newly updated Microsoft MD-101 dumps

Use the latest updated Lead4pass MD-101 dumps https://www.leads4pass.com/md-100.html (331 Q&A) to help you successfully pass the Managing Modern Desktops exam.

According to Windows statistics, more than 1.0 billion people around the world are using the Windows operating system.

Microsoft 365 Certified: Modern Desktop Administrator Associate certification exam is designed to be responsible for installation, configuration, management, deployment, and other related skills exams in the Windows field.

And MD-101MD-100 belong to the designated exam code of the Microsoft 365 Certified: Modern Desktop Administrator Associate certification exam.

Next, read some of the latest Microsoft MD-101 dumps exam questions that Lead4Pass shared for free

Number of exam questionsExam nameFromRelease timeLast update
15Exam MD-101: Managing Modern DesktopsLead4apssNov 28, 2022MD-101 dumps
New Question 1:

To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

new md-101 dumps questions 1

Correct Answer:

new md-101 dumps questions 1-1

Reference: https://docs.microsoft.com/en-us/intune/device-profile-assign

New Question 2:

You have a Microsoft Intune subscription.

You have devices enrolled in Intune as shown in the following table.

new md-101 dumps questions 2

An app named App1 is installed on each device.

What is the minimum number of app configuration policies required to manage App1?

A. 1

B. 2

C. 3

D. 4

E. 5

Correct Answer: B

Reference: https://docs.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-overview

New Question 3:

Your company implements Microsoft Azure Active Directory (Azure AD), Microsoft 365, Microsoft Intune, and Azure Information Protection. The company\’s security policy states the following:

1.

Personal devices do not need to be enrolled in Intune.

2.

Users must authenticate by using a PIN before they can access corporate email data.

3.

Users can use their personal iOS and Android devices to access corporate cloud services.

4.

Users must be prevented from copying corporate email data to a cloud storage service other than Microsoft OneDrive for Business.

You need to configure a solution to enforce the security policy.

What should you create?

A. a data loss prevention (DLP) policy from the Security and Compliance admin center

B. a supervision policy from the Security and Compliance admin center

C. an app protection policy from the Intune admin center

D. a device configuration profile from the Intune admin center

Correct Answer: C

References: https://docs.microsoft.com/en-us/intune/app-protection-policy

New Question 4:

Your network contains an Active Directory domain. The domain contains 10 computers that run Windows 8.1 and use local user profiles.

You deploy 10 new computers that run Windows 10 and join the computers to the domain.

You need to migrate the user profiles from Windows 8.1 computers to Windows 10 computers.

What should you do?

A. From the Windows 8.1 computer of each user, run imagex.exe/capture, and then from the Windows 10 computer of each user, run imagex.exe/apply.

B. Configure roaming user profiles for the users. Instruct the users to first sign in to and out of their Windows 8.1 computer and then sign in to their Windows 10 computer.

C. From the Windows 8.1 computer of each user, run scanstate.exe, and then from the Windows 10 computer of each user, run loadstate.exe.

D. Configure Folder Redirection for the users. Instruct the users to first sign in to and out of their Windows 8.1 computer, and then to sign in to their Windows 10 computer.

Correct Answer: C

The ScanState command is used with the User State Migration Tool (USMT) 10.0 to scan the source computer, collect the files and settings, and create a store.

Reference: https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-scanstate-syntax https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-loadstate-syntax

New Question 5:

Your company has a Microsoft Azure Active Directory (Azure AD) tenant. All users in the company are licensed for Microsoft Intune.

You need to ensure that the users enroll their iOS devices in Intune.

What should you configure first?

A. A Device Enrollment Program (DEP) token.

B. An Intune device configuration profile.

C. A Device enrollment manager (DEM) account.

D. An Apple MDM Push certificate.

Correct Answer: A

Reference: https://docs.microsoft.com/en-us/intune/device-enrollment-program-enroll-ios

New Question 6:

HOTSPOT

Your network contains an Active Directory domain. The domain contains 1,200 computers that run Windows 8.1.

You deploy an Upgrade Readiness solution in Microsoft Azure and configure the computers to report to Upgrade Readiness.

From Upgrade Readiness, you open a table view of the applications.

You need to filter the view to show only applications that can run successfully on Windows 10.

How should you configure the filter in Upgrade Readiness? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

new md-101 dumps questions 6

Correct Answer:

new md-101 dumps questions 6-1

References: https://docs.microsoft.com/en-us/windows/deployment/upgrade/upgrade-readiness-resolve-issues

New Question 7:

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen.

Your company has an Azure Active Directory (Azure AD) tenant named contoso.com that contains several Windows 10 devices.

When you join new Windows 10 devices to contoso.com, users are prompted to set up a four-digit pin.

You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 10 devices to contoso.com.

Solution: From the Azure Active Directory admin center, you configure automatic mobile device management (MDM) enrollment. From the Device Management admin center, you create and assign a device restrictions profile.

Does this meet the goal?

A. Yes

B. No

Correct Answer: B

Instead, from the Azure Active Directory admin center, you configure automatic mobile device management (MDM) enrollment. From the Device Management admin center, you configure the Windows Hello for Business enrollment options.

References: https://docs.microsoft.com/en-us/intune/protect/windows-hello

New Question 8:

You have a public computer named Public1 that runs Windows 10.

Users use Public1 to browse the internet by using Microsoft Edge.

You need to view events associated with website phishing attacks on Public1.

Which Event Viewer log should you view?

A. Applications and Services Logs > Microsoft\Windows > DeviceGuard > Operational

B. Applications and Services Logs > Microsoft > Windows > Security-Mitigations > User Mode

C. Applications and Services Logs > Microsoft > Windows > SmartScreen > Debug

D. Applications and Services Logs > Microsoft > Windows > Windows Defender > Operational

Correct Answer: C

Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview#viewing-windows-event-logs-for-microsoft-defender-smartscreen

New Question 9:

You have devices enrolled in Microsoft Intune as shown in the following table.

new md-101 dumps questions 9

On which devices can you apply app configuration policies?

A. Device1, Device2, Device3, and Device4

B. Device2 only

C. Device3 and Device4 only

D. Device1 and Device2 only

E. Device2, Device3, and Device4 only

Correct Answer: C

App configuration policies are only required for iOS/iPadOS or Android apps

Reference: https://docs.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-overview

New Question 10:

Your company plans to deploy tablets to 50 meeting rooms.

The tablets run Windows 10 and are managed by using Microsoft Intune. The tablets have an application named App1.

You need to configure the tablets so that any user can use App1 without having to sign in. Users must be prevented from using other applications on tablets.

Which device configuration profile type should you use?

A. Kiosk

B. Endpoint protection

C. Identity protection

D. Device restrictions

Correct Answer: A

Reference: https://docs.microsoft.com/en-us/windows/configuration/kiosk-single-app

New Question 11:

Your network contains an Active Directory domain. The functional level of the forest and the domain is Windows Server 2012 R2.

The domain contains 500 computers that run Windows 10. All the computers are managed by using Microsoft System Center 2012 R2 Configuration Manager.

You need to enable co-management.

What should you do first?

A. Deploy the Microsoft Intune client.

B. Raise the forest’s functional level.

C. Upgrade Configuration Manager to Current Branch.

D. Raise the domain functional level.

Correct Answer: C

Co-management requires Configuration Manager version 1710 or later.

References: https://docs.microsoft.com/en-us/sccm/comanage/overview#prerequisites

New Question 12:

You need to assign the same deployment profile to all the computers that are configured by using Windows Autopilot.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Join the computers to Microsoft Azure Active Directory (Azure AD)

B. Assign a Windows Autopilot deployment profile to a group

C. Join the computers to an on-premises Active Directory domain

D. Create a Microsoft Azure Active Directory (Azure AD) group that has dynamic membership rules and uses the operating system tag

E. Create a Group Policy object (GPO) that is linked to a domain

F. Create a Microsoft Azure Active Directory (Azure AD) group that has dynamic membership rules and uses the ZTDID tag

Correct Answer: BF

References: https://www.petervanderwoude.nl/post/automatically-assign-windows-autopilot-deployment-profile-to-windows-autopilot-devices/

New Question 13:

You need to capture the required information for the sales department computers to meet the technical requirements. Which Windows PowerShell command should you run first?

A. Install-Module WindowsAutoPilotIntune

B. Install-Script Get-WindowsAutoPilotInfo

C. Import-AutoPilotCSV

D. Get-WindowsAutoPilotInfo

Correct Answer: A

References: https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/existing-devices

New Question 14:

HOTSPOT

Your network contains an Active Directory domain named contoso.com that syncs to Azure Active Directory (Azure AD). The domain contains computers that run Windows 10. The computers are configured as shown in the following table.

new md-101 dumps questions 14

All the computers are enrolled in Microsoft Intune.

You configure the following Maintenance Scheduler settings in the Default Domain Policy:

1.

Turn off auto-restart for updates during active hours: Enabled

2.

Active hours start: 08:00

3.

Active hours end: 22:00

In Intune, you create a device configuration profile named Profile1 that has the following OMA-URI settings:

1.

./Device/Vendor/MSFT/Policy/Config/ControlPolicyConflict/MDMWinsOverGP set to value 1

2.

./Device/Vendor/MSFT/Policy/Config/Update/ActiveHoursStart set to value 9

3.

./Device/Vendor/MSFT/Policy/Config/Update/ActiveHoursEnd set to value 21

You assign Profile to Group 1.

How are the active hours configured on Computer1 and Computer2? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

new md-101 dumps questions 14-1

Correct Answer:

new md-101 dumps questions 14-2

Reference: https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-controlpolicyconflict

New Question 15:

HOTSPOT

Your company has an infrastructure that has the following:

1.

A Microsoft 365 tenant

2.

An Active Directory forest

3.

Microsoft Intune

4.

A Key Management Service (KMS) server

5.

A Windows Deployment Services (WDS) server

6.

A Microsoft Azure Active Directory (Azure AD) Premium tenant

The company purchases 100 new computers that run Windows 10.

You need to ensure that the new computers are joined automatically to Azure AD by using Windows Autopilot.

What should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

new md-101 dumps questions 15

Correct Answer:

new md-101 dumps questions 15-1

Reference: https://docs.microsoft.com/en-us/intune/enrollment-autopilot


We selflessly share some of the MD-101 dumps exam questions to help you stay up to date with the exam, you should use the full Microsoft MD-101 dumps https://www.leads4pass.com/md-101.html to pass the Managing Modern Desktops exam for you prepare.