00:00

QUESTION 21

- (Exam Topic 4)
You have unrooted devices enrolled in Microsoft Intune as shown in the following table.
MD-101 dumps exhibit
The devices are members of a group named Group1.
In Intune, you create a device compliance location that has the following configurations:
MD-101 dumps exhibit Name: Network1
MD-101 dumps exhibit IPv4 range: 192.168.0.0/16
In Intune, you create a device compliance policy for the Android platform. The policy has following configurations:
MD-101 dumps exhibit Name: Policy1
MD-101 dumps exhibit Device health: Rooted devices: Block
MD-101 dumps exhibit Locations: Location: Network1
MD-101 dumps exhibit Mark device noncompliant: Immediately
MD-101 dumps exhibit Assigned: Group1
In Intune device compliance policy has the following configurations:
MD-101 dumps exhibit Mark devices with no compliance policy assigned as: Compliant
MD-101 dumps exhibit Enhanced jailbreak detection: Enabled
MD-101 dumps exhibit Compliance status validity period (days): 20
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
MD-101 dumps exhibit
Solution:
Reference:
https://docs.microsoft.com/en-us/intune/device-compliance-get-started

Does this meet the goal?

Correct Answer: A

QUESTION 22

- (Exam Topic 4)
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the devices shown in the following table.
MD-101 dumps exhibit
All devices contain an app named App1 and are enrolled in Microsoft Intune.
You need to prevent users from copying data from App1 and pasting the data into other apps.
Which type of policy and how many policies should you create in Intune? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
MD-101 dumps exhibit
Solution:
Reference:
https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policies https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policies-configure-windows-10

Does this meet the goal?

Correct Answer: A

QUESTION 23

- (Exam Topic 4)
Your network contains an Active Directory domain. Active Directory is synced with Microsoft Azure Active Directory (Azure AD).
There are 500 domain-joined computers that run Windows 10. The computers are joined to Azure AD and enrolled in Microsoft Intune.
You plan to implement Windows Defender Exploit Guard.
You need to create a custom Windows Defender Exploit Guard policy, and then distribute the policy to all the computers.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
MD-101 dumps exhibit
Solution:
References:
https://docs.microsoft.com/en-us/intune/endpoint-protection-windows-10
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploit-guard/enable-ex

Does this meet the goal?

Correct Answer: A

QUESTION 24

- (Exam Topic 4)
Your network contains an Active Directory forest. The forest contains a single domain and three sites named Site1, Site2, and Site3. Each site is associated to two subnets. Site1 contains two subnets named SubnetA and SubnetB.
All the client computers in the forest run Windows 10. Delivery Optimization is enabled. You have a computer named Computer1 that is in SubnetA.
From which hosts will Computer1 download updates?

Correct Answer: C
Delivery Optimization allows updates from other clients that connect to the Internet using the same public IP as the target client (NAT).
References:
https://docs.microsoft.com/en-us/windows/deployment/update/waas-delivery-optimization

QUESTION 25

- (Exam Topic 4)
Your network contains an on-premises Active Directory domain that contains the locations shown in the following table.
MD-101 dumps exhibit
In Microsoft Intune, you enroll the Windows 10 devices shown in the following table.
MD-101 dumps exhibit
You have a Delivery Optimization device configuration profile applied to all the devices. The profile is configured as shown in the following exhibit.
MD-101 dumps exhibit
From which devices can Device1 and Device2 get updates? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
MD-101 dumps exhibit
Solution:
Table Description automatically generated
Reference:
https://docs.microsoft.com/en-us/mem/intune/configuration/delivery-optimization-settings https://docs.microsoft.com/en-us/windows/deployment/update/waas-delivery-optimization-reference#select-the

Does this meet the goal?

Correct Answer: A