You need to meet the technical requirements for the contractors.
Which two actions should you perform? Each correct answer presents part of the solution.
a) Create app protection policies for iOS and Android that target Outlook and Teams and block saving to personal storage.
b) Create a Conditional Access policy for the Contractors group that requires devices to be marked as compliant.
c) Create a Conditional Access policy for the Contractors group that requires an app protection policy.
d) Create device compliance policies for iOS and Android that target the Contractors group and require a passcode.
e) Create app configuration policies for managed devices that turn off saving attachments to personal storage in Outlook.
02. You have 100 devices that run Windows 10. You plan to refresh the devices with a new Windows 10 image by using the Microsoft Deployment Toolkit (MDT).
You need to ensure that users keep their existing Start menu layout after their devices are refreshed.
What should you include in the solution?
a) a deployment rule
b) a PowerShell script
c) a reference image
d) the User State Migration Tool
You need to meet the technical requirement for the Android tablets.
Which Android Enterprise enrollment profile type should you use?
a) Corporate-owned, fully managed devices
b) Corporate-owned devices with a work profile
c) Personally-owned devices with a work profile
d) Corporate-owned dedicated devices
04. You have a Microsoft 365 subscription that uses Microsoft Intune.
You need to prevent users from connecting to Microsoft 365 services when they are using jailbroken devices.
Which two settings should you configure? Each correct answer presents part of the solution.
a) a Conditional Access policy
b) a device configuration profile
c) a device enrollment manager
d) a device platform restriction
e) a device compliance policy
You need to meet the technical requirement for the new laptops.
What should you configure?
a) A Windows Autopilot deployment profile in user-driven mode, assigned to a dynamic group that contains all Autopilot devices
b) Corporate device identifiers imported from the supplier's list of manufacturers, models and serial numbers
c) An Autopilot device preparation policy that uses TT-NewLaptops as its device group, with the Intune Provisioning Client service principal set as an owner of TT-NewLaptops
d) A device enrollment manager account that IT staff use to enroll each laptop before it is handed over
06. You have a Microsoft 365 subscription that includes 500 Windows 11 devices that are managed by using Microsoft Intune.
You need to configure the startup page for Microsoft Edge on all the devices. The solution must minimize administrative effort and must apply automatically to new devices when they enroll.
What should you use?
a) a device configuration profile
b) a compliance policy
c) a PowerShell script
d) an app configuration policy
You need to meet the technical requirement for the iPad Wi-Fi certificates. You will create an iOS/iPadOS Wi-Fi profile that uses EAP-TLS and assign it to WWI-iPads.
Which two profiles should you also create and assign to WWI-iPads? Each correct answer presents part of the solution.
a) A PKCS certificate profile that names the Cloud PKI issuing CA as its certification authority
b) A trusted certificate profile that deploys the Cloud PKI root CA certificate
c) A PKCS imported certificate profile that delivers a PFX file exported from the AD CS server
d) A SCEP certificate profile that uses the SCEP URI of the Cloud PKI issuing CA
e) A SCEP certificate profile that uses the existing NDES server URL
08. You purchase five devices that run Windows 11. Each device contains custom applications that the reseller preinstalled.
You need to remove the preinstalled applications from each device. The solution must minimize administrative effort.
What should you use?
a) Sysprep
b) User State Migration Tool (USMT)
c) Windows Configuration Designer
d) Windows System Image Manager (Windows SIM)
You need to meet the technical requirement for Reno-Profile. You create a dynamic device group named Reno-Laptops and assign Reno-Profile to the group.
Which membership rule should you use for Reno-Laptops?
a) (device.devicePhysicalIds -any (_ -eq "[OrderID]:NW-RENO"))
b) (device.devicePhysicalIds -any (_ -startsWith "[ZTDId]"))
c) (device.devicePhysicalIds -any (_ -eq "[PurchaseOrderId]:NW-RENO"))
d) (device.enrollmentProfileName -eq "NW-RENO")
10. You have a Microsoft 365 E3 subscription that uses Microsoft Intune. You have 500 Windows 11 devices that are Microsoft Entra joined and enrolled in Intune. Windows Recovery Environment is enabled on every device.
You need to allow on-site technicians to return a device to a business-ready state from the device's lock screen, without reinstalling Windows. The solution must minimize the time taken to revert devices.
What should you do first?
a) Create a Windows Autopilot deployment profile for the devices.
b) Create a dynamic device group that contains the devices.
c) Manually register the devices with Windows Autopilot.
d) Configure the DisableAutomaticReDeploymentCredentials policy.