MD-102 Configuring connectivity 3

Question 1

Which Intune feature allows administrators to deploy trusted root certificates to Windows devices so they trust internal certificate authorities?

Accepted Answer

Trusted certificate profile

Answer

SCEP profile

Answer

PKCS certificate profile

Answer

Endpoint security policy

Question 2

An administrator needs to restrict which wireless networks a corporate Windows device can connect to. Which Intune setting achieves this?

Accepted Answer

Device restrictions to allow only specific Wi-Fi networks

Answer

Firewall rules profile

Answer

Wi-Fi configuration profile with allowed networks

Answer

Compliance policy with Wi-Fi requirement

Question 3

Which protocol is used by Windows Always On VPN for device-level tunnel authentication?

Accepted Answer

IKEv2 with machine certificates

Answer

EAP-TTLS

Answer

PPTP with MSCHAPv2

Answer

L2TP with preshared key

Question 4

A Windows device is unable to resolve a corporate internal website by hostname despite being connected to VPN. What is the most likely cause?

Accepted Answer

NRPT rules are not configured for the internal namespace

Answer

The VPN certificate has expired

Answer

The device firewall is blocking DNS port 53

Answer

The website SSL certificate is self-signed

Question 5

Which Windows connectivity feature allows devices to sync work files from a corporate file server over HTTPS without requiring a full VPN connection?

Accepted Answer

Work Folders

Answer

OneDrive for Business

Answer

Network Drive Mapping

Answer

BranchCache

Question 6

An Intune administrator needs to ensure all VPN traffic routes through the corporate network rather than directly to the internet. Which VPN setting should be configured?

Accepted Answer

Disable split tunnelling to route all traffic through VPN

Answer

Enable per-app VPN

Answer

Set DNS suffix search list

Answer

Enable IKEv2 fragmentation