MD-101 Online Practice Questions and Answers

Correct Answer: B

Note 1: Intune offers integrated report views for the Windows update ring policies you deploy. These views display details about the update ring deployment and status:

1.

Sign in to Microsoft Endpoint Manager admin center.

2.

Select Devices > Monitor. Then under Software updates select Per update ring deployment state and choose the deployment ring to review.

Note 2: Use the Windows 10 and later feature updates (Organizational) report

To open the Windows 10 and later feature updates report and view device details for a specific feature updates profile:

In the admin center, go to Reports > Windows updates > select the Reports tab > select Windows Feature Update Report.

Note 3: To help you monitor and troubleshoot update deployments, Intune supports the following reporting options:

Reports in Intune:

Windows 10 and later update rings Use a built-in report that's ready by default when you deploy update rings to your devices.

Windows 10 and later feature updates In public preview Use two built-in reports that work together to gain a deep picture of update status and issues.

Reference:

https://docs.microsoft.com/en-us/intune/windows-update-compliance-reports

Correct Answer: B

The device name uses a single random number (applied by %RAND:1%). This allows for 10 unique values (0 – 9).

Correct Answer: B

Reference: https://docs.microsoft.com/en-us/sccm/sum/deploy-use/automatically-deploy-software-updates

Correct Answer: AE

E: Need to use the UEFI mode to get the UEFI Security features.

A: If you want to ensure that your drive boots into a certain mode, use drives that you've preformatted with the GPT file format for UEFI mode, or the MBR file format for BIOS mode. When the installation starts, if the PC is booted to the wrong mode, Windows installation will fail. To fix this, restart the PC in the correct firmware mode.

Reference: https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/boot-to-uefi-mode-or-legacy-bios-mode

Correct Answer: AB

Once you have entered your corporate device indentifiers those devices are automatically enrolled as "Corporate Devices". The next step is to block enrolment of personal devices. You can do this by navigating to Intune > Device Enrollment > Enrollment Restrictions. Under Device Type Restrictions click on Default and then navigate to "Properties". Under properties click "Configure Platforms" and next to android change the selection from allow to block for personally owned devices and click ok

Reference: https://triplesixseven.com/block-personal-android-devices-from-enrolling-in-intune/

Correct Answer:

Step 1: Obtain the root certificate.

Export the root certificate from the Enterprise CA.

To authenticate a device with VPN, WiFi, or other resources, a device needs a root or intermediate CA certificate.

Step 2: From the Microsoft Endpoint Manager admin center, create a trusted certificate profile

Create a trusted certificate profile

1.

Sign in to the Microsoft Endpoint Manager admin center.

2.

Select and go to Devices > Configuration profiles > Create profile.

3.

Enter the following properties:

Platform:

Profile: Select Trusted certificate. Or, select Templates > Trusted certificate.

Select Create.

4.

Etc.

Step 3: From the Microsoft Endpoint Manager admin center, create a PKCS certificate profile

Create a PKCS certificate profile

1.

Sign in to the Microsoft Endpoint Manager admin center.

2.

Select and go to Devices > Configuration profiles > Create profile.

3.

Enter the following properties:

Platform:

Profile: Select PKCS certificate. Or, select Templates > PKCS certificate.

Select Create.

4.

Etc.

Reference: https://docs.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure

Correct Answer:

Step 1: Add App1 to DS1 Add an application in the MDT console.

Step 2: Identify the GUID of App1.

Step 3: Modify the CustomSettings.ini

It is possible in the CustomSettings.ini file, to check the default program to add the following line:

ApplicationsXXX ={GUID-APPLICATION}

or to force the installation of the application box checked and grayed out:

MandatoryApplicationsXXX ={GUID-APPLICATION}

Reference:

https://rdr-it.com/en/mdt-installation-of-applications-when-deploying-windows/

Correct Answer:

Box 1: Modify the Bootstrap.ini file.

Add this to your bootstrap.ini file and then update the deployment share and use the new boot media created in that process:

SkipBDDWelcome=YES Box 2: Modify the CustomSettings.ini file.

SkipBDDWelcome Indicates whether the Welcome to Windows Deployment wizard page is skipped.

For this property to function properly it must be configured in both CustomSettings.ini and BootStrap.ini. BootStrap.ini is processed before a deployment share

(which contains CustomSettings.ini) has been selected.

Box 3: Update the deployment share.

Reference:

https://docs.microsoft.com/en-us/mem/configmgr/mdt/toolkit-reference#table-6-deployment-wizard-pages

Correct Answer:

Box 1: Download mode

Download mode specifies the download method that Delivery Optimization uses to download content.

Box 2: A configuration profile

Delivery Optimization settings are configured as part of the device configuration profile.

Reference:

https://docs.microsoft.com/en-us/mem/intune/configuration/delivery-optimization-settings

https://docs.microsoft.com/en-us/mem/intune/configuration/delivery-optimization-windows

Correct Answer:

The Los Angeles office has 500 developers. The developers work flexible hours ranging from 11 AM to 10 PM.