リアルMicrosoft MD-102試験問題集には正解505問題と解答があります
有効なMD-102テスト解答とMicrosoft MD-102試験PDF問題を試そう
質問 # 260
Hotspot Question
You have a Microsoft 365 subscription that includes Microsoft Intune.
From the Microsoft Intune admin center, you add the apps shown in the following table.
You need to configure the apps to meet the following requirements:
- App1 must automatically install for all users in the marketing department on any Windows 11 device enrolled in Intune. If a user receives a new device, App1 must install automatically.
- App2 must be available for download for any user in the HR department from a personal Android device that is not enrolled in Intune.
Which assignment should you configure for each app? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
質問 # 261
Case Study 1 - Litware inc
General Overview
Litware, Inc. is an international manufacturing company that has 3,000 employees. The company has sales, marketing, research, human resources (HR), development, and IT departments.
Litware has two main offices in New York and Los Angeles. Litware has five branch offices in Asia.
Existing Environment
Current Business Model
The Los Angeles office has 500 developers. The developers work flexible hours ranging from 11 AM to 10 PM.
Litware has a Microsoft Endpoint Configuration Manager deployment.
During discovery, the company discovers a process where users are emailing bank account information of its customers to internal and external recipients.
Current Environment
The network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD). The functional level of the forest and the domain is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.
Litware has the computers shown in the following table.
The development department uses projects in Azure DevOps to build applications. Most of the employees in the sales department are contractors. Each contractor is assigned a computer that runs Windows 10. At the end of each contract, the computer is assigned to different contractor.
Currently, the computers are re-provisioned manually by the IT department.
Problem Statements
Litware identifies the following issues on the network:
- Employees in the Los Angeles office report slow Internet performance when updates are downloading. The employees also report that the updates frequently consume considerable resources when they are installed. The Update settings are configured as shown in the Updates exhibit. (Click the Updates button.)
- Management suspects that the source code for the proprietary applications in Azure DevOps in being shared externally.
- Re-provisioning the sales department computers is too time consuming.
Requirements
Business Goals
Litware plans to transition to co-management for all the company-owned Windows 10 computers.
Whenever possible, Litware wants to minimize hardware and software costs.
Device Management Requirements
Litware identifies the following device management requirements:
- Prevent the sales department employees from forwarding email that contains bank account information.
- Ensure that Microsoft Edge Favorites are accessible from all computers to which the developers sign in.
- Prevent employees in the research department from copying patented information from trusted applications to untrusted applications.
Technical Requirements
Litware identifies the following technical requirements for the planned deployment:
- Re-provision the sales department computers by using Windows AutoPilot.
- Ensure that the projects in Azure DevOps can be accessed from the corporate network only.
- Ensure that users can sign in to the Azure AD-joined computers by using a PIN. The PIN must expire every 30 days.
- Ensure that the company name and logo appears during the Out of Box Experience (OOBE) when using Windows AutoPilot.
Hotspot Question
You need to meet the technical requirements for Windows AutoPilot.
Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
- Users (for each user profile, set the location and apply a license)
- Devices | Device settings (select Users may join devices to Azure AD > All) You can confirm this in the walkthrough video on this link:
https://docs.microsoft.com/en-us/mem/autopilot/configuration-requirements
質問 # 262
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.
In the Microsoft 365 Apps admin center, you create a Microsoft Office customization.
Which users can download the Office customization file from the admin center?
- A. Admin3 only
- B. Admin1 and Admin3 only
- C. Admin1, Admin2, Admin3. and Admin4
- D. Admin3 and Admin4 only
- E. Admin1, Admin2, and Admin3 only
正解：C
解説：
* Admin1
An application admin has full access to enterprise applications, applications registrations, and application proxy settings.
* Admin2
Mark your app as publisher verified.
In Azure AD this user must be a member of one of the following roles: Application Admin, Cloud Application Admin, or Global Admin.
* Admin3
Office Apps admin - Assign the Office Apps admin role to users who need to do the following:
- Use the Office cloud policy service to create and manage cloud-based policies for Office
- Create and manage service requests
- Manage the What's New content that users see in their Office apps
- Monitor service health
Reference:
Office Apps admin - Assign the Office Apps admin role to users who need to do the following
https://docs.microsoft.com/en-us/azure/active-directory/develop/mark-app-as-publisher-verified
質問 # 263
You have a computer that runs Windows 10 and contains two local users named User! and User2. You need to ensure that the users can perform the following anions:
* User 1 must be able to adjust the date and time.
* User2 must be able to clear Windows logs.
The solution must use the principle of least privilege.
To which group should you add each user? To answer, drag the appropriate groups to the correct users. Each group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
正解：
解説：
質問 # 264
You have a computer that runs Windows 10 and contains two local users named User! and User2. You need to ensure that the users can perform the following anions:
* User 1 must be able to adjust the date and time.
* User2 must be able to clear Windows logs.
The solution must use the principle of least privilege.
To which group should you add each user? To answer, drag the appropriate groups to the correct users. Each group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
質問 # 265
Your company uses Microsoft Intune.
More than 500 Android and iOS devices are enrolled in the Intune tenant.
You plan to deploy new Intune policies. Different policies will apply depending on the version of Android or iOS installed on the device.
You need to ensure that the policies can target the devices based on their version of Android or iOS.
What should you configure first?
- A. Device categories in Intune
- B. groups that have dynamic membership rules in Azure AD
- C. Device settings in Azure AD
- D. Corporate device identifiers in Intune
正解：A
質問 # 266
You have a Microsoft 365 subscription that includes Microsoft Intune.
You create a new Android app protection policy named Policy1 that prevents screen captures in all Microsoft apps. You discover that an unmanaged email client installed on Android devices can still capture screens You need to ensure that users can only use Microsoft apps to access email. What should you do?
- A. Create a compliance policy.
- B. Create a Conditional Access policy.
- C. Modify the assignments of Policy1.
- D. Modify the Data protection settings of Policy1.
正解：C
質問 # 267
Hotspot Question
You have a Microsoft 365 E5 subscription.
You need to route Microsoft Intune logs to an Azure resource that supports the use of visuals, monitoring, and alerting.
Which settings should you configure in Intune, and which resource should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
質問 # 268
You have a Windows 10 device named Device! that is joined to Active Directory and enrolled in Microsoft Intune.
Device1 is managed by using Group Policy and Intune.
You need to ensure that the Intune settings override the Group Policy settings.
What should you configure?
- A. a device configuration profile
- B. a device compliance policy
- C. an MDM Security Baseline profile
- D. a Group Policy Object (GPO)
正解：A
解説：
A device configuration profile is a collection of settings that can be applied to devices enrolled in Microsoft Intune. You can use device configuration profiles to manage Windows 10 devices that are joined to Active Directory and enrolled in Intune. To ensure that the Intune settings override the Group Policy settings, you need to enable the policy CSP setting called MDMWinsOverGP in the device configuration profile. This setting will give precedence to the MDM policy over any conflicting Group Policy settings. References: [Use policy CSP settings to create custom device configuration profiles]
質問 # 269
You have a Microsoft 365 ES subscription.
You use Microsoft Intune to manage all devices.
You need to prepare a Win32 app named Appl.exe for deployment.
What should you do first?
- A. Upload App1 exe to Azure Blob Storage.
- B. From the Microsoft Intune admin center, create an app configuration policy.
- C. From the Microsoft 365 Apps admin center, create a deployment configuration
- D. Change App1.exe to the INIUNEW1N format.
正解：D
質問 # 270
You have two computers that run Windows 10. The computers are enrolled in Microsoft Intune as shown in the following table.
Windows 10 update rings are defined in Intune as shown in the following table.
You assign the update rings as shown in the following table.
What is the effect of the configurations on Computer1 and Computer2? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
A screenshot of a computer Description automatically generated
Computer1 and Computer2 are members of Group1. Ring1 is applied to Group1.
Note: The term "Exclude" is misleading. It means that the ring is not applied to that group, rather than that group being blocked.
References:
https://docs.microsoft.com/en-us/windows/deployment/update/waas-wufb-intune
https://allthingscloud.blog/configure-windows-update-business-using-microsoft-intune/
質問 # 271
Drag and Drop Question
Your company has a Microsoft 365 E5 tenant.
All the devices of the company are enrolled in Microsoft Endpoint Manager.
You need to create advanced reports by using custom queries and visualizations from raw Microsoft Endpoint Manager data.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
正解：
解説：
Explanation:
Step 1: Purchase an Azure subscription.
Complex reporting functionality require an Azure subscription.
Step 2: Create a Log Analytics workspace.
Each Azure resource requires its own diagnostic setting. The diagnostic setting defines the following for a resource:
* One or more destinations to send the logs. Current destinations include Log Analytics workspace, Event Hubs, and Azure Storage.
* Categories of logs and metric data sent to the destinations defined in the setting. The available categories will vary for different resource types.
* Retention policy for data stored in Azure Storage.
Step 3: Add diagnostic settings.
You can create and view custom reports using the following steps:
1. Sign in to the Microsoft Endpoint Manager admin center.
2. Select Reports > Diagnostic settings add a diagnostic setting.
3. Etc.
Reference:
https://docs.microsoft.com/en-us/mem/intune/fundamentals/reports
質問 # 272
You have a Microsoft 365 subscription that has Windows 365 Enterprise licenses.
You plan to use a custom Windows 11 image as a template for Cloud PCs.
You have a Hyper-V virtual machine that runs Windows 11 and has the following configurations:
* Name: VM1
* Disk size: 64 GB
* Disk format: VHDX
* Disk type: Fixed size
* Generation: Generation 2
You need to ensure that you can use VM1 as a source for the custom image. What should you do on VM1 first?
- A. Change the disk format to the VHD
- B. Change the disk type to Dynamically expanding
- C. Change the generation to Generation 1.
- D. Increase the disk size.
正解：A
質問 # 273
You use Microsoft Endpoint Manager to manage Windows 10 devices.
You are designing a reporting solution that will provide reports on the following:
Compliance policy trends
Trends in device and user enrolment
App and operating system version breakdowns of mobile devices
You need to recommend a data source and a data visualization tool for the design.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Reference:
https://docs.microsoft.com/en-us/mem/intune/developer/reports-nav-create-intune-reports
https://docs.microsoft.com/en-us/mem/intune/developer/reports-proc-get-a-link-powerbi
質問 # 274
You have a Microsoft 365 ES subscription that uses Microsoft Intune.
Devices are enrolled in Intune as shown in the following table.
The devices are the members of groups as shown in the following table.
You create an JOS/iPadOS update profile as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
質問 # 275
User1 and User2 plan to use Sync your settings.
On which devices can the users use Sync your settings? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
Graphical user interface, text, application, email Description automatically generated
Reference:
https://www.jeffgilb.com/managing-local-administrators-with-azure-ad-and-intune/
質問 # 276
You have a computer named Computer5 that has Windows 10 installed.
You create a Windows PowerShell script named config.ps1.
You need to ensure that config.ps1 runs after feature updates are installed on Computer5.
Which file should you modify on Computer5?
- A. Unattend.bat
- B. SetupConfig.ini
- C. LiteTouch.wsf
- D. Unattend.xml
正解：B
解説：
IT pros can use the setupconfig file to add parameters to Windows Setup from Windows Update and Windows Server Update Services.
If the update is delivered through Windows Update, Windows Setup searches in a default location for a setupconfig file. You can include the setupconfig file here:
"%systemdrive%\Users\Default\AppData\Local\Microsoft\Windows\WSUS\SetupConfig.ini"
https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/windows-setup- automation-overview
質問 # 277
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.
In the Microsoft 365 Apps admin center, you create a Microsoft Office customization.
Which users can download the Office customization file from the admin center?
- A. Admin3 only
- B. Admin1 and Admin3 only
- C. Admin1, Admin2, Admin3. and Admin4
- D. Admin3 and Admin4 only
- E. Admin1, Admin2, and Admin3 only
正解：C
解説：
* Admin1
An application admin has full access to enterprise applications, applications registrations, and application proxy settings.
* Admin2
Mark your app as publisher verified.
In Azure AD this user must be a member of one of the following roles: Application Admin, Cloud Application Admin, or Global Admin.
* Admin3
Office Apps admin - Assign the Office Apps admin role to users who need to do the following:
- Use the Office cloud policy service to create and manage cloud-based policies for Office
- Create and manage service requests
- Manage the What's New content that users see in their Office apps
- Monitor service health
Reference:
Office Apps admin - Assign the Office Apps admin role to users who need to do the following
https://docs.microsoft.com/en-us/azure/active-directory/develop/mark-app-as-publisher-verified
質問 # 278
You have the MDM Security Baseline profile shown in the MDM exhibit. (Click the MDM tab.) You have the ASR Endpoint Security profile shown in the ASR exhibit. (Click the ASR tab.)
You plan to deploy both profiles to devices enrolled in Microsoft Intune. You need to identify how the following settings will be configured on the devices:
* Block Office applications from creating executable content
* Block Win32 API calls from Office macro
Currently, the settings are disabled locally on each device.
What are the effective settings on the devices? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
質問 # 279
To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
Reference:
https://docs.microsoft.com/en-us/intune/device-profile-assign
質問 # 280
......
Microsoft MD-102 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
MD-102試験問題と有効なMD-102問題集でPDF：https://jp.fast2test.com/MD-102-premium-file.html
Microsoft MD-102認定リアル2025年最新の模擬試験：https://drive.google.com/open?id=1BQm5nBLUJy6-hoX8mmgx2clGF9UJfXsM