MD-102 Configuring connectivity 3

Question 1

Which Intune feature allows administrators to deploy trusted root certificates to Windows devices so they trust internal certificate authorities?

Accepted Answer

Trusted certificate profile

Answer

Trusted certificate profiles in Intune push a trusted root or intermediate CA certificate to the device's certificate store, enabling trust for internally issued certificates.

Question 2

An administrator needs to restrict which wireless networks a corporate Windows device can connect to. Which Intune setting achieves this?

Accepted Answer

Device restrictions to allow only specific Wi-Fi networks

Answer

Device restriction profiles in Intune include settings to prevent devices from connecting to non-approved Wi-Fi networks, enforcing corporate Wi-Fi usage only.

Question 3

Which protocol is used by Windows Always On VPN for device-level tunnel authentication?

Accepted Answer

IKEv2 with machine certificates

Answer

Always On VPN device tunnels use IKEv2 with machine certificates for device authentication, establishing connectivity before user sign-in.

Question 4

A Windows device is unable to resolve a corporate internal website by hostname despite being connected to VPN. What is the most likely cause?

Accepted Answer

NRPT rules are not configured for the internal namespace

Answer

If NRPT rules are not configured, the device uses its default DNS servers (typically public) and cannot resolve internal hostnames, even when VPN is connected.

Question 5

Which Windows connectivity feature allows devices to sync work files from a corporate file server over HTTPS without requiring a full VPN connection?

Accepted Answer

Work Folders

Answer

Work Folders is a Windows feature that syncs files from a corporate file server to a user's device over HTTPS, without requiring a full VPN connection.

MD-102 - Endpoint Administrator Exam Practice Test

MD-102 - Endpoint Administrator Exam Practice Test

MD-102 Configuring connectivity 3