Exam MD-102: Endpoint Administrator Exam Preparation

Table of Contents

Exam MD-102: | Endpoint Administrator | Exclusive Preparation

Practice Test I

Answers and Explanations

Practice Test II

Answers and Explanations

Feel free to reach out to me anytime, and don't forget to connect with me on LinkedIn: Georgio Daccache. I'm always available to provide additional assistance and support. | Good Luck

Exam MD-102:

Endpoint Administrator

Exclusive Preparation

Achieve success in your MD-102 Exam on the first try with our new and exclusive preparation book.

This comprehensive resource is designed to help you test your knowledge, providing a collection of the latest questions with detailed explanations and official references.

Save both time and money by investing in this book, which covers all the topics included in the MD-102 exam.

This book includes two full-length, highly important practice tests, each with 60 questions, for a total of 120 questions. It also provides detailed explanations for each question and official reference links.

Dedicate your effort to mastering these MD-102 exam questions, as they offer up-to-date information on the entire exam syllabus.

This book is strategically crafted to not only assess your knowledge and skills but also to boost your confidence for the real exam.

With a focus on thorough preparation, passing the official MD-102 Exam on your first attempt becomes achievable through diligent study of these valuable resources.

The MD-102 exam consists of approximately 40 to 60 questions, and candidates are allotted 120 minutes to complete the test.

To pass the exam, a minimum score of 700 (700/1000) is required, and there is no penalty for incorrect answers.

Skills measured:

Deploy Windows client (20–25%)

Manage identity and compliance (15–20%)

Manage, maintain, and protect devices (40–45%)

Manage applications (15–20%)

Practice Test I

1) HOTSPOT

Case study

Overview:

ADatum Corporation, a consulting company, maintains its headquarters in Montreal with additional branch offices in Seattle and New York.

ADatum subscribes to Microsoft 365 E5.

Environment

Network Environment:

The network includes an on-premises Active Directory domain named adatum.com, which encompasses the servers listed in the table below.

ADatum maintains a hybrid Azure AD tenant under the name adatum.com.

Users and Groups:

The adatum.com tenant includes the users listed in the table below.

All users are assigned a Microsoft Office 365 license and an Enterprise Mobility + Security E3 license.

Enterprise State Roaming is enabled for both Group1 and GroupA.

Group1 and Group2 have a Membership type of Assigned.

Devices:

ADatum has the Windows 10 devices shown in the following table.

The Windows 10 devices are Azure AD joined and enrolled in Microsoft Intune.

The Windows 10 devices are configured as shown in the following table.

All the Azure AD joined devices have an executable file named C:\AppA.exe and a folder named D:\Folder1.

Microsoft Intune Configuration:

The compliance policies in the following table are configured in Microsoft Intune.

The following configurations are set for Automatic Enrollment settings:

MDM user scope: GroupA

MAM user scope: GroupB

You have an Endpoint protection configuration profile with the following settings for Controlled folder access:

Name: Protection1

Folder protection: Enable

List of apps that have access to protected folders: C:\*\AppA.exe

List of additional folders that need to be protected: D:\Folder1

Assignments:

Included groups: Group2, GroupB

Windows Autopilot Configuration

ADatum has configured a Windows Autopilot deployment profile as illustrated in the following exhibit.

Currently, no devices have been deployed using Windows Autopilot.

The Intune connector for Active Directory is installed on Server1.

Requirements:

Planned Changes:

ADatum intends to implement the following changes:

Acquire a new Windows 10 device named Device6 and enroll it in Intune.

Deploy new computers using Windows Autopilot, joining them to hybrid Azure AD.

A network boundary configuration profile has been deployed with the following settings:

Name: Boundary1

Network boundary: 192.168.1.0/24

Scope tags: Tag1

Assignments:

Included groups: Group1, Group2

Two VPN configuration profiles named Connection1 and Connection2 will be deployed with the following settings:

Name: Connection1

Connection name: VPN1

Connection type: L2TP

Assignments:

Included groups: Group1, Group2, GroupA

Excluded groups:—

Name: Connection2

Connection name: VPN2

Connection type: IKEv2

Assignments:

Included groups: GroupA

Excluded groups: GroupB

Technical Requirements:

ADatum must fulfill the following technical requirements:

Users in GroupA should have the ability to deploy new computers.

Administrative effort should be minimized.

For each of the following statements (1 to 3), choose Yes if the statement is true. Otherwise, choose No.

Answer area:

Statements:

1) User1 can create a file named D:\Folder1\file1.txt on Device4 by using Notepad.

2) User2 can remove D:\Folder1 from the list of protected folders on Device2.

3) User3 can create a file named C:\Users\User3\Desktop\file1.txt on Device2 by running a custom Windows PowerShell script.

2) HOTSPOT

Case study

Overview:

ADatum Corporation, a consulting company, maintains its headquarters in Montreal with additional branch offices in Seattle and New York.

ADatum subscribes to Microsoft 365 E5.

Environment

Network Environment:

The network includes an on-premises Active Directory domain named adatum.com, which encompasses the servers listed in the table below.

ADatum maintains a hybrid Azure AD tenant under the name adatum.com.

Users and Groups:

The adatum.com tenant includes the users listed in the table below.

All users are assigned a Microsoft Office 365 license and an Enterprise Mobility + Security E3 license.

Enterprise State Roaming is enabled for both Group1 and GroupA.

Group1 and Group2 have a Membership type of Assigned.

Devices:

ADatum has the Windows 10 devices shown in the following table.

The Windows 10 devices are Azure AD joined and enrolled in Microsoft Intune.

The Windows 10 devices are configured as shown in the following table.

All the Azure AD joined devices have an executable file named C:\AppA.exe and a folder named D:\Folder1.

Microsoft Intune Configuration:

The compliance policies in the following table are configured in Microsoft Intune.

The following configurations are set for Automatic Enrollment settings:

MDM user scope: GroupA

MAM user scope: GroupB

You have an Endpoint protection configuration profile with the following settings for Controlled folder access:

Name: Protection1

Folder protection: Enable

List of apps that have access to protected folders: C:\*\AppA.exe

List of additional folders that need to be protected: D:\Folder1

Assignments:

Included groups: Group2, GroupB

Windows Autopilot Configuration

ADatum has configured a Windows Autopilot deployment profile as illustrated in the following exhibit.

Currently, no devices have been deployed using Windows Autopilot.

The Intune connector for Active Directory is installed on Server1.

Requirements:

Planned Changes:

ADatum intends to implement the following changes:

Acquire a new Windows 10 device named Device6 and enroll it in Intune.

Deploy new computers using Windows Autopilot, joining them to hybrid Azure AD.

A network boundary configuration profile has been deployed with the following settings:

Name: Boundary1

Network boundary: 192.168.1.0/24

Scope tags: Tag1

Assignments:

Included groups: Group1, Group2

Two VPN configuration profiles named Connection1 and Connection2 will be deployed with the following settings:

Name: Connection1

Connection name: VPN1

Connection type: L2TP

Assignments:

Included groups: Group1, Group2, GroupA

Excluded groups:—

Name: Connection2

Connection name: VPN2

Connection type: IKEv2

Assignments:

Included groups: GroupA

Excluded groups: GroupB

Technical Requirements:

ADatum must fulfill the following technical requirements:

Users in GroupA should have the ability to deploy new computers.

Administrative effort should be minimized.

Which devices are registered through the Windows Autopilot deployment service?

A. Device1 only

B. Device3 only

C. Device1 and Device3 only

D. Device1, Device2, and Device3

3) HOTSPOT

Case study

Overview:

ADatum Corporation, a consulting company, maintains its headquarters in Montreal with additional branch offices in Seattle and New York.

ADatum subscribes to Microsoft 365 E5.

Environment

Network Environment:

The network includes an on-premises Active Directory domain named adatum.com, which encompasses the servers listed in the table below.

ADatum maintains a hybrid Azure AD tenant under the name adatum.com.

Users and Groups:

The adatum.com tenant includes the users listed in the table below.

All users are assigned a Microsoft Office 365 license and an Enterprise Mobility + Security E3 license.

Enterprise State Roaming is enabled for both Group1 and GroupA.

Group1 and Group2 have a Membership type of Assigned.

Devices:

ADatum has the Windows 10 devices shown in the following table.

The Windows 10 devices are Azure AD joined and enrolled in Microsoft Intune.

The Windows 10 devices are configured as shown in the following table.

All the Azure AD joined devices have an executable file named C:\AppA.exe and a folder named D:\Folder1.

Microsoft Intune Configuration:

The compliance policies in the following table are configured in Microsoft Intune.

The following configurations are set for Automatic Enrollment settings:

MDM user scope: GroupA

MAM user scope: GroupB

You have an Endpoint protection configuration profile with the following settings for Controlled folder access:

Name: Protection1

Folder protection: Enable

List of apps that have access to protected folders: C:\*\AppA.exe

List of additional folders that need to be protected: D:\Folder1

Assignments:

Included groups: Group2, GroupB

Windows Autopilot Configuration

ADatum has configured a Windows Autopilot deployment profile as illustrated in the following