exam questions

Exam MD-102 All Questions

View all questions & answers for the MD-102 exam

Exam MD-102 topic 1 question 65 discussion

Actual exam question from Microsoft's MD-102
Question #: 65
Topic #: 1
[All MD-102 Questions]

HOTSPOT -


Case study -


Overview -

Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York.

Contoso has the users and computers shown in the following table.



The company has IT, human resources (HR), legal (LEG), marketing (MKG), and finance (FIN) departments.

Contoso recently purchased a Microsoft 365 subscription.

The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office will work from home.


Existing Environment -

The network contains an Active Directory domain named contoso.com that is synced to Azure AD.

All member servers run Windows Server 2016. All laptops and desktop computers run Windows 10 Enterprise.

The computers are managed by using Microsoft Configuration Manager. The mobile devices are managed by using Microsoft Intune.

The naming convention for the computers is the department acronym, followed by a hyphen, and then four numbers, for example FIN-6785. All the computers are joined to the on-premises Active Directory domain.

Each department has an organizational unit (OU) that contains a child OU named Computers. Each computer account is in the Computers OU of its respective department.


Intune Configuration -

The domain has the users shown in the following table.



User2 is a device enrollment manager (DEM) in Intune.

The devices enrolled in Intune are shown in the following table.



The device compliance policies in Intune are configured as shown in the following table.



The device compliance policies have the assignments shown in the following table.



The device limit restrictions in Intune are configured as shown in the following table.




Requirements -


Planned changes -

Contoso plans to implement the following changes:
• Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro preinstalled and were purchased already.
• Implement co-management for the computers.


Technical Requirements -

Contoso must meet the following technical requirements:

• Ensure that the users in a group named Group4 can only access Microsoft Exchange Online from devices that are enrolled in Intune.
• Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows Autopilot.
• Create a provisioning package for new computers in the HR department.
• Block iOS devices from sending diagnostic and usage telemetry data.
• Use the principle of least privilege whenever possible.
• Enable the users in the MKG department to use App1.
• Pilot co-management for the IT department.


What is the maximum number of devices that User1 and User2 can enroll in Intune? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Fortind1974
Highly Voted 1 year, 7 months ago
User 1: 10 devices User 2: 1000 User2 is a device enrollment manager (DEM) in Intune, so device limit restrictions won't work on them. https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-manager-enroll#device-limit-restrictions
upvoted 33 times
Savior99
1 year, 1 month ago
Correct: "Device limit restrictions DEM enrolls Windows 10/11 devices in shared device mode, so device limit restrictions won't work on them" . Source: https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-manager-enroll
upvoted 1 times
...
picho707
1 year, 7 months ago
Device enrollment managers are affected by device limit restrictions in Intune. Device limit restrictions let you restrict the number of devices a user can enroll in Intune. Each restriction type comes with one default policy that you can edit and customize as needed. Intune applies the default policy to all user and userless enrollments until you assign a higher-priority policy. Therefore, if a device enrollment manager is also a user, they will be subject to the device limit restrictions set by the administrator.
upvoted 2 times
Futfuyfyjfj
1 year, 7 months ago
Source?
upvoted 3 times
...
...
picho707
1 year, 7 months ago
Azure AD Applying an Azure AD maximum device limit of less than 1,000 to a DEM account will prevent you from reaching the 1,000 device limit that the DEM account can enroll. https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-manager-enroll
upvoted 5 times
Burkidur
1 year, 1 month ago
That's Entra device limit restrictions, not Intune. The question says nothing about Entra restrictions, so it's safe to assume it's unlimited.
upvoted 2 times
...
...
fco168
1 year, 5 months ago
The device enrollment restriction takes precedence over the privileges granted by the DEM role.
upvoted 5 times
...
...
batang_aratan
Most Recent 3 months ago
I think: User 1: 10 devices User 2: 1000 According to this: https://learn.microsoft.com/en-us/mem/intune/enrollment/device-limit-intune-azure#intune-device-limit-restrictions
upvoted 1 times
...
Tr619899
5 months ago
Answer is: User1 can enroll a maximum of: 10 devices - User1 is a member of GroupA, which has a device limit set by Restriction2 at 10 devices. The priority of Restriction2 (10 devices) takes precedence over the default restriction (5 devices). User2 can enroll a maximum of: 1,000 devices - User2 is a Device Enrollment Manager (DEM), and DEM accounts can enroll up to 1,000 devices regardless of other restrictions. This is a unique capability of DEM accounts to allow bulk device enrollment.
upvoted 2 times
...
bubbab
5 months ago
Applying a Microsoft Entra maximum device limit of less than 1,000 to a DEM account prevents you from reaching the 1,000 device limit that the DEM account can enroll. The answer is correct https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-manager-enroll
upvoted 1 times
...
AleFCI1908
5 months, 2 weeks ago
user 1: 10 , device limit is applied to intune admin too user 2 : 1000 , dem is a special account, the limitation doesn't apply
upvoted 1 times
...
LionelDerBoven
7 months, 2 weeks ago
1000 Unlimited. In Microsoft Intune, a Device Enrollment Manager (DEM) is a special user account used for enrolling and managing multiple devices. The primary purpose of a DEM account is to enable scenarios where a single user needs to enroll and manage several devices, such as shared devices in a retail or educational setting. Device Enrollment Manager (DEM) Limit: A Device Enrollment Manager can enroll up to 1,000 devices in Intune. Intune Administrator: No set limit on the number of devices they can manage or enroll. Administrators manage devices, policies, and configurations in Intune, and their role primarily involves overseeing enrollment and device management but does not impose enrollment restrictions on themselves.
upvoted 1 times
...
dnt91
7 months, 3 weeks ago
I think User1 (Intune Admin) : Unlimited devices User2 (DEM) : 1000 devices Documentation says a NON ADMIN USER is limited to 15 and a DEM is a non admin user with a limit of 1000. This implicitly says that an admin user is (probably) not limited. I can't find a limit for an intune admin.
upvoted 2 times
...
rcristiano
1 year ago
Usuario 1: 15 dispositivos e usuário 2: 1000 - DEM (gerenciador de registro de dispositivos) no Intune
upvoted 1 times
...
Jeff777
1 year ago
User1: 10 User2: 15 User1 GroupA User2 GroupB & DEM Device limit 15 GroupB Device limit 10 GroupA
upvoted 1 times
...
ckmay
1 year, 2 months ago
The question: What is the maximum number of devices that User1 and User2 can enroll in Intune? is based on the planned changes which include: Contoso plans to implement the following changes: • Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro preinstalled and were purchased already. It seems the question is essentially asking "In order to perform the planned changes, what will the limitations of this be based on the configured policies" Because Enrollment restrictions do not count towards DEM when enrolling Windows devices in shared modes, the answer is 1000 devices for user 2 (Device limit restrictions can't be applied to devices in the following Windows enrollment scenarios, because these scenarios utilize shared device mode: Co-managed enrollments Group Policy (GPO) enrollments Microsoft Entra joined enrollments, including bulk enrollments Windows Autopilot enrollments Device enrollment manager enrollments https://learn.microsoft.com/en-us/mem/intune/enrollment/enrollment-restrictions-set) User 1: 15 devices User 2: 1000 devices
upvoted 4 times
ckmay
1 year, 2 months ago
CORRECTION- User 1: 10 Devices User 2: 1000
upvoted 4 times
sergioandreslq
1 year, 2 months ago
User 1: 10 Devices because, user 1 belong to group A which has a restriction of device limit 10.
upvoted 2 times
...
...
...
Darkfire
1 year, 2 months ago
Partly correct. User1: 10 devices User2: 1000 User2 is a device enrollment manager (DEM) in Intune, so device limit restrictions won't work on them. https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-manager-enroll#device-limit-restrictions
upvoted 4 times
...
Merrybob
1 year, 2 months ago
User 1 - 10 Devices (Based on policy) User 2 - 15 Devices (Ref: https://learn.microsoft.com/en-us/mem/intune/enrollment/device-limit-intune-azure#:~:text=Intune%20device%20limit%20restrictions%20set%20the%20maximum%20number%20of%20devices%20that%20a%20user%20can%20enroll.%20You%20can%20allow%20a%20user%20to%20enroll%20up%20to%2015%20devices.)
upvoted 1 times
Anonymouse1312
1 year, 2 months ago
Wrong according to your own link: Intune device limit restrictions don't apply for the following Windows enrollment types: (...) Device enrollment manager enrollments Answer definitely is 1000.
upvoted 4 times
...
...
onepunchkenshin
1 year, 3 months ago
I will vote 1000 devices for User2 as Windows devices are being deployed
upvoted 2 times
...
Tonsku
1 year, 4 months ago
User1: 10 User2: 15 User1 GroupA User2 GroupB & DEM Device limit 15 GroupB Device limit 10 GroupA
upvoted 4 times
...
iTomi
1 year, 4 months ago
”The device limit restrictions in INTUNE are configured as shown in the following table”
 This scenario is only INTUNE device limit restriction. No mentions of Azure device limit restriction, so right answers are 10 and 1000. Stop making things up and creating your own scenarios. Follow the given task.
upvoted 3 times
mks_academy
1 year, 4 months ago
But the question asked is "What is the maximum number of devices that User1 and User2 can enroll in INTUNE", so to me the answers are correct (User1 10 - User2 15).
upvoted 2 times
...
...
NoursBear
1 year, 4 months ago
This may help: https://learn.microsoft.com/en-us/mem/intune/enrollment/device-limit-intune-azure but here it says DEM are not affected by restrictions for WINDOWS devices, so which is it ? Windows devices Intune device limit restrictions don't apply for the following Windows enrollment types: Co-managed enrollments Group policy object (GPO) enrollments Microsoft Entra joined enrollments Bulk Microsoft Entra joined enrollments Autopilot enrollments Device enrollment manager enrollments
upvoted 1 times
NoursBear
1 year, 4 months ago
OK here we are working with mobile devices, where die DEM would be limited
upvoted 1 times
...
...
madsa
1 year, 5 months ago
The correct answer is 10 and 15. Restrictions overrule DEM.
upvoted 2 times
NoursBear
1 year, 4 months ago
OK here we are working with mobile devices, where die DEM would be limited
upvoted 1 times
NoursBear
1 year, 4 months ago
Comment in wrong place
upvoted 1 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago