View Full Microsoft MD-102 Exam Dumps and Practice Test Dumps.

 

Question 1

Which Microsoft service is primarily used to manage Windows devices and applications from the cloud?

1. Microsoft Intune
2. Microsoft Exchange Online
3. Microsoft Defender for Office 365
4. Microsoft SharePoint

Correct Answer: 1

Explanation

Microsoft Intune is a cloud-based endpoint management service that allows organizations to manage devices, applications, configuration policies, compliance settings, and security controls. Administrators can enroll Windows devices into Intune and apply organizational policies without requiring traditional on-premises management infrastructure. Intune also supports mobile device management and mobile application management. Exchange Online focuses on email and collaboration, Defender for Office 365 protects messaging and collaboration workloads, and SharePoint provides content management and collaboration capabilities. Intune is therefore central to modern cloud-based endpoint management.

Question 2

Which Windows enrollment method automatically enrolls corporate devices into Microsoft Intune during deployment?

1. Windows Autopatch
2. Windows Autopilot
3. Microsoft Defender
4. Configuration Manager

Correct Answer: 2

Explanation

Windows Autopilot is designed to simplify the deployment and provisioning of Windows devices. During an Autopilot deployment, a device can automatically enroll into Microsoft Intune and receive organizational policies, applications, and configuration settings. This allows users to receive a corporate device with minimal manual setup by IT staff. Windows Autopatch focuses on keeping supported software updated, while Microsoft Defender provides security capabilities and Configuration Manager provides traditional endpoint management. Autopilot is therefore closely associated with modern automated Windows device provisioning.

Question 3

Which Microsoft Entra ID feature allows users to access multiple applications after signing in once?

1. Conditional Access
2. Device compliance
3. Single sign-on
4. Windows Hello

Correct Answer: 3

Explanation

Single sign-on, or SSO, allows users to authenticate once and then access multiple supported applications without repeatedly entering their credentials. Microsoft Entra ID can provide SSO for cloud applications and other integrated services. This improves the user experience while allowing organizations to centrally manage authentication and access policies. Conditional Access evaluates conditions before granting access, device compliance determines whether devices meet required policies, and Windows Hello provides passwordless or biometric authentication. SSO specifically addresses repeated authentication across multiple applications.

Question 4

Which Microsoft Intune policy can require a device to have encryption enabled before allowing access to corporate resources?

1. Compliance policy
2. Wi-Fi profile
3. Enrollment restriction
4. App configuration policy

Correct Answer: 1

Explanation

An Intune compliance policy can define security requirements that devices must satisfy before they are considered compliant. One possible requirement is that device storage encryption must be enabled. Compliance status can then be used with Conditional Access to restrict access to organizational resources from devices that do not meet the required security conditions. Wi-Fi profiles configure wireless connectivity, enrollment restrictions control which devices or platforms can enroll, and app configuration policies manage application settings. Compliance policies therefore help enforce endpoint security requirements.

Question 5

Which Windows feature provides hardware-backed protection for encryption keys and other security operations?

1. Secure Boot
2. TPM
3. BitLocker
4. Windows Sandbox

Correct Answer: 2

Explanation

The Trusted Platform Module, or TPM, is a hardware-based security component that can securely store cryptographic keys and support functions such as device identity and measured boot. Windows can use TPM capabilities to strengthen security features including BitLocker and Windows Hello. Secure Boot helps prevent unauthorized boot software, BitLocker provides drive encryption, and Windows Sandbox provides an isolated environment for applications. The TPM specifically provides hardware-backed cryptographic capabilities that strengthen several Windows security technologies.

Question 6

Which Windows security technology encrypts data stored on an operating system drive?

1. Windows Defender Firewall
2. Microsoft Defender Antivirus
3. BitLocker
4. SmartScreen

Correct Answer: 3

Explanation

BitLocker is a Windows security feature that provides full-volume encryption for supported drives. It helps protect data if a device is lost or stolen because the information stored on the encrypted drive cannot normally be accessed without the required authentication or recovery information. BitLocker can use a TPM to help protect encryption keys and support secure startup. Microsoft Defender Antivirus detects malware, Windows Defender Firewall controls network traffic, and SmartScreen helps protect users from malicious or untrusted content. BitLocker specifically provides storage encryption.

Question 7

Which Microsoft service provides endpoint detection and response capabilities for Windows devices?

1. Microsoft Defender for Endpoint
2. Microsoft Intune
3. Microsoft Entra Connect
4. Microsoft Exchange Online

Correct Answer: 1

Explanation

Microsoft Defender for Endpoint provides endpoint detection and response capabilities designed to identify, investigate, and respond to security threats on supported devices. It collects security signals from endpoints and provides administrators with tools for threat detection, investigation, vulnerability management, and response actions. Intune focuses primarily on device and application management, Entra Connect synchronizes identities between environments, and Exchange Online provides cloud email services. Defender for Endpoint is therefore the Microsoft security platform specifically focused on protecting and investigating endpoint devices.

Question 8

Which Windows deployment technology allows an organization to customize an operating system image before deploying it to devices?

1. Windows Autopilot
2. Microsoft Store
3. Windows Imaging
4. Microsoft Entra ID

Correct Answer: 3

Explanation

Windows imaging allows administrators to prepare and deploy customized operating system images to multiple devices. An organization can configure applications, drivers, settings, and other components within an image before deployment. This approach can provide consistency across traditionally managed devices. Windows Autopilot uses a cloud-driven provisioning approach rather than depending primarily on a customized traditional image. Microsoft Store provides application distribution, while Microsoft Entra ID manages identity and access. Imaging remains useful in deployment scenarios where a standardized operating system configuration is required.

Question 9

Which Windows feature helps prevent unauthorized software from running by allowing only trusted applications?

1. AppLocker
2. Disk Cleanup
3. BitLocker
4. Remote Desktop

Correct Answer: 1

Explanation

AppLocker allows organizations to create rules that control which applications, scripts, installers, and other executable content users can run. Administrators can define rules based on factors such as publisher, path, or file information. This can help reduce the risk of unauthorized or potentially harmful software executing on managed Windows devices. BitLocker protects stored data, Disk Cleanup removes unnecessary files, and Remote Desktop provides remote access. AppLocker is therefore specifically associated with application execution control and software restriction.

Question 10

Which Microsoft Entra feature can require multifactor authentication when specific access conditions are met?

1. Device enrollment
2. Conditional Access
3. Windows Autopilot
4. BitLocker

Correct Answer: 2

Explanation

Conditional Access in Microsoft Entra ID allows organizations to create policies that evaluate conditions before granting access to resources. Policies can require multifactor authentication based on factors such as user identity, device state, location, application, or risk. This provides organizations with flexible access controls rather than relying only on passwords. Device enrollment manages device registration, Windows Autopilot handles provisioning, and BitLocker protects stored data through encryption. Conditional Access is therefore the appropriate feature for enforcing contextual authentication requirements.

Question 11

Which Microsoft Intune feature can automatically deploy required applications to managed Windows devices?

1. Device cleanup
2. Windows Hello
3. Required app assignment
4. BitLocker recovery

Correct Answer: 3

Explanation

Intune application assignments allow administrators to control how applications are distributed to managed devices. When an application is assigned as Required, Intune can automatically install it on applicable enrolled devices according to the configured assignment and deployment settings. This helps organizations standardize required software across endpoints without relying on users to manually install applications. Device cleanup handles stale device records, Windows Hello provides authentication capabilities, and BitLocker recovery deals with encryption recovery information. Required app assignments are therefore used for automated application deployment.

Question 12

Which Windows authentication method uses a PIN, fingerprint, or facial recognition instead of a traditional password?

1. Windows Hello for Business
2. Windows Defender
3. BitLocker
4. AppLocker

Correct Answer: 1

Explanation

Windows Hello for Business provides modern authentication methods that can include a device-bound PIN, fingerprint recognition, or facial recognition when supported by the hardware and configuration. It is designed to provide strong authentication while reducing dependence on traditional passwords. The credentials are protected using security features such as TPM when available. Microsoft Defender provides security and threat protection, BitLocker encrypts storage, and AppLocker controls application execution. Windows Hello for Business is therefore the technology associated with modern passwordless authentication experiences on Windows devices.

Question 13

Which Microsoft Intune feature controls whether users can enroll personal devices into an organization’s management environment?

1. Configuration profiles
2. Enrollment restrictions
3. Compliance policies
4. Application protection policies

Correct Answer: 2

Explanation

Enrollment restrictions in Microsoft Intune allow administrators to control which devices and platforms can be enrolled into organizational management. Organizations can use these restrictions to limit enrollment based on factors such as device platform, ownership type, or supported operating systems. Configuration profiles apply settings to enrolled devices, compliance policies evaluate whether devices meet security requirements, and application protection policies protect organizational data within applications. Enrollment restrictions are therefore the appropriate Intune feature for controlling which devices are permitted to enter the management environment.

Question 14

Which Windows feature helps ensure that only trusted software is loaded during the boot process?

1. Secure Boot
2. Storage Sense
3. Task Scheduler
4. Windows Sandbox

Correct Answer: 1

Explanation

Secure Boot is a UEFI-based security feature that helps ensure the system starts only with trusted boot software. It checks the digital signatures of boot components before allowing them to execute, helping protect against certain forms of boot-level malware and unauthorized software. Storage Sense manages disk space, Task Scheduler automates tasks, and Windows Sandbox provides an isolated environment for applications. Secure Boot operates during the startup process and is an important component of a modern Windows security architecture.

Question 15

Which Microsoft tool provides a centralized portal for managing Windows devices through cloud-based policies?

1. Microsoft Word
2. Microsoft Intune admin center
3. Microsoft Exchange admin center
4. Microsoft Teams

Correct Answer: 2

Explanation

The Microsoft Intune admin center provides a centralized web-based management interface for administering devices, applications, policies, compliance settings, and other endpoint-management capabilities. Administrators can configure Windows device settings and monitor management status from the cloud rather than relying entirely on local management infrastructure. Microsoft Word is a productivity application, Exchange admin center manages email-related services, and Teams supports collaboration and communication. The Intune admin center is therefore the primary administrative interface for Microsoft Intune endpoint management.

Question 16

Which deployment method allows users to reset a managed Windows device while preserving organizational management configuration?

1. Windows Autopilot Reset
2. Disk Cleanup
3. System Restore
4. Safe Mode

Correct Answer: 1

Explanation

Windows Autopilot Reset is designed for managed devices that need to be returned to a business-ready state without completely removing their organizational management relationship. It can remove user-specific data and applications while maintaining important management and identity information needed for continued organizational control. Disk Cleanup removes unnecessary files, System Restore rolls system state back to a previous restore point, and Safe Mode starts Windows with limited drivers and services. Autopilot Reset is therefore useful for redeploying or repurposing managed devices.

Question 17

Which policy type can configure Windows settings such as password requirements, firewall settings, and security options through Intune?

1. Configuration profile
2. Application protection policy
3. Enrollment restriction
4. App assignment

Correct Answer: 1

Explanation

An Intune configuration profile allows administrators to deploy and manage device settings across enrolled endpoints. Depending on the profile type and configuration method, administrators can manage security settings, firewall configuration, password requirements, system restrictions, and other Windows settings. Application protection policies primarily protect organizational data inside supported applications, enrollment restrictions control device enrollment, and app assignments determine application deployment. Configuration profiles are therefore a central mechanism for applying standardized Windows settings across managed devices.

Question 18

Which Microsoft service helps protect Windows endpoints from malware and other threats?

1. Microsoft Defender Antivirus
2. Microsoft SharePoint
3. Microsoft OneDrive
4. Microsoft Planner

Correct Answer: 1

Explanation

Microsoft Defender Antivirus provides built-in malware and threat protection for supported Windows devices. It can scan files, processes, downloads, and other areas of the operating system to identify malicious software and suspicious activity. Organizations can manage many Defender settings through Microsoft Intune and other Microsoft security management services. SharePoint is primarily a collaboration and content platform, OneDrive provides cloud file storage and synchronization, and Planner supports task management. Defender Antivirus is therefore the service directly responsible for endpoint malware protection.

Question 19

Which Microsoft Entra feature can use device compliance status when deciding whether to allow access to corporate resources?

1. Conditional Access
2. Microsoft Store
3. Windows Sandbox
4. Device Manager

Correct Answer: 1

Explanation

Conditional Access can evaluate device compliance information when determining whether users should be permitted to access organizational resources. For example, an organization can require a device to meet specific Intune compliance requirements before allowing access to corporate applications or data. This creates a connection between endpoint management and identity-based access control. Microsoft Store distributes applications, Windows Sandbox provides an isolated testing environment, and Device Manager manages local hardware and drivers. Conditional Access is therefore the feature used to enforce access decisions based on device compliance.

Question 20

Which Windows management tool provides administrators with detailed information about installed hardware and drivers?

1. Task Manager
2. Device Manager
3. Event Viewer
4. Registry Editor

Correct Answer: 2

Explanation

Device Manager provides information about hardware devices installed on a Windows computer and allows administrators to inspect device status, drivers, properties, and hardware-related configuration. It is commonly used when troubleshooting problems involving network adapters, display devices, storage controllers, USB devices, and other hardware. Task Manager focuses on running processes and system resource usage, Event Viewer displays logs, and Registry Editor manages Windows registry settings. Device Manager is therefore the appropriate tool for examining hardware and driver information.