MD-101

MD-101 practice questions, page 7 of 17, with answer review and explanations.

Question 31

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has a number of Windows 10 Microsoft Azure Active Directory (Azure AD) joined workstations. These workstations have been enrolled in Microsoft Intune. You have been tasked with making sure that the workstations are only able to run applications that you have explicitly permitted. Solution: You make use of Windows Defender Application Guard. Does the solution meet the goal?

  1. Yes
  2. No

Question 32

You are currently making use of the Antimalware Assessment solution in Microsoft Azure Log Analytics. You have accessed the Protection Status dashboard and find that there is a device that has no real time protection. Which of the following could be a reason for this occurring?

  1. Windows Defender has been disabled.
  2. You need to install the Azure Diagnostic extension.
  3. Windows Defender Credential Guard is incorrectly configured.
  4. Windows Defender System Guard is incorrectly configured.

Question 33

You are currently making use of the Antimalware Assessment solution in Microsoft Azure Log Analytics. You have accessed the Protection Status dashboard and find that there is a device that is not reporting. Which of the following could be a reason for this occurring?

  1. Windows Defender System Guard is incorrectly configured.
  2. You need to install the Azure Diagnostic extension.
  3. Windows Defender Application Guard is incorrectly configured.
  4. The Microsoft Malicious Software Removal tool is installed.

Question 34

You need to consider the underlined segment to establish whether it is accurate. To enable Windows Defender Credential Guard on Windows 10 computers, the computers must have Hyper-V installed. Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option. What should you install on the computers?

  1. No adjustment required.
  2. Windows Defender Smartscreen
  3. a virtual machine
  4. a container cluster

Question 35

You manage one hundred Microsoft Azure Active Directory (Azure AD) joined Windows 10 devices. You want to make sure that users are unable to join their home PC's to Azure AD. Which of the following actions should you take?

  1. You should configure the Enrollment restriction settings via the Device enrollment blade in the Intune admin center.
  2. You should configure the Enrollment restriction settings via the Security & Compliance admin center.
  3. You should configure the Enrollment restriction settings via the Azure Active Directory admin center.
  4. You should configure the Enrollment restriction settings via the Windows Defender Security Center.