MD-100 100: Modern Device Management 4 — Questions and Answers
Question 1: Which Windows 10 feature provides hardware-based isolation for the Microsoft Edge browser to protect against malicious websites?
- Windows Defender SmartScreen
- Application Guard for Microsoft Edge (Correct answer)
- Controlled Folder Access
- Windows Sandbox
Correct answer: Application Guard for Microsoft Edge
Application Guard for Microsoft Edge opens untrusted sites in an isolated Hyper-V container, preventing malware from accessing the host system.
Question 2: An administrator uses Intune to configure a VPN profile for Windows 10 devices. Which connection type supports automatic (Always On) VPN?
- PPTP
- IKEv2 (Correct answer)
- L2TP
- SSTP
Correct answer: IKEv2
IKEv2 is the required VPN protocol for Always On VPN on Windows 10, providing automatic connection without user intervention.
Question 3: Which Azure AD feature allows administrators to require that only compliant or Hybrid Azure AD Joined devices can access corporate resources?
- Azure AD Identity Protection
- Conditional Access with device compliance requirement (Correct answer)
- Azure AD Privileged Identity Management
- Azure Information Protection
Correct answer: Conditional Access with device compliance requirement
Conditional Access policies can require device compliance or Hybrid Azure AD Join as a condition for granting access to cloud resources.
Question 4: A Windows 10 device enrolled in Intune needs a certificate for Wi-Fi authentication. Which Intune profile type delivers certificates to devices?
- Device Restriction Profile
- SCEP or PKCS Certificate Profile (Correct answer)
- Endpoint Protection Profile
- Administrative Templates
Correct answer: SCEP or PKCS Certificate Profile
SCEP (Simple Certificate Enrollment Protocol) and PKCS certificate profiles in Intune deploy certificates to devices for authentication purposes.
Question 5: Which Windows 10 built-in tool provides a real-time view of device health, including boot performance and reliability scores?
- Task Manager
- Reliability Monitor (Correct answer)
- Resource Monitor
- Performance Monitor
Correct answer: Reliability Monitor
Reliability Monitor tracks system stability over time and shows a reliability score with details about errors, warnings, and informational events.
Question 6: An organization wants to prevent users from enrolling personal devices into Intune. Which Intune feature restricts enrollment by device type or platform?
- Device Compliance Policy
- Enrollment Restrictions (Correct answer)
- Device Category Rules
- Conditional Access Policy
Correct answer: Enrollment Restrictions
Enrollment Restrictions in Intune control which device platforms, OS versions, and personally-owned (BYOD) devices can enroll in MDM.
Question 7: Which Windows 10 update servicing channel receives feature updates approximately every 6 months and is recommended for most business users?
- Windows Insider Program (Dev Channel)
- Semi-Annual Channel (Correct answer)
- Long-Term Servicing Channel (LTSC)
- Monthly Enterprise Channel
Correct answer: Semi-Annual Channel
The Semi-Annual Channel delivers feature updates twice per year and is the standard channel recommended for mainstream business deployments.
MD-100 100: Modern Device Management 4
Which Windows 10 feature provides hardware-based isolation for the Microsoft Edge browser to protect against malicious websites?