You have a Microsoft 365 subscription. All devices run Windows 10.

You need to prevent users from enrolling the devices in the Windows Insider Program.

What should you configure from Microsoft 365 Device Management? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

DRAG DROP

Your network contains an Active Directory domain.

You install the Microsoft Deployment Toolkit (MDT) on a server

You have a custom image of Windows 10.

You need to deploy the image to 100 devices by using MDT.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the List of actions to the answer area and arrange them in the correct order.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Graphical user interface, text, application

Description automatically generated

HOTSPOT

You have 200 computers that run Windows 10.

You need to create a provisioning package to configure the following tasks:

✑ Remove the Microsoft News and the Xbox Microsoft Store apps.

✑ Add a VPN connection to the corporate network.

Which two customizations should you configure? To answer, select the appropriate customizations in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Connectivityprofiles

Policies

References:

https://docs.microsoft.com/en-us/windows/configuration/wcd/wcd-connectivityprofiles

https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider#applicationmanagement-applicationrestrictions

https://docs.microsoft.com/en-us/windows/configuration/wcd/wcd-policies

You have a Microsoft 365 subscription.

You are assigned the User administrator role.

An Azure AD security group named Group1 was deleted five days ago.

You need to restore Group1.

What should you do?

Reveal Solution Hide Solution

You use a Microsoft Intune subscription to manage iOS devices.

You configure a device compliance policy that blocks jailbroken iOS devices.

You need to enable Enhanced jailbreak detection.

What should you configure?

Reveal Solution Hide Solution

HOTSPOT

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named User1. User1 has a user principal name (UPN) of user1 @contoso.com.

You join a Windows 10 device named Client1 to contoso.com.

You need to add User1 to the local Administrators group of Client1.

How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Box 1: net localgroup

Add user to group from command line (CMD)

Windows provides command line utilities to manager user groups. In this post, learn how to use the command net localgroup to add user to a group from command prompt’

For example to add a user ‘John’ to administrators group, we can run the below command.

net localgroup administrators John /add

Box 2: Contoso

The domain of the user is Contoso.

You need to assign the same deployment profile to all the computers that are configured by using Windows Autopilot.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: each correct selection is worth one point.

Reveal Solution Hide Solution

HOTSPOT

Your company uses Microsoft Intune to manage Windows 10, Android, and iOS devices.

Several users purchase new iPads and Android devices.

You need to tell the users how to enroll their device in Intune.

What should you instruct the users to use for each device? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

The Intune Company Portal app is used to enroll Android, iOS, macOS, and Windows devices

References:

https://docs.microsoft.com/en-us/intune-user-help/enroll-device-android-company-portal

https://docs.microsoft.com/en-us/intune-user-help/enroll-your-device-in-intune-ios

https://docs.microsoft.com/en-us/intune-user-help/enroll-your-device-in-intune-macos-cp

You have a Microsoft 365 tenant that contains the objects shown in the following table.

In the Microsoft Endpoint Manager admin center, you are creating a Microsoft 365 Apps app named App1.

To which objects can you assign App1?

Reveal Solution Hide Solution

HOTSPOT

Your network contains an Active Directory forest named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

You use Microsoft Endpoint Configuration Manager for device management.

You have the Windows 10 devices shown in the following table.

You configure Endpoint Configuration Manager co-management as follows:

✑ Automatic enrollment in Intune: Pilot

✑ Pilot collection for all workloads: Collection2

You configure co-management workloads as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Box 1: No

The Pilot Group does not include Device1.

Box 2: Yes

Box 3: Yes

The Pilot Group includes Device3.