MD-102 Practice Test

Answer choices

1. A. Self-deploying mode, for the required business outcome.
2. B. User-driven deployment, under the documented operational and governance requirements.
3. C. Pre-provisioned deployment, as the proposed design for the complete governed operational workflow.
4. D. Microsoft Entra registration without Autopilot, for the specified implementation requirement.

Wrong-answer review

• A. Self-deploying mode, for the required business outcome.: Self-deploying mode is designed for supported shared or kiosk devices rather than an assigned employee’s laptop.
• C. Pre-provisioned deployment, as the proposed design for the complete governed operational workflow.: Pre-provisioned deployment includes a technician or partner phase that the direct-to-employee requirement explicitly excludes.
• D. Microsoft Entra registration without Autopilot, for the specified implementation requirement.: Registration alone cannot provide the requested corporate Windows Autopilot deployment profile and provisioning experience.

Answer choices

1. A. Grant the analyst tenant-wide administration so Remote Help can override compliance, for the described technical objective and its associated operational control requirements, as selected.
2. B. Use the session to assist and gather evidence, then correct the encryption condition through the appropriate management control and allow compliance reevaluation, within the described context.
3. C. Suppress the warning because support sessions make compliance unnecessary, for the described technical objective and its associated operational control requirements, in context.
4. D. Convert every attended session to unattended access so policy failures repair automatically, for the described technical objective and its associated operational control requirements.

Answer choices

1. A. A longer secret committed to the same repository, for the described technical objective and its associated operational control requirements, in context.
2. B. A supported protected authentication method for a least-privileged Graph identity, with consent and credential lifecycle governed outside the script, for the stated implementation and support requirements.
3. C. A local device administrator account because local privilege authorizes Graph, for the described technical objective and its associated operational control requirements, for evaluation.
4. D. Anonymous Graph access because the script reads inventory, for the described technical objective and its associated operational control requirements, within the described operational context.

Answer choices

1. A. The PIN is synchronized as a reusable password to every joined device, as the recommended implementation across the complete governed service lifecycle.
2. B. The PIN is only a shorter representation of the user's domain password, as the primary implementation for the described business requirement.
3. C. The PIN is a local gesture that unlocks a device-bound key or certificate, so it is not a reusable domain password, within the described operational context.
4. D. The PIN provides single-factor authentication because possession of the device is irrelevant, as the selected approach for the stated technical and business outcome, within the described context.

Answer choices

1. A. Use a permanent ring pause for release targeting, approval, and reporting, as the primary implementation for the described business requirement.
2. B. Use a feature update policy for release targeting, Delivery Optimization for content delivery, and update reports for deployment-state analysis, in practice.
3. C. Use Delivery Optimization to approve the release and remove safeguard holds, for the described technical objective and its associated operational control requirements.
4. D. Use feature targeting as a replacement for quality updates and status reporting, for the described technical objective and its associated operational control requirements.

Answer choices

1. A. Add the app as its own dependency, for the described technical objective and its associated operational control requirements, for the specified implementation requirement.
2. B. Configure supersedence to uninstall an unrelated application, for the described technical objective and its associated operational control requirements, as configured.
3. C. Correct the requirement rule if the Windows version should be eligible, then reevaluate applicability before troubleshooting installation or detection, within the stated policy framework.
4. D. Change detection because detection decides whether an ineligible device may attempt installation, for the described technical objective and its associated operational control requirements, as proposed.

Answer choices

1. A. Uninstall the application from every managed device immediately, under the stated technical, operational, and governance constraints.
2. B. Treat the selected analytics baseline as an automatic root-cause diagnosis, under the stated technical, operational, and governance constraints.
3. C. Replace the application-reliability report with startup-performance data, for the described technical objective and its associated operational control requirements, when applied.
4. D. Obtain sufficient reporting data and inspect affected-device evidence before generalizing the insight or selecting remediation

Answer choices

1. A. A dynamic device group based on the supported device attributes, while verifying enrollment and compliance separately, as the proposed prepare infrastructure for devices approach.
2. B. A static group maintained from a spreadsheet, as the recommended implementation across the complete governed service lifecycle.
3. C. A compliance policy that doubles as dynamic group membership logic, under the described prepare infrastructure for devices criteria.
4. D. Microsoft Entra registration because every registered device is automatically organization-owned, as the primary implementation for the described business requirement.

Answer choices

1. A. Deploy the complete untested baseline because it contains the requested settings, as the selected approach for the stated technical and business outcome.
2. B. Create a compliance policy and expect it to configure antivirus and firewall settings, as the selected response to the described condition.
3. C. Deploy focused Intune endpoint security policies for antivirus and firewall, and evaluate the broader baseline separately in a pilot, within the described context.
4. D. Delay all endpoint protection changes until every baseline setting is accepted, for the described technical objective and its associated operational control requirements, for this task.

Answer choices

1. A. A managed-device configuration profile for an unsupported key, for the stated requirement.
2. B. An app protection policy that enforces the organizational-data transfer restriction, within this design.
3. C. A second copy of the same app configuration key, under the organization’s defined implementation and exception-management process.
4. D. Full device enrollment solely because managed-app configuration cannot work without it, for this requirement.