1. Your company has a Microsoft Azure Active Directory (Azure AD) tenant. The company has a Volume Licensing Agreement and uses a product key to activate Windows 10. You plan to deploy Windows 10 Pro to 200 new computers by using the Microsoft Deployment Toolkit (MDT) and Windows Deployment Services (WDS). You need to ensure that the new computers will be configured to have the correct product key during the installation. What should you configure?

2. You have a Microsoft Azure Log Analytics workplace that collects all the event logs from the computers at your company. You have a computer named Computer1 than runs Windows 10. You need to view the events collected from Computer1. Which query should you run in Log Analytics?

3. You are creating a device configuration profile in Microsoft Intune. You need to implement an ADMX-backed policy. Which profile type should you use?

4. Your company uses Microsoft Intune to manage devices. You need to ensure that only Android devices that use Android work profiles can enroll in Intune. Which two configurations should you perform in the device enrollment restrictions?

5. Your company has a Microsoft Azure Active Directory (Azure AD) tenant. All users in the company are licensed for Microsoft Intune. You need to ensure that the users enroll their iOS device in Intune. What should you configure first?

6. Your network contains an Active Directory domain. The domain contains 2,000 computers that run Windows 10. You implement hybrid Microsoft Azure Active Directory (Azure AD) and Microsoft Intune. You need to automatically register all the existing computers to Azure AD and enroll the computers in Intune. The solution must minimize administrative effort. What should you use?

7. Your network contains an Active Directory domain. The functional level of the forest and the domain is Windows Server 2012 R2. The domain contains 500 computers that run Windows 10. All the computers are managed by using Microsoft System Center 2012 R2 Configuration Manager. You need to enable co-management. What should you do first?

8. You have a Microsoft 365 subscription. You have 20 computers that run Windows 10 and are joined to Microsoft Azure Active Directory (Azure AD). You plan to replace the computers with new computers that run Windows 10. The new computers will be joined to Azure AD. You need to ensure that the desktop background, the favorites, and the browsing history are available on the new computers. Solution: You configure Enterprise State Roaming. Does this meet the goal?

9. Your company plans to deploy tablets to 50 meeting rooms. The tablets run Windows 10 and are managed by using Microsoft Intune. The tablets have an application named App1. You need to configure the tablets so that any user can use App1 without having to sign in. Users must be prevented from using other applications on the tablets. Which device configuration profile type should you use?

10. You need to assign the same deployment profile to all the computers that are configured by using Windows Autopilot. Which two actions should you perform?

11. You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune. You need to ensure that only applications that you explicitly allow can run on the computers. What should you use?

12. You have computers that run Windows 10 Pro. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune. You need to upgrade the computers to Windows 10 Enterprise. What should you configure in Intune?

13. Your network contains an Active Directory domain named contoso.com. You create a provisioning package named Package1 as shown in the following exhibit. What is the maximum number of devices on which you can run Package1 successfully? A. 1

14. You have a Microsoft 365 subscription. You have 20 computers that run Windows 10 and are joined to Microsoft Azure Active Directory (Azure AD). You plan to replace the computers with new computers that run Windows 10. The new computers will be joined to Azure AD. You need to ensure that the desktop background, the favorites, and the browsing history are available on the new computers. Solution: You configure roaming user profiles. Does this meet the goal?

15. Your company uses Microsoft Intune. More than 500 Android and iOS devices are enrolled in the Intune tenant. You plan to deploy new Intune policies. Different policies will apply depending on the version of Android or iOS installed on the device. You need to ensure that the policies can target the devices based on their version of Android or iOS. What should you configure first?

16. Your company uses Windows Update for Business. The research department has several computers that have specialized hardware and software installed. You need to prevent the video drivers from being updated automatically by using Windows Update. Solution: From the Device Installation and Restrictions settings in a Group Policy object (GPO), you enable Prevent installation of devices using drivers that match these device setup classes, and then you enter the device GUID. Does this meet the goal?

17. You need to meet the technical requirements for the IT department. What should you do first?

18. Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. All users have computers that run Windows 10. The computers are joined to Azure AD and managed by using Microsoft Intune. You need to ensure that you can centrally monitor the computers by using Windows Analytics. What should you create in Intune?

19. You have a shared computer that runs Windows 10. The computer is infected with a virus. You discover that a malicious TTF font was used to compromise the computer. You need to prevent this type of threat from affecting the computer in the future. What should you use?

20. Your company has a Microsoft 365 subscription. All the users in the finance department own personal devices that run iOS or Android. All the devices are enrolled in Microsoft Intune. The finance department adds new users each month. The company develops a mobile application named App1 for the finance department users. You need to ensure that only the finance department users can download App1. What should you do first?

21. Your company purchases new computers that run Windows 10. The computers have cameras that support Windows Hello for Business. You configure the Windows Hello for Business Group Policy settings as shown in the following exhibit. What are the valid methods a user can use to sign in?

22. Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD). The domain contains 500 laptops that run Windows 8.1 Professional. The users of the laptops work from home. Your company uses Microsoft Intune, the Microsoft Deployment Toolkit (MDT), and Windows Configuration Designer to manage client computers. The company purchases 500 licenses for Windows 10 Enterprise. You verify that the hardware and applications on the laptops are compatible with Windows 10. The users will bring their laptop to the office, where the IT department will deploy Windows 10 to the laptops while the users wait. You need to recommend a deployment method for the laptops that will retain their installed applications. The solution must minimize how long it takes to perform the deployment. What should you include in the recommendation?

23. You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (AD) and enrolled in Microsoft Intune. You need to enable self-service password reset on the sign-in screen. Which settings should you configure from the Microsoft Intune blade?

24. You use Windows Defender Advanced Threat Protection (Windows Defender ATP) to protect computers that run Windows 10. You need to assess the differences between the configuration of Windows Defender ATP and the Microsoft-recommended configuration baseline. Which tool should you use?

25. Your network contains an Active Directory domain named contoso.com. The domain contains computers that run Windows 10 and are joined to the domain. The domain is synced to Microsoft Azure Active Directory (Azure AD). You create an Azure Log Analytics workspace and deploy the Device Health solution. You need to enroll the computers in Windows Analytics. Which Group Policy setting should you configure?