MD 101
MD 101
MD 101
Version: 20.022
Important Notice
Product
Our Product Manager keeps an eye for Exam updates by Vendors. Free update is available within
One year after your purchase.
You can login member center and download the latest product anytime. (Product downloaded
from member center is always the latest.)
PS: Ensure you can pass the exam, please check the latest product in 2-3 days before the exam
again.
Feedback
We devote to promote the product quality and the grade of service to ensure customers interest.
If you have any questions about our product, please provide Exam Number, Version, Page
Number, Question Number, and your Login Account to us, please contact us at
[email protected] and our technical experts will provide support in 24 hours.
Copyright
The product of each order has its own encryption code, so you should use it independently.
If anyone who share the file we will disable the free update and account access.
Any unauthorized changes will be inflicted legal punishment. We will reserve the right of final
explanation for this statement.
Existing Environment
Current Business Model
The Los Angeles office has 500 developers. The developers work flexible hours ranging from
11:00 to
22:00. Litware has a Microsoft System Center 2012 R2 Configuration Manager deployment.
During discovery, the company discovers a process where users are emailing bank account
information of its customers to internal and external recipients.
Current Environment
The network contains an Active Directory domain that is synced to Microsoft Azure Active
Directory (Azure AD). The functional level of the forest and the domain is Windows Server 2012
R2. All domain controllers run Windows Server 2012 R2.
Litware has the computers shown in the following table.
The development department uses projects in Azure DevOps to build applications. Most of the
employees in the sales department are contractors. Each contractor is assigned a computer that
runs Windows 10. At the end of each contract, the computer is assigned to different contractor.
Currently, the computers are re-provisioned manually by the IT department.
Problem Statements
Litware identifies the following issues on the network:
- Employees in the Los Angeles office report slow Internet performance when updates are
downloading. The employees also report that the updates frequently consume considerable
resources when they are installed. The Update settings are configured as shown in the Updates
exhibit. (Click the Updates button.)
- Management suspects that the source code for the proprietary applications in Azure DevOps in
being shared externally.
- Re-provisioning the sales department computers is too time consuming.
Requirements
Business Goals
Litware plans to transition to co-management for all the company-owned Windows 10 computers.
Whenever possible, Litware wants to minimize hardware and software costs.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 2
http://www.passleader.com
Device Management Requirements
Litware identifies the following device management requirements:
- Prevent the sales department employees from forwarding email that contains bank account
information.
- Ensure that Microsoft Edge Favorites are accessible from all computers to which the developers
sign in.
- Prevent employees in the research department from copying patented information from trusted
applications to untrusted applications.
Technical Requirements
Litware identifies the following technical requirements for the planned deployment:
- Re-provision the sales department computers by using Windows AutoPilot.
- Ensure that the projects in Azure DevOps can be accessed from the corporate network only.
- Ensure that users can sign in to the Azure AD-joined computers by using a PIN. The PIN must
expire every 30 days.
- Ensure that the company name and logo appears during the Out of Box Experience (OOBE)
when using Windows AutoPilot.
You need to capture the required information for the sales department computers to meet the
technical requirements.
Which Windows PowerShell command should you run first?
A. Install-Module WindowsAutoPilotIntune
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 3
http://www.passleader.com
B. Install-Script Get-WindowsAutoPilotInfo
C. Import-AutoPilotCSV
D. Get-WindowsAutoPilotInfo
Answer: A
Explanation:
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/existing-devices
QUESTION 2
Case Study 1 - Litware inc
General Overview
Litware, Inc. is an international manufacturing company that has 3,000 employees. The company
has sales, marketing, research, human resources (HR), development, and IT departments.
Litware has two main offices in New York and Los Angeles. Litware has five branch offices in
Asia.
Existing Environment
Current Business Model
The Los Angeles office has 500 developers. The developers work flexible hours ranging from
11:00 to
22:00. Litware has a Microsoft System Center 2012 R2 Configuration Manager deployment.
During discovery, the company discovers a process where users are emailing bank account
information of its customers to internal and external recipients.
Current Environment
The network contains an Active Directory domain that is synced to Microsoft Azure Active
Directory (Azure AD). The functional level of the forest and the domain is Windows Server 2012
R2. All domain controllers run Windows Server 2012 R2.
Litware has the computers shown in the following table.
The development department uses projects in Azure DevOps to build applications. Most of the
employees in the sales department are contractors. Each contractor is assigned a computer that
runs Windows 10. At the end of each contract, the computer is assigned to different contractor.
Currently, the computers are re-provisioned manually by the IT department.
Problem Statements
Litware identifies the following issues on the network:
- Employees in the Los Angeles office report slow Internet performance when updates are
downloading. The employees also report that the updates frequently consume considerable
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 4
http://www.passleader.com
resources when they are installed. The Update settings are configured as shown in the Updates
exhibit. (Click the Updates button.)
- Management suspects that the source code for the proprietary applications in Azure DevOps in
being shared externally.
- Re-provisioning the sales department computers is too time consuming.
Requirements
Business Goals
Litware plans to transition to co-management for all the company-owned Windows 10 computers.
Whenever possible, Litware wants to minimize hardware and software costs.
Technical Requirements
Litware identifies the following technical requirements for the planned deployment:
- Re-provision the sales department computers by using Windows AutoPilot.
- Ensure that the projects in Azure DevOps can be accessed from the corporate network only.
- Ensure that users can sign in to the Azure AD-joined computers by using a PIN. The PIN must
expire every 30 days.
- Ensure that the company name and logo appears during the Out of Box Experience (OOBE)
when using Windows AutoPilot.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 5
http://www.passleader.com
What should you configure to meet the technical requirements for the Azure AD-joined
computers?
A. Windows Hello for Business from the Microsoft Intune blade in the Azure portal.
B. The Accounts options in an endpoint protection profile.
C. The Password Policy settings in a Group Policy object (GPO).
D. A password policy from the Microsoft Office 365 portal.
Answer: A
Explanation:
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-
manage-inorganization
QUESTION 3
Case Study 1 - Litware inc
General Overview
Litware, Inc. is an international manufacturing company that has 3,000 employees. The company
has sales, marketing, research, human resources (HR), development, and IT departments.
Litware has two main offices in New York and Los Angeles. Litware has five branch offices in
Asia.
Existing Environment
Current Business Model
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 6
http://www.passleader.com
The Los Angeles office has 500 developers. The developers work flexible hours ranging from
11:00 to
22:00. Litware has a Microsoft System Center 2012 R2 Configuration Manager deployment.
During discovery, the company discovers a process where users are emailing bank account
information of its customers to internal and external recipients.
Current Environment
The network contains an Active Directory domain that is synced to Microsoft Azure Active
Directory (Azure AD). The functional level of the forest and the domain is Windows Server 2012
R2. All domain controllers run Windows Server 2012 R2.
Litware has the computers shown in the following table.
The development department uses projects in Azure DevOps to build applications. Most of the
employees in the sales department are contractors. Each contractor is assigned a computer that
runs Windows 10. At the end of each contract, the computer is assigned to different contractor.
Currently, the computers are re-provisioned manually by the IT department.
Problem Statements
Litware identifies the following issues on the network:
- Employees in the Los Angeles office report slow Internet performance when updates are
downloading. The employees also report that the updates frequently consume considerable
resources when they are installed. The Update settings are configured as shown in the Updates
exhibit. (Click the Updates button.)
- Management suspects that the source code for the proprietary applications in Azure DevOps in
being shared externally.
- Re-provisioning the sales department computers is too time consuming.
Requirements
Business Goals
Litware plans to transition to co-management for all the company-owned Windows 10 computers.
Whenever possible, Litware wants to minimize hardware and software costs.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 7
http://www.passleader.com
Technical Requirements
Litware identifies the following technical requirements for the planned deployment:
- Re-provision the sales department computers by using Windows AutoPilot.
- Ensure that the projects in Azure DevOps can be accessed from the corporate network only.
- Ensure that users can sign in to the Azure AD-joined computers by using a PIN. The PIN must
expire every 30 days.
- Ensure that the company name and logo appears during the Out of Box Experience (OOBE)
when using Windows AutoPilot.
What should you use to meet the technical requirements for Azure DevOps?
Answer: C
Explanation:
https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/manage-conditional-
access?view=azure-devops
QUESTION 4
Case Study 1 - Litware inc
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 8
http://www.passleader.com
General Overview
Litware, Inc. is an international manufacturing company that has 3,000 employees. The company
has sales, marketing, research, human resources (HR), development, and IT departments.
Litware has two main offices in New York and Los Angeles. Litware has five branch offices in
Asia.
Existing Environment
Current Business Model
The Los Angeles office has 500 developers. The developers work flexible hours ranging from
11:00 to
22:00. Litware has a Microsoft System Center 2012 R2 Configuration Manager deployment.
During discovery, the company discovers a process where users are emailing bank account
information of its customers to internal and external recipients.
Current Environment
The network contains an Active Directory domain that is synced to Microsoft Azure Active
Directory (Azure AD). The functional level of the forest and the domain is Windows Server 2012
R2. All domain controllers run Windows Server 2012 R2.
Litware has the computers shown in the following table.
The development department uses projects in Azure DevOps to build applications. Most of the
employees in the sales department are contractors. Each contractor is assigned a computer that
runs Windows 10. At the end of each contract, the computer is assigned to different contractor.
Currently, the computers are re-provisioned manually by the IT department.
Problem Statements
Litware identifies the following issues on the network:
- Employees in the Los Angeles office report slow Internet performance when updates are
downloading. The employees also report that the updates frequently consume considerable
resources when they are installed. The Update settings are configured as shown in the Updates
exhibit. (Click the Updates button.)
- Management suspects that the source code for the proprietary applications in Azure DevOps in
being shared externally.
- Re-provisioning the sales department computers is too time consuming.
Requirements
Business Goals
Litware plans to transition to co-management for all the company-owned Windows 10 computers.
Whenever possible, Litware wants to minimize hardware and software costs.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 9
http://www.passleader.com
Litware identifies the following device management requirements:
- Prevent the sales department employees from forwarding email that contains bank account
information.
- Ensure that Microsoft Edge Favorites are accessible from all computers to which the developers
sign in.
- Prevent employees in the research department from copying patented information from trusted
applications to untrusted applications.
Technical Requirements
Litware identifies the following technical requirements for the planned deployment:
- Re-provision the sales department computers by using Windows AutoPilot.
- Ensure that the projects in Azure DevOps can be accessed from the corporate network only.
- Ensure that users can sign in to the Azure AD-joined computers by using a PIN. The PIN must
expire every 30 days.
- Ensure that the company name and logo appears during the Out of Box Experience (OOBE)
when using Windows AutoPilot.
Hotspot Question
You need to resolve the performance issues in the Los Angeles office.
How should you configure the update settings? To answer, select the appropriate options in the
answer area.
NOTE: Each correct selection is worth one point.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 10
http://www.passleader.com
Answer:
Explanation:
Note: The default maximum difference from start time has been increased to 18 hours in
Windows 10, version 1703. It was previously 12 hours.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 11
http://www.passleader.com
Reference:https://docs.microsoft.com/en-us/windows/deployment/update/waas-delivery-
optimization
https://2pintsoftware.com/delivery-optimization-dl-mode/
https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-update#update-
activehoursend/
QUESTION 5
Case Study 1 - Litware inc
General Overview
Litware, Inc. is an international manufacturing company that has 3,000 employees. The company
has sales, marketing, research, human resources (HR), development, and IT departments.
Litware has two main offices in New York and Los Angeles. Litware has five branch offices in
Asia.
Existing Environment
Current Business Model
The Los Angeles office has 500 developers. The developers work flexible hours ranging from
11:00 to
22:00. Litware has a Microsoft System Center 2012 R2 Configuration Manager deployment.
During discovery, the company discovers a process where users are emailing bank account
information of its customers to internal and external recipients.
Current Environment
The network contains an Active Directory domain that is synced to Microsoft Azure Active
Directory (Azure AD). The functional level of the forest and the domain is Windows Server 2012
R2. All domain controllers run Windows Server 2012 R2.
Litware has the computers shown in the following table.
The development department uses projects in Azure DevOps to build applications. Most of the
employees in the sales department are contractors. Each contractor is assigned a computer that
runs Windows 10. At the end of each contract, the computer is assigned to different contractor.
Currently, the computers are re-provisioned manually by the IT department.
Problem Statements
Litware identifies the following issues on the network:
- Employees in the Los Angeles office report slow Internet performance when updates are
downloading. The employees also report that the updates frequently consume considerable
resources when they are installed. The Update settings are configured as shown in the Updates
exhibit. (Click the Updates button.)
- Management suspects that the source code for the proprietary applications in Azure DevOps in
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 12
http://www.passleader.com
being shared externally.
- Re-provisioning the sales department computers is too time consuming.
Requirements
Business Goals
Litware plans to transition to co-management for all the company-owned Windows 10 computers.
Whenever possible, Litware wants to minimize hardware and software costs.
Technical Requirements
Litware identifies the following technical requirements for the planned deployment:
- Re-provision the sales department computers by using Windows AutoPilot.
- Ensure that the projects in Azure DevOps can be accessed from the corporate network only.
- Ensure that users can sign in to the Azure AD-joined computers by using a PIN. The PIN must
expire every 30 days.
- Ensure that the company name and logo appears during the Out of Box Experience (OOBE)
when using Windows AutoPilot.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 13
http://www.passleader.com
Hotspot Question
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 14
http://www.passleader.com
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 15
http://www.passleader.com
Explanation:
From the scenario: Ensure that the company name and logo appears during the Out of Box
Experience (OOBE) when using Windows AutoPilot.
Reference:https://blogs.technet.microsoft.com/mniehaus/2017/12/22/windows-autopilot-azure-ad-
branding//
QUESTION 6
Case Study 1 - Litware inc
General Overview
Litware, Inc. is an international manufacturing company that has 3,000 employees. The company
has sales, marketing, research, human resources (HR), development, and IT departments.
Litware has two main offices in New York and Los Angeles. Litware has five branch offices in
Asia.
Existing Environment
Current Business Model
The Los Angeles office has 500 developers. The developers work flexible hours ranging from
11:00 to
22:00. Litware has a Microsoft System Center 2012 R2 Configuration Manager deployment.
During discovery, the company discovers a process where users are emailing bank account
information of its customers to internal and external recipients.
Current Environment
The network contains an Active Directory domain that is synced to Microsoft Azure Active
Directory (Azure AD). The functional level of the forest and the domain is Windows Server 2012
R2. All domain controllers run Windows Server 2012 R2.
Litware has the computers shown in the following table.
The development department uses projects in Azure DevOps to build applications. Most of the
employees in the sales department are contractors. Each contractor is assigned a computer that
runs Windows 10. At the end of each contract, the computer is assigned to different contractor.
Currently, the computers are re-provisioned manually by the IT department.
Problem Statements
Litware identifies the following issues on the network:
- Employees in the Los Angeles office report slow Internet performance when updates are
downloading. The employees also report that the updates frequently consume considerable
resources when they are installed. The Update settings are configured as shown in the Updates
exhibit. (Click the Updates button.)
- Management suspects that the source code for the proprietary applications in Azure DevOps in
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 16
http://www.passleader.com
being shared externally.
- Re-provisioning the sales department computers is too time consuming.
Requirements
Business Goals
Litware plans to transition to co-management for all the company-owned Windows 10 computers.
Whenever possible, Litware wants to minimize hardware and software costs.
Technical Requirements
Litware identifies the following technical requirements for the planned deployment:
- Re-provision the sales department computers by using Windows AutoPilot.
- Ensure that the projects in Azure DevOps can be accessed from the corporate network only.
- Ensure that users can sign in to the Azure AD-joined computers by using a PIN. The PIN must
expire every 30 days.
- Ensure that the company name and logo appears during the Out of Box Experience (OOBE)
when using Windows AutoPilot.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 17
http://www.passleader.com
Hotspot Question
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 18
http://www.passleader.com
Explanation:
https://github.com/MicrosoftDocs/IntuneDocs/blob/master/intune/app-protection-policy.md
https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#do-not-
forward-option-for-emails
QUESTION 7
Case Study 2 - Contoso Ltd
Overview
Contoso, Ltd, is a consulting company that has a main office in Montreal and two branch offices
in Seattle and New York.
Contoso has the users and computers shown in the following table.
The company has IT, human resources (HR), legal (LEG), marketing (MKG) and finance (FIN)
departments.
Contoso uses Microsoft Store for Business and recently purchased a Microsoft 365 subscription.
The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office
will work from home.
Existing Environment
The network contains an Active Directory domain named contoso.com that is synced to Microsoft
Azure Active Directory (Azure AD).
All member servers run Windows Server 2016. All laptops and desktop computers run Windows
10 Enterprise.
The computers are managed by using Microsoft System Center Configuration Manager. The
mobile devices are managed by using Microsoft Intune.
The naming convention for the computers is the department acronym, followed by a hyphen, and
then four numbers, for example, FIN-6785. All the computers are joined to the on-premises Active
Directory domain.
Each department has an organization unit (OU) that contains a child OU named Computers. Each
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 19
http://www.passleader.com
computer account is in the Computers OU of its respective department.
Intune Configuration
Requirements
Planned Changes
Contoso plans to implement the following changes:
- Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro
preinstalled and were purchased already.
- Start using a free Microsoft Store for Business app named App1.
- mplement co-management for the computers.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 20
http://www.passleader.com
Technical Requirements
Contoso must meet the following technical requirements:
- Ensure that the users in a group named Group4 can only access Microsoft Exchange Online
from devices that are enrolled in Intune.
- Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows
Autopilot.
- Monitor the computers in the LEG department by using Windows Analytics.
- Create a provisioning package for new computers in the HR department.
- Block iOS devices from sending diagnostic and usage telemetry data.
- Use the principle of least privilege whenever possible.
- Enable the users in the MKG department to use App1.
- Pilot co-management for the IT department.
You need to meet the technical requirements for the iOS devices.
Which object should you create in Intune?
A. A compliance policy
B. An app protection policy
C. A Deployment profile
D. A device profile
Answer: D
Explanation:
https://docs.microsoft.com/en-us/intune/device-restrictions-configure
https://docs.microsoft.com/en-us/intune/device-restrictions-ios
QUESTION 8
Case Study 2 - Contoso Ltd
Overview
Contoso, Ltd, is a consulting company that has a main office in Montreal and two branch offices
in Seattle and New York.
Contoso has the users and computers shown in the following table.
The company has IT, human resources (HR), legal (LEG), marketing (MKG) and finance (FIN)
departments.
Contoso uses Microsoft Store for Business and recently purchased a Microsoft 365 subscription.
The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office
will work from home.
Existing Environment
The network contains an Active Directory domain named contoso.com that is synced to Microsoft
Azure Active Directory (Azure AD).
All member servers run Windows Server 2016. All laptops and desktop computers run Windows
10 Enterprise.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 21
http://www.passleader.com
The computers are managed by using Microsoft System Center Configuration Manager. The
mobile devices are managed by using Microsoft Intune.
The naming convention for the computers is the department acronym, followed by a hyphen, and
then four numbers, for example, FIN-6785. All the computers are joined to the on-premises Active
Directory domain.
Each department has an organization unit (OU) that contains a child OU named Computers. Each
computer account is in the Computers OU of its respective department.
Intune Configuration
Requirements
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 22
http://www.passleader.com
Planned Changes
Contoso plans to implement the following changes:
- Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro
preinstalled and were purchased already.
- Start using a free Microsoft Store for Business app named App1.
- mplement co-management for the computers.
Technical Requirements
Contoso must meet the following technical requirements:
- Ensure that the users in a group named Group4 can only access Microsoft Exchange Online
from devices that are enrolled in Intune.
- Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows
Autopilot.
- Monitor the computers in the LEG department by using Windows Analytics.
- Create a provisioning package for new computers in the HR department.
- Block iOS devices from sending diagnostic and usage telemetry data.
- Use the principle of least privilege whenever possible.
- Enable the users in the MKG department to use App1.
- Pilot co-management for the IT department.
A. From the Azure Active Directory blade in the Azure portal, enable Seamless single sign-on.
B. From the Configuration Manager console, add an Intune subscription.
C. From the Azure Active Directory blade in the Azure portal, configure the Mobility (MDM and MAM) settings.
D. From the Microsoft Intune blade in the Azure portal, configure the Windows enrollment settings.
Answer: C
Explanation:
https://docs.microsoft.com/en-us/sccm/comanage/tutorial-co-manage-clients
QUESTION 9
Case Study 2 - Contoso Ltd
Overview
Contoso, Ltd, is a consulting company that has a main office in Montreal and two branch offices
in Seattle and New York.
Contoso has the users and computers shown in the following table.
The company has IT, human resources (HR), legal (LEG), marketing (MKG) and finance (FIN)
departments.
Contoso uses Microsoft Store for Business and recently purchased a Microsoft 365 subscription.
The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office
will work from home.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 23
http://www.passleader.com
Existing Environment
The network contains an Active Directory domain named contoso.com that is synced to Microsoft
Azure Active Directory (Azure AD).
All member servers run Windows Server 2016. All laptops and desktop computers run Windows
10 Enterprise.
The computers are managed by using Microsoft System Center Configuration Manager. The
mobile devices are managed by using Microsoft Intune.
The naming convention for the computers is the department acronym, followed by a hyphen, and
then four numbers, for example, FIN-6785. All the computers are joined to the on-premises Active
Directory domain.
Each department has an organization unit (OU) that contains a child OU named Computers. Each
computer account is in the Computers OU of its respective department.
Intune Configuration
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 24
http://www.passleader.com
Requirements
Planned Changes
Contoso plans to implement the following changes:
- Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro
preinstalled and were purchased already.
- Start using a free Microsoft Store for Business app named App1.
- mplement co-management for the computers.
Technical Requirements
Contoso must meet the following technical requirements:
- Ensure that the users in a group named Group4 can only access Microsoft Exchange Online
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 25
http://www.passleader.com
from devices that are enrolled in Intune.
- Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows
Autopilot.
- Monitor the computers in the LEG department by using Windows Analytics.
- Create a provisioning package for new computers in the HR department.
- Block iOS devices from sending diagnostic and usage telemetry data.
- Use the principle of least privilege whenever possible.
- Enable the users in the MKG department to use App1.
- Pilot co-management for the IT department.
Hotspot Question
To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the
answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
https://docs.microsoft.com/en-us/intune/device-profile-assign
QUESTION 10
Case Study 2 - Contoso Ltd
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 26
http://www.passleader.com
Overview
Contoso, Ltd, is a consulting company that has a main office in Montreal and two branch offices
in Seattle and New York.
Contoso has the users and computers shown in the following table.
The company has IT, human resources (HR), legal (LEG), marketing (MKG) and finance (FIN)
departments.
Contoso uses Microsoft Store for Business and recently purchased a Microsoft 365 subscription.
The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office
will work from home.
Existing Environment
The network contains an Active Directory domain named contoso.com that is synced to Microsoft
Azure Active Directory (Azure AD).
All member servers run Windows Server 2016. All laptops and desktop computers run Windows
10 Enterprise.
The computers are managed by using Microsoft System Center Configuration Manager. The
mobile devices are managed by using Microsoft Intune.
The naming convention for the computers is the department acronym, followed by a hyphen, and
then four numbers, for example, FIN-6785. All the computers are joined to the on-premises Active
Directory domain.
Each department has an organization unit (OU) that contains a child OU named Computers. Each
computer account is in the Computers OU of its respective department.
Intune Configuration
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 27
http://www.passleader.com
Requirements
Planned Changes
Contoso plans to implement the following changes:
- Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro
preinstalled and were purchased already.
- Start using a free Microsoft Store for Business app named App1.
- mplement co-management for the computers.
Technical Requirements
Contoso must meet the following technical requirements:
- Ensure that the users in a group named Group4 can only access Microsoft Exchange Online
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 28
http://www.passleader.com
from devices that are enrolled in Intune.
- Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows
Autopilot.
- Monitor the computers in the LEG department by using Windows Analytics.
- Create a provisioning package for new computers in the HR department.
- Block iOS devices from sending diagnostic and usage telemetry data.
- Use the principle of least privilege whenever possible.
- Enable the users in the MKG department to use App1.
- Pilot co-management for the IT department.
Hotspot Question
What is the maximum number of devices that User1 and User2 can enroll in Intune? To answer,
select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
QUESTION 11
Case Study 2 - Contoso Ltd
Overview
Contoso, Ltd, is a consulting company that has a main office in Montreal and two branch offices
in Seattle and New York.
Contoso has the users and computers shown in the following table.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 29
http://www.passleader.com
The company has IT, human resources (HR), legal (LEG), marketing (MKG) and finance (FIN)
departments.
Contoso uses Microsoft Store for Business and recently purchased a Microsoft 365 subscription.
The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office
will work from home.
Existing Environment
The network contains an Active Directory domain named contoso.com that is synced to Microsoft
Azure Active Directory (Azure AD).
All member servers run Windows Server 2016. All laptops and desktop computers run Windows
10 Enterprise.
The computers are managed by using Microsoft System Center Configuration Manager. The
mobile devices are managed by using Microsoft Intune.
The naming convention for the computers is the department acronym, followed by a hyphen, and
then four numbers, for example, FIN-6785. All the computers are joined to the on-premises Active
Directory domain.
Each department has an organization unit (OU) that contains a child OU named Computers. Each
computer account is in the Computers OU of its respective department.
Intune Configuration
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 30
http://www.passleader.com
Requirements
Planned Changes
Contoso plans to implement the following changes:
- Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro
preinstalled and were purchased already.
- Start using a free Microsoft Store for Business app named App1.
- mplement co-management for the computers.
Technical Requirements
Contoso must meet the following technical requirements:
- Ensure that the users in a group named Group4 can only access Microsoft Exchange Online
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 31
http://www.passleader.com
from devices that are enrolled in Intune.
- Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows
Autopilot.
- Monitor the computers in the LEG department by using Windows Analytics.
- Create a provisioning package for new computers in the HR department.
- Block iOS devices from sending diagnostic and usage telemetry data.
- Use the principle of least privilege whenever possible.
- Enable the users in the MKG department to use App1.
- Pilot co-management for the IT department.
You need to meet the technical requirements for the LEG department computers.
Which three actions should you perform in sequence? To answer, move the appropriate actions
from the list of actions to the answer area and arrange them in the correct order.
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 32
http://www.passleader.com
Explanation:
https://docs.microsoft.com/en-us/windows/deployment/update/windows-analytics-azure-portal
QUESTION 12
Case Study 2 - Contoso Ltd
Overview
Contoso, Ltd, is a consulting company that has a main office in Montreal and two branch offices
in Seattle and New York.
Contoso has the users and computers shown in the following table.
The company has IT, human resources (HR), legal (LEG), marketing (MKG) and finance (FIN)
departments.
Contoso uses Microsoft Store for Business and recently purchased a Microsoft 365 subscription.
The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office
will work from home.
Existing Environment
The network contains an Active Directory domain named contoso.com that is synced to Microsoft
Azure Active Directory (Azure AD).
All member servers run Windows Server 2016. All laptops and desktop computers run Windows
10 Enterprise.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 33
http://www.passleader.com
The computers are managed by using Microsoft System Center Configuration Manager. The
mobile devices are managed by using Microsoft Intune.
The naming convention for the computers is the department acronym, followed by a hyphen, and
then four numbers, for example, FIN-6785. All the computers are joined to the on-premises Active
Directory domain.
Each department has an organization unit (OU) that contains a child OU named Computers. Each
computer account is in the Computers OU of its respective department.
Intune Configuration
Requirements
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 34
http://www.passleader.com
Planned Changes
Contoso plans to implement the following changes:
- Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro
preinstalled and were purchased already.
- Start using a free Microsoft Store for Business app named App1.
- mplement co-management for the computers.
Technical Requirements
Contoso must meet the following technical requirements:
- Ensure that the users in a group named Group4 can only access Microsoft Exchange Online
from devices that are enrolled in Intune.
- Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows
Autopilot.
- Monitor the computers in the LEG department by using Windows Analytics.
- Create a provisioning package for new computers in the HR department.
- Block iOS devices from sending diagnostic and usage telemetry data.
- Use the principle of least privilege whenever possible.
- Enable the users in the MKG department to use App1.
- Pilot co-management for the IT department.
Hotspot Question
You need to meet the technical requirements for the new HR department computers.
How should you configure the provisioning package? To answer, select the appropriate options in
the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 35
http://www.passleader.com
Explanation:
https://docs.microsoft.com/en-us/windows/configuration/wcd/wcd-accounts
QUESTION 13
You manage 1,000 computers that run Windows 10. All the computers are enrolled in Microsoft
Intune.
You manage the servicing channel settings of the computers by using Intune. You need to review
the servicing status of a computer.
What should you do?
Answer: D
Explanation:
https://docs.microsoft.com/en-us/intune/windows-update-compliance-reports
QUESTION 14
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution. After you answer a question in this section, you will NOT be able to
return to it. As a result, these questions will not appear in the review screen.
Your company uses Windows AutoPilot to configure the computer settings of computers issued to
users.
A user named User1 has a computer named Computer1 that runs Windows 10. User1 leaves the
company.
You plan to transfer the computer to a user named User2.
You need to ensure that when User2 first starts the computer, User2 is prompted to select the
language setting and to agree to the license agreement.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 36
http://www.passleader.com
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot-
reset-remote
QUESTION 15
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution. After you answer a question in this section, you will NOT be able to
return to it. As a result, these questions will not appear in the review screen.
Your company uses Windows AutoPilot to configure the computer settings of computers issued to
users.
A user named User1 has a computer named Computer1 that runs Windows 10. User1 leaves the
company.
You plan to transfer the computer to a user named User2.
You need to ensure that when User2 first starts the computer, User2 is prompted to select the
language setting and to agree to the license agreement.
A. Yes
B. No
Answer: A
Explanation:
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/user-driven
QUESTION 16
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution. After you answer a question in this section, you will NOT be able to
return to it. As a result, these questions will not appear in the review screen.
Your company uses Windows AutoPilot to configure the computer settings of computers issued to
users.
A user named User1 has a computer named Computer1 that runs Windows 10. User1 leaves the
company.
You plan to transfer the computer to a user named User2.
You need to ensure that when User2 first starts the computer, User2 is prompted to select the
language setting and to agree to the license agreement.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 37
http://www.passleader.com
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/self-deploying
QUESTION 17
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution. After you answer a question in this section, you will NOT be able to
return to it. As a result, these questions will not appear in the review screen.
You need to ensure that feature and quality updates install automatically during a maintenance
window.
Solution: From the Maintenance Scheduler settings, you configure Automatic Maintenance
Random Delay.
A. Yes
B. No
Answer: A
Explanation:
https://docs.microsoft.com/en-us/sccm/sum/deploy-use/automatically-deploy-software-updates
QUESTION 18
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution. After you answer a question in this section, you will NOT be able to
return to it. As a result, these questions will not appear in the review screen.
You need to ensure that feature and quality updates install automatically during a maintenance
window.
Solution: From the Windows Update settings, you enable Configure Automatic Updates, select 4-
Auto download and schedule the install, and then enter a time.
A. Yes
B. No
Answer: B
Explanation:
https://docs.microsoft.com/en-us/sccm/sum/deploy-use/automatically-deploy-software-updates
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 38
http://www.passleader.com
QUESTION 19
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution. After you answer a question in this section, you will NOT be able to
return to it. As a result, these questions will not appear in the review screen.
You need to ensure that feature and quality updates install automatically during a maintenance
window.
Solution: From the Maintenance Scheduler settings, you configure Automatic Maintenance
Activation Boundary.
A. Yes
B. No
Answer: B
Explanation:
https://docs.microsoft.com/en-us/sccm/sum/deploy-use/automatically-deploy-software-updates
QUESTION 20
Your company purchases new computers that run Windows 10. The computers have cameras
that support Windows Hello for Business.
You configure the Windows Hello for Business Group Policy settings as shown in the following
exhibit.
What are two valid methods a user can use to sign in? Each correct answer presents part of the
solution.
NOTE: Each correct selection is worth one point.
A. Facial recognition
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 39
http://www.passleader.com
B. A smartwatch that is Bluetooth-enabled
C. A PIN
D. A USB key
Answer: AC
Explanation:
https://community.windows.com/en-us/stories/windows-sign-in-options
https://fossbytes.com/how-to-unlock-windows-10/
QUESTION 21
You have 10 computers that run Windows 7 and have the following configurations:
Answer: AE
Explanation:
https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/boot-to-uefi-mode-or-
legacy-biosmode
QUESTION 22
Your network contains an Active Directory domain. The domain contains 2,000 computers that
run Windows 10.
You implement hybrid Microsoft Azure Active Directory (Azure AD) and Microsoft Intune.
You need to automatically register all the existing computers to Azure AD and enroll the
computers in Intune.
The solution must minimize administrative effort.
What should you use?
Answer: B
Explanation:
https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-Autopilot-Hybrid-Azure-
AD-join-andautomatic/ba-p/286126
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 40
http://www.passleader.com
QUESTION 23
Your network contains an Active Directory domain named contoso.com.
You create a provisioning package named Package1 as shown in the following exhibit.
What is the maximum number of devices on which you can run Package1 successfully?
A. 1
B. 10
C. 25
D. unlimited
Answer: B
Explanation:
The device name uses a single random number (applied by %RAND:1%). This allows for 10
unique values (0 - 9).
QUESTION 24
You have the 64-bit computers shown in the following table.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 41
http://www.passleader.com
You plan to perform an in-place upgrade to the 64-bit version of Windows 10.
Which computers can you upgrade to the 64-bit version of Windows 10 in their current state?
Answer: A
Explanation:
https://docs.microsoft.com/en-us/windows/deployment/windows-10-deployment-scenarios
QUESTION 25
You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure
Active Directory (AD) and enrolled in Microsoft Intune.
You need to enable self-service password reset on the sign-in screen. Which settings should you
configure from the Microsoft Intune blade?
A. Device configuration
B. Device compliance
C. Device enrollment
D. Conditional access
Answer: A
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-sspr-windows
QUESTION 26
Your network contains an Active Directory domain that is synced to Microsoft Azure Active
Directory (Azure AD).
You have a Microsoft 365 subscription.
You create a conditional access policy for Microsoft Exchange Online.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 42
http://www.passleader.com
You need to configure the policy to prevent access to Exchange Online unless is connecting from
a device that is hybrid Azure AD-joined.
Which settings should you configure?
A. Locations
B. Device platforms
C. Sign-in risk
D. Device state
Answer: D
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/conditions#device-
state
QUESTION 27
You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure
Active Directory (Azure AD) and enrolled in Microsoft Intune.
You redirect Windows known folders to Microsoft OneDrive for Business.
Which folder will be included in the redirection?
A. Saved Games
B. Documents
C. Music
D. Downloads
Answer: B
Explanation:
https://docs.microsoft.com/en-us/onedrive/redirect-known-folders
QUESTION 28
Your company uses Microsoft Intune.
More than 500 Android and iOS devices are enrolled in the Intune tenant.
You plan to deploy new Intune policies. Different policies will apply depending on the version of
Android or iOS installed on the device.
You need to ensure that the policies can target the devices based on their version of Android or
iOS.
What should you configure first?
Answer: B
Explanation:
https://docs.microsoft.com/en-us/intune/compliance-policy-create-android
https://docs.microsoft.com/en-us/intune/compliance-policy-create-ios
QUESTION 29
You have computers that run Windows 10 Pro. The computers are joined to Microsoft Azure
Active Directory (Azure AD) and enrolled in Microsoft Intune.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 43
http://www.passleader.com
You need to upgrade the computers to Windows 10 Enterprise.
What should you configure in Intune?
Answer: D
Explanation:
https://blogs.technet.microsoft.com/skypehybridguy/2018/09/21/intune-upgrade-windows-from-
pro-toenterprise-automatically/
QUESTION 30
You are creating a device configuration profile in Microsoft Intune.
You need to implement an ADMX-backed policy.
Which profile type should you use?
A. Identity protection
B. Custom
C. Device restrictions
D. Device restrictions (Windows 10 Team)
Answer: B
Explanation:
https://blogs.technet.microsoft.com/senthilkumar/2018/05/21/intune-deploying-admx-backed-
policies-usingmicrosoft-intune/
QUESTION 31
Your network contains an Active Directory named contoso.com. The domain contains two
computers named Computer1 and Computer2 that run Windows 10.
Folder Redirection is configured for a domain user named User1. The AppData\Roaming folder
and the
Desktop folder are redirected to a network share.
User1 signs in to Computer1 and performs the following tasks:
You need to identify what will be retained when User1 signs in to Computer2.
What should you identify?
Answer: B
Explanation:
https://docs.microsoft.com/en-us/windows-server/storage/folder-redirection/folder-redirection-rup-
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 44
http://www.passleader.com
overview
QUESTION 32
Your network contains an Active Directory domain named contoso.com. The domain contains 200
computers that run Windows 10.
Folder Redirection for the Desktop folder is configured as shown in the following exhibit.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 45
http://www.passleader.com
A. Clear the Grant the user exclusive rights to Desktop check box.
B. Change the Policy Removal setting.
C. Disable Folder Redirection.
D. Clear the Move the contents of Desktop to the new location check box.
Answer: AB
Explanation:
https://docs.microsoft.com/en-us/onedrive/redirect-known-folders
QUESTION 33
Your company plans to deploy tablets to 50 meeting rooms. The tablets run Windows 10 and are
managed by using Microsoft Intune.
The tablets have an application named App1.
You need to configure the tablets so that any user can use App1 without having to sign in. Users
must be
prevented from using other applications on the tablets. Which device configuration profile type
should you use?
A. Kiosk
B. Endpoint protection
C. Identity protection
D. Device restrictions
Answer: A
Explanation:
https://docs.microsoft.com/en-us/windows/configuration/kiosk-single-app
QUESTION 34
Your company has a Microsoft 365 subscription.
The company uses Microsoft Intune to manage all devices. The company uses conditional
access to restrict access to Microsoft 365 services for devices that do not
comply with the company's security policies.
You need to identify which devices will be prevented from accessing Microsoft 365 services.
What should you use?
Answer: C
QUESTION 35
Your company uses Microsoft Intune to manage devices.
You need to ensure that only Android devices that use Android work profiles can enroll in Intune.
Which two configurations should you perform in the device enrollment restrictions? Each correct
answer presents part of the solution. NOTE: each correct selection is worth one point.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 46
http://www.passleader.com
C. From Configure platforms, set Android Personally Owned to Allow.
D. From Select platforms, set Android to Block.
Answer: AD
Explanation:
https://docs.microsoft.com/en-us/InTune/enrollment-restrictions-set
QUESTION 36
You have a Microsoft Azure Log Analytics workplace that collects all the event logs from the
computers at your company.
You have a computer named Computer1 than runs Windows 10. You need to view the events
collected from Computer1.
Which query should you run in Log Analytics?
A. Event
| where Computer = = "Computer1"
B. ETWEvent
| where SourceSystem = = "Computer1"
C. ETWEvent
| where Computer = = "Computer1"
D. Event
| where SourceSystem = = "Computer1"
Answer: A
Explanation:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-sources-windows-events
QUESTION 37
You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure
Active Directory (Azure AD) and enrolled in Microsoft Intune.
You need to ensure that only applications that you explicitly allow can run on the computers.
What should you use?
Answer: C
Explanation:
https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/introduction-to-
device-guardvirtualization-based-security-and-windows-defender-application-control
QUESTION 38
Your company has a Microsoft Azure Active Directory (Azure AD) tenant. All users in the
company are licensed for Microsoft Intune.
You need to ensure that the users enroll their iOS device in Intune.
What should you configure first?
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 47
http://www.passleader.com
C. A Device enrollment manager (DEM) account.
D. An Apple MDM Push certificate.
Answer: A
Explanation:
https://docs.microsoft.com/en-us/intune/device-enrollment-program-enroll-ios
QUESTION 39
You have a shared computer that runs Windows 10.
The computer is infected with a virus.
You discover that a malicious TTF font was used to compromise the computer.
You need to prevent this type of threat from affecting the computer in the future.
What should you use?
Answer: A
Explanation:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploit-
guard/windowsdefender-exploit-guard
QUESTION 40
Your company has a main office and six branch offices. The branch offices connect to the main
office by using a WAN link.
All offices have a local Internet connection and a Hyper-V host cluster. The company has a
Microsoft System Center Configuration Manager deployment. The main office is the primary site.
Each branch has a distribution point. All computers that run Windows 10 are managed by using
both Configuration Manager and Microsoft Intune.
You plan to deploy the latest build of Microsoft Office 365 ProPlus to all the computers.
You need to minimize the amount of network traffic on the company's Internet links for the
planned deployment.
What should you include in the deployment plan?
A. From Intune, configure app assignments for the Office 365 ProPlus suite.
In each office, copy the Office 365 distribution files to a Microsoft Deployment Toolkit (MDT) deployment
share.
B. From Intune, configure app assignments for the Office 365 ProPlus suite.
In each office, copy the Office 365 distribution files to a Configuration Manager distribution point.
C. From Configuration Manager, create an application deployment.
Copy the Office 365 distribution files to a Configuration Manager cloud distribution point.
D. From Configuration Manager, create an application deployment.
In each office, copy the Office 365 distribution files to a Configuration Manager distribution point.
Answer: D
Explanation:
https://docs.microsoft.com/en-us/deployoffice/deploy-office-365-proplus-with-system-center-
configurationmanager-2012r2#distribute-the-office-365-proplus-application-to-distribution-points-
in-configuration-manager
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 48
http://www.passleader.com
QUESTION 41
Your company has a Microsoft 365 subscription.
All the users in the finance department own personal devices that run iOS or Android.
All the devices are enrolled in Microsoft Intune.
The finance department adds new users each month.
The company develops a mobile application named App1 for the finance department users.
You need to ensure that only the finance department users can download App1.
What should you do first?
Answer: A
Explanation:
https://docs.microsoft.com/en-us/intune/apps-add
QUESTION 42
You have 10 computers that run Windows 7 and have the following configurations:
Answer: AE
Explanation:
https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/boot-to-uefi-mode-or-
legacy-biosmode
QUESTION 43
Drag and Drop Question
Your company has a computer named Computer1 that runs Windows 10.
Computer1 was used by a user who left the company.
You plan to repurpose Computer1 and assign the computer to a new user.
You need to redeploy Computer1 by using Windows AutoPilot.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 49
http://www.passleader.com
Which three actions should you perform in sequence? To answer, move the appropriate actions
from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
https://docs.microsoft.com/en-us/intune/enrollment-autopilot
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot-reset
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 50
http://www.passleader.com
QUESTION 44
Hotspot Question
The company purchases 100 new computers that run Windows 10.
You need to ensure that the new computers are joined automatically to Azure AD by using
Windows AutoPilot.
What should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
https://docs.microsoft.com/en-us/intune/enrollment-autopilot
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 51
http://www.passleader.com
QUESTION 45
Hotspot Question
You have computers that run Windows 10 and are configured by using Windows AutoPilot.
A user performs the following tasks on a computer named Computer1:
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 52
http://www.passleader.com
Explanation:
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot-reset
QUESTION 46
Hotspot Question
Your network contains an Active Directory domain named constoso.com that is synced to
Microsoft Azure Active Directory (Azure AD).
All computers are enrolled in Microsoft Intune. The domain contains the computers shown in the
following table.
You are evaluating which Intune actions you can use to reset the computers to run Windows 10
Enterprise with the latest update.
Which computers can you reset by using each action? To answer, select the appropriate options
in the answer area.
NOTE: Each correct selection is worth one point.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 53
http://www.passleader.com
Answer:
Explanation:
https://docs.microsoft.com/en-us/intune/device-fresh-start
https://docs.microsoft.com/en-us/intune/devices-wipe
QUESTION 47
Hotspot Question
- Update installations must occur any day only between 00:00 and 05:00.
- Updates must be downloaded from Microsoft and from other company
computers that already downloaded the updates.
You need to configure the Windows 10 Update Rings in Intune to meet the requirements.
Which two settings should you modify? To answer, select the appropriate settings in the answer
area.
NOTE: Each correct selection is worth one point.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 54
http://www.passleader.com
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 55
http://www.passleader.com
Explanation:
https://github.com/MicrosoftDocs/IntuneDocs/blob/master/intune/windows-update-settings.md
https://docs.microsoft.com/en-us/intune/delivery-optimization-windows#move-from-existing-
update-rings-to-delivery-optimization
QUESTION 48
Hotspot Question
Which two settings should you configure in Device restrictions? To answer, select the appropriate
settings in the answer area.
NOTE: Each correct selection is worth one point.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 56
http://www.passleader.com
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 57
http://www.passleader.com
Explanation:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-
smartscreen/windows-defender-smartscreen-overview
QUESTION 49
Hotspot Question
You have computers that run Windows 10 as shown in the following table.
Computer2 and Computer3 are enrolled in Microsoft Intune. In a Group Policy object (GPO)
linked to the domain, you enable the Computer Configuration/Administrative Templates/Windows
Components/Search/Allow Cortana setting. In an Intune device configuration profile, you
configure the following:
- Device/Vendor/MSFT/Policy/Config/ControlPolicyConflict/MDMWinsOverGP
to a value of 1
- Experience/AllowCortana to a value of 0.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 58
http://www.passleader.com
Each of the following statement, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
https://blogs.technet.microsoft.com/cbernier/2018/04/02/windows-10-group-policy-vs-intune-
mdm-policy-who-wins/
QUESTION 50
Hotspot Question
Your company has computers that run Windows 8.1, Windows 10, or macOS.
The company uses Microsoft Intune to manage the computers.
You need to create an Intune profile to configure Windows Hello for Business on the computers
that support it.
Which platform type and profile type should you use? To answer, select the appropriate options in
the answer area.
NOTE: Each correct selection is worth one point.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 59
http://www.passleader.com
Answer:
Explanation:
https://docs.microsoft.com/en-us/intune/endpoint-protection-configure
QUESTION 51
Hotspot Question
You have a computer named Computer1 that runs Windows 10. Computer1 has the users shown
in the following table.
User1 signs in to Computer1, creates the following files, and then signs out:
- docx in C:\Users\User1\Desktop
- docx in C:\Users\Public\Public Desktop
- docx in C:\Users\Default\ Desktop
- User3 signs in to Computer1 and creates a file named File4.docx in
C:\Users\User3\Desktop.
- User2 has never signed in to Computer1.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 60
http://www.passleader.com
How many DOCX files will appear on the desktop of each user the nest time each user signs in?
To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 61
http://www.passleader.com
QUESTION 52
Hotspot Question
What should you implement to meet each requirement? To answer, select the appropriate options
in the answer area.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 62
http://www.passleader.com
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
https://github.com/MicrosoftDocs/IntuneDocs/blob/master/intune/advanced-threat-protection.md
QUESTION 53
Drag and Drop Question
Your network contains an Active Directory domain that is synced to Microsoft Azure Active
Directory (Azure AD).
All computers are joined to the domain and registered to Azure AD. The network contains a
Microsoft System Center Configuration Manager (Current Batch) deployment that is configured
for co-management with Microsoft Intune. All the computers in the finance department are
managed by using Configuration Manager.
All the computers in the marketing department are managed by using Intune.
You install new computers for the users in the marketing department by using the Microsoft
Deployment Toolkit (MDT).
You purchase an application named App1 that uses an MSI package.
You need to install App1 on the finance department computers and the marketing department
computers.
How should you deploy App1 to each department? To answer, drag the appropriate deployment
methods to the correct departments. Each deployment method may be used once, more than
once, or not at all. You may need to drag the split bat between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 63
http://www.passleader.com
Answer:
Explanation:
https://docs.microsoft.com/en-us/intune/apps-add
https://docs.microsoft.com/en-us/sccm/apps/get-started/create-and-deploy-an-application
QUESTION 54
Hotspot Question
The company purchases 100 new computers that run Windows 10.
You need to ensure that the new computers are joined automatically to Azure AD by using
Windows AutoPilot.
What should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 64
http://www.passleader.com
Answer:
Explanation:
https://docs.microsoft.com/en-us/intune/enrollment-autopilot
QUESTION 55
Hotspot Question
You have 1,000 computers that run Windows 10 and are members of an Active Directory domain.
You create a workspace in Microsoft Azure Log Analytics.
You need to capture the event logs from the computers to Azure.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 65
http://www.passleader.com
Answer:
Explanation:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agent-windows
QUESTION 56
Drag and Drop Question
You use the Antimalware Assessment solution in Microsoft Azure Log Analytics. From the
Protection Status dashboard, you discover the computers shown in the following table.
You verify that both computers are connected to the network and running.
What is a possible cause of the issue on each computer? To answer, drag the appropriate
causes to the correct computers. Each cause may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 66
http://www.passleader.com
Answer:
Explanation:
https://docs.microsoft.com/ga-ie/azure/security-center/security-center-install-endpoint-protection
QUESTION 57
Drag and Drop Question
Your company has a Microsoft Azure Active Directory (Azure AD) tenant. The company uses
Microsoft Intune to manage iOS, Android, and Windows 10 devices.
The company plans to purchase 1,000 iOS devices. Each device will be assigned to a specific
user.
You need to ensure that the new iOS devices are enrolled automatically in Intune when the
assigned user signs in for the first time.
Which three actions should you perform in sequence? To answer, move the appropriate actions
from the list of actions to the answer area and arrange them in the correct order.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 67
http://www.passleader.com
Answer:
Explanation:
https://docs.microsoft.com/en-us/intune/device-enrollment-program-enroll-ios
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 68
http://www.passleader.com
QUESTION 58
Hotspot Question
Your company has a computer named Computer1 that runs Windows 10 Pro.
The company develops a proprietary Universal Windows Platform (UWP) app named App1.
App1 is signed with a certificate from a trusted certification authority (CA).
You need to sideload App1 to Computer1.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
https://www.windowscentral.com/how-enable-windows-10-sideload-apps-outside-store
https://docs.microsoft.com/en-us/windows/application-management/sideload-apps-in-windows-10
QUESTION 59
Drag and Drop Question
Your company uses Microsoft Intune. You have a Microsoft Store for Business account.
You need to ensure that you can deploy Microsoft Store for Business apps by using Intune.
Which three actions should you perform in sequence? To answer, move the appropriate actions
from the list of actions to the answer area and arrange them in the correct order.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 69
http://www.passleader.com
Answer:
QUESTION 60
Hotspot Question
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. All Windows
10 devices are enrolled in Microsoft Intune.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 70
http://www.passleader.com
You configure the following settings in Windows Information Protection (WIP):
Answer:
Explanation:
https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-
protection/create-wip-policy-using-intune
https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-
protection/create-wip-policy-using-intune#exempt-apps-from-wip-restrictions
QUESTION 61
Hotspot Question
Your company has computers that run Windows 8.1, Windows 10, or macOS.
The company uses Microsoft Intune to manage the computers.
You need to create an Intune profile to configure Windows Hello for Business on the computers
that support it.
Which platform type and profile type should you use? To answer, select the appropriate options in
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 71
http://www.passleader.com
the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
https://docs.microsoft.com/en-us/intune/endpoint-protection-configure
QUESTION 62
Case Study 2 - Contoso Ltd
Overview
Contoso, Ltd, is a consulting company that has a main office in Montreal and two branch offices
in Seattle and New York.
Contoso has the users and computers shown in the following table.
The company has IT, human resources (HR), legal (LEG), marketing (MKG) and finance (FIN)
departments.
Contoso uses Microsoft Store for Business and recently purchased a Microsoft 365 subscription.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 72
http://www.passleader.com
The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office
will work from home.
Existing Environment
The network contains an Active Directory domain named contoso.com that is synced to Microsoft
Azure Active Directory (Azure AD).
All member servers run Windows Server 2016. All laptops and desktop computers run Windows
10 Enterprise.
The computers are managed by using Microsoft System Center Configuration Manager. The
mobile devices are managed by using Microsoft Intune.
The naming convention for the computers is the department acronym, followed by a hyphen, and
then four numbers, for example, FIN-6785. All the computers are joined to the on-premises Active
Directory domain.
Each department has an organization unit (OU) that contains a child OU named Computers. Each
computer account is in the Computers OU of its respective department.
Intune Configuration
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 73
http://www.passleader.com
Requirements
Planned Changes
Contoso plans to implement the following changes:
- Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro
preinstalled and were purchased already.
- Start using a free Microsoft Store for Business app named App1.
- mplement co-management for the computers.
Technical Requirements
Contoso must meet the following technical requirements:
- Ensure that the users in a group named Group4 can only access Microsoft Exchange Online
from devices that are enrolled in Intune.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 74
http://www.passleader.com
- Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows
Autopilot.
- Monitor the computers in the LEG department by using Windows Analytics.
- Create a provisioning package for new computers in the HR department.
- Block iOS devices from sending diagnostic and usage telemetry data.
- Use the principle of least privilege whenever possible.
- Enable the users in the MKG department to use App1.
- Pilot co-management for the IT department.
You need to prepare for the deployment of the Phoenix office computers.
A. Extract the hardware ID information of each computer to a CSV file and upload the file from the
Devices settings in Microsoft Store for Business.
B. Generalize the computers and configure the Mobility (MDM and MAM) settings from the Azure
Active Directory blade in the Azure portal.
C. Generalize the computers and configure the Device settings from the Azure Active Directory
blade in the Azure portal.
D. Extract the hardware ID information of each computer to an XLSX file and upload the file from the
Devices settings in Microsoft Store for Business.
E. Extract the serial number information of each computer to a CSV file and upload the file from the
Microsoft Intune blade in the Azure portal.
F. Extract the hardware ID information of each computer to an XML file and upload the file from the
Devices settings in Microsoft Store for Business.
Answer: A
Explanation:
https://docs.microsoft.com/en-us/microsoft-store/add-profile-to-devices#manage-autopilot-
deployment-profiles
QUESTION 63
Case Study 2 - Contoso Ltd
Overview
Contoso, Ltd, is a consulting company that has a main office in Montreal and two branch offices
in Seattle and New York.
Contoso has the users and computers shown in the following table.
The company has IT, human resources (HR), legal (LEG), marketing (MKG) and finance (FIN)
departments.
Contoso uses Microsoft Store for Business and recently purchased a Microsoft 365 subscription.
The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office
will work from home.
Existing Environment
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 75
http://www.passleader.com
The network contains an Active Directory domain named contoso.com that is synced to Microsoft
Azure Active Directory (Azure AD).
All member servers run Windows Server 2016. All laptops and desktop computers run Windows
10 Enterprise.
The computers are managed by using Microsoft System Center Configuration Manager. The
mobile devices are managed by using Microsoft Intune.
The naming convention for the computers is the department acronym, followed by a hyphen, and
then four numbers, for example, FIN-6785. All the computers are joined to the on-premises Active
Directory domain.
Each department has an organization unit (OU) that contains a child OU named Computers. Each
computer account is in the Computers OU of its respective department.
Intune Configuration
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 76
http://www.passleader.com
Requirements
Planned Changes
Contoso plans to implement the following changes:
- Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro
preinstalled and were purchased already.
- Start using a free Microsoft Store for Business app named App1.
- mplement co-management for the computers.
Technical Requirements
Contoso must meet the following technical requirements:
- Ensure that the users in a group named Group4 can only access Microsoft Exchange Online
from devices that are enrolled in Intune.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 77
http://www.passleader.com
- Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows
Autopilot.
- Monitor the computers in the LEG department by using Windows Analytics.
- Create a provisioning package for new computers in the HR department.
- Block iOS devices from sending diagnostic and usage telemetry data.
- Use the principle of least privilege whenever possible.
- Enable the users in the MKG department to use App1.
- Pilot co-management for the IT department.
You need to meet the requirements for the MKG department users.
A. Assign the MKG department users the Purchaser role in Microsoft Store for Business
B. Download the APPX file for App1 from Microsoft Store for Business
C. Add App1 to the private store
D. Assign the MKG department users the Basic Purchaser role in Microsoft Store for Business
E. Acquire App1 from Microsoft Store for Business
Answer: E
Explanation:
https://docs.microsoft.com/en-us/microsoft-store/distribute-apps-from-your-private-store
QUESTION 64
Case Study 2 - Contoso Ltd
Overview
Contoso, Ltd, is a consulting company that has a main office in Montreal and two branch offices
in Seattle and New York.
Contoso has the users and computers shown in the following table.
The company has IT, human resources (HR), legal (LEG), marketing (MKG) and finance (FIN)
departments.
Contoso uses Microsoft Store for Business and recently purchased a Microsoft 365 subscription.
The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office
will work from home.
Existing Environment
The network contains an Active Directory domain named contoso.com that is synced to Microsoft
Azure Active Directory (Azure AD).
All member servers run Windows Server 2016. All laptops and desktop computers run Windows
10 Enterprise.
The computers are managed by using Microsoft System Center Configuration Manager. The
mobile devices are managed by using Microsoft Intune.
The naming convention for the computers is the department acronym, followed by a hyphen, and
then four numbers, for example, FIN-6785. All the computers are joined to the on-premises Active
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 78
http://www.passleader.com
Directory domain.
Each department has an organization unit (OU) that contains a child OU named Computers. Each
computer account is in the Computers OU of its respective department.
Intune Configuration
Requirements
Planned Changes
Contoso plans to implement the following changes:
- Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro
preinstalled and were purchased already.
- Start using a free Microsoft Store for Business app named App1.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 79
http://www.passleader.com
- mplement co-management for the computers.
Technical Requirements
Contoso must meet the following technical requirements:
- Ensure that the users in a group named Group4 can only access Microsoft Exchange Online
from devices that are enrolled in Intune.
- Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows
Autopilot.
- Monitor the computers in the LEG department by using Windows Analytics.
- Create a provisioning package for new computers in the HR department.
- Block iOS devices from sending diagnostic and usage telemetry data.
- Use the principle of least privilege whenever possible.
- Enable the users in the MKG department to use App1.
- Pilot co-management for the IT department.
Hotspot Question
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 80
http://www.passleader.com
QUESTION 65
Case Study 2 - Contoso Ltd
Overview
Contoso, Ltd, is a consulting company that has a main office in Montreal and two branch offices
in Seattle and New York.
Contoso has the users and computers shown in the following table.
The company has IT, human resources (HR), legal (LEG), marketing (MKG) and finance (FIN)
departments.
Contoso uses Microsoft Store for Business and recently purchased a Microsoft 365 subscription.
The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office
will work from home.
Existing Environment
The network contains an Active Directory domain named contoso.com that is synced to Microsoft
Azure Active Directory (Azure AD).
All member servers run Windows Server 2016. All laptops and desktop computers run Windows
10 Enterprise.
The computers are managed by using Microsoft System Center Configuration Manager. The
mobile devices are managed by using Microsoft Intune.
The naming convention for the computers is the department acronym, followed by a hyphen, and
then four numbers, for example, FIN-6785. All the computers are joined to the on-premises Active
Directory domain.
Each department has an organization unit (OU) that contains a child OU named Computers. Each
computer account is in the Computers OU of its respective department.
Intune Configuration
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 81
http://www.passleader.com
Requirements
Planned Changes
Contoso plans to implement the following changes:
- Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro
preinstalled and were purchased already.
- Start using a free Microsoft Store for Business app named App1.
- mplement co-management for the computers.
Technical Requirements
Contoso must meet the following technical requirements:
- Ensure that the users in a group named Group4 can only access Microsoft Exchange Online
from devices that are enrolled in Intune.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 82
http://www.passleader.com
- Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows
Autopilot.
- Monitor the computers in the LEG department by using Windows Analytics.
- Create a provisioning package for new computers in the HR department.
- Block iOS devices from sending diagnostic and usage telemetry data.
- Use the principle of least privilege whenever possible.
- Enable the users in the MKG department to use App1.
- Pilot co-management for the IT department.
Hotspot Question
You need a new conditional access policy that has an assignment for Office 365 Exchange
Online.
You need to configure the policy to meet the technical requirements for Group4.
Which two settings should you configure in the policy? To answer, select the appropriate settings
in the answer area.
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 83
http://www.passleader.com
Explanation:
The policy needs to be applied to Group4 so we need to configure Users and Groups.
The Access controls are set to Block access
QUESTION 66
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 84
http://www.passleader.com
The research department has several computers that have specialized hardware and software
installed.
You need to prevent the video drivers from being updated automatically by using Windows
Update.
Solution: From the Device Installation and Restrictions settings in a Group Policy object (GPO),
you enable Prevent installation of devices using drivers that match these device setup classes,
and then you enter the device GUID.
A. Yes
B. No
Answer: B
Explanation:
https://www.stigviewer.com/stig/microsoft_windows_server_2012_member_server/2013-07-
25/finding/WN12-CC-000024
QUESTION 67
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
The research department has several computers that have specialized hardware and software
installed.
You need to prevent the video drivers from being updated automatically by using Windows
Update.
Solution: From the Settings app, you clear the Give me updates for other Microsoft products
when I update Windows check box.
A. Yes
B. No
Answer: B
Explanation:
https://www.stigviewer.com/stig/microsoft_windows_server_2012_member_server/2013-07-
25/finding/WN12-CC-000024
QUESTION 68
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 85
http://www.passleader.com
question sets might have more than one correct solution, while others might not have a
correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
The research department has several computers that have specialized hardware and software
installed.
You need to prevent the video drivers from being updated automatically by using Windows
Update.
Solution: From the Device Installation settings in a Group Policy object (GPO), you enable
Specify search order for device driver source locations, and then you select Do not search
Windows Update.
A. Yes
B. No
Answer: A
Explanation:
https://www.stigviewer.com/stig/microsoft_windows_server_2012_member_server/2013-07-
25/finding/WN12-CC-000024
QUESTION 69
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
You need to ensure that feature and quality updates install automatically during a maintenance
window.
Solution: From the Windows Update settings, you enable Configure Automatic Updates, select
3 ?Auto download and notify for Install, and then enter a time.
A. Yes
B. No
Answer: B
Explanation:
https://docs.microsoft.com/en-us/sccm/sum/deploy-use/automatically-deploy-software-updates
QUESTION 70
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 86
http://www.passleader.com
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
You have 20 computers that run Windows 10 and are joined to Microsoft Azure Active Directory
(Azure AD).
You plan to replace the computers with new computers that run Windows 10. The new computers
will be joined to Azure AD.
You need to ensure that the desktop background, the favorites, and the browsing history are
available on the new computers.
A. Yes
B. No
Answer: A
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory/devices/enterprise-state-roaming-
windows-settings-reference
QUESTION 71
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
You have 20 computers that run Windows 10 and are joined to Microsoft Azure Active Directory
(Azure AD).
You plan to replace the computers with new computers that run Windows 10. The new computers
will be joined to Azure AD.
You need to ensure that the desktop background, the favorites, and the browsing history are
available on the new computers.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 87
http://www.passleader.com
A. Yes
B. No
Answer: B
Explanation:
https://docs.microsoft.com/en-us/windows-server/storage/folder-redirection/deploy-roaming-user-
profiles
QUESTION 72
You have a Microsoft Azure subscription that contains an Azure Log Analytics workspace.
You deploy a new computer named Computer1 that runs Windows 10. Computer1 is in a
workgroup.
You need to ensure that you can use Log Analytics to query events from Computer1.
Answer: D
Explanation:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agent-windows
QUESTION 73
Your company has a Microsoft Azure Active Directory (Azure AD) tenant.
The company has a Volume Licensing Agreement and uses a product key to activate Windows
10.
You plan to deploy Windows 10 Pro to 200 new computers by using the Microsoft Deployment
Toolkit (MDT) and Windows Deployment Services (WDS).
You need to ensure that the new computers will be configured to have the correct product key
during the installation.
Answer: B
Explanation:
https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/deploy-a-windows-
10-image-using-mdt#a-href-idsec08astep-8-deploy-the-windows-10-client-image
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 88
http://www.passleader.com
QUESTION 74
Your network contains an Active Directory domain that is synced to Microsoft Azure Active
Directory (Azure AD). The domain contains 500 laptops that run Windows 8.1 Professional. The
users of the laptops work from home.
Your company uses Microsoft Intune, the Microsoft Deployment Toolkit (MDT), and Windows
Configuration Designer to manage client computers.
You verify that the hardware and applications on the laptops are compatible with Windows 10.
The users will bring their laptop to the office, where the IT department will deploy Windows 10 to
the laptops while the users wait.
You need to recommend a deployment method for the laptops that will retain their installed
applications. The solution must minimize how long it takes to perform the deployment.
A. an in-place upgrade
B. a clean installation by using a Windows Configuration Designer provisioning package
C. Windows AutoPilot
D. a clean installation and the User State Migration Tool (USMT)
Answer: A
Explanation:
https://docs.microsoft.com/en-us/windows/deployment/windows-10-deployment-scenarios#in-
place-upgrade
QUESTION 75
You have a computer named Computer5 that has Windows 10 installed.
You need to ensure that config.ps1 runs after feature updates are installed on Computer5.
A. Unattend.xml
B. Unattend.bat
C. SetupConfig.ini
D. LiteTouch.wsf
Answer: C
Explanation:
https://www.joseespitia.com/2017/06/01/how-to-run-a-post-script-after-a-windows-10-feature-
upgrade/
QUESTION 76
Your network contains an Active Directory forest. The forest contains a single domain and three
sites named Site1, Site2, and Site3. Each site is associated to two subnets. Site1 contains two
subnets named SubnetA and SubnetB.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 89
http://www.passleader.com
All the client computers in the forest run Windows 10. Delivery Optimization is enabled.
Answer: C
Explanation:
Delivery Optimization allows updates from other clients that connect to the Internet using the
same public IP as the target client (NAT).
https://docs.microsoft.com/en-us/windows/deployment/update/waas-delivery-optimization
QUESTION 77
Your company standardizes on Windows 10 Enterprise for all users.
Some users purchase their own computer from a retail store. The computers run Windows 10
Pro.
You need to recommend a solution to upgrade the computers to Windows 10 Enterprise, join the
computers to Microsoft Azure Active Directory (Azure AD), and install several Microsoft Store
apps. The solution must meet the following requirements:
What is the best recommendation to achieve the goal? More than one answer choice may
achieve the goal. Select the BEST answer.
Answer: C
Explanation:
You use Windows Configuration Designer to create a provisioning package (.ppkg) that contains
customization settings. You can apply the provisioning package to a device running Windows 10.
Incorrect Answers:
A: Microsoft Deployment Toolkit (MDT) allows you to automate the deployment of Windows
operating systems in your organization. It is not used to upgrade to Windows 10 Enterprise.
B: Windows Deployment Services (WDS) is the revised version of Remote Installation Services
(RIS).
WDS enables the deployment of Windows operating systems. You can use it to set up new
computers using network-based installations. It is not used to upgrade to Windows 10 Enterprise.
D: Windows Autopilot is a user-driven mode designed to minimize intervention of the IT
administrator.
https://docs.microsoft.com/en-us/windows/deployment/upgrade/windows-10-edition-upgrades
https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-
create-package
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 90
http://www.passleader.com
QUESTION 78
You install a feature update on a computer that runs Windows 10.
A. 5
B. 10
C. 14
D. 30
Answer: B
Explanation:
Microsoft has changed the time period associated with operating system rollbacks with Windows
10 version 1607, decreasing it to 10 days. Previously, Windows 10 had a 30-day rollback period.
https://redmondmag.com/articles/2016/08/04/microsoft-shortens-windows-10-rollback-period.aspx
QUESTION 79
You need to assign the same deployment profile to all the computers that are configured by using
Windows Autopilot.
Which two actions should you perform? Each correct answer presents part of the solution.
Answer: BF
Explanation:
https://www.petervanderwoude.nl/post/automatically-assign-windows-autopilot-deployment-
profile-to-windows-autopilot-devices/
QUESTION 80
Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. All
users have computers that run Windows 10. The computers are joined to Azure AD and managed
by using Microsoft Intune.
You need to ensure that you can centrally monitor the computers by using Windows Analytics.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 91
http://www.passleader.com
Answer: A
Explanation:
https://www.scconfigmgr.com/2019/03/27/windows-analytics-onboarding-with-intune/
QUESTION 81
Your company has a System Center Configuration Manager deployment that uses hybrid mobile
device management (MDM). All Windows 10 devices are Active Directory domain-joined.
Which two actions should you perform? Each correct answer presents part of the solution.
Answer: BC
Explanation:
https://docs.microsoft.com/en-us/sccm/mdm/deploy-use/migrate-hybridmdm-to-intunesa
https://docs.microsoft.com/en-us/sccm/mdm/deploy-use/migrate-prepare-intune
https://docs.microsoft.com/en-us/sccm/mdm/deploy-use/change-mdm-authority
QUESTION 82
You need to meet the requirements for the MKG department users.
A. Assign the MKG department users the Purchaser role in Microsoft Store for Business
B. Download the APPX file for App1 from Microsoft Store for Business
C. Add App1 to the private store
D. Assign the MKG department users the Basic Purchaser role in Microsoft Store for Business
E. Acquire App1 from Microsoft Store for Business
Answer: E
Explanation:
https://docs.microsoft.com/en-us/microsoft-store/distribute-apps-from-your-private-store
QUESTION 83
You have devices enrolled in Microsoft Intune as shown in the following table.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 92
http://www.passleader.com
You create an app protection policy named Policy1 that has the following settings:
- Platform: Windows 10
- Protected apps: App1
- Exempt apps: App2
- Network boundary: Cloud resources, IPv4 ranges
You assign Policy1 to Group1 and Group2. You exclude Group3 from Policy1.
Answer: A
Explanation:
Policy1 is applied to all devices in Group1 and Group2. It is not applied to any devices in Group3,
unless those devices are also members of Group1 or Group2.
Note: The phrase "You exclude Group3 from Policy1" is misleading. It means that Policy1 is not
applied to Group3, rather than Group3 being blocked.
Incorrect answers:
B: Policy1 applies to Device2 as Policy1 is assigned to Group2.
C: Policy1 applies to Device1 as Policy1 is assigned to Group1. Policy1 also applies to Device2
as Policy1 is assigned to Group2.
D: Device3 is a member of Group3 only. Policy1 is not assigned to Group3.
https://docs.microsoft.com/en-us/intune/app-protection-policies
QUESTION 84
Your company implements Microsoft Azure Active Directory (Azure AD), Microsoft 365, Microsoft
Intune, and Azure Information Protection.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 93
http://www.passleader.com
What should you create?
A. a data loss prevention (DLP) policy from the Security & Compliance admin center
B. a supervision policy from the Security & Compliance admin center
C. an app protection policy from the Intune admin center
D. a device configuration profile from the Intune admin center
Answer: C
Explanation:
https://docs.microsoft.com/en-us/intune/app-protection-policy
QUESTION 85
You use Windows Defender Advanced Threat Protection (Windows Defender ATP) to protect
computers that run Windows 10.
You need to assess the differences between the configuration of Windows Defender ATP and the
Microsoft-recommended configuration baseline.
Answer: D
Explanation:
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-
atp/overview-secure-score
QUESTION 86
Your network contains an Active Directory domain. The functional level of the forest and the
domain is Windows Server 2012 R2.
The domain contains 500 computers that run Windows 10. All the computers are managed by
using Microsoft System Center 2012 R2 Configuration Manager.
Answer: C
Explanation:
Co-management requires Configuration Manager version 1710 or later.
https://docs.microsoft.com/en-us/sccm/comanage/overview#prerequisites
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 94
http://www.passleader.com
QUESTION 87
Your network contains an Active Directory domain named contoso.com. The domain contains
computers that run Windows 10 and are joined to the domain.
You create an Azure Log Analytics workspace and deploy the Device Health solution. You need
to enroll the computers in Windows Analytics.
Answer: C
Explanation:
Microsoft uses a unique commercial ID to map information from user computers to your Azure
workspace.
Copy your commercial ID key from any of the Windows Analytics solutions you have added to
your Windows Portal, and then deploy it to user computers.
https://docs.microsoft.com/en-us/windows/deployment/update/windows-analytics-get-started
QUESTION 88
You need to enable Windows Defender Credential Guard on computers that run Windows 10.
A. Hyper-V
B. Windows Defender Application Guard
C. a guarded host
D. containers
Answer: A
QUESTION 89
Hotspot Question
You have computers that run Windows 10. The computers are in a workgroup and are enrolled in
Intune. The computers are configured as shown in the following table.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 95
http://www.passleader.com
On each computer, the Select when Quality Updates are received Group Policy setting is
configured as shown in the following table.
You have Windows 10 update rings in Intune as shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Answer:
QUESTION 90
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 96
http://www.passleader.com
Hotspot Question
Your network contains an Active Directory domain. The domain contains 1,200 computers that
run Windows 8.1.
You deploy an Upgrade Readiness solution in Microsoft Azure and configure the computers to
report to Upgrade Readiness.
You need to filter the view to show only applications that can run successfully on Windows 10.
How should you configure the filter in Upgrade Readiness? To answer, select the appropriate
options in the answer area.
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 97
http://www.passleader.com
Explanation:
https://docs.microsoft.com/en-us/windows/deployment/upgrade/upgrade-readiness-resolve-
issues
QUESTION 91
Hotspot Question
You have two computers that run Windows 10. The computers are enrolled in Microsoft Intune as
shown in the following table.
Windows 10 update rings are defined in Intune as shown in the following table.
What is the effect of the configurations on Computer1 and Computer2? To answer, select the
appropriate options in the answer area.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 98
http://www.passleader.com
NOTE: Each correct selection is worth one point.
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 99
http://www.passleader.com
Explanation:
Computer1 and Computer2 are members of Group1. Ring1 is applied to Group1.
Note: The term "Exclude" is misleading. It means that the ring is not applied to that group, rather
than that group being blocked.
https://docs.microsoft.com/en-us/windows/deployment/update/waas-wufb-intune
https://allthingscloud.blog/configure-windows-update-business-using-microsoft-intune/
QUESTION 92
Hotspot Question
- Remove the Microsoft News and the Xbox Microsoft Store apps.
- Add a VPN connection to the corporate network.
Which two customizations should you configure? To answer, select the appropriate
customizations in the answer area.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 100
http://www.passleader.com
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 101
http://www.passleader.com
Explanation:
https://docs.microsoft.com/en-us/windows/configuration/wcd/wcd-connectivityprofiles
https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-
provider#applicationmanagement-applicationrestrictions
https://docs.microsoft.com/en-us/windows/configuration/wcd/wcd-policies
QUESTION 93
Hotspot Question
You have a Microsoft Intune subscription.
You create the Windows Autopilot deployment profile-shown in the following exhibit.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 102
http://www.passleader.com
Use the drop-down menus to select the answer choice that completes each statement based on
the information presented in the graphic.
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 103
http://www.passleader.com
Explanation:
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/user-driven
QUESTION 94
Hotspot Question
Your network contains an Active Directory domain that is synced to Microsoft Azure Active
Directory (Azure AD).
You have a Microsoft Office 365 subscription. All computers are joined to the domain and have
the latest Microsoft OneDrive sync client (OneDrive.exe) installed.
On all the computers, you configure the OneDrive settings as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on
the information presented in the graphic.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 104
http://www.passleader.com
Answer:
Explanation:
Box 1:
Silently move known folders to OneDrive is enabled. Known folder include:
Desktop, Documents, Pictures, Screenshots, and Camera Roll
Box 2:
OneDrive Files On-Demand enables users to view, search for, and interact with files stored in
OneDrive from within File Explorer without downloading them and taking up space on the local
hard drive.
https://docs.microsoft.com/en-us/onedrive/redirect-known-folders
https://docs.microsoft.com/en-us/onedrive/plan-onedrive-enterprise
QUESTION 95
Hotspot Question
You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure
Active Directory (Azure AD) and enrolled in Microsoft Intune.
You need to configure an Intune device configuration profile to meet the following requirements:
Which two settings should you configure in Endpoint protection? To answer, select the
appropriate settings in the answer area.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 105
http://www.passleader.com
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 106
http://www.passleader.com
Explanation:
https://docs.microsoft.com/en-us/intune/endpoint-protection-windows-10
QUESTION 96
Hotspot Question
You need to configure access to Microsoft Office 365 for unmanaged devices. The solution must
meet the following requirements:
- Allow only the Microsoft Intune Managed Browser to access Office 365
web interfaces.
- Ensure that when users use the Intune Managed Browser to access
Office 365 web interfaces, they can only copy data to applications that
are managed by the company.
Which two settings should you configure from the Microsoft Intune blade? To answer, select the
appropriate settings in the answer area.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 107
http://www.passleader.com
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 108
http://www.passleader.com
Explanation:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 109
http://www.passleader.com
https://docs.microsoft.com/en-us/intune/app-configuration-managed-browser#application-
protection-policies-for-protected-browsers
QUESTION 97
Hotspot Question
Your company uses Microsoft Intune to manage Windows 10, Android, and iOS devices.
You need to tell the users how to enroll their device in Intune.
What should you instruct the users to use for each device? To answer, select the appropriate
options in the answer area.
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 110
http://www.passleader.com
Explanation:
The Intune Company Portal app is used to enroll Android, iOS, macOS, and Windows devices
https://docs.microsoft.com/en-us/intune-user-help/enroll-device-android-company-portal
https://docs.microsoft.com/en-us/intune-user-help/enroll-your-device-in-intune-ios
https://docs.microsoft.com/en-us/intune-user-help/enroll-your-device-in-intune-macos-cp
QUESTION 98
Hotspot Question
Your company has a Microsoft Azure Active Directory (Azure AD) tenant and computers that run
Windows 10.
The Azure AD tenant has the users shown in the following table.
The device type restrictions in Intune are configured as shown in the following table:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 111
http://www.passleader.com
User3 is a device enrollment manager (DEM) in Intune.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Answer:
Explanation:
https://docs.microsoft.com/en-us/intune-user-help/enroll-your-device-in-intune-android
QUESTION 99
Hotspot Question
Your network contains an Active Directory domain. Active Directory is synced with Microsoft
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 112
http://www.passleader.com
Azure Active Directory (Azure AD).
There are 500 domain-joined computers that run Windows 10. The computers are joined to Azure
AD and enrolled in Microsoft Intune.
You need to create a custom Windows Defender Exploit Guard policy, and then distribute the
policy to all the computers.
What should you do? To answer, select the appropriate options in the answer area.
Answer:
Explanation:
https://docs.microsoft.com/en-us/intune/endpoint-protection-windows-10
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploit-
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 113
http://www.passleader.com
guard/enable-exploit-protection
QUESTION 100
Hotspot Question
You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure
Active Directory (Azure AD) and enrolled in Microsoft Intune.
You need to set a custom image as the wallpaper and sign-in screen.
Which two settings should you configure in Device restrictions? To answer, select the appropriate
settings in the answer area.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 114
http://www.passleader.com
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 115
http://www.passleader.com
Explanation:
Sign-in screen, or Locked screen, image is set under Locked screen experience
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 116
http://www.passleader.com
Wallpaper image, or Desktop background picture, URL is set under Personalization.
https://docs.microsoft.com/en-us/intune/device-restrictions-windows-10
QUESTION 101
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
The research department has several computers that have specialized hardware and software
installed.
You need to prevent the video drivers from being updated automatically by using Windows
Update.
Solution: From the Windows Update settings in a Group Policy object (GPO), you enable Do not
include drivers with Windows Updates.
A. Yes
B. No
C.
D.
Answer: A
Explanation:
https://www.stigviewer.com/stig/microsoft_windows_server_2012_member_server/2013-07-
25/finding/WN12-CC-000024
QUESTION 102
Your company has 200 computers that run Windows 10. The computers are managed by using
Microsoft Intune.
Answer: A
Explanation:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 117
http://www.passleader.com
https://docs.microsoft.com/en-us/intune/delivery-optimization-windows
QUESTION 103
You have 500 computers that run Windows 10. The computers are joined to Microsoft Azure
Active Directory (Azure AD) and enrolled in Microsoft Intune.
You plan to distribute certificates to the computers by using Simple Certificate Enrollment
Protocol (SCEP).
You are configuring a device profile as shown in the exhibit. (Click the Exhibit tab.)
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 118
http://www.passleader.com
A. Server1
B. Server2
C. Server3
D. Server4
Answer: D
QUESTION 104
You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure
Active Directory (Azure AD) and enrolled in Microsoft Intune.
A. Saved Games
B. Desktop
C. Music
D. Downloads
Answer: B
Explanation:
https://docs.microsoft.com/en-us/onedrive/redirect-known-folders
QUESTION 105
You have a Microsoft Azure Active Directory (Azure AD) tenant. All corporate devices are
enrolled in Microsoft Intune.
You have a web-based application named App1 that uses Azure AD to authenticate.
You need to prompt all users of App1 to agree to the protection of corporate data when they
access App1 from both corporate and non-corporate devices.
Answer: C
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/terms-of-use
QUESTION 106
You have 100 devices that run Windows 10 and are joined to Microsoft Azure Active Directory
(Azure AD).
You need to prevent users from joining their home computer to Azure AD.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 119
http://www.passleader.com
A. From the Device enrollment blade in the Intune admin center, modify the Enrollment restriction
settings.
B. From the Devices blade in the Azure Active Directory admin center, modify the Device settings.
C. From the Device enrollment blade in the Intune admin center, modify the Device enrollment
manages settings.
D. From the Mobility (MDM and MAM) blade in the Azure Active Directory admin center, modify the
Microsoft Intune enrollment settings.
Answer: A
Explanation:
https://docs.microsoft.com/en-us/intune/enrollment-restrictions-set
QUESTION 107
Your company has a Microsoft 365 subscription.
A new user named Admin1 is responsible for deploying Windows 10 to computers and joining the
computers to Microsoft Azure Active Directory (Azure AD).
Several days later, Admin1 receives the following error message: "This user is not authorized to
enroll. You can try to do this again or contact your system administrator with the error code
(0x801c0003)."
You need to ensure that Admin1 can join computers to Azure AD and follow the principle of least
privilege.
Answer: B
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal
QUESTION 108
Your network contains an Active Directory domain that is synced to Microsoft Azure Active
Directory (Azure AD). The domain contains computers that run Windows 10. The computers are
enrolled in Microsoft Intune and Windows Analytics.
You need to identify non-approved apps that attempt to open corporate documents.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 120
http://www.passleader.com
Answer: D
Explanation:
https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-
protection/wip-learning
QUESTION 109
You manage a Microsoft 365 environment that has co-management enabled.
All computers run Windows 10 and are deployed by using the Microsoft Deployment Toolkit
(MDT).
You need to recommend a solution to deploy Microsoft Office 365 ProPlus to new computers.
The latest version must always be installed. The solution must minimize administrative effort.
What is the best tool to use for the deployment? More than one answer choice may achieve the
goal.
Select the BEST answer.
A. Microsoft Intune
B. Microsoft Deployment Toolkit
C. Office Deployment Toolkit (ODT)
D. a Group Policy object (GPO)
E. Microsoft System Center Configuration Manager
Answer: C
Explanation:
https://docs.microsoft.com/en-us/deployoffice/overview-of-the-office-2016-deployment-tool
QUESTION 110
Hotspot Question
Your network contains an Active Directory domain named contoso.com. The domain contains 500
computers that run Windows 7. Some of the computers are used by multiple users.
You plan to refresh the operating system of the computers to Windows 10.
You need to retain the personalization settings to applications before you refresh the computers.
The solution must minimize network bandwidth and network storage space.
Which command should you run on the computer? To answer, select the appropriate options in
the answer area.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 121
http://www.passleader.com
Answer:
Explanation:
https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-scanstate-syntax#how-to-use-
ui-and-ue
QUESTION 111
Hotspot Question
You have a hybrid Microsoft Azure Active Directory (Azure AD) tenant.
You configure a Windows Autopilot deployment profile as shown in the following exhibit.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 122
http://www.passleader.com
Use the drop-down menus to select the answer choice that completes each statement based on
the information presented in the graphic.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 123
http://www.passleader.com
Answer:
Explanation:
https://docs.microsoft.com/en-us/intune/enrollment-autopilot
QUESTION 112
Drag and Drop Question
You plan to deploy Windows 10 to the computers by performing a wipe and load installation.
You need to recommend a method to retain the user settings and the user data.
Which three actions should you recommend be performed in sequence? To answer, move the
appropriate actions from the list of actions to the answer area and arrange them in the correct
order.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 124
http://www.passleader.com
Answer:
Explanation:
https://docs.microsoft.com/en-us/windows/deployment/windows-10-deployment-scenarios
http://itproguru.com/expert/2016/01/step-by-step-how-to-migrate-users-and-user-data-from-xp-
vista-windows-7-or-8-to-windows-10-using-microsoft-tool-usmt-user-state-migration-toolkit/
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 125
http://www.passleader.com
QUESTION 113
Hotspot Question
Your company uses Windows Defender Advanced Threat Protection (Windows Defender ATP).
Windows Defender ATP includes the machine groups shown in the following table.
You onboard a computer to Windows Defender ATP as shown in the following exhibit.
What is the effect of the Windows Defender ATP configuration? To answer, select the appropriate
options in the answer area.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 126
http://www.passleader.com
Answer:
QUESTION 114
Hotspot Question
Users have iOS devices that are not enrolled in Microsoft 365 Device Management.
You create an app protection policy for the Microsoft Outlook app as shown in the exhibit. (Click
the Exhibit tab.)
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 127
http://www.passleader.com
You need to configure the policy to meet the following requirements:
- Prevent the users from using the Outlook app if the operating system version is less than 12.0.0.
- Require the users to use an alphanumeric passcode to access the Outlook app.
What should you configure in an app protection policy for each requirement? To answer, select
the appropriate options in the answer area.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 128
http://www.passleader.com
Answer:
Explanation:
https://docs.microsoft.com/en-us/intune/app-protection-policy-settings-ios
QUESTION 115
Case Study 1 - Litware inc
General Overview
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 129
http://www.passleader.com
Litware, Inc. is an international manufacturing company that has 3,000 employees. The company
has sales, marketing, research, human resources (HR), development, and IT departments.
Litware has two main offices in New York and Los Angeles. Litware has five branch offices in
Asia.
Existing Environment
Current Business Model
The Los Angeles office has 500 developers. The developers work flexible hours ranging from
11:00 to
22:00. Litware has a Microsoft System Center 2012 R2 Configuration Manager deployment.
During discovery, the company discovers a process where users are emailing bank account
information of its customers to internal and external recipients.
Current Environment
The network contains an Active Directory domain that is synced to Microsoft Azure Active
Directory (Azure AD). The functional level of the forest and the domain is Windows Server 2012
R2. All domain controllers run Windows Server 2012 R2.
Litware has the computers shown in the following table.
The development department uses projects in Azure DevOps to build applications. Most of the
employees in the sales department are contractors. Each contractor is assigned a computer that
runs Windows 10. At the end of each contract, the computer is assigned to different contractor.
Currently, the computers are re-provisioned manually by the IT department.
Problem Statements
Litware identifies the following issues on the network:
- Employees in the Los Angeles office report slow Internet performance when updates are
downloading. The employees also report that the updates frequently consume considerable
resources when they are installed. The Update settings are configured as shown in the Updates
exhibit. (Click the Updates button.)
- Management suspects that the source code for the proprietary applications in Azure DevOps in
being shared externally.
- Re-provisioning the sales department computers is too time consuming.
Requirements
Business Goals
Litware plans to transition to co-management for all the company-owned Windows 10 computers.
Whenever possible, Litware wants to minimize hardware and software costs.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 130
http://www.passleader.com
- Prevent the sales department employees from forwarding email that contains bank account
information.
- Ensure that Microsoft Edge Favorites are accessible from all computers to which the developers
sign in.
- Prevent employees in the research department from copying patented information from trusted
applications to untrusted applications.
Technical Requirements
Litware identifies the following technical requirements for the planned deployment:
- Re-provision the sales department computers by using Windows AutoPilot.
- Ensure that the projects in Azure DevOps can be accessed from the corporate network only.
- Ensure that users can sign in to the Azure AD-joined computers by using a PIN. The PIN must
expire every 30 days.
- Ensure that the company name and logo appears during the Out of Box Experience (OOBE)
when using Windows AutoPilot.
Hotspot Question
Which two settings should you configure from the Azure Active Directory blade? To answer,
select the appropriate settings in the answer area.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 131
http://www.passleader.com
Answer:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 132
http://www.passleader.com
Explanation:
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot-reset
QUESTION 116
Case Study 1 - Litware inc
General Overview
Litware, Inc. is an international manufacturing company that has 3,000 employees. The company
has sales, marketing, research, human resources (HR), development, and IT departments.
Litware has two main offices in New York and Los Angeles. Litware has five branch offices in
Asia.
Existing Environment
Current Business Model
The Los Angeles office has 500 developers. The developers work flexible hours ranging from
11:00 to
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 133
http://www.passleader.com
22:00. Litware has a Microsoft System Center 2012 R2 Configuration Manager deployment.
During discovery, the company discovers a process where users are emailing bank account
information of its customers to internal and external recipients.
Current Environment
The network contains an Active Directory domain that is synced to Microsoft Azure Active
Directory (Azure AD). The functional level of the forest and the domain is Windows Server 2012
R2. All domain controllers run Windows Server 2012 R2.
Litware has the computers shown in the following table.
The development department uses projects in Azure DevOps to build applications. Most of the
employees in the sales department are contractors. Each contractor is assigned a computer that
runs Windows 10. At the end of each contract, the computer is assigned to different contractor.
Currently, the computers are re-provisioned manually by the IT department.
Problem Statements
Litware identifies the following issues on the network:
- Employees in the Los Angeles office report slow Internet performance when updates are
downloading. The employees also report that the updates frequently consume considerable
resources when they are installed. The Update settings are configured as shown in the Updates
exhibit. (Click the Updates button.)
- Management suspects that the source code for the proprietary applications in Azure DevOps in
being shared externally.
- Re-provisioning the sales department computers is too time consuming.
Requirements
Business Goals
Litware plans to transition to co-management for all the company-owned Windows 10 computers.
Whenever possible, Litware wants to minimize hardware and software costs.
Technical Requirements
Litware identifies the following technical requirements for the planned deployment:
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 134
http://www.passleader.com
- Re-provision the sales department computers by using Windows AutoPilot.
- Ensure that the projects in Azure DevOps can be accessed from the corporate network only.
- Ensure that users can sign in to the Azure AD-joined computers by using a PIN. The PIN must
expire every 30 days.
- Ensure that the company name and logo appears during the Out of Box Experience (OOBE)
when using Windows AutoPilot.
What should you upgrade before you can configure the environment to support co-management?
Answer: B
Explanation:
https://docs.microsoft.com/en-us/sccm/comanage/tutorial-co-manage-clients
https://docs.microsoft.com/en-us/sccm/comanage/tutorial-co-manage-clients#enable-co-
management-in-configuration-manager
QUESTION 117
Note: This question is part of a series of questions that present the same scenario. Each
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 135
http://www.passleader.com
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
Your company uses Windows Autopilot to configure the computer settings of computers issued to
users.
A user named User1 has a computer named Computer1 that runs Windows 10.
You need to ensure that when User2 first starts the computer, User2 is prompted to select the
language setting and to agree to the license agreement.
A. Yes
B. No
Answer: B
Explanation:
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot-reset
QUESTION 118
You have a Microsoft 365 subscription.
A remote user purchases a laptop from a retail store. The laptop is intended for company use and
has Windows 10 Pro edition installed.
A. Create a custom Windows image (.wim) file that contains an image of Windows 10 Enterprise and
upload the file to a Microsoft
B. Create a provisioning package (.ppkg) file and email the file to the user
C. Create a Windows To Go workspace and ship the workspace to the user
D. Create a Sysprep Unattend (.xml) file and email the file to the user
Answer: B
Explanation:
https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 136
http://www.passleader.com
packages
QUESTION 119
You have a Microsoft 365 subscription. All devices run Windows 10.
You need to prevent users from enrolling the devices in the Windows Insider Program.
What should you configure from Microsoft 365 Device Management? Each correct answer
presents part of the solution.
Answer: D
QUESTION 120
You have an Azure Active Directory (Azure AD) tenant named adatum.com. The tenant contains
Windows 10 devices that are enrolled in Microsoft Intune.
You create an Azure Log Analytics workspace and add the Device Health Solution to the
workspace.
You need to create a custom device configuration profile that will enroll the Windows 10 devices
in Device Health.
A. ./Vendor/MSFT/DMClient/Provider/MS DM Server/Push
B. ./Vendor/MSFT/DMClient/Provider/MS DM Server/CommercialID
C. ./Vendor/MSFT/DMClient/Provider/MS DM Server/ManagementServerAddressList
D. ./Vendor/MSFT/DMClient/Provider/MS DM Server/Push/ChannelURI
Answer: B
Explanation:
https://allthingscloud.blog/monitor-windows-10-updates-for-intune-mdm-enrolled-devices/
QUESTION 121
Your company has computers that run Windows 10. The company uses Microsoft Intune to
manage the computers.
You have an app protection policy for Microsoft Edge. You assign the policy to a group.
You need to verify whether Microsoft Edge on Computer1 is protected by the app protection
policy.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 137
http://www.passleader.com
Which column should you add in Task Manager?
Answer: C
Explanation:
https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-
protection/ wip-app-enterprise-context
https://www.itpromentor.com/win10-mam-wip/
QUESTION 122
Hotspot Question
You have unrooted devices enrolled in Microsoft Intune as shown in the following table.
In Intune, you create a device compliance location that has the following configurations:
Name: Network1
IPv4 range: 192.168.0.0/16
In Intune, you create a device compliance policy for the Android platform. The policy has following
configurations:
Name: Policy1
Device health: Rooted devices: Block
Locations: Location: Network1
Mark device noncompliant: Immediately
Assigned: Group1
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 138
http://www.passleader.com
Answer:
Explanation:
https://docs.microsoft.com/en-us/intune/device-compliance-get-started
QUESTION 123
Your network contains an Active Directory domain named contoso.com that syncs to Azure
Active Directory (Azure AD).
Existing on-premises computers are managed by using Microsoft System Center Configuration
Manager (Current Branch).
You configure contoso.com for co-management.
You deploy 100 new devices that run Windows 10. The devices are joined to Azure AD and
enrolled in Microsoft Intune.
You need to ensure that the devices are co-managed.
What should you create in Intune first?
Answer: C
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 139
http://www.passleader.com
Explanation:
For new internet-based devices, you need to create an app in Intune. Deploy this app to Windows
10 devices that aren't already Configuration Manager clients. This scenario is when you have
new Windows 10 devices that join Azure AD and automatically enroll to Intune. You install the
Configuration Manager client to reach a co-management state.
https://docs.microsoft.com/en-us/configmgr/comanage/how-to-prepare-win10
QUESTION 124
You need to meet the device management requirements for the developers.
What should you implement?
A. folder redirection
B. Enterprise State Roaming
C. known folder redirection in Microsoft OneDrive
D. home folders
Answer: D
Get Latest & Actual MS-900 Exam's Question and Answers from Passleader. 140
http://www.passleader.com