web analytics

You need to enable Windows Defender Credential Guard on computers that run Windows 10. What should you install on the computers?

You need to enable Windows Defender Credential Guard on computers that run Windows 10. What should you install on the computers? A. Hyper-V B. Windows Defender Application Guard C. a

You need to enroll the computers in Windows Analytics. Which Group Policy setting should you configure?

Your network contains an Active Directory domain named contoso.com. The domain contains computers that run Windows 10 and are joined to the domain. The domain is synced to Microsoft Azure

You need to enable co-management. What should you do first?

Your network contains an Active Directory domain. The functional level of the forest and the domain is Windows Server 2012 R2. The domain contains 500 computers that run Windows 10.

You need to prevent this type of threat from affecting the computer in the future. What should you use?

You have a shared computer that runs Windows 10. The computer is infected with a virus. You discover that a malicious TTF font was used to compromise the computer. You

You need to ensure that the users enroll their iOS device in Intune. What should you configure first?

Your company has a Microsoft Azure Active Directory (Azure AD) tenant. All users in the company are licensed for Microsoft Intune. You need to ensure that the users enroll their

You need to ensure that only applications that you explicitly allow can run on the computers. What should you use?

You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune. You need to ensure that only

You have a computer named Computer1 than runs Windows 10. You need to view the events collected from Computer1. Which query should you run in Log Analytics?

You have a Microsoft Azure Log Analytics workplace that collects all the event logs from the computers at your company. You have a computer named Computer1 than runs Windows 10.

Which two configurations should you perform in the device enrollment restrictions? Each correct answer presents part of the solution. NOTE: each correct selection is worth one point.

Your company uses Microsoft Intune to manage devices. You need to ensure that only Android devices that use Android work profiles can enroll in Intune. Which two configurations should you

You need to assess the differences between the configuration of Windows Defender ATP and the Microsoft-recommended configuration baseline. Which tool should you use?

You use Windows Defender Advanced Threat Protection (Windows Defender ATP) to protect computers that run Windows 10. You need to assess the differences between the configuration of Windows Defender ATP

You need to configure a solution to enforce the security policy. What should you create?

Your company implements Microsoft Azure Active Directory (Azure AD), Microsoft 365, Microsoft Intune, and Azure Information Protection. The company’s security policy states the following: Personal devices do not need to

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Your company has a System Center Configuration Manager deployment that uses hybrid mobile device management (MDM). All Windows 10 devices are Active Directory domain-joined. You plan to migrate from hybrid

You need to ensure that you can centrally monitor the computers by using Windows Analytics. What should you create in Intune?

Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. All users have computers that run Windows 10. The computers are joined to Azure AD and managed

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: each correct selection is worth one point.

You need to assign the same deployment profile to all the computers that are configured by using Windows Autopilot. Which two actions should you perform? Each correct answer presents part

You need to identify which devices will be prevented from accessing Microsoft 365 services. What should you use?

Your company has a Microsoft 365 subscription. The company uses Microsoft Intune to manage all devices. The company uses conditional access to restrict access to Microsoft 365 services for devices

You need to configure the tablets so that any user can use App1 without having to sign in. Users must be prevented from using other applications on the tablets. Which device configuration profile type should you use?

Your company plans to deploy tablets to 50 meeting rooms. The tablets run Windows 10 and are managed by using Microsoft Intune. The tablets have an application named App1. You

You need to identify what will be retained when User1 signs in to Computer2. What should you identify?

Your network contains an Active Directory named contoso.com. The domain contains two computers named Computer1 and Computer2 that run Windows 10. Folder Redirection is configured for a domain user named

You need to implement an ADMX-backed policy. Which profile type should you use?

You are creating a device configuration profile in Microsoft Intune. You need to implement an ADMX-backed policy. Which profile type should you use? A. Identity protection B. Custom C. Device

You need to upgrade the computers to Windows 10 Enterprise. What should you configure in Intune?

You have computers that run Windows 10 Pro. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune. You need to upgrade the computers

You need to ensure that the policies can target the devices based on their version of Android or iOS. What should you configure first?

Your company uses Microsoft Intune. More than 500 Android and iOS devices are enrolled in the Intune tenant. You plan to deploy new Intune policies. Different policies will apply depending

You redirect Windows known folders to Microsoft OneDrive for Business. Which folder will be included in the redirection?

You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune. You redirect Windows known folders to

You need to configure the policy to prevent access to Exchange Online unless is connecting from a device that is hybrid Azure AD-joined. Which settings should you configure?

Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD). You have a Microsoft 365 subscription. You create a conditional access policy for

You need to meet the technical requirements for the IT department. What should you do first?

You need to meet the technical requirements for the IT department. What should you do first? A. From the Azure Active Directory blade in the Azure portal, enable Seamless single

You need to meet the technical requirements for the iOS devices. Which object should you create in Intune?

You need to meet the technical requirements for the iOS devices. Which object should you create in Intune? A. A compliance policy B. An app protection policy C. A Deployment

What should you use to meet the technical requirements for Azure DevOps?

What should you use to meet the technical requirements for Azure DevOps? A. An app protection policy B. Windows Information Protection (WIP) C. Conditional access D. A device configuration profile

You install a feature update on a computer that runs Windows 10. How many days do you have to roll back the update?

You install a feature update on a computer that runs Windows 10. How many days do you have to roll back the update? A. 5 B. 10 C. 14 D.

What is the best recommendation to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

Your company standardizes on Windows 10 Enterprise for all users. Some users purchase their own computer from a retail store. The computers run Windows 10 Pro. You need to recommend

You have a computer named Computer1 that is in SubnetA. From which hosts will Computer1 download updates?

Your network contains an Active Directory forest. The forest contains a single domain and three sites named Site1, Site2, and Site3. Each site is associated to two subnets. Site1 contains

You need to ensure that config.ps1 runs after feature updates are installed on Computer5. Which file should you modify on Computer5?

You have a computer named Computer5 that has Windows 10 installed. You create a Windows PowerShell script named config.ps1. You need to ensure that config.ps1 runs after feature updates are

You need to recommend a deployment method for the laptops that will retain their installed applications. The solution must minimize how long it takes to perform the deployment. What should you include in the recommendation?

Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD). The domain contains 500 laptops that run Windows 8.1 Professional. The users of

You need to ensure that the new computers will be configured to have the correct product key during the installation. What should you configure?

Your company has a Microsoft Azure Active Directory (Azure AD) tenant. The company has a Volume Licensing Agreement and uses a product key to activate Windows 10. You plan to

You need to ensure that you can use Log Analytics to query events from Computer1. What should you do on Computer1?

You have a Microsoft Azure subscription that contains an Azure Log Analytics workspace. You deploy a new computer named Computer1 that runs Windows 10. Computer1 is in a workgroup. You

Solution: You configure roaming user profiles. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals.

Solution: You configure Enterprise State Roaming. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals.

Solution: From the Windows Update settings, you enable Configure Automatic Updates, select 3 ­ Auto download and notify for Install, and then enter a time. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals.

Solution: From the Device Installation settings in a Group Policy object (GPO), you enable Specify search order for device driver source locations, and then you select Do not search Windows Update. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals.

Solution: From the Settings app, you clear the Give me updates for other Microsoft products when I update Windows check box. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals.

Solution: From the Device Installation and Restrictions settings in a Group Policy object (GPO), you enable Prevent installation of devices using drivers that match these device setup classes, and then you enter the device GUID. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals.

You need to enable self-service password reset on the sign-in screen. Which settings should you configure from the Microsoft Intune blade?

You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (AD) and enrolled in Microsoft Intune. You need to enable self-service password reset

You need to automatically register all the existing computers to Azure AD and enroll the computers in Intune. The solution must minimize administrative effort. What should you use?

Your network contains an Active Directory domain. The domain contains 2,000 computers that run Windows 10. You implement hybrid Microsoft Azure Active Directory (Azure AD) and Microsoft Intune. You need

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

You have 10 computers that run Windows 7 and have the following configurations: A single MBR disk A disabled TPM chip Disabled hardware virtualization UEFI firmware running in BIOS mode

You need to ensure that feature and quality updates install automatically during a maintenance window. Solution: From the Maintenance Scheduler settings, you configure Automatic Maintenance Activation Boundary. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals.

Solution: From the Windows Update settings, you enable Configure Automatic Updates, select 4-Auto download and schedule the install, and then enter a time. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals.

Solution: From the Maintenance Scheduler settings, you configure Automatic Maintenance Random Delay. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals.

Solution: You create a new Windows AutoPilot self-deploying deployment profile. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals.

Solution: You create a new Windows AutoPilot user-driven deployment profile. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals.

Solution: You perform a remote Windows AutoPilot Reset. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals.

You need to review the servicing status of a computer. What should you do?

You manage 1,000 computers that run Windows 10. All the computers are enrolled in Microsoft Intune. You manage the servicing channel settings of the computers by using Intune. You need

You need to prepare for the deployment of the Phoenix office computers. What should you do first?

You need to prepare for the deployment of the Phoenix office computers. What should you do first? A. Extract the hardware ID information of each computer to a CSV file

What should you configure to meet the technical requirements for the Azure AD-joined computers?

What should you configure to meet the technical requirements for the Azure AD-joined computers? A. Windows Hello for Business from the Microsoft Intune blade in the Azure portal. B. The