- (Exam Topic 4)
Your company uses Windows Defender Advanced Threat Protection (Windows Defender ATP). Windows Defender ATP includes the machine groups shown in the following table.
You onboard a computer to Windows Defender ATP as shown in the following exhibit.
What is the effect of the Windows Defender ATP configuration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Solution:
Does this meet the goal?
Correct Answer:A
- (Exam Topic 4)
You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.
MFA has a trusted IP address range of 123.30.20.0/24.
You have the Azure AD named locations shown in the following table.
You create a Conditional Access policy that has the following settings: 
Name: CAPolicy1
Assignments
- Users or workload identities
- Include: Group1
- 
Cloud apps or actions: App1 Conditions
- Locations
- Include: All trusted locations Access controls
- Grant access
- Require multi-factor authentication
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Solution:
Box 1: Yes
Location2 is not trusted.
Box 2: No
Location1 is trusted.
Box 3: No
MFA IP range is also trusted.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-all
Does this meet the goal?
Correct Answer:A
- (Exam Topic 4)
You have 100 computers that run Windows 8.1.
You plan to deploy Windows 10 to the computers by performing a wipe and load installation.
You need to recommend a method to retain the user settings and the user data.
Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Solution:
References:
https://docs.microsoft.com/en-us/windows/deployment/windows-10-deployment-scenarios http://itproguru.com/expert/2016/01/step-by-step-how-to-migrate-users-and-user-data-from-xp-vista-windows-7
Does this meet the goal?
Correct Answer:A
- (Exam Topic 4)
You have an Azure Active Directory (Azure AD) tenant named adatum.com that contains the users shown in the following table.
You configure the following device settings for the tenant: Users may join devices to Azure AD: User1 Additional local administrators on Azure AD joined devices: None
You install Windows 10 on a computer named Computer1.
You need to identify which users can join Computer1 to adatum.com, and which users will be added to the Administrators group after joining adatum.com.
Which users should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Solution:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin
Does this meet the goal?
Correct Answer:A
- (Exam Topic 4)
Your company has a Microsoft 365 subscription.
A new user named Admin1 is responsible for deploying Windows 10 to computers and joining the computers to Microsoft Azure Active Directory (Azure AD).
Admin1 successfully joins computers to Azure AD.
Several days later, Admin1 receives the following error message: “This user is not authorized to enroll. You can try to do this again or contact your system administrator with the error code (0x801c0003).”
You need to ensure that Admin1 can join computers to Azure AD and follow the principle of least privilege.
Correct Answer:B
References:
https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal