2024年最新の有効なMD-102リアル試験問題（更新された）100%問題集と練習試験合格させます [Q157-Q175]

2024年最新の有効なMD-102リアル試験問題（更新された）100%問題集と練習試験合格させます

[更新されたのは2024年]Microsoft MD-102問題準備には無料サンプルのPDF

Microsoft MD-102 認定試験の出題範囲：

トピック	出題範囲
トピック 1	Implement the Intune Connector for Active Directory Implement Conditional Access policies that require a compliance status
トピック 2	Implement and manage Local Administrative Passwords Solution (LAPS) for Azure AD Manage role-based access control (RBAC) for Intune
トピック 3	Deploy Windows devices by using Autopilot Configure device registration for Autopilot
トピック 4	Manage device configuration for all supported device platforms by using Intune Monitor and troubleshoot configuration profiles
トピック 5	Select a deployment tool based on requirements Implement subscription-based activation
トピック 6	Configure Remote Desktop on a Windows client Configure PowerShell remoting and Windows Remote Management (WinRM)
トピック 7	Manage device updates for all supported device platforms by using Intune Implement automated response capabilities in Defender for Endpoint
トピック 8	Implement and manage security baselines in Intune Plan and implement app protection and app configuration policies

質問 # 157
You have an Azure AD tenant named contoso.com that contains a user named Used. User! has a user principal name (UPN) of [email protected].
You join a Windows 11 device named Client 1 to contoso.com.
You need to add User1 to the local Administrators group of Client1.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation:
net localgroup Administrators /add "AzureAD\[email protected]"
This command will add the Azure AD user with the UPN of [email protected] to the local Administrators group of the device1. You need to use the AzureAD prefix and double backslashes to specify the user's domain2. You also need to enclose the user's name in quotation marks if it contains special characters like
@1.
You can run this command from an elevated command prompt on Client1, or remotely by using PowerShell or other tools1. You can also use the Intune Role Administrator role or the Additional local administrators on all Azure AD joined devices setting to manage the local administrators group on Azure AD joined devices34.

質問 # 158
You have an Azure AD tenant named contoso.com that contains the devices shown in the following table.

The tenant contains the Azure AD groups shown in the following table.

You add an Autopilot deployment profile as shown in the following exhibit.

You have an Azure AD tenant named contoso.com that contains the devices shown in the following table.

The tenant contains the Azure AD groups shown in the following table.

正解：

解説：

Explanation

質問 # 159
To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Reference:
https://docs.microsoft.com/en-us/intune/device-profile-assign

質問 # 160
You have a Microsoft 365 subscription.
You need provide a user the ability to disable Security defaults and principle of least privilege.
Which role should you assign to the user?

A. Intune Administrator
B. Security Administrator
C. Conditional Access Administrator
D. Global Administrator

正解：C

解説：
To enable or disable security defaults in your directory, sign in to theAzure portalas a security administrator, Conditional Access administrator, or global administrator.
Note: Conditional Access Administrator
Users with this role have the ability to manage Azure Active Directory Conditional Access settings.

質問 # 161
You need to meet the technical requirements for the iOS devices.
Which object should you create in Intune?

A. A device configuration profile
B. An app protection policy
C. A compliance policy
D. A Deployment profile

正解：A

解説：
Reference:
https://docs.microsoft.com/en-us/intune/device-restrictions-configure
https://docs.microsoft.com/en-us/intune/device-restrictions-ios

質問 # 162
You have a Microsoft 365 ES subscription that uses Microsoft Intune.
You have the apps shown in the following exhibit.

正解：

解説：

質問 # 163
You have an Azure AD tenant named contoso.com that contains the devices shown in the following table.

AH devices contain an app named App1 and are enrolled in Microsoft Intune.
You need to prevent users from copying data from App1 and pasting the data into other apps.
Which type of policy and how many policies should you create in Intune? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation

Policy type: App protection policy Minimum number of policies: 1 Comprehensive Explanation of Correct Answer Only: The correct answer is app protection policy because it allows you to customize the settings of apps for iOS/iPadOS or Android devices1. One of the settings you can configure is Restrict cut, copy, and paste between other apps, which lets you prevent users from copying data from App1 and pasting the data into other apps2. You only need one policy to apply this setting to all devices that have App1 installed1.
References: 1: App configuration policies for Microsoft Intune | Microsoft Learn
https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-overview 2: Troubleshoot restricting cut, copy, and paste between applications - Intune | Microsoft Learn
https://learn.microsoft.com/en-us/troubleshoot/mem/intune/app-protection-policies/troubleshoot-cut-copy-paste

質問 # 164
You have 1,000 computers that run Windows 10 and are members of an Active Directory domain.
You need to capture the event togs from the computers to Azure.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation:

質問 # 165
You have an Azure AD tenant that contains the devices shown in the following table.

You purchase Windows 11 Enterprise E5 licenses.
Which devices can use Subscription Activation to upgrade to Windows 11 Enterprise?

A. Device1 only
B. Device1, Device2, Device3, and Device4
C. Device1 and Device2 only
D. Device1 and Device3 only

正解：D

質問 # 166
You have a Windows 11 capable device named Device1 that runs the 64-bit version of Windows 10 Enterprise and has Microsoft Office 2019 installed. You have the Windows 11 Enterprise images shown in the following table.

Which images can be used to perform an in-place upgrade of Device1?

A. image1 only
B. Image1 and Image2
C. lmage2only

正解：C

質問 # 167
To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation

Reference:
https://docs.microsoft.com/en-us/intune/device-profile-assign

質問 # 168
You have an Azure AD tenant named contoso.com.
You plan to purchase 25 computers that run Windows 11. You plan to deliver the computers directly to users.
You need to ensure that during the out-of-box experience (OBE), users are prompted to sign in, and then the computers are configured to use Microsoft Intune.
Which two components should you configure? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. an unattend.xml answer file
B. a provisioning package
C. a Windows Autopilot deployment profile for user-driven mode
D. a Windows Autopilot deployment profile for self-deploying mode
E. automatic enrollment

正解：C、E

解説：
Self-deploying mode doesn't presently associate a user with the device (since no user ID or password is specified as part of the process).
Ref:https://learn.microsoft.com/en-us/autopilot/self-deploying#:~:text=Self%2Ddeploying%20mode%20doesn% Windows Autopilot user-driven mode Ref:https://learn.microsoft.com/en-us/autopilot/user-driven#:~:text=Specify%20your%20e%2Dmail%20address%

質問 # 169
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation
Text, letter Description automatically generated

質問 # 170
You have a Microsoft 365 ES subscription.
You use Microsoft Intune to manage all devices.
You need to prepare a Win32 app named Appl.exe for deployment.
What should you do first?

A. From the Microsoft Intune admin center, create an app configuration policy.
B. Change App1.exe to the INIUNEW1N format.
C. From the Microsoft 365 Apps admin center, create a deployment configuration
D. Upload App1 exe to Azure Blob Storage.

正解：B

質問 # 171
You have 200 computers that run Windows 10. The computers are joined to Azure AD and enrolled in Microsoft Intune. You need to set a custom image as the wallpaper and sign-in screen.
Which two settings should you configure in the Device restrictions configuration profile? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation:

質問 # 172
You have a Microsoft 365 subscription that contains 1,000 iOS devices. The devices are enrolled in Microsoft Intune as follows:
* Two hundred devices are enrolled by using the Intune Company Portal.
* Eight hundred devices are enrolled by using Apple Automated Device Enrollment (ADE).
You create an iOS/iPadOS software updates policy named Policy 1 that is configured to install iOS/iPadOS 15.5.
How many iOS devices will Policy1 update, and what should you configure to ensure that only iOS/iPadOS 15.5 is installed? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

質問 # 173
Your company has a Microsoft 365 E5 tenant.
All the devices of the company are enrolled in Microsoft Intune.
You need to create advanced reports by using custom queries and visualizations from raw Microsoft Intune data.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

正解：

解説：

Explanation:

質問 # 174
You have the devices shown in the following table.
You need to migrate app data from Device1 to Device2. The data must be encrypted and stored on Seryer1 during the migration.
Which command should you run on each device? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.