- (Exam Topic 4)
Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD).
You have a Microsoft 365 subscription.
You create a conditional access policy for Microsoft Exchange Online.
You need to configure the policy to prevent access to Exchange Online unless is connecting from a device that is hybrid Azure AD-joined.
Which settings should you configure?
Correct Answer:D
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/conditions#device-state
- (Exam Topic 4)
Your company has several Windows 10 devices that are enrolled in Microsoft Inline.
You deploy a new computer named Computer1 that runs Windows 10 and is in a workgroup. You need to enroll Computer1 in Intune.
Solution: You install the Company Portal app on Computer1 and use the Devices tab from the app. Does this meet the goal?
Correct Answer:B
Use MDM enrolment.
MDM only enrollment lets users enroll an existing Workgroup, Active Directory, or Azure Active directory joined PC into Intune. Users enroll from Settings on the existing Windows PC.
Reference:
https://docs.microsoft.com/en-us/mem/intune/enrollment/windows-enrollment-methods
- (Exam Topic 4)
You are configuring an SSTP VPN.
When you attempt to connect to the VPN, you receive the message shown in the exhibit. (Click the Exhibit
tab.)
What should you do to ensure that you can connect to the VPN?
Correct Answer:B
- (Exam Topic 4)
Your network contains an Active Directory domain named contoso.com that syncs to Azure Active Directory (Azure AD).
Existing on-premises computers are managed by using Microsoft System Center Configuration Manager (Current Branch). You configure contoso.com for co-management.
You deploy 100 new devices that run Windows 10. The devices are joined to Azure AD and enrolled in Microsoft Intune.
You need to ensure that the devices are co-managed. What should you create in Intune first?
Correct Answer:C
For new internet-based devices, you need to create an app in Intune. Deploy this app to Windows 10 devices that aren't already Configuration Manager clients. This scenario is when you have new Windows 10 devices that join Azure AD and automatically enroll to Intune. You install the Configuration Manager client to reach a co-management state.
References:
https://docs.microsoft.com/en-us/configmgr/comanage/how-to-prepare-win10
- (Exam Topic 4)
You have the Microsoft Deployment Toolkit (MDT) installed. You install and customize Windows 10 on a reference computer.
You need to capture an image of the reference computer and ensure that the image can be deployed to multiple computers.
Which command should you run before you capture the image?
Correct Answer:D
Reference:
https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/sysprep--system-preparation-- overview