- (Exam Topic 4)
You have the device configuration profile shown in the following exhibit.
Use the drop-down menus to select the answer choke that completes each statement based on the information presented in the graphic NOTE: Each correct selection is worth one point.
Solution:
Box 1: can access any URL.
Public Browsing (InPrivate): Runs a limited multi-tab version of Microsoft Edge. Users can browse publicly, or end their browsing session.
Box 2: a single Microsoft Edge instance that has multiple tabs
Single app, full-screen kiosk runs only one app on the device, such as a web browser or Store app. Reference: https://docs.microsoft.com/en-us/mem/intune/configuration/kiosk-settings-windows
Does this meet the goal?
Correct Answer:
A
- (Exam Topic 4)
Your company has a Microsoft 365 subscription.
The company uses Microsoft Intune to manage all devices.
The company uses conditional access to restrict access to Microsoft 365 services for devices that do not comply with the company’s security policies.
You need to identify which devices will be prevented from accessing Microsoft 365 services. What should you use?
Correct Answer:
C
- (Exam Topic 4)
You have a Microsoft 365 tenant
You have devices enrolled in Microsoft intune.
You assign a conditional access policy nan-ted Policy1 to a group named Group1. Policy1 restricts devices marked as noncompliant from accessing Microsoft OneDrive for Business.
You need to identify which noncompliant devices attempt to access OneDrive for Business. What should you do?
Correct Answer:
B
The Noncompliant devices report provides data typically used by Helpdesk or admin roles to identify problems and help remediate issues. The data found in this report is timely, calls out unexpected behavior, and is meant to be actionable.
Note: Compliance reports help you understand when devices fail to meet your compliance configurations and can help you identify compliance-related issues in your organization.
Open the compliance dashboard
Open the Intune Device compliance dashboard:
Sign in to the Microsoft Endpoint Manager admin center. 
Select Devices > Overview > Compliance status tab.
When the dashboard opens, you get an overview with all the compliance reports. In these reports, you can see and check for:
Overall device compliance Per-policy device compliance Per-setting device compliance Threat agent status
Device protection status View compliance reports
In addition to using the charts on Compliance status, you can go to Reports > Device compliance. Sign in to the Microsoft Endpoint Manager admin center. Select Devices > Monitor, and then from below Compliance select the report you want to view. Some of the available compliance reports include:
Device compliance Noncompliant devices
Devices without compliance policy Setting compliance
Policy compliance Noncompliant policies (preview)
Windows health attestation report Threat agent status
Reference: https://docs.microsoft.com/en-us/mem/intune/protect/compliance-policy-monitor
- (Exam Topic 4)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
Your company has an Azure Active Directory (Azure AD) tenant named contoso.com and a Microsoft Intune subscription.
Contoso.com contains a user named user1@contoso.com.
You have a computer named Computer1 that runs Windows 8.1.
You need to perform an in-place upgrade of Computer1 to Windows 10.
Solution: You assign an Enterprise Mobility + Security license to User1. You instruct User1 to sign in to Computer1.
Does this meet the goal?
Correct Answer:
B
- (Exam Topic 4)
You install a feature update on a computer that runs Windows 10. How many days do you have to roll back the update?
Correct Answer:
B
Microsoft has changed the time period associated with operating system rollbacks with Windows 10 version 1607, decreasing it to 10 days. Previously, Windows 10 had a 30-day rollback period.
References:
https://redmondmag.com/articles/2016/08/04/microsoft-shortens-windows-10-rollback-period.aspx
