. General

Question 27

Your company has a large number of Windows 10 workstations that are managed via Microsoft Intune. Delivery Optimization is not being used for Windows updates at present. You want to make sure that Delivery Optimization is configured for all of the workstations. Which of the following actions should you take?

  1. You should create a device configuration profile via Intune.
  2. You should create a device compliance policy via Intune.
  3. You should create a Windows AutoPilot deployment profile via Intune.
  4. You should create a conditional access policy via Intune.

Question 28

Your company's environment includes the following: ✑ Microsoft Azure Active Directory (Azure AD) ✑ Microsoft 365 ✑ Microsoft Intune ✑ Azure Information Protection. A new security policy declares that enrollment for private devices in Intune is not required. However, to access corporate email information, users have to make use of a PIN for authentication purposes. Also, users are able to access corporate cloud services from their private iOS and Android devices. Furthermore, the copying corporate email information to a cloud storage service should not be allowed, unless users are copying the information to Microsoft OneDrive for Business. You have to make sure that security policy is enforced. Which of the following actions should you take?

  1. You should create a data loss prevention (DLP) policy.
  2. You should create a device enrollment policy.
  3. You should create an app protection policy.
  4. You should create a Windows AutoPilot deployment profile.

Question 29

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has a number of Windows 10 Microsoft Azure Active Directory (Azure AD) joined workstations. These workstations have been enrolled in Microsoft Intune. You have been tasked with making sure that the workstations are only able to run applications that you have explicitly permitted. Solution: You make use of Windows Defender Antivirus. Does the solution meet the goal?

  1. Yes
  2. No

Question 30

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has a number of Windows 10 Microsoft Azure Active Directory (Azure AD) joined workstations. These workstations have been enrolled in Microsoft Intune. You have been tasked with making sure that the workstations are only able to run applications that you have explicitly permitted. Solution: You make use of Windows Defender SmartScreen. Does the solution meet the goal?

  1. Yes
  2. No