1. Your network contains an Active Directory domain named contoso.com. You create a provisioning package named Package1 as shown in the following exhibit. What is the maximum number of devices on which you can run Package1 successfully? A. 1

2. You have a Microsoft 365 subscription. You have 20 computers that run Windows 10 and are joined to Microsoft Azure Active Directory (Azure AD). You plan to replace the computers with new computers that run Windows 10. The new computers will be joined to Azure AD. You need to ensure that the desktop background, the favorites, and the browsing history are available on the new computers. Solution: You configure roaming user profiles. Does this meet the goal?

3. You need to enable Windows Defender Credential Guard on computers that run Windows 10. What should you install on the computers?

4. Your company has a main office and six branch offices. The branch offices connect to the main office by using a WAN link. All offices have a local Internet connection and a Hyper-V host cluster. The company has a Microsoft System Center Configuration Manager deployment. The main office is the primary site. Each branch has a distribution point. All computers that run Windows 10 are managed by using both Configuration Manager and Microsoft Intune. You plan to deploy the latest build of Microsoft Office 365 ProPlus to all the computers. You need to minimize the amount of network traffic on the company

5. You have the 64-bit computers shown in the following table. You plan to perform an in-place upgrade to the 64-bit version of Windows 10. Which computers can you upgrade to the 64-bit version of Windows 10 in their current state?

6. Your company implements Microsoft Azure Active Directory (Azure AD), Microsoft 365, Microsoft Intune, and Azure Information Protection. The company

7. You are creating a device configuration profile in Microsoft Intune. You need to implement an ADMX-backed policy. Which profile type should you use?

8. Your company uses Microsoft Intune to manage devices. You need to ensure that only Android devices that use Android work profiles can enroll in Intune. Which two configurations should you perform in the device enrollment restrictions? Each correct answer presents part of the solution. NOTE: each correct selection is worth one point.

9. You use Windows Defender Advanced Threat Protection (Windows Defender ATP) to protect computers that run Windows 10. You need to assess the differences between the configuration of Windows Defender ATP and the Microsoft-recommended configuration baseline. Which tool should you use?

10. Your company has a Microsoft Azure Active Directory (Azure AD) tenant. The company has a Volume Licensing Agreement and uses a product key to activate Windows 10. You plan to deploy Windows 10 Pro to 200 new computers by using the Microsoft Deployment Toolkit (MDT) and Windows Deployment Services (WDS). You need to ensure that the new computers will be configured to have the correct product key during the installation. What should you configure?

11. Your company has a Microsoft 365 subscription. All the users in the finance department own personal devices that run iOS or Android. All the devices are enrolled in Microsoft Intune. The finance department adds new users each month. The company develops a mobile application named App1 for the finance department users. You need to ensure that only the finance department users can download App1. What should you do first?

12. Solution: From the Maintenance Scheduler settings, you configure Automatic Maintenance Random Delay. Does this meet the goal?

13. You have a computer named Computer5 that has Windows 10 installed. You create a Windows PowerShell script named config.ps1. You need to ensure that config.ps1 runs after feature updates are installed on Computer5. Which file should you modify on Computer5?

14. You have 500 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune. You plan to distribute certificates to the computers by using Simple Certificate Enrollment Protocol (SCEP). You have the servers shown in the following table. NDES issues certificates from the subordinate CA. You are configuring a device profile as shown in the exhibit. (Click the Exhibit tab.) You need to complete the SCEP profile.

15. You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune. You redirect Windows known folders to Microsoft OneDrive for Business. Which folder will be included in the redirection?

16. You install a feature update on a computer that runs Windows 10. How many days do you have to roll back the update?

17. Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD). The domain contains 500 laptops that run Windows 8.1 Professional. The users of the laptops work from home. Your company uses Microsoft Intune, the Microsoft Deployment Toolkit (MDT), and Windows Configuration Designer to manage client computers. The company purchases 500 licenses for Windows 10 Enterprise. You verify that the hardware and applications on the laptops are compatible with Windows 10. The users will bring their laptop to the office, where the IT department will deploy Windows 10 to the laptops while the users wait. You need to recommend a deployment method for the laptops that will retain their installed applications. The solution must minimize how long it takes to perform the deployment. What should you include in the recommendation?

18. You have a Microsoft Azure Log Analytics workplace that collects all the event logs from the computers at your company. You have a computer named Computer1 than runs Windows 10. You need to view the events collected from Computer1. Which query should you run in Log Analytics?

19. Your network contains an Active Directory domain named contoso.com. The domain contains computers that run Windows 10 and are joined to the domain. The domain is synced to Microsoft Azure Active Directory (Azure AD). You create an Azure Log Analytics workspace and deploy the Device Health solution. You need to enroll the computers in Windows Analytics. Which Group Policy setting should you configure?

20. You have computers that run Windows 10 Pro. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune. You need to upgrade the computers to Windows 10 Enterprise. What should you configure in Intune?

21. Your network contains an Active Directory domain. The domain contains 2,000 computers that run Windows 10. You implement hybrid Microsoft Azure Active Directory (Azure AD) and Microsoft Intune. You need to automatically register all the existing computers to Azure AD and enroll the computers in Intune. The solution must minimize administrative effort. What should you use?

22. Solution: From the Windows Update settings, you enable Configure Automatic Updates, select 4-Auto download and schedule the install, and then enter a time. Does this meet the goal?

23. Your company purchases new computers that run Windows 10. The computers have cameras that support Windows Hello for Business. You configure the Windows Hello for Business Group Policy settings as shown in the following exhibit. What are two valid methods a user can use to sign in? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

24. You need to meet the technical requirements for the iOS devices. Which object should you create in Intune?

25. You have a shared computer that runs Windows 10. The computer is infected with a virus. You discover that a malicious TTF font was used to compromise the computer. You need to prevent this type of threat from affecting the computer in the future. What should you use?