- (Exam Topic 4)
You use Microsoft Endpoint Manager to manage Windows 10 devices.
You are designing a reporting solution that will provide reports on the following:
Compliance policy trends
Trends in device and user enrolment
App and operating system version breakdowns of mobile devices
You need to recommend a data source and a data visualization tool for the design.
What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Solution:
Reference:
https://docs.microsoft.com/en-us/mem/intune/developer/reports-nav-create-intune-reports https://docs.microsoft.com/en-us/mem/intune/developer/reports-proc-get-a-link-powerbi
Does this meet the goal?
Correct Answer:A
- (Exam Topic 3)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Solution:
A screenshot of a computer Description automatically generated with medium confidence
Does this meet the goal?
Correct Answer:A
- (Exam Topic 4)
Your network contains an Active Directory domain named contoso.com that syncs to Azure Active Directory (Azure AD).
The Active Directory domain contains 200 computers that run Windows 10. The computers are managed by using Microsoft System Center Configuration Manager (Current Branch).
You need to pilot co-management for only five of the computers.
What should you create first?
Correct Answer:C
The Pilot Intune setting switches the associated workload only for the devices in the pilot collection.
Note: When you enable co-management, you'll assign a collection as a Pilot group. This is a group that contains a small number of clients to test your co-management configurations. We recommend you create a suitable collection before you start the procedure. Then you can select that collection without exiting the procedure to do so.
References:
https://docs.microsoft.com/en-us/configmgr/comanage/tutorial-co-manage-new-devices
- (Exam Topic 4)
You have a Microsoft 365 subscription.
You plan to use Conditional Access policies.
You need to identify which scenarios the policies will support.
Which two scenarios should you identify? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
Correct Answer:AD
A: Conditional Access allows administrators to control what Office 365 apps users can gain access to based on if they pass/fail certain conditions. These conditions are enforced by building a policy (or multiple policies) to control how users access your Office 365 resources.
Cloud Apps- What apps do you want to control? Conditional Access does not need to apply to all of Office 365, you can be more granular and just control access to specific apps – E.g. Exchange Online.
Access can be allowed to Office 365 with the following conditions:
* Require multi-factor authentication – User is allowed in but will need to complete additional security to log in.
* Etc.
D: The easiest way to block legacy authentication across your entire organization is by configuring a Conditional Access policy that applies specifically to legacy authentication clients and blocks access.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/block-legacy-authenticationhttps://do
- (Exam Topic 4)
Your company has devices enrolled in Microsoft Intune as shown in the following table.
In Microsoft Endpoint Manager, you define the company's network as a location named Location1. Which devices can use network location-based compliance policies?
Correct Answer:E
Intune supported operating systems
Intune supports devices running the following operating systems (OS): iOS
Android Windows macOS
Note: View the device compliance settings for the different device platforms: Android device administrator
Android Enterprise iOS
macOS
Windows Holographic for Business
Windows 8.1 and later Windows 10/11
Reference: https://docs.microsoft.com/en-us/mem/intune/fundamentals/supported-devices-browsers https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started