MD-102 Exam - Question 171

Question

HOTSPOT-Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure AD tenant. You have a Microsoft 365 subscription. You plan to use Windows Autopilot to deploy new Windows devices. You plan to create a deployment profile. You need to ensure that the deployment meets the following requirements:•	Devices must be joined to AD DS regardless of their current working location. •	Users in the marketing department must have a line-of-business (LOB) app installed during the deployment. The solution must minimize administrative effort. What should you do for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Examice · Accepted Answer

.

rhylos · Answer

You must install the Intune Connector for AD for hybrid join ,  the VPN choice doesnt make sense, there is no mention about VPN in the qn, 
How do I join Autopilot devices to hybrid ad?
How to join Autopilot devices to Hybrid AD
Intune Autopilot Hybrid AD joined Requirements.
High-level steps.
Delegate Active Directory rights.
Install and configure the Intune Connector.
Configure Autopilot profile for Intune Hybrid AD joined.
Create Domain Join configuration profile.
Testing the Intune Hybrid AD joined.

Amir1909 · Answer

- install the Intune connector activate Directory 
- create a Microsoft Intune App deployment

NoursBear · Answer

Well if the Intune Connector is already installed, then the reason the VPN choice wins is because of this key statement "Devices must be joined to AD DS regardless of their current working location." from anywhere, could be home

MR_Eliot · Answer

First question:
- install the Intune connector activate Directory
- modify autopilot configuraion:
  - Skip domain check: trure
  - Join Type: Hybrid

Second answer:
- create a Microsoft Intune App deployment

Cheban · Answer

The answers are : 1 - install the Intune connector and 2 - Modify the autopilot profile.

VirtualJP · Answer

Agreed

h38jhd38k · Answer

https://learn.microsoft.com/en-us/mem/intune/apps/lob-apps-windows

yosry · Answer

SEEMS CORRECT

belyo · Answer

so its
modify the autopilot deployment profile [you can chose to join ad option] & intune app deployment

sbermejor · Answer

1- Modify autopilot deployment profile
https://learn.microsoft.com/en-us/autopilot/windows-autopilot-hybrid
"When using BYO VPNs, you should select Yes for the Skip AD connectivity check option in the Windows Autopilot deployment profile. Always-On VPNs shouldn't require this option since it connects automatically."
https://techcommunity.microsoft.com/t5/microsoft-intune/hybrid-join-skip-ad-connectivity-check/m-p/1483065
2- Create a Microsoft Intune app deployment.

St_Ives · Answer

"1-You plan to use Windows Autopilot to deploy new Windows devices.
2- You plan to create a deployment profile."
So, not modify existing autopilot, but make a new (hybrid domain joined) AutoPilot profile.
To be able to make domain member via Hybrid Doma Join Autoilot, a connector must be setup. The question does not say anything about location of deployment, only working (after deployment) location and domain joined....

- install the Intune connector activate Directory
- create a Microsoft Intune App deployment

mw612 · Answer

silly question. nowhere does it say that the intune connector for AD is installed. just because the domain is syncing to your tenant doesn't mean the connector is installed. that means entra connect is setup.

thus, first answer should be setup intune connector
second answer seems correct.

chafe · Answer

Question 1 is tricky - Intune connector can hybrid join, the device will be pending join to ADDS until it gets LoS to the DC but you can setup the VPN through autopilot to allow this to happen.
Always on VPN will also allow enrollment from anywhere using hybrid join in autopilot and can be automated through autopilot with the correct infrastructure.
Horrible horrible question, I hope the exam has more clarity

Prasis · Answer

To meet the requirements for your Windows Autopilot deployment, you should configure the following:

Devices must be joined to AD DS regardless of their current working location:
Install the Intune connector for Active Directory: This allows devices to be joined to the on-premises AD DS during the Autopilot deployment process.
Users in the marketing department must have a line-of-business (LOB) app installed during the deployment:
Create a Microsoft Intune app deployment: This ensures that the LOB app is installed on the devices during the Autopilot deployment.

MD-102 Exam - Question 171

Discussion