MD-102 Configuring connectivity 2 — Questions and Answers

Question 1: Which Windows feature allows you to connect a device to a corporate network securely over the internet?

DirectAccess
VPN (Correct answer)
Wi-Fi Direct
Bluetooth PAN

Correct answer: VPN

VPN (Virtual Private Network) allows devices to securely connect to a corporate network over the internet by encrypting traffic through a tunnel.

A VPN creates an encrypted tunnel between the client device and the corporate network gateway, allowing secure remote access. Windows supports multiple VPN protocols including IKEv2, SSTP, L2TP/IPsec, and PPTP. DirectAccess is also an option for domain-joined devices but requires more infrastructure and is being phased out in favour of Always On VPN.

Question 2: In Microsoft Intune, which profile type is used to configure Wi-Fi settings and push them to managed Windows devices?

Endpoint protection profile
Device configuration profile (Correct answer)
Compliance policy
Update ring

Correct answer: Device configuration profile

Device configuration profiles in Intune are used to push settings such as Wi-Fi networks, VPN connections, email, and certificates to managed devices.

In Microsoft Intune, device configuration profiles allow administrators to define and deploy settings like Wi-Fi networks, VPN connections, certificate deployments, and more to enrolled devices. These profiles are assigned to users or device groups and applied automatically upon enrollment or policy refresh. Compliance policies enforce rules but do not push configuration settings.

Question 3: An administrator needs to ensure that Windows 11 devices automatically connect to the corporate VPN whenever a user signs in. Which solution should be used?

Split-tunnel VPN
Always On VPN (Correct answer)
Per-app VPN only
DirectAccess

Correct answer: Always On VPN

Always On VPN automatically establishes a VPN connection when a user signs in, ensuring seamless and persistent secure connectivity without manual intervention.

Always On VPN is Microsoft's modern replacement for DirectAccess. It uses standard VPN protocols and automatically connects based on user sign-in or device triggers without user interaction. It supports both device-level and user-level tunnels and integrates with Intune for deployment. DirectAccess requires domain join and specific infrastructure, whereas Always On VPN works with Azure AD-joined devices.

Question 4: Which DNS feature helps Windows clients resolve internal corporate hostnames when connected through Always On VPN?

DNS over HTTPS
NRPT (Name Resolution Policy Table) (Correct answer)
Dynamic DNS
DNS Round Robin

Correct answer: NRPT (Name Resolution Policy Table)

The Name Resolution Policy Table (NRPT) defines rules that control which DNS server is used for specific namespaces, ensuring internal hostnames resolve correctly over the VPN tunnel.

NRPT allows administrators to specify that DNS queries for certain namespaces (such as .corp.contoso.com) are sent to specific internal DNS servers rather than the public DNS servers. This is essential for Always On VPN deployments so that internal resources are resolvable when connected. It is configured through Group Policy or Intune device configuration profiles.

Question 5: An endpoint administrator wants to configure a Windows device to use a proxy server for internet traffic. Which Intune profile type supports this configuration?

Device restrictions profile
Device configuration profile (Wi-Fi)
Device configuration profile (Proxy settings) (Correct answer)
Compliance policy

Correct answer: Device configuration profile (Proxy settings)

Intune device configuration profiles include proxy settings that let administrators define proxy server address, port, and bypass rules for Windows devices.

Within Intune device configuration profiles, administrators can configure proxy settings for Windows devices, specifying the proxy server URL, port, and which addresses should bypass the proxy. This ensures consistent internet access policies across all managed devices. Compliance policies check device state but do not push proxy configurations.

Question 6: Which Windows 11 feature enables secure sharing of files and printers between devices on the same local network?

Network Discovery
WorkFolders
File Sharing (SMB) (Correct answer)
OneDrive sync

Correct answer: File Sharing (SMB)

SMB-based File Sharing in Windows allows devices on the same network to share files and printers directly, using share permissions and NTFS permissions for access control.

Server Message Block (SMB) is the protocol Windows uses for local network file and printer sharing. Shared folders and printers are accessible to other network devices using UNC paths. Network Discovery must be enabled for devices to see each other in Network Explorer, but file sharing itself depends on SMB and configured share permissions. WorkFolders is a sync service for corporate files rather than ad-hoc local sharing.

MD-102 Configuring connectivity 2

Which Windows feature allows you to connect a device to a corporate network securely over the internet?