exam questions

Exam MD-102 All Questions

View all questions & answers for the MD-102 exam

Exam MD-102 topic 1 question 63 discussion

Actual exam question from Microsoft's MD-102
Question #: 63
Topic #: 1
[All MD-102 Questions]

HOTSPOT
-


Case study
-


Overview
-

Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York.

Contoso has the users and computers shown in the following table.



The company has IT, human resources (HR), legal (LEG), marketing (MKG), and finance (FIN) departments.

Contoso recently purchased a Microsoft 365 subscription.

The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office will work from home.


Existing Environment
-

The network contains an Active Directory domain named contoso.com that is synced to Azure AD.

All member servers run Windows Server 2016. All laptops and desktop computers run Windows 10 Enterprise.

The computers are managed by using Microsoft Configuration Manager. The mobile devices are managed by using Microsoft Intune.

The naming convention for the computers is the department acronym, followed by a hyphen, and then four numbers, for example FIN-6785. All the computers are joined to the on-premises Active Directory domain.

Each department has an organizational unit (OU) that contains a child OU named Computers. Each computer account is in the Computers OU of its respective department.


Intune Configuration
-

The domain has the users shown in the following table.



User2 is a device enrollment manager (DEM) in Intune.

The devices enrolled in Intune are shown in the following table.



The device compliance policies in Intune are configured as shown in the following table.



The device compliance policies have the assignments shown in the following table.



The device limit restrictions in Intune are configured as shown in the following table.




Requirements
-


Planned changes
-

Contoso plans to implement the following changes:
• Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro preinstalled and were purchased already.
• Implement co-management for the computers.


Technical Requirements
-

Contoso must meet the following technical requirements:

• Ensure that the users in a group named Group4 can only access Microsoft Exchange Online from devices that are enrolled in Intune.
• Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows Autopilot.
• Create a provisioning package for new computers in the HR department.
• Block iOS devices from sending diagnostic and usage telemetry data.
• Use the principle of least privilege whenever possible.
• Enable the users in the MKG department to use App1.
• Pilot co-management for the IT department.


You are evaluating which devices are compliant.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
MR_Eliot
Highly Voted 1 year, 2 months ago
Answers are correct: Device 1: Groups: Group1 Policies: Policy3 Result: Not compliant. Device 3: Groups: Group2, Group3 Policies: Policy1 Result: Compliant. Device 4: Groups: Group 2 Policies: Policy2 Result: Compliant
upvoted 14 times
...
Tr619899
Most Recent 5 months ago
Answer is: No, Yes, Yes
upvoted 1 times
...
Engr001
1 year, 2 months ago
I will go with N, N, Y Device 3 will be a NO because it is an android device. Policy 2 wil be applied because of group 2 (group 3 is excluded) but policy 2 goes for iOS devices. Because Group 3 isn't used and Group 2 is for iOS then device 3 will not be compliant. Am i wrong?
upvoted 3 times
b47afda
11 months, 2 weeks ago
Device 3 is i group 2 and 3, Policy 2 applies to group 2 but excludes group 3, therefore policy 2 will not apply to Device 3. Policy 1 applies only to group 3 so it will apply to Device 3 and be marked compliant.
upvoted 5 times
...
...
Darkfire
1 year, 2 months ago
Answer is correct. (NYY) Device3 > member of group 2 & 3. Least previliges override, so Group3 = Policy1 > Is compliant
upvoted 4 times
...
Tonsku
1 year, 4 months ago
N, Y, Y The device compliance policies: Policy1: Android. Require encryp Not configured Policy2: iOS. Require encryp Not applicable Policy3: Android. Require encryp Require Device1: Android. Disable Encryp Device1: Group1 Policy3: Android. Require encryp: Require Policy3: Group1. Exclude None Device3: Android. Disable Encryp Device3: Group2 & Group3 Policy1: Group3. Exclude None Policy1: Android. Require encryp: Not configured Device4: iOS. Not applicable Encryp Device4: Group2 Policy2: Group2. Exclude Group3 Policy2: iOS. Require encryp: Not applicable
upvoted 4 times
...
madsa
1 year, 5 months ago
No Yes Yes is correct, sorry, Futfuyfyjfj is 100% correct, this device will be affected by policy 1.
upvoted 1 times
...
madsa
1 year, 5 months ago
No No Yes or No Yes Yes, all comes down to the fact that devices are to be or not to be compliant if they have not policy assigned, in early questions someone was saying he did the exam and he got all points in questions were this argument is present, is devices with no policy are to be flagged as no compliant the answer is No Yes Yes otherwise is No No Yes.
upvoted 1 times
...
Suresh_2411
1 year, 6 months ago
NO YES YES
upvoted 2 times
...
picho707
1 year, 6 months ago
Question 1: Device1 belongs to Group1 Policy3 is assigned to Group1 Policy3 Settings = Android = Require = Assigned Device1 Settings = Android = Disabled The Policy requires encryption and Device encryption is disabled therefore the device is not compliant so answer is NO
upvoted 4 times
picho707
1 year, 6 months ago
Question 2 Device3 belongs to group2 and group3 Policy1 and Policy2 are assigned to Groups2 and Groups3 Policy1 Settings = Android = Not Configured = Assigned Policy2 Settings = IOS = Not Applicable = Assigned = Exclude Group3 so it will not apply. Device3 Settings = Android = Disabled The effective Policy requires encryption "Not Applicable" and Device encryption is "Disabled" therefore the device is compliant so answer is Yes
upvoted 3 times
picho707
1 year, 6 months ago
Question 3 Device4 belongs to Group2 Policy2 is assigned to Group2 and Group3 Policy2 Settings = IOS = Not Applicable = Assigned = Exclude Group3 but device does not belong to group 3. Device4 Settings = IOS = Not Applicable The Policy requires encryption "Not Applicable" and Device encryption is "Not Applicable" therefore the device is compliant so answer is Yes
upvoted 4 times
...
...
...
ExamKiller020
1 year, 7 months ago
NO YES YES
upvoted 4 times
...
sh123df
1 year, 7 months ago
No ? = Will the exclude or include over ride? Yes
upvoted 1 times
Futfuyfyjfj
1 year, 7 months ago
Doesn’t matter, the policy (2) is for iOS, the Devices is Android. So policy is not applicable
upvoted 3 times
BJS78
1 year, 7 months ago
Wrong. Device 3 will be excluded from Policy2 due to ex: Group3 setting. The device will receive. N-Y-Y, answer is correct
upvoted 1 times
Futfuyfyjfj
1 year, 7 months ago
You need to learn and watch. Device 3 will be compliant because of the assignment on policy 1… policy 2 has nothing to do with device regardless exclusion or not.
upvoted 3 times
BJS78
1 year, 4 months ago
Never said, device3 is non-compliant. You are right, that policy 2 has no business here (I missed the iOS vs Andoird compliance), but your arrogance blinded you to see the - still correct - answer I wrote: N-Y-Y
upvoted 1 times
...
...
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago