A fully updated 2023 MD-101 Exam Dumps exam guide from training expert PrepAwayETE [Q31-Q51]

Q31. You have a Windows 10 device named Computer1 enrolled in Microsoft Intune.
You need to configure Computer1 as a public workstation that will run a single customer-facing, full-screen application.
Which template should you use to create a configuration profile for Computer1 in the Microsoft Endpoint Manager admin center?

Q32. Your network contains an Active Directory domain. The domain contains computers that run Windows 10 and are enrolled in Microsoft Intune. Updates are deployed by using Windows Update for Business.
Users in a group named Group1 must meet the following requirements:
* Update installations must occur any day only between 00:00 and 05:00.
* Updates must be downloaded from Microsoft and from other company computers that already downloaded the updates.
You need to configure the Windows 10 Update Rings in Intune to meet the requirements.
Which two settings should you modify? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.

Q33. You have 1,000 computers that run Windows 10 and are members of an Active Directory domain.
You create a workspace in Microsoft Azure Log Analytics.
You need to capture the event logs from the computers to Azure.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q34. You need to meet the technical requirements for the LEG department computers.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Q35. Your company has a Microsoft 365 subscription.
The company uses Microsoft Intune to manage all devices.
The company uses conditional access to restrict access to Microsoft 365 services for devices that do not comply with the company’s security policies.
You need to identify which devices will be prevented from accessing Microsoft 365 services.
What should you use?

Q36. You need to assign the same deployment profile to all the computers that are configured by using
Windows Autopilot.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: each correct selection is worth one point.

Q37. You have an Azure Active Directory (Azure AD) tenant named contoso.com.
You create a terms of use (ToU) named Terms1 in contoso.com.
You are creating a conditional access policy named Policy1 to assign a cloud app named App1 to the users in
contoso.com.
You need to configure Policy1 to require the users to accept Terms1.
What should you configure in Policy1?

Q38. You have a Microsoft 365 subscription.
You need to configure access to Microsoft Office 365 for unmanaged devices. The solution must meet the following requirements:
Allow only the Microsoft Intune Managed Browser to access Office 365 web interfaces.
Ensure that when users use the Intune Managed Browser to access Office 365 web interfaces, they can only copy data to applications that are managed by the company.
Which two settings should you configure from the Microsoft Intune blade? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.

Q39. What should you upgrade before you can configure the environment to support co-management?

Q40. Your network contains an Active Directory domain.
You install the Microsoft Deployment Toolkit (MDT) on a server
You have a custom image of Windows 10.
You need to deploy the image to 100 devices by using MDT.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the List of actions to the answer area and arrange them in the correct order.

Q41. You have 100 computers that run Windows 10. You have no servers. All the computers are joined to Microsoft Azure Active Directory (Azure AD).
The computers have different update settings, and some computers are configured for manual updates.
You need to configure Windows Update. The solution must meet the following requirements:
The configuration must be managed from a central location.
Internet traffic must be minimized.
Costs must be minimized.
How should you configure Windows Update? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q42. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to ensure that feature and quality updates install automatically during a maintenance window.
Solution: From the Windows Update settings, you enable Configure Automatic Updates, select 4- Auto download and schedule the install, and then enter a time.
Does this meet the goal?

Q43. You use Windows Defender Advanced Threat Protection (Windows Defender ATP) to protect computers that run Windows 10.
You need to assess the differences between the configuration of Windows Defender ATP and the Microsoft-recommended configuration baseline.
Which tool should you use?

Q44. You need to meet the technical requirements for the iOS devices.
Which object should you create in Intune?

Q45. To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q46. You need to meet the device management requirements for the developers.
What should you implement?

Q47. A company named A-Datum Corporation uses Microsoft Endpoint Configuration Manager, Microsoft Intune, and Desktop Analytics.
A-Datum purchases a company named Contoso, Ltd. Contoso has devices that run the following operating systems:
Windows 8.1
Windows 10
Android
iOS
A-Datum plans to use Desktop Analytics to monitor the Contoso devices.
You need to identify which devices can be monitored by using Desktop Analytics and how to add the devices to Desktop Analytics.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q48. You have 100 devices that run Windows 10 and are joined to Microsoft Azure Active Directory (Azure AD).
You need to prevent users from joining their home computer to Azure AD.
What should you do?

Q49. You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune.
You need to set a custom image as the wallpaper and sign-in screen.
Which two settings should you configure in Device restrictions? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.

Q50. You need to prepare for the deployment of the Phoenix office computers.
What should you do first?

Q51. You have 500 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory
(Azure AD) and enrolled in Microsoft Intune.
You plan to distribute certificates to the computers by using Simple Certificate Enrollment Protocol (SCEP).
You have the servers shown in the following table.

NDES issues certificates from the subordinate CA.
You are configuring a device profile as shown in the exhibit. (Click the tab.)
You need to complete the SCEP profile.