MD-100 100: Modern Device Management 4

Question 1

Which Windows 10 feature provides hardware-based isolation for the Microsoft Edge browser to protect against malicious websites?

Accepted Answer

Application Guard for Microsoft Edge

Answer

Application Guard for Microsoft Edge opens untrusted sites in an isolated Hyper-V container, preventing malware from accessing the host system.

Question 2

An administrator uses Intune to configure a VPN profile for Windows 10 devices. Which connection type supports automatic (Always On) VPN?

Accepted Answer

IKEv2

Answer

IKEv2 is the required VPN protocol for Always On VPN on Windows 10, providing automatic connection without user intervention.

Question 3

Which Azure AD feature allows administrators to require that only compliant or Hybrid Azure AD Joined devices can access corporate resources?

Accepted Answer

Conditional Access with device compliance requirement

Answer

Conditional Access policies can require device compliance or Hybrid Azure AD Join as a condition for granting access to cloud resources.

Question 4

A Windows 10 device enrolled in Intune needs a certificate for Wi-Fi authentication. Which Intune profile type delivers certificates to devices?

Accepted Answer

SCEP or PKCS Certificate Profile

Answer

SCEP (Simple Certificate Enrollment Protocol) and PKCS certificate profiles in Intune deploy certificates to devices for authentication purposes.

Question 5

Which Windows 10 built-in tool provides a real-time view of device health, including boot performance and reliability scores?

Accepted Answer

Reliability Monitor

Answer

Reliability Monitor tracks system stability over time and shows a reliability score with details about errors, warnings, and informational events.

MD-100 - Microsoft Windows Client Practice Test