Test Online Free Microsoft MD-101 Exam Questions and Answers

The questions for MD-101 were last updated On Feb.08 2023

Get MD-101 Full Access
 / 5

Question No : 1
You have 10 computers that run Windows 7 and have the following configurations:
✑ A single MBR disk
✑ A disabled TPM chip
✑ Disabled hardware virtualization
✑ UEFI firmware running in BIOS mode
✑ Enabled Data Execution Prevention (DEP) You plan to upgrade the computers to Windows 10.
You need to ensure that the computers can use Secure Boot.
Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Answer:
Explanation:
Reference: https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/boot-to-uefi-mode-or-legacy-biosmode

Question No : 2
HOTSPOT
You need to meet the OOBE requirements for Windows AutoPilot.
Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.



Answer:

Question No : 3
You have computers that run Windows 10, are joined to Azure Active Directory (Azure AD), and are enrolled in Microsoft Intune.
You have an Azure web app named App1. App1 only allows connections over HTTPS. App1 uses a certificate from an on-premises certification authority (CA).
You need to ensure that the computers can connect to App1 from Microsoft Edge.
Which type of device configuration profile should you create in Microsoft Endpoint Manager?

Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/mem/intune/protect/certificates-scep-configure
https://docs.microsoft.com/en-us/mem/intune/protect/certificates-configure

Question No : 4
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company uses Windows Update for Business.
The research department has several computers that have specialized hardware and software installed.
You need to prevent the video drivers from being updated automatically by using Windows Update.
Solution: From the Settings app, you clear the Give me updates for other Microsoft products when I
update Windows check box.
Does this meet the goal?

Answer:
Explanation:
References: https://www.stigviewer.com/stig/microsoft_windows_server_2012_member_server/2013-07-25/finding/WN12-CC-000024

Question No : 5
You have a Microsoft 365 subscription that contains 100 devices enrolled in Microsoft Intune.
You need to review the startup processes and how often each device restarts.
What should you use?

Answer:

Question No : 6
HOTSPOT
You have the x64 devices shown in the following table.



You have the Windows 10 Enterprise images shown in the following table.



You need to identify which images can be used to perform an in-place upgrade of Computer1 and Computer2.
Which images should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.



Answer:


Explanation:
Box 1: Image1 and Image2 only
Computer1 is a x64 system so Image1 and Image2 are fine.
Note: x86 refers to a 32-bit CPU and operating system while x64 refers to a 64-bit CPU and operating system.
Box 2: Image3 and Image4 only
There is no upgrade path from 32 bit versions of Windows to Windows 8 64 bit.

Question No : 7
Your network contains an on-premises Active Directory domain and an Azure Active Directory (Azure AD) tenant.
The Default Domain Policy Group Policy Object (GPO) contains the settings shown in the following table.



You need to migrate the existing Default Domain Poky GPO swings w a device configuration profile.
Which type of device configuration profile should you create?

Answer:
Explanation:
Reference: https://danielchronlund.com/2018/11/27/how-to-replace-your-old-gpos-with-intune-configuration-profiles/

Question No : 8
HOTSPOT
You are evaluating which devices are compliant.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.



Answer:

Question No : 9
Your company uses Microsoft Intune to manage devices. You need to ensure that only Android devices that use Android work profiles can enroll in Intune.
Which two configurations should you perform in the device enrollment restrictions? Each correct answer presents part of the solution. NOTE: each correct selection is worth one point.

Answer:
Explanation:
https://docs.microsoft.com/en-us/InTune/enrollment-restrictions-set

Question No : 10
You have a Microsoft 365 E5 subscription that contains the groups shown in the following table.



You create a Conditional Access policy named CAPolicy1 that will block access to Microsoft Exchange Online from iOS devices. You assign CAPolicy1 to Group1.
You discover that User1 can still connect to Exchange Online from an iOS device.
You need to ensure that CAPolicy1 is enforced.
What should you do?

Answer:
Explanation:
Common signals that Conditional Access can take in to account when making a policy decision include the following signals:
* User or group membership
Policies can be targeted to specific users and groups giving administrators fine-grained control over access.
* Device
Users with devices of specific platforms or marked with a specific state can be used when enforcing Conditional Access policies.
Use filters for devices to target policies to specific devices like privileged access workstations.
* Etc.
Reference: https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/overview

 / 5
  TOP 50 Exam Questions
Exam