MD-102 Managing Identity and Access

Question 1

Which Azure AD feature allows users to register their Windows 10 devices so they can access organizational resources with a personal device?

Accepted Answer

Azure AD Registered

Answer

Azure AD Registered is designed for personal (BYOD) devices that users register to access organizational resources without the device being fully joined to Azure AD.

Question 2

A user needs to sign in to Windows 10 using Windows Hello for Business. Which authentication method does Windows Hello for Business replace?

Accepted Answer

Password-based authentication

Answer

Windows Hello for Business replaces password-based authentication with strong two-factor authentication using a PIN or biometric tied to a device-bound credential.

Question 3

An administrator needs to ensure that only compliant devices can access Microsoft 365 resources. Which Azure AD feature should be configured?

Accepted Answer

Conditional Access

Answer

Conditional Access policies in Azure AD can enforce that only devices marked compliant by Intune are permitted to access Microsoft 365 resources.

Question 4

Which join type requires an on-premises Active Directory domain and Azure AD tenant to both have a trust relationship via Azure AD Connect?

Accepted Answer

Hybrid Azure AD Join

Answer

Hybrid Azure AD Join requires devices to be joined to on-premises AD and then synchronized to Azure AD via Azure AD Connect.

Question 5

A company wants to enforce multi-factor authentication for all admin sign-ins to Azure AD. What is the simplest way to enforce this for all global administrators?

Accepted Answer

Security defaults

Answer

Security defaults in Azure AD automatically require MFA for all administrators and provide baseline identity protection with minimal configuration.

MD-102 - Endpoint Administrator Exam Practice Test

MD-102 - Endpoint Administrator Exam Practice Test

MD-102 Managing Identity and Access