1. Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD). The domain contains 500 laptops that run Windows 8.1 Professional. The users of the laptops work from home. Your company uses Microsoft Intune, the Microsoft Deployment Toolkit (MDT), and Windows Configuration Designer to manage client computers. The company purchases 500 licenses for Windows 10 Enterprise. You verify that the hardware and applications on the laptops are compatible with Windows 10. The users will bring their laptop to the office, where the IT department will deploy Windows 10 to the laptops while the users wait. You need to recommend a deployment method for the laptops that will retain their installed applications. The solution must minimize how long it takes to perform the deployment. What should you include in the recommendation?

2. You need to meet the technical requirements for the IT department. What should you do first?

3. You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune. You need to ensure that only applications that you explicitly allow can run on the computers. What should you use?

4. Your company purchases new computers that run Windows 10. The computers have cameras that support Windows Hello for Business. You configure the Windows Hello for Business Group Policy settings as shown in the following exhibit. What are two valid methods a user can use to sign in? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

5. Your network contains an Active Directory domain named contoso.com. The domain contains 200 computers that run Windows 10. Folder Redirection for the Desktop folder is configured as shown in the following exhibit. The target is set to Server1. You plan to use known folder redirection in Microsoft OneDrive for Business. You need to ensure that the desktop content of users remains on their desktop when you implement known folder redirection. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

6. You install a feature update on a computer that runs Windows 10. How many days do you have to roll back the update?

7. You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (AD) and enrolled in Microsoft Intune. You need to enable self-service password reset on the sign-in screen. Which settings should you configure from the Microsoft Intune blade?

8. Your company implements Microsoft Azure Active Directory (Azure AD), Microsoft 365, Microsoft Intune, and Azure Information Protection. The company

9. Your network contains an Active Directory domain. The domain contains 2,000 computers that run Windows 10. You implement hybrid Microsoft Azure Active Directory (Azure AD) and Microsoft Intune. You need to automatically register all the existing computers to Azure AD and enroll the computers in Intune. The solution must minimize administrative effort. What should you use?

10. Solution: From the Maintenance Scheduler settings, you configure Automatic Maintenance Random Delay. Does this meet the goal?

11. Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD). You have a Microsoft 365 subscription. You create a conditional access policy for Microsoft Exchange Online. You need to configure the policy to prevent access to Exchange Online unless is connecting from a device that is hybrid Azure AD-joined. Which settings should you configure?

12. What should you upgrade before you can configure the environment to support co-management?

13. You use Windows Defender Advanced Threat Protection (Windows Defender ATP) to protect computers that run Windows 10. You need to assess the differences between the configuration of Windows Defender ATP and the Microsoft-recommended configuration baseline. Which tool should you use?

14. Your company uses Microsoft Intune. More than 500 Android and iOS devices are enrolled in the Intune tenant. You plan to deploy new Intune policies. Different policies will apply depending on the version of Android or iOS installed on the device. You need to ensure that the policies can target the devices based on their version of Android or iOS. What should you configure first?

15. You have a computer named Computer5 that has Windows 10 installed. You create a Windows PowerShell script named config.ps1. You need to ensure that config.ps1 runs after feature updates are installed on Computer5. Which file should you modify on Computer5?

16. You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune. You redirect Windows known folders to Microsoft OneDrive for Business. Which folder will be included in the redirection?

17. What should you use to meet the technical requirements for Azure DevOps?

18. You need to meet the technical requirements for the iOS devices. Which object should you create in Intune?

19. Your company has a Microsoft 365 subscription. A new user named Admin1 is responsible for deploying Windows 10 to computers and joining the computers to Microsoft Azure Active Directory (Azure AD). Admin1 successfully joins computers to Azure AD. Several days later, Admin1 receives the following error message:

20. You have the 64-bit computers shown in the following table. You plan to perform an in-place upgrade to the 64-bit version of Windows 10. Which computers can you upgrade to the 64-bit version of Windows 10 in their current state?

21. Your company has a Microsoft Azure Active Directory (Azure AD) tenant. The company has a Volume Licensing Agreement and uses a product key to activate Windows 10. You plan to deploy Windows 10 Pro to 200 new computers by using the Microsoft Deployment Toolkit (MDT) and Windows Deployment Services (WDS). You need to ensure that the new computers will be configured to have the correct product key during the installation. What should you configure?

22. You have 100 devices that run Windows 10 and are joined to Microsoft Azure Active Directory (Azure AD). You need to prevent users from joining their home computer to Azure AD. What should you do?

23. Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. All users have computers that run Windows 10. The computers are joined to Azure AD and managed by using Microsoft Intune. You need to ensure that you can centrally monitor the computers by using Windows Analytics. What should you create in Intune?

24. Your company has a Microsoft 365 subscription. All the users in the finance department own personal devices that run iOS or Android. All the devices are enrolled in Microsoft Intune. The finance department adds new users each month. The company develops a mobile application named App1 for the finance department users. You need to ensure that only the finance department users can download App1. What should you do first?

25. Your company has a Microsoft Azure Active Directory (Azure AD) tenant. All users in the company are licensed for Microsoft Intune. You need to ensure that the users enroll their iOS device in Intune. What should you configure first?