Online Access Free MD-101 Exam Questions

Your company has a Microsoft 365 subscription.
All the users in the finance department own personal devices that run iOS or Android. All the devices are enrolled in Microsoft Intune.
The finance department adds new users each month.
The company develops a mobile application named App1 for the finance department users.
You need to ensure that only the finance department users can download App1.
What should you do first?

• A.Add App1 to Microsoft Store for Business.
• B.Add App1 to the vendor stores for iOS and Android applications.
• C.Add App1 to Intune.
• D.Add App1 to a Microsoft Deployment Toolkit (MDT) deployment share.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company uses Windows AutoPilot to configure the computer settings of computers issued to users.
A user named User1 has a computer named Computer1 that runs Windows 10. User1 leaves the company.
You plan to transfer the computer to a user named User2.
You need to ensure that when User2 first starts the computer, User2 is prompted to select the language setting and to agree to the license agreement.
Solution: You create a new Windows AutoPilot user-driven deployment profile.
Does this meet the goal?

• A.No
• B.Yes

You have 500 Windows 10 devices enrolled in Microsoft Intune.
You plan to use Exploit protection in Microsoft Endpoint Manager to enable the following system settings on the devices:
* Data Execution Prevention (DEP)
* Force randomization for images (Mandatory ASLR)
You need to configure a Windows 10 device that will be used to create a template file.
Which protection areas on the device should you configure in the Windows Security app before you create the template file? To answer, drag the appropriate protection areas to the correct settings. Each protection area may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Box 1: App & browser control
Graphical user interface, text, application Description automatically generated

Note: Data Execution Prevention (DEP): This mitigation prevents code from being run from data-only memory pages.
Box 2: App & browser control
Force randomization for images (Mandatory ASLR). This mitigation forcibly relocates images not compiled with /DYNAMICBASE.
Reference:
https://support.microsoft.com/en-us/windows/app-browser-control-in-windows-security-8f68fb65-ebb4-3cfb-4bd

Your company has a Microsoft Azure Active Directory (Azure AD) tenant. All users in the company are licensed for Microsoft Intune.
You need to ensure that the users enroll their iOS device in Intune.
What should you configure first?

• A.A Device enrollment manager (DEM) account.
• B.A Device Enrollment Program (DEP) token.
• C.An Intune device configuration profile.
• D.An Apple MDM Push certificate.

Your on-premises network contains an Active Directory domain named contoso.com.
You perform the following actions:
* Purchase a new Microsoft 365 subscription.
* Create a new user named User1.
* Assign User1 the Security Administrator role.
You need to ensure that User1 can enable Conditional Access policies.
What should User1 do first?

• A.Implement Azure AD Connect.
• B.Request the Conditional Access Administrator role.
• C.Disable Security defaults.
• D.Register for Azure Multi-Factor Authentication (MFA).