MD-100 100: Modern Device Management 2

Question 1

A company wants to enforce BitLocker encryption on all Windows 10 devices enrolled in Intune. Which Intune policy type should be configured?

Accepted Answer

Endpoint Protection Configuration Profile

Answer

Endpoint Protection Configuration Profiles in Intune include BitLocker settings to enforce disk encryption on managed Windows devices.

Question 2

Which Windows 10 edition is the MINIMUM requirement for Azure AD Join?

Accepted Answer

Windows 10 Pro

Answer

Azure AD Join is supported on Windows 10 Pro, Enterprise, and Education editions, with Pro being the minimum required edition.

Question 3

An administrator needs to deploy a required app to all enrolled Intune devices without user interaction. Which assignment type should be used?

Accepted Answer

Required

Answer

The 'Required' assignment type in Intune automatically installs the app on targeted devices without requiring user action.

Question 4

A Windows 10 device is Hybrid Azure AD Joined. What does this mean?

Accepted Answer

The device is joined to on-premises AD and registered in Azure AD

Answer

Hybrid Azure AD Join means the device is joined to on-premises Active Directory AND registered/joined in Azure AD, enabling both traditional and cloud management.

Question 5

Which tool allows administrators to configure Windows 10 devices using XML-based provisioning packages without MDM enrollment?

Accepted Answer

Windows Configuration Designer

Answer

Windows Configuration Designer creates provisioning packages (.ppkg files) that can configure Windows 10 devices without requiring MDM enrollment.

MD-100 - Microsoft Windows Client Practice Test

MD-100 - Microsoft Windows Client Practice Test

MD-100 100: Modern Device Management 2