MD-100 100: Modern Device Management 5

Question 1

A Windows 10 device managed by Intune needs to have a specific registry key set that is not available in standard Intune profiles. What is the BEST approach?

Accepted Answer

Create a custom OMA-URI configuration profile

Answer

Custom OMA-URI profiles in Intune allow administrators to configure settings using Windows MDM CSP paths, enabling registry-level configurations not exposed in the GUI.

Question 2

Which Windows Autopilot deployment mode is used to pre-configure a device for a specific user before the user receives it?

Accepted Answer

Pre-provisioning (White Glove) Mode

Answer

Pre-provisioning (White Glove) mode allows technicians or partners to complete the device setup phase so users only need to complete the user-specific portion of OOBE.

Question 3

An administrator notices that a Windows 10 device's Intune policies are not applying. Which command forces an immediate Intune policy sync on the device?

Accepted Answer

From Company Portal: click 'Sync' or use Settings > Accounts > Access work or school > Sync

Answer

Users or admins can force an Intune policy sync by clicking Sync in the Company Portal app or navigating to Settings > Accounts > Access work or school and selecting the account then Sync.

Question 4

Which Windows 10 feature uses machine learning to detect and block zero-day threats at the endpoint level?

Accepted Answer

Windows Defender Antivirus cloud-delivered protection

Answer

Cloud-delivered protection in Windows Defender Antivirus uses Microsoft's cloud intelligence and machine learning to detect emerging and zero-day threats in near real-time.

Question 5

A company requires that Windows 10 devices automatically encrypt drives when the device is enrolled in Intune. Which Intune setting enables silent BitLocker encryption?

Accepted Answer

Configure BitLocker with 'Hide prompt about third-party encryption' enabled in Endpoint Protection profile

Answer

Silent BitLocker encryption is achieved by configuring Endpoint Protection profile with the option to hide third-party encryption prompts and enabling auto-encryption for compliant devices.

MD-100 - Microsoft Windows Client Practice Test

MD-100 - Microsoft Windows Client Practice Test

MD-100 100: Modern Device Management 5