MD-101 Free Practice Test

- (Exam Topic 4)
You have the 64-bit computers shown in the following table.

You plan to perform an in-place upgrade to the 64-bit version of Windows 10.
Which computers can you upgrade to the 64-bit version of Windows 10 in their current state?

1. A. Computer2 and Computer4 only
2. B. Computer4 only
3. C. Computer3 and Computer4 only
4. D. Computer1, Computer2, Computer3 and Computer4
5. E. Computer2, Computer3, and Computer4 only

Correct Answer: A
References:
https://docs.microsoft.com/en-us/windows/deployment/windows-10-deployment-scenarios

- (Exam Topic 4)
You have a workgroup computer named Computer1 that runs Windows 10 and has the users shown in the following table.

Group1 is a member of Group3.
You are creating a file named Kiosk.xml that specifies a lockdown profile for a multi-app kiosk. Kiosk.xml contains the following section.

You apply Kiosk.xml to Computer1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Solution:
Reference:
https://docs.microsoft.com/en-us/windows/configuration/lock-down-windows-10-to-specific-apps#config-for-gr

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
You use the Microsoft Deployment Toolkit (MDT) to deploy Windows 10.
You create a new task sequence by using the Standard Client Task Sequence template to deploy Windows 10 Enterprise to new computers. The computers have a single hard disk.
You need to modify the task sequence to create a system volume and a data volume. Which phase should you modify in the task sequence?

1. A. Preinstall
2. B. State Restore
3. C. Initialization
4. D. Postinstall

Correct Answer: A
Reference:
https://www.prajwaldesai.com/create-extra-partition-in-mdt/

- (Exam Topic 4)
Your company implements Microsoft Azure Active Directory (Azure AD), Microsoft 365, Microsoft Intune, and Azure Information Protection.
The company’s security policy states the following:
Personal devices do not need to be enrolled in Intune.
Users must authenticate by using a PIN before they can access corporate email data.
Users can use their personal iOS and Android devices to access corporate cloud services.
Users must be prevented from copying corporate email data to a cloud storage service other than Microsoft OneDrive for Business.
You need to configure a solution to enforce the security policy. What should you create?

1. A. a data loss prevention (DLP) policy from the Security & Compliance admin center
2. B. a supervision policy from the Security & Compliance admin center
3. C. an app protection policy from the Intune admin center
4. D. a device configuration profile from the Intune admin center

Correct Answer: C

References:
https://docs.microsoft.com/en-us/intune/app-protection-policy

- (Exam Topic 4)
Your network contains an on-premises Active Directory domain named contoso.com that syncs to Azure Active Directory (Azure AD).
You have the Windows 10 devices shown in the following table.

You need to ensure that you can use co-management to manage all the Windows 10 devices. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

1. A. Join Device 1, Device2, and Device4 to Azure AD.
2. B. Unjoin Device3, Device5, and Device6 from Azure AD, and then register the devices in Azure AD.
3. C. Enroll Device4 and Device5 in Intune.
4. D. Join Device2, Device3, and Device5 to the domain.
5. E. Install the Endpoint Configuration Manager agent on Device1 and Device3.

Correct Answer: CE
Co-management enables you to concurrently manage Windows 10 devices by using both Configuration Manager and Microsoft Intune.
Co-management requires Configuration Manager version 1710 or later and enrollment in Microsoft Intune. Windows 10 devices must be hybrid Azure AD joined.
Reference:
https://docs.microsoft.com/en-us/mem/configmgr/comanage/overview