Your network contains an Active Directory domain. The domain contains 2,000 computers that run Windows 10. You implement hybrid Azure AD and Microsoft Intune.
You need to automatically register all the existing computers to Azure AD and enroll the computers in Intune. The solution must minimize administrative effort.
What should you use?

• A.an Autodiscover service connection point (SCP)
• B.a Windows Autopilot deployment profile
• C.a Group Policy object (GPO)
• D.an Autodiscover address record

Comment: *

Name: *

Email: *

Verification: *

Your company implements Azure AD, Microsoft 365, Microsoft Intune, and Azure Information Protection. The company's security policy states the following:
* Personal devices do not need to be enrolled in Intune.
* Users must authenticate by using a PIN before they can access corporate email data.
* Users can use their personal iOS and Android devices to access corporate cloud services.
* Users must be prevented from copying corporate email data to a cloud storage service other than Microsoft OneDrive for Business.
You need to configure a solution to enforce the security policy.
What should you create?

• A.a device configuration profile from the Microsoft Intune admin center
• B.a data loss prevention (DIP) policy from the Microsoft Purview compliance portal
• C.an app protection policy from the Microsoft Intune admin center
• D.an insider risk management policy from the Microsoft Purview compliance portal

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 subscription that contains two users named User1 and User2. You need to ensure that the users can perform the following tasks:
* User1 must be able to create groups and manage users.
* User2 must be able to reset passwords for no administrative users.
The solution must use the principle of least privilege.
Which role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:

Microsoft 365 or Office 365 subscription comes with a set of admin roles that you can assign to users in your organization using the Microsoft 365 admin center. Each admin role maps to common business functions and gives people in your organization permissions to do specific tasks in the admin centers1.
To ensure that User1 can create groups and manage users, you should assign the User Administrator role to User1. This role allows User1 to create and manage all aspects of users and groups, including resetting passwords for non-administrative users1.
To ensure that User2 can reset passwords for non-administrative users, you should assign the Helpdesk Administrator role to User2. This role allows User2 to reset passwords, manage service requests, and monitor service health for non-administrative users1.

Comment: *

Name: *

Email: *

Verification: *

You have a computer named Computer1 that runs Windows 11.
A user named User1 plans to use Remote Desktop to connect to Computer1.
You need to ensure that the device of User1 is authenticated before the Remote Desktop connection is established and the sign in page appears.
What should you do on Computer1?

• A.Turn on Network Discovery
• B.Enable Network Level Authentication (NLA)
• C.Turn on Reputation-based protection
• D.Configure the Remote Desktop Configuration service

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 subscription.
You plan to use Windows Autopilot to provision 25 Windows 11 devices.
You need to configure the Out-of-box experience (OOBE) settings.
What should you create in the Microsoft Intune admin center?

• A.a PowerShell script
• B.a compliance policy
• C.an enrollment status page (ESP)
• D.a configuration profile
• E.a deployment profile

Comment: *

Name: *

Email: *

Verification: *