MD-102 Online Practice Questions

Explanation:
With Intune, use Delivery Optimization settings for your Windows devices to reduce bandwidth consumption when those devices download applications and updates. Configure Delivery Optimization as part of your device configuration profiles.
Reference: https://docs.microsoft.com/en-us/intune/delivery-optimization-windows

Explanation:
Set up iOS/iPadOS device enrollment with Apple Configurator Prerequisites
Physical access to iOS/iPadOS devices
Set MDM authority
An Apple MDM push certificate
Device serial numbers (Setup Assistant enrollment only)
USB connection cables
macOS computer running Apple Configurator 2.0
Note:
Upload and renew your Apple MDM push certificates in Microsoft Intune. An Apple MDM Push certificate is required to manage iOS/iPadOS and macOS devices in Microsoft Intune, and enables devices to enroll via:
The Intune Company Portal app.
Apple bulk enrollment methods, such as the Device Enrollment Program, Apple School Manager, and Apple Configurator.
Certificates must be renewed annually.
Reference: https://learn.microsoft.com/en-us/mem/intune/enrollment/apple-mdm-push-certificate-get

Explanation:
There are two parts to compliance policies in Intune:
Compliance policy settings C Tenant- wide settings that are like a built-in compliance policy that every device receives. Compliance policy settings set a baseline for how compliance policy works in your Intune environment, including whether devices that haven’t received any device compliance policies are compliant or noncompliant.
Device compliance policy C Platform-specific rules you configure and deploy to groups of users or devices.
These rules define requirements for devices, like minimum operating systems or the use of disk encryption.
Devices must meet these rules to be considered compliant.
Reference: https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started

Explanation:
Overview of Windows 365 deployment
After your organization has purchased one or more Windows 365 licenses, the Windows 365 node in Microsoft Intune will become active for management. At this point, you can provision Cloud PCs.
To set up your system to provision on-demand Cloud PCs to your users, follow these steps:

Explanation:
Box 1: Yes
Yes - The local administrator password of Device1 will be reset every 30 days.
Device1 is joined to the AD DS domain, and is enrolled in Intune.
You can use Microsoft Intune endpoint security policies for account protection to manage LAPS on devices that have enrolled with Intune. In
Box 2: Yes
Yes - The local administrator password of Device2 will be recoverable from Microsoft Entra ID.
Device2 is Entra hybrid joined.
Intune support for Windows LAPS includes the following capabilities:
- Backup accounts and passwords C You can choose to have devices back up their account and password in either Microsoft Entra ID in the cloud, or your on-premises Active Directory. Passwords are stored using strong encryption.
- Etc.
Cloud C Cloud supports backup to your Microsoft Entra ID for the following scenarios:
-> Microsoft Entra hybrid join
Microsoft Entra join
Box 3: No
Device is not enrolled.
Note: Every Windows machine has a built-in local administrator account that can’t be deleted, and which has full permissions to the device. Securing this account is an important step in securing your organization. Windows devices include Windows Local Administrator Password Solution (LAPS), a built-in solution to help manage local admin accounts.
You can use Microsoft Intune endpoint security policies for account protection to manage LAPS on devices that have enrolled with Intune. Intune policies can:
Enforce password requirements for local admin accounts
Back up a local admin account from devices to your Active Directory (AD) or Microsoft Entra Schedule rotation of those account passwords to help keep them safe.
Reference: https://learn.microsoft.com/en-us/mem/intune/protect/windows-laps-overview