MD-102 Practice Test

MD-102 Practice Test practice questions, page 5 of 17, with answer review and explanations.

Question 21

You have an Azure AD tenant and 100 Windows 10 devices that are Azure AD joined and managed by using Microsoft Intune. You need to configure Microsoft Defender Firewall and Microsoft Defender Antivirus on the devices. The solution must minimize administrative effort. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  1. To configure Microsoft Defender Antivirus, create a Group Policy Object (GPO) and configure the Windows Defender Antivirus settings.
  2. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Device restrictions settings.
  3. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Endpoint protection settings.
  4. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Device restrictions settings.
  5. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Endpoint protection settings.
  6. To configure Microsoft Defender Firewall, create a Group Policy Object (GPO) and configure Windows Defender Firewall with Advanced Security.

Question 22

You have an Azure AD group named Group1. Group1 contains two Windows 10 Enterprise devices named Device1 and Device2. You create a device configuration profile named Profile1. You assign Profile1 to Group1. You need to ensure that Profile1 applies to Device1 only. What should you modify in Profile1?

  1. Assignments
  2. Settings
  3. Scope (Tags)
  4. Applicability Rules

Question 23

You have a Microsoft 365 subscription that includes Microsoft Intune. You need to implement a Microsoft Defender for Endpoint solution that meets the following requirements: Enforces compliance for Defender for Endpoint by using Conditional Access Prevents suspicious scripts from running on devices What should you configure? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 24

Your network contains an on-premises Active Directory domain and an Azure AD tenant. The Default Domain Policy Group Policy Object (GPO) contains the settings shown in the following table. You need to migrate the existing Default Domain Policy GPO settings to a device configuration profile. Which device configuration profile type template should you use?

  1. Administrative Templates
  2. Endpoint protection
  3. Device restrictions
  4. Custom

Question 25

You have 100 computers that run Windows 10 and connect to an Azure Log Analytics workspace. Which three types of data can you collect from the computers by using Log Analytics? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  1. failure events from the Security log
  2. the list of processes and their execution times
  3. the average processor utilization
  4. error events from the System log
  5. third-party application logs stored as text files