MD-102 Managing Device and Data 2

Question 1

Which Intune feature enforces BitLocker encryption on Windows devices and can store the recovery key in Azure AD?

Accepted Answer

Endpoint security Disk encryption policy

Answer

The Endpoint security Disk encryption policy in Intune enforces BitLocker on Windows devices and can be configured to automatically back up the recovery key to Azure AD.

Question 2

What is Microsoft Entra ID Conditional Access, and what is a common use case for it in endpoint management?

Accepted Answer

A policy engine that grants or blocks resource access based on conditions like device compliance and user identity

Answer

Conditional Access is a policy-based engine in Microsoft Entra ID that evaluates signals like device compliance, user risk, and location to decide whether to grant or block access to resources.

Question 3

An administrator wants to prevent users from copying corporate data from Microsoft 365 apps to personal apps on Windows devices. Which Intune feature addresses this?

Accepted Answer

App protection policies (MAM)

Answer

App protection policies (Mobile Application Management) in Intune can restrict data transfer between managed apps and unmanaged personal apps, preventing corporate data leakage.

Question 4

Which tool is used to migrate user files and settings from an old Windows device to a new one during a PC refresh or replacement?

Accepted Answer

USMT (User State Migration Tool)

Answer

The User State Migration Tool (USMT) is Microsoft's enterprise tool for capturing and restoring user profiles, files, and application settings during PC migrations and OS upgrades.

Question 5

Which Microsoft Defender feature provides a centralised view of security alerts, threats, and recommendations for managed endpoints?

Accepted Answer

Microsoft Defender for Endpoint portal

Answer

The Microsoft Defender for Endpoint portal at security.microsoft.com provides a unified security operations view with device inventory, alerts, threat analytics, vulnerability management, and attack surface reduction recommendations.

MD-102 - Endpoint Administrator Exam Practice Test

MD-102 - Endpoint Administrator Exam Practice Test

MD-102 Managing Device and Data 2