[2026] MD-102 All-in-One Exam Guide Practice To your MD-102 Exam!
Preparations of MD-102 Exam 2026 Microsoft 365 Certified Unlimited 354 Questions
Microsoft MD-102 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
NEW QUESTION # 203
You have a Microsoft 365 subscription that uses Microsoft Intune Suite.
You use Microsoft Intune to manage devices.
You have the devices shown in the following table.
Which devices can be changed to Windows 11 Enterprise by using subscription activation?
- A. Device3 only
- B. Device2 and Device3 only
- C. Device 1 and Device2 only
- D. Device1, Device2, and Device3
Answer: B
Explanation:
https://learn.microsoft.com/en-us/windows/deployment/windows-subscription-activation#subscription-activation
NEW QUESTION # 204
You have an Azure AD tenant and 100 Windows 10 devices that are Azure AD joined and managed by using Microsoft Intune.
You need to configure Microsoft Defender Firewall and Microsoft Defender Antivirus on the devices. The solution must minimize administrative effort.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Endpoint protection settings.
- B. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Device restrictions settings.
- C. To configure Microsoft Defender Antivirus, create a Group Policy Object (GPO) and configure the Windows Defender Antivirus settings.
- D. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Device restrictions settings.
- E. To configure Microsoft Defender Firewall, create a Group Policy Object (GPO) and configure Windows Defender Firewall with Advanced Security.
- F. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Endpoint protection settings.
Answer: A,F
Explanation:
Explanation
To configure Microsoft Defender Firewall and Microsoft Defender Antivirus on Azure AD joined devices that are managed by Intune, you need to create a device configuration profile and configure the Endpoint protection settings. You can use this profile to configure various settings for firewall and antivirus protection on the devices. References:
https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-protection-windows-10
NEW QUESTION # 205
You have 100 computers that run Windows 10.
You plan to deploy Windows 11 to the computers by performing a wipe and load installation.
You need to recommend a method to retain the user settings and the user data.
Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
NEW QUESTION # 206
You have a Microsoft 365 Business Standard subscription and 100 Windows 10 Pro devices.
You purchase a Microsoft 365 E5 subscription.
You need to upgrade the Windows 10 Pro devices to Windows 10 Enterprise. The solution must minimize administrative effort.
Which upgrade method should you use?
- A. Subscription Activation
- B. an in-place upgrade by using Windows installation media
- C. Windows Autopilot
- D. a Microsoft Deployment Toolkit (MDT) lite-touch deployment
Answer: A
Explanation:
Subscription Activation is a feature that allows you to upgrade from Windows 10 Pro or Windows 11 Pro to Windows 10 Enterprise or Windows 11 Enterprise without needing a product key or reinstallation. You just need to assign a subscription license (such as Microsoft 365 E5) to the user in Azure AD, and then sign in to the device with that user account. The device will automatically activate Windows Enterprise edition using the firmware-embedded activation key for Windows Pro edition. This method minimizes administrative effort and simplifies the upgrade process. References: Windows subscription activation, Deploy Windows Enterprise licenses
NEW QUESTION # 207
You have the Windows 10 devices shown in the following table.
You plan to upgrade the devices to Windows 11 Enterprise.
On which devices can you perform a direct in-place upgrade to Windows 11 Enterprise?
- A. Device3 only
- B. Device 3 and Device 4 only
- C. Device1, Device2. Device3. and Devke4 only
- D. Device1. Device3, and Devtce4 only
- E. Device2. Device3. and Devtce4 only
Answer: B
Explanation:
https://learn.microsoft.com/en-us/windows/deployment/upgrade/windows-upgrade-pathshttps://learn.microsoft.c
NEW QUESTION # 208
You have a computer that runs Windows 10 and contains two local users named User! and User2. You need to ensure that the users can perform the following anions:
* User 1 must be able to adjust the date and time.
* User2 must be able to clear Windows logs.
The solution must use the principle of least privilege.
To which group should you add each user? To answer, drag the appropriate groups to the correct users. Each group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 209
You manage a Microsoft 365 environment that has co-management enabled.
All computers run Windows 10 and are deployed by using the Microsoft Deployment Toolkit (MDT).
You need to recommend a solution to deploy Microsoft Office 365 ProPlus to new computers.
The latest version must always be installed. The solution must minimize administrative effort.
What is the best tool to use for the deployment? More than one answer choice may achieve the goal.
Select the BEST answer.
- A. Office Deployment Toolkit (ODT)
- B. Microsoft Deployment Toolkit
- C. a Group Policy object (GPO)
- D. Microsoft System Center Configuration Manager
- E. Microsoft Intune
Answer: A
Explanation:
The Office Deployment Tool (ODT) is a command-line tool that you can use to download and deploy Microsoft 365 Apps to your client computers. The ODT gives you more control over an Office installation: you can define which products and languages are installed, how those products should be updated, and whether or not to display the install experience to your users.
Reference:
https://docs.microsoft.com/en-us/deployoffice/overview-of-the-office-2016-deployment-tool
NEW QUESTION # 210
You have 200 computers that run Windows 10 and are joined to an Active Directory domain.
You need to enable Windows Remote Management (WinRM) on all the computers by using Group Policy.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Set the Startup Type of the Windows Remote Management (WS-Management) service to Automatic.
- B. Enable the Windows Defender Firewall: Allow inbound remote administration exception setting.
- C. Enable the Windows Defender Firewall: Allow inbound Remote Desktop exceptions setting.
- D. Enable the Allow Remote Shell access setting.
- E. Set the Startup Type of the Remote Registry service to Automatic
- F. Enable the Allow remote server management through WinRM setting.
Answer: A,B,F
Explanation:
To enable WinRM on domain computers using Group Policy, you need to perform the following actions:
Enable the Allow remote server management through WinRM setting under Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Remote Management (WinRM) > WinRM Service. This setting allows you to specify the IP address ranges that can connect to the WinRM service.
Set the Startup Type of the Windows Remote Management (WS-Management) service to Automatic under Computer Configuration > Preferences > Control Panel Settings > Services. This setting ensures that the WinRM service starts automatically on the computers.
Enable the Windows Defender Firewall: Allow inbound remote administration exception setting under Computer Configuration > Policies > Security Settings > Windows Firewall and Advanced Security > Windows Firewall and Advanced Security > Inbound Rules. This setting creates a firewall rule that allows incoming TCP connections on port 5985 for WinRM. References: How to Enable WinRM via Group Policy, Installation and configuration for Windows Remote Management
NEW QUESTION # 211
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 212
Hotspot Question
You have a Microsoft 365 subscription.
You have 25 Microsoft Surface Hub devices that you plan to manage by using Microsoft Intune.
You need to configure the devices to meet the following requirements:
- Enable Windows Hello for Business.
- Configure Microsoft Defender SmartScreen to block users from running
unverified files.
Which profile type template should you use for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: Identity protection
In the Windows Hello for Business settings you can configure in an Identity protection profile.
Identity protection profiles are part of device configuration policy in Microsoft Intune. With an Identity protection profile, you can configure settings on discrete groups of Windows 10/11 devices.
Box 2: Endpoint protection
Microsoft Intune includes many settings to help protect your devices. These settings are created in an endpoint protection configuration profile in Intune to control security, including BitLocker and Microsoft Defender.
Reference:
https://docs.microsoft.com/en-us/mem/intune/protect/identity-protection-windows- settings?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json
https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-protection-windows-
10?toc=/intune/configuration/toc.json&bc=/intune/configuration/breadcrumb/toc.json
NEW QUESTION # 213
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 214
Hotspot Question
You have a Microsoft 365 E5 subscription that contains a user named User1.
You need to perform the following tasks for User1:
- Set the Usage location to Canada.
- Configure the Phone and Email authentication contact info for self-service password reset (SSPR).
Which two settings should you configure in the Azure Active Directory admin center? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Profile - https://connectioncloudsupport.zendesk.com/hc/en-us/articles/4405103699865-How-to- update-UsageLocation-user-setting-in-Azure-AD Auth methods - https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept- authentication-phone-options
NEW QUESTION # 215
You have a Microsoft Intune subscription that is configured to use a PFX certificate connector to an on-premises Enterprise certification authority (CA).
You need to use Intune to configure autoenrollment for Android devices by using public key pair (PKCS) certificates.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Obtain the root certificate.
2 - From the Microsoft Endpoint Manager admin center, create a trusted certificate configuration profile.
3 - From the Microsoft Endpoint Manager admin center, configure enrollment restrictions.
Reference:
https://docs.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure
NEW QUESTION # 216
You create a Windows Autopilot deployment profile.
You need to configure the profile settings to meet the following requirements:
Automatically enroll new devices and provision system apps without requiring end-user authentication.
Include the hardware serial number in the computer name.
Which two settings should you configure? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/mem/autopilot/profiles
NEW QUESTION # 217
You have a Microsoft 365 E5 subscription that contains a group named Group1.
You create a Conditional Access policy named CAPolicy1 and assign CAPolicy1 to Group1.
You need to configure CAPolicy1 to require the members of Group1 to reauthenticate every eight hours when they connect to Microsoft Exchange Online.
What should you configure?
- A. an assignment that uses a User risk condition
- B. Grant access controls
- C. Session access controls
- D. an assignment that uses a Sign-in risk condition
Answer: C
Explanation:
Explanation
User sign-in frequency
Sign-in frequency defines the time period before a user is asked to sign in again when attempting to access a resource.
The Azure Active Directory (Azure AD) default configuration for user sign-in frequency is a rolling window of 90 days.
Sign-in frequency control
Sign in to the Azure portal as a global administrator, security administrator, or Conditional Access administrator.
Browse to Azure Active Directory > Security > Conditional Access.
Select New policy.
Give your policy a name. We recommend that organizations create a meaningful standard for the names of their policies.
Choose all required conditions for customer's environment, including the target cloud apps.
Under Access controls > Session.
Select Sign-in frequency.
Choose Periodic reauthentication and enter a value of hours or days or select Every time.
Save your policy.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-session-life
NEW QUESTION # 218
Your network contains an Active Directory domain named adatum.com. The domain contains two computers named Computer1 and Computer2 that run Windows 10. Remote Desktop is enabled on Computer2.
The domain contains the user accounts shown in the following table.
Computer2 contains the local groups shown in the following table.
The relevant user rights assignments for Computed are shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 219
You have a Microsoft 365 subscription.
You plan to enroll devices in Microsoft Intune. You need to meet the following requirements:
* Only allow the enrollment of devices that have a specific international mobile equipment identifier (IMEI).
* Support the enrollment and management of up to 1,000 devices
Which enrollment setting should you configure for each requirement? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 220
Your company has a Microsoft 365 tenant.
Users sign in to Windows 10 devices by using their Microsoft 365 account.
On a computer, you open Sync your settings as shown in the exhibit.
You need to set Sync settings to On.
What should you do?
- A. Enable Windows Mobility Center.
- B. Disable Windows Hello for Business.
- C. Enable Enterprise State Roaming.
- D. Enable User Experience Virtualization (UE-V).
Answer: C
Explanation:
Enterprise State Roaming provides users with a unified experience across their Windows devices and reduces the time needed for configuring a new device.
Enterprise State Roaming operates similar to the standard consumer settings sync that was first introduced in Windows 8.
Note: To enable Enterprise State Roaming
1. Sign in to the Azure portal.
2. Browse to Azure Active Directory > Devices > Enterprise State Roaming.
3. Select Users may sync settings and app data across devices.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/devices/enterprise-state-roaming-enable
NEW QUESTION # 221
You have a Microsoft 365 E5 subscription and 25 Apple iPads.
You need to enroll the iPads in Microsoft Intune by using the Apple Configurator enrollment method.
What should you do first?
- A. Modify the enrollment restrictions.
- B. Upload a file that has the device identifiers for each iPad.
- C. Configure an Apple MDM push certificate.
- D. Add your user account as a device enrollment manager (DEM).
Answer: C
Explanation:
Reference:
https://www.manageengine.com/mobile-device-management/help/enrollment/mdm_creating_apns_certificate.htm Prerequisites for iOS enrollment Before you can enable iOS devices, complete the following steps: Make sure your device is eligible for Apple device enrollment. Set up Intune - These steps set up your Intune infrastructure. In particular, device enrollment requires that you set your MDM authority. Get an Apple MDM Push certificate - Apple requires a certificate to enable management of iOS and macOS devices.
https://docs.microsoft.com/en-gb/intune/enrollment/apple-mdm-push-certificate-get
NEW QUESTION # 222
You have groups that use the Dynamic Device membership type as shown in the following table.
You are deploying Microsoft 365 apps.
You have devices enrolled in Microsoft Intune as shown in the following table.
In the Microsoft Endpoint Manager admin center, you create a Microsoft 365 Apps app as shown in the exhibit. (Click theExhibittab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE:Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Graphical user interface, text, application Description automatically generated
Reference:
https://docs.microsoft.com/en-us/mem/intune/apps/apps-add-office365
https://docs.microsoft.com/en-us/mem/intune/apps/apps-deploy
https://docs.microsoft.com/en-us/mem/intune/apps/apps-add
NEW QUESTION # 223
You have a Microsoft 365 subscription that uses Microsoft Intune Suite.
You use Microsoft Intune to manage devices.
You need to ensure that the startup performance of managed Windows 11 devices is captured and available for review in the Intune admin center.
What should you configure?
- A. a device compliance policy
- B. a Conditional Access policy
- C. an Intune data collection policy
- D. the Azure Monitor agent
Answer: C
Explanation:
To ensure that the startup performance of managed Windows 11 devices is captured and available for review in the Intune admin center, you should configure an Intune data collection policy.
https://learn.microsoft.com/en-us/mem/analytics/data-collection
NEW QUESTION # 224
......
Focus on MD-102 All-in-One Exam Guide For Quick Preparation: https://www.prep4surereview.com/MD-102-latest-braindumps.html
Practice To MD-102 - Prep4SureReview Remarkable Practice On your Endpoint Administrator Exam: https://drive.google.com/open?id=1EUNLeepitwlGAoF2svhVYKSdup6NyB_N
