Microsoft 365 Mobility and Security

Here you have the best Microsoft MS-101 practice exam questions

  • You have 449 total questions to study from
  • Each page has 5 questions, making a total of 90 pages
  • You can navigate through the pages using the buttons at the bottom
  • This questions were last updated on October 13, 2025
  • This site is not affiliated with or endorsed by Microsoft.
Question 1 of 449
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are deploying Microsoft Endpoint Manager.
You successfully enroll Windows 10 devices in Endpoint Manager.
When you try to enroll an iOS device in Endpoint Manager, you get an error.
You need to ensure that you can enroll the iOS device in Endpoint Manager.
Solution: You add your user account as a device enrollment manager.
Does this meet the goal?
    Correct Answer: B

    To enroll an iOS device in Microsoft Endpoint Manager, an Apple MDM Push certificate is required. This certificate allows Intune to manage iOS devices properly. The solution of adding a user account as a device enrollment manager does not address the specific need for this Apple MDM Push certificate. Therefore, the provided solution does not meet the goal.

Question 2 of 449
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are deploying Microsoft Endpoint Manager.
You successfully enroll Windows 10 devices in Endpoint Manager.
When you try to enroll an iOS device in Endpoint Manager, you get an error.
You need to ensure that you can enroll the iOS device in Endpoint Manager.
Solution: You configure the Apple MDM Push certificate.
Does this meet the goal?
    Correct Answer: A

    To enroll an iOS device in Microsoft Endpoint Manager, an Apple MDM Push certificate is required. This certificate allows the device to communicate securely with the Microsoft service, facilitating tasks such as device management, synchronization, and monitoring. Without this certificate, enrollment attempts will fail, resulting in errors. Ensuring that the Apple MDM Push certificate is configured correctly addresses the issue and meets the stated goal.

Question 3 of 449
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are deploying Microsoft Endpoint Manager.
You successfully enroll Windows 10 devices in Endpoint Manager.
When you try to enroll an iOS device in Endpoint Manager, you get an error.
You need to ensure that you can enroll the iOS device in Endpoint Manager.
Solution: You create an Apple Configurator enrollment profile.
Does this meet the goal?
    Correct Answer: B

    Creating an Apple Configurator enrollment profile alone will not address the issue of enrolling an iOS device in Microsoft Endpoint Manager. To enroll an iOS device, you must first set up an Apple Push Notification service (APNs) certificate. The lack of an APNs certificate is a common reason for enrollment errors with Apple devices. Once the APNs certificate is in place, you can proceed with various enrollment methods, including using Apple Configurator if needed. Therefore, creating an Apple Configurator profile without addressing the APNs requirement does not meet the goal.

Question 4 of 449
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).
You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).
You configure pilot co-management.
You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.
You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.
Solution: You create a device configuration profile from the Device Management admin center.
Does this meet the goal?
    Correct Answer: B

    To manage Device1 using both Microsoft Intune and Configuration Manager, you need to enable co-management in Configuration Manager and configure auto-enrollment of devices to Intune. Creating a device configuration profile from the Device Management admin center alone does not fulfill these requirements. The proper steps involve hybrid Azure AD joining the device, ensuring the Configuration Manager client is set up for co-management, and enabling auto-enrollment to Intune.

Question 5 of 449
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).
You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).
You configure pilot co-management.
You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.
You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.
Solution: You add Device1 to an Active Directory group.
Does this meet the goal?
    Correct Answer: B

    To ensure that you can manage Device1 by using both Microsoft Intune and Configuration Manager, the device must be enrolled in Microsoft Intune. In the co-management scenario, this is typically achieved by adding the device to a Configuration Manager device collection that is configured for co-management, not an Active Directory group. This device collection determines which devices are auto-enrolled in Microsoft Intune for management. Therefore, adding Device1 to an Active Directory group does not meet the goal of managing the device using both Microsoft Intune and Configuration Manager.