Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MD-102 All Questions

View all questions & answers for the MD-102 exam
Go to Exam

Exam MD-102 topic 1 question 24 discussion

Actual exam question from Microsoft's MD-102
Question #: 24
Topic #: 1
[All MD-102 Questions]

Your network contains an on-premises Active Directory domain and an Azure AD tenant.
The Default Domain Policy Group Policy Object (GPO) contains the settings shown in the following table.

You need to migrate the existing Default Domain Policy GPO settings to a device configuration profile.
Which device configuration profile type template should you use?

  • A. Administrative Templates
  • B. Endpoint protection
  • C. Device restrictions
  • D. Custom
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by Gr8Greet at Aug. 11, 2023, 5:47 p.m.

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Submit Cancel
volto
Highly Voted 1 year, 2 months ago
Selected Answer: C
Answer C is correct https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-windows-10#password
upvoted 23 times
RomanV
1 month, 2 weeks ago
You are so wrong. Read between the lines please or don't respond here... Answer is A! The question states: "You need to MIGRATE the existing Default Domain Policy GPO settings to a device configuration profile." So according to Microsoft and myself, as an Intune administrator, after you Import and analyze your on-premises GPOs using Group Policy analytics in Microsoft Intune, you CREATE the template. Which profile type? Administrative Templates!
upvoted 2 times
...
krzysztofbr
1 year, 2 months ago
You are correct! so many wrong answers again! inside device restrictions, You have password settings. your link shows everything regarding password
upvoted 5 times
LionelDerBoven
1 month, 3 weeks ago
The correct answer is A. Administrative Templates. Explanation: To migrate the existing Default Domain Policy GPO settings (like password policies, lockout settings, etc.) to Intune as a device configuration profile, Administrative Templates is the correct template type to use. Administrative Templates in Intune mirror many Group Policy Object (GPO) settings, making it the right choice for applying these specific configurations (like password length, complexity, and history). The settings shown in the image (such as MaximumPasswordAge, PasswordComplexity, etc.) are commonly found in Group Policies, which can be replicated in Intune via Administrative Templates. Other options such as Device Restrictions, Endpoint Protection, or Custom profiles do not cover the breadth of traditional GPO settings like password policies as well as Administrative Templates do. Thus, Administrative Templates is the correct profile type for this scenario.
upvoted 1 times
...
vijay0715
9 months ago
Password setting usually reflect on accounts know?
upvoted 1 times
...
...
...
iTomi
Highly Voted 10 months, 3 weeks ago
Selected Answer: A
In this question you are MIGRATING the EXISTING GPO settings from AD to Intune, not creating new one. Steps are: Import and analyze your on-premises GPOs using Group Policy analytics in Microsoft Intune https://learn.microsoft.com/en-us/mem/intune/configuration/group-policy-analytics Create a Settings Catalog policy using your imported GPOs in Microsoft Intune (public preview) https://learn.microsoft.com/en-us/mem/intune/configuration/group-policy-analytics-migrate Use Windows 10/11 templates to configure group policy settings in Microsoft Intune https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-windows
upvoted 8 times
...
AleFCI1908
Most Recent 22 hours, 20 minutes ago
Selected Answer: A
migrate, so A
upvoted 1 times
...
Nav90
1 week, 2 days ago
Selected Answer: A
We are migrating GPO here not creating new policy to have same settings.
upvoted 1 times
...
SSL2
2 weeks, 2 days ago
Selected Answer: A
The correct answer is **A. Administrative Templates**. Here's why: * **Administrative Templates** device configuration profile type template is used to configure settings related to user and computer policies, similar to Group Policy Objects (GPOs). * The settings in the Default Domain Policy GPO are related to user and computer policies (password complexity, lockout policy, etc.), which aligns with the Administrative Templates template. * **Endpoint protection** is used for configuring antivirus and firewall settings. * **Device restrictions** is used for configuring device-level restrictions, such as blocking specific apps or websites. * **Custom** is used for creating custom profiles with specific settings not covered by other templates. Therefore, the Administrative Templates template is the most appropriate choice for migrating the Default Domain Policy GPO settings to a device configuration profile.
upvoted 1 times
...
King_shola
1 month, 2 weeks ago
Selected Answer: C
C - Over complicating it using A
upvoted 1 times
...
King_shola
1 month, 2 weeks ago
C - Over complicating it using A
upvoted 1 times
...
LionelDerBoven
1 month, 3 weeks ago
Selected Answer: A
The correct answer is A. Administrative Templates. Explanation: To migrate the existing Default Domain Policy GPO settings (like password policies, lockout settings, etc.) to Intune as a device configuration profile, Administrative Templates is the correct template type to use. Administrative Templates in Intune mirror many Group Policy Object (GPO) settings, making it the right choice for applying these specific configurations (like password length, complexity, and history). The settings shown in the image (such as MaximumPasswordAge, PasswordComplexity, etc.) are commonly found in Group Policies, which can be replicated in Intune via Administrative Templates. Other options such as Device Restrictions, Endpoint Protection, or Custom profiles do not cover the breadth of traditional GPO settings like password policies as well as Administrative Templates do. Thus, Administrative Templates is the correct profile type for this scenario.
upvoted 1 times
...
Frank9020
2 months ago
Selected Answer: A
By using the Administrative Templates profile type, you can more effectively replicate and manage the settings from the Default Domain Policy GPO in Intune.
upvoted 2 times
...
Vlado123
2 months, 2 weeks ago
A https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-windows?tabs=template#create-the-template
upvoted 2 times
...
Maclouis116
4 months, 1 week ago
Selected Answer: A
You migrate your AD GPO's to administraive templates using the ADMX file
upvoted 2 times
...
CJL324
5 months, 1 week ago
C The "Device restrictions" device configuration profile type template is used to configure settings related to device security, including password policies, BitLocker settings, and other device-level restrictions. Since the settings in the Default Domain Policy GPO include password-related configurations, using the "Device restrictions" profile type template would be appropriate for migrating these settings to a device configuration profile.
upvoted 1 times
...
Shawn_Chen
7 months, 2 weeks ago
A is correct because this question is asking "migrate" GPO not creating a new policy
upvoted 3 times
...
MR_Eliot
8 months, 1 week ago
Selected Answer: C
C is correct. I have done this multiple times.
upvoted 2 times
...
kaushik07
8 months, 3 weeks ago
"Device Restrictions" is a Policy Type and Policy Types are available under "Templates". You can figure out the answer now.
upvoted 1 times
...
vijay0715
8 months, 3 weeks ago
According to ChatGPT answer is A
upvoted 1 times
...
Merrybob
9 months ago
C. Device Restrictions Ref: https://howtomanagedevices.com/intune/2409/password-policies-using-intune/ I was really tempted into selecting Administrative Templates and I still do believe they have a place however because the specific settings mentioned in the question, it leads me to feel fairly confident that Device Restrictions is the correct answer.
upvoted 1 times
...
Load full discussion...

Get IT Certification

Unlock free, top-quality video courses on ExamTopics with a simple registration. Elevate your learning journey with our expertly curated content. Register now to access a diverse range of educational resources designed for your success. Start learning today with ExamTopics!

Start Learning for free
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel