You have a Microsoft 365 E5 subscription.
You have a Microsoft Intune enrollment profile for Android Enterprise devices that has the following settings:
• Name: Profile1
• Token type: Corporate-owned, fully managed
You need to enroll a new Android device in Intune by using Profile1. What should you use to enroll the device?
-
You have a Microsoft 365 subscription. The subscription contains 1,000 computers that run Windows 11 and are enrolled in Microsoft Intune.
You plan to create a compliance policy that has the following options enabled:
• Require Secure Boot to be enabled on the device.
• Require the device to be at or under the machine risk score.
Which two Compliance settings should you configure? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
You have a Microsoft 365 E5 subscription and use the Microsoft Intune Suite. The subscription contains a Microsoft Sharepoint Online site named Site! and 500 Windows devices enrolled in Intune
You have the apps shown in the following table.
You need to deploy the apps to the devices by using Intune.
For which apps must you upload app package files before you can deploy them?
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has an Azure AD tenant named contoso.com that contains several Windows 10 devices.
When you join new Windows 10 devices to contoso.com, users are prompted to set up a four-digit pin.
You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 10 devices to contoso.com.
Solution: From the Microsoft Entra admin center, you configure the Authentication methods.
Does this meet the goal?
You have a Microsoft 365 subscription that uses Microsoft Intune Suite.
You use Microsoft Intune to manage devices.
You need to configure an update ring that meets the following requirements:
• Fixes and improvements to existing Windows functionality can be deferred for 14 days but will install automatically seven days after that date.
• The installation of new Windows features can be deferred for 90 days but will install automatically 10 days after that date.
• Devices must restart automatically three days after an update is installed.
How should you configure the update ring? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Your network contains an Active Directory domain.
The domain contains four computer named Computer 1. Computet2. Computed, and Computer4 that run Windows 10. Vou perform the following actions:
• On Computer1, you install Windows Admin Center and configure Windows Defender Firewall to allow incoming communication over TCP pons 80.443. and 6516.
• On Computed, you run the Enable-PS Remoting cmdlet.
• On Computer 3, you configure Windows Defender firewall to allow Windows Remote Management (WinRM) traffic
• On Computer4, you run the winrm quickconfig command.
You need to manage the computers remotely by using Windows Admin Center.
From which computers can you connect to Windows Admin Center, and which computers can you manage by using Windows Admin Center? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have a Microsoft 365 subscription that uses Microsoft Intune Endpoint Privilege Management (EPM). The subscription contains a group named Group1.
You have a trusted third-party app named App1 that is updated monthly. Users require elevated privileges to run App1.
You need to configure an EPM elevation rule that enables the members of Group1 to run App1. The solution must meet the following requirements:
• Allow elevation without administrator review.
• Require users to acknowledge each elevation event
You have a Microsoft 365 E5 subscription.
You create an app protection policy for Android devices named Policy1 as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.
The domain syncs to a Microsoft Entra tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)
User2 fails to authenticate to the Microsoft Entra tenant when signing in as user2@fabrikam.com.
You need to ensure that User2 can access the resources in Microsoft Entra ID.
Solution: From the on-premises Active Directory domain, you assign User2 the Allow logon locally user right. You instruct User2 to sign in as user2@fabrikam.com .
Does this meet the goal?
You have a Microsoft 365 subscription that contains Windows 11 devices enrolled in Microsoft Intune.
You need to use Device query to identify whether a critical security patch was installed on a device.
Which table should you target?
