Pass4itsure share these resources with you. Both VCE and PDF dumps contain the latest Microsoft MD-101 exam questions, which will ensure your MD-101 exam 100% passed! You can get MD-101 VCE dumps and MD-101 PDF dumps from Pass4itsure. Please get the latest Pass4itsure MD-101 dumps here: https://www.pass4itsure.com/md-101.html (174 QA Dumps).
Free Microsoft MD-101 Pdf Dumps Download
| Microsoft MD-101 Pdf Dumps [Drive] |
| https://drive.google.com/file/d/1GbiD0CKmJjir7z5qbXfMP6iDim1Aulb3/view?usp=sharing |
Practice Test | Latest Microsoft Modern Desktop Administrator Associate MD-101 Question Answer
QUESTION 1
You need to enable Windows Defender Credential Guard on computers that run Windows 10. What should you install
on the computers?
A. Hyper-V
B. Windows Defender Application Guard
C. a guarded host
D. containers
Correct Answer: A
QUESTION 2
You have 100 devices that run Windows 10 and are joined to Microsoft Azure Active Directory (Azure AD).
You need to prevent users from joining their home computer to Azure AD.
What should you do?
A. From the Device enrollment blade in the Intune admin center, modify the Enrollment restriction settings.
B. From the Devices blade in the Azure Active Directory admin center, modify the Device settings.
C. From the Device enrollment blade in the Intune admin center, modify the Device enrollment manages settings.
D. From the Mobility (MDM and MAM) blade in the Azure Active Directory admin center, modify the Microsoft Intune
enrollment settings.
Correct Answer: A
References: https://docs.microsoft.com/en-us/intune/enrollment-restrictions-set
QUESTION 3
HOTSPOT
Your network contains an Active Directory domain named constoso.com that is synced to Microsoft Azure Active
Directory (Azure AD). All computers are enrolled in Microsoft Intune.
The domain contains the computers shown in the following table.
You are evaluating which Intune actions you can use to reset the computers to run Windows 10 Enterprise with the
latest update.
Which computers can you reset by using each action? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Reference: https://docs.microsoft.com/en-us/intune/device-fresh-start https://docs.microsoft.com/en-us/intune/devices-wipe
QUESTION 4
You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure
AD) and enrolled in Microsoft Intune.
You need to set a custom image as the wallpaper and sign-in screen.
Which two settings should you configure in Device restrictions? To answer, select the appropriate settings in the answer
area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 5
Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. All users have computers
that run Windows 10. The computers are joined to Azure AD and managed by using Microsoft Intune. You need to
ensure that you can centrally monitor the computers by using Windows Analytics.
What should you create in Intune?
A. a device configuration profile
B. a conditional access policy
C. a device compliance policy
D. an update policy
Correct Answer: A
References: https://www.scconfigmgr.com/2019/03/27/windows-analytics-onboarding-with-intune/
QUESTION 6
Your network contains an Active Directory forest. The forest contains a single domain and three sites named Site1,
Site2, and Site3. Each site is associated to two subnets. Site1 contains two subnets named SubnetA and SubnetB.
All the client computers in the forest run Windows 10. Delivery Optimization is enabled.
You have a computer named Computer1 that is in SubnetA.
From which hosts will Computer1 download updates?
A. the computers in Site1 only
B. any computer in the domain
C. the computers in SubnetA only
D. any computer on the network
Correct Answer: C
Delivery Optimization allows updates from other clients that connect to the Internet using the same public IP as the
target client (NAT).
References: https://docs.microsoft.com/en-us/windows/deployment/update/waas-delivery-optimization
QUESTION 7
Your network contains an Active Directory domain. The domain contains 1,200 computers that run Windows 8.1.
Correct Answer:
References: https://docs.microsoft.com/en-us/windows/deployment/upgrade/upgrade-readiness-resolve-issues
QUESTION 8
You have 200 computers that run Windows 10.
You need to create a provisioning package to configure the following tasks:
Remove the Microsoft News and the Xbox Microsoft Store apps.
Add a VPN connection to the corporate network.
Which two customizations should you configure? To answer, select the appropriate customizations in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
References: https://docs.microsoft.com/en-us/windows/configuration/wcd/wcd-connectivityprofiles https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider#applicationmanagementapplicationrestrictions https://docs.microsoft.com/en-us/windows/configuration/wcd/wcd-policies
QUESTION 9
You have 10 computers that run Windows 7 and have the following configurations:
A single MBR disk
A disabled TPM chip
Disabled hardware virtualization
UEFI firmware running in BIOS mode
Enabled Data Execution Prevention (DEP)
You plan to upgrade the computers to Windows 10.
You need to ensure that the computers can use Secure Boot.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Convert the MBR disk to a GPT disk
B. Enable the TPM chip.
C. Disable DEP
D. Enable hardware virtualization
E. Convert the firmware from BIOS to UEFI.
Correct Answer: AE
Reference: https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/boot-to-uefi-mode-or-legacy-biosmode
QUESTION 10
Your company has 200 computers that run Windows 10. The computers are managed by using Microsoft Intune.
Currently, Windows updates are downloaded without using Delivery Optimization.
You need to configure the computers to use Delivery Optimization.
What should you create in Intune?
A. a device configuration profile
B. a device compliance policy
C. an app protection policy
D. a Windows 10 update ring
Correct Answer: A References: https://docs.microsoft.com/en-us/intune/delivery-optimization-windows
QUESTION 11
Your company uses Microsoft Intune.
More than 500 Android and iOS devices are enrolled in the Intune tenant.
You plan to deploy new Intune policies. Different policies will apply depending on the version of Android or iOS installed
on the device.
You need to ensure that the policies can target the devices based on their version of Android or iOS.
What should you configure first?
A. Corporate device identifiers in Intune
B. Device settings in Microsoft Azure Active Directory (Azure AD)
C. Device categories in Intune
D. Groups that have dynamic membership rules in Microsoft Azure Active Directory (Azure AD)
Correct Answer: B
Reference: https://docs.microsoft.com/en-us/intune/compliance-policy-create-android https://docs.microsoft.com/enus/intune/compliance-policy-create-ios
QUESTION 12
You use Windows Defender Advanced Threat Protection (Windows Defender ATP) to protect computers that run
Windows 10.
You need to assess the differences between the configuration of Windows Defender ATP and the Microsoftrecommended configuration baseline.
Which tool should you use?
A. Windows Defender Security Center
B. Windows Analytics
C. Windows Defender ATP Power BI app
D. Microsoft Secure Score
Correct Answer: D
References: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/overviewsecure-score
QUESTION 13
You have a shared computer that runs Windows 10.
The computer is infected with a virus.
You discover that a malicious TTF font was used to compromise the computer.
You need to prevent this type of threat from affecting the computer in the future.
What should you use?
A. Windows Defender Exploit Guard
B. Windows Defender Application Guard
C. Windows Defender Credential Guard
D. Windows Defender System Guard
E. Windows Defender SmartScreen
Correct Answer: A
Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploitguard/windows-defender-exploit-guard
Microsoft Certifications: Modern Desktop Administrator Associate
The main purpose of obtaining certification is to obtain a job that can provide you with a higher salary in a very simple way.
The Modern Desktop Administrator Associate certificate is provided after the MD-101 exam to ensure its excellence. This helps people develop better skills.
Microsoft MD-101:
Today, the most demanding and valuable exam is MD-101.
- Deploy and update operating systems (35-40%)
- Manage policies and profiles (25-30%)
- Manage and protect devices (20-25%)
- Manage apps and data (10-15%)
Passing the exam without proper training is not easy. You should receive MD-101 training accompanied by high-quality MD-101 exam dumps and MD-101 question answers.
Why Choose Pass4itsure
Pass4itsure provides excellent MD-101 materials that will help pass the exam.
Pass4itsure Discount Code 2020
Please read the picture carefully to get 12% off!
Blog can get MD-101 learning materials online, provide MD-101 practice exam, MD-101 Q&A, MD-101 PDF. There are video tutorials available, provided by Pass4itsure Microsoft’s industry-leading exam experts. If you fail the MD-101 exam, they will guarantee you a 100% pass and a money-back guarantee. Please visit https://www.pass4itsure.com/md-101.html for MD-101 exam dumps more details.
