Managing Modern Desktops (MD-101) v1.0 Flashcards

Your company has a number of Windows 10 Microsoft Azure Active Directory (Azure AD) joined workstations. These workstations have been enrolled in Microsoft Intune. You are responsible for ensuring that the workstations can only execute programs that you have specifically authorized. Solution: You make use of Windows Defender Application Guard. Does the solution meet the goal?

Answer: No

Use Windows Defender Application Control instead (WDAC). Windows Defender Application Control and code integrity protection based on virtualization.

You are presently using Microsoft Azure Log Analytics' Antimalware Assessment product. You have discovered a device without real-time protection after accessing the Protection Status dashboard. Which of the following may be the cause of this?

Answer: Windows Defender has been disabled

On most devices, Microsoft Defender Antivirus serves as the primary antivirus and antimalware program.

You are presently using Microsoft Azure Log Analytics' Antimalware Assessment product. You discover a device that is not reporting when you enter the Protection Status dashboard. Which of the following may be the cause of this?

Answer: You need to install the Azure Diagnostic extension

An agent in Azure Monitor called Azure Diagnostics extension gathers monitoring information from the guest operating system of Azure computing resources, including virtual machines.

To determine if it is correct, you must take into account the underlined portion. Hyper-V must be installed on Windows 10 machines in order to activate Windows Defender Credential Guard. In the event that the underlined part is accurate, choose "No adjustment necessary." Choose the accurate answer if the underlined portion is accurate. What should you put on the machines to install?

Answer: No adjustment required

No adjustment is required — Windows Defender Credential Guard depends on virtualization-based security, which requires the Hyper-V platform to be installed. The statement as underlined is already accurate, so no other component needs to be added.

One hundred Windows 10 devices linked to Microsoft Azure Active Directory (Azure AD) are under your management. Make sure users cannot connect their own computers to Azure AD. Which of the below activities ought you to perform?

Answer: You should configure the Enrollment restriction settings via the Azure Active Directory admin center

A central location for managing device IDs and keeping track of associated event data is provided by Azure Active Directory (Azure AD).

To determine if it is correct, you must take into account the underlined portion. You must access the For Developers setting in the Windows 10 Settings app under Update & Security to enable sideloading. In the event that the underlined part is accurate, choose "No adjustment necessary." Choose the accurate answer if the underlined portion is accurate.

Answer: No adjustment required

How to allow Windows 10 to sideload apps on your computer 1. Open Settings 2. Click on Update & Security 3. Click on For developers 4. Under "Use developer features," select the Sideload apps option.

To determine if it is correct, you must take into account the underlined portion. Run the Install-Package cmdlet in Windows 10 to allow sideloading of a LOB application. In the event that the underlined part is accurate, choose "No adjustment necessary." Choose the accurate answer if the underlined portion is accurate.

Answer: Add-AppxPackage

Add-AppxPackage is the correct PowerShell cmdlet for sideloading a line-of-business AppX application onto Windows 10. Install-Package, Install-PackageProvider, and Save-Package manage general software packages or providers, not the installation of AppX app packages.