exam questions

Exam MD-101 All Questions

View all questions & answers for the MD-101 exam

Exam MD-101 topic 2 question 49 discussion

Actual exam question from Microsoft's MD-101
Question #: 49
Topic #: 2
[All MD-101 Questions]

HOTSPOT -
You have an Azure Active Directory (Azure AD) tenant named adatum.com that contains the users shown in the following table.

You configure the following device settings for the tenant:
✑ Users may join devices to Azure AD: User1
✑ Additional local administrators on Azure AD joined devices: None
You install Windows 10 on a computer named Computer1.
You need to identify which users can join Computer1 to adatum.com, and which users will be added to the Administrators group after joining adatum.com.
Which users should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Alexbz
Highly Voted 3 years, 12 months ago
Correct When you connect a Windows device with Azure AD using an Azure AD join, Azure AD adds the following security principals to the local administrators group on the device: The Azure AD global administrator role The Azure AD device administrator role The user performing the Azure AD join
upvoted 21 times
...
Perycles
Highly Voted 3 years, 10 months ago
Correct, after several tests, only user (without role) is able to join Azure AD. Using A global admin account display an error. After that, global admin account have local admin rights on this device. so answer are correct.
upvoted 12 times
RodrigoT
3 years ago
Exactly, because the "Additional local administrators on Azure AD joined devices: None" setting excludes the global admin from joining devices. We need to pay attention. Thank you for your tests.
upvoted 2 times
...
...
moobdoob
Most Recent 3 years, 3 months ago
Given answer is correct.
upvoted 3 times
...
angelize
3 years, 10 months ago
Correct: The only one that can add deivce to intune is User1 because they have configured Device Settings "Users may join devices to Azure AD: User1" Read more about it https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal
upvoted 7 times
RodrigoT
3 years ago
Thank you for the link. More specific go to the anchor: https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal#configure-device-settings and read the two points after the picture.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago