Exam MD-102 All QuestionsBrowse all questions from this exam
Go to Exam
Question 2

Case study -

Overview -

ADatum Corporation is a consulting company that has a main office in Montreal and branch offices in Seattle and New York.

ADatum has a Microsoft 365 E5 subscription.

Environment -

Network Environment -

The network contains an on-premises Active Directory domain named adatum.com. The domain contains the servers shown in the following table.

ADatum has a hybrid Azure AD tenant named adatum.com.

Users and Groups -

The adatum.com tenant contains the users shown in the following table.

All users are assigned a Microsoft Office 365 license and an Enterprise Mobility + Security E3 license.

Enterprise State Roaming is enabled for Group1 and GroupA.

Group1 and Group2 have a Membership type of Assigned.

Devices -

ADatum has the Windows 10 devices shown in the following table.

The Windows 10 devices are joined to Azure AD and enrolled in Microsoft Intune.

The Windows 10 devices are configured as shown in the following table.

All the Azure AD joined devices have an executable file named C:\AppA.exe and a folder named D:\Folder1.

Microsoft Intune Configuration -

Microsoft Intune has the compliance policies shown in the following table.

The Automatic Enrollment settings have the following configurations:

MDM user scope: GroupA -

MAM user scope: GroupB -

You have an Endpoint protection configuration profile that has the following Controlled folder access settings:

Name: Protection1 -

Folder protection: Enable -

List of apps that have access to protected folders: C:\*\AppA.exe

List of additional folders that need to be protected: D:\Folder1

Assignments:

Included groups: Group2, GroupB -

Windows Autopilot Configuration -

ADatum has a Windows Autopilot deployment profile configured as shown in the following exhibit.

Currently, there are no devices deployed by using Windows Autopilot.

The Intune connector for Active Directory is installed on Server1.

Requirements -

Planned Changes -

ADatum plans to implement the following changes:

Purchase a new Windows 10 device named Device6 and enroll the device in Intune

New computers will be deployed by using Windows Autopilot and will be hybrid Azure AD joined.

Deployed a network boundary configuration profile that will have the following settings:

Name: Boundary1 -

Network boundary: 192.168.1.0/24

Scope tags: Tag1 -

Assignments:

Included groups: Group1, Group2 -

Deploy two VPN configuration profiles named Connection1 and Connection2 that will have the following settings:

Name: Connection1 -

Connection name: VPN1 -

Connection type: L2TP -

Assignments:

Included groups: Group1, Group2, GroupA

Excluded groups: --

Name: Connection2 -

Connection name: VPN2 -

Connection type: IKEv2 -

Assignments:

Included groups: GroupA -

Excluded groups: GroupB -

Technical Requirements -

ADatum must meet the following technical requirements:

Users in GroupA must be able to deploy new computers.

Administrative effort must be minimized.

Which devices are registered by using the Windows Autopilot deployment service?

    Correct Answer: A

    Only corporate-owned devices can be registered using the Windows Autopilot deployment service. In this scenario, Device1 is the only corporate-owned device that fits the criteria of not being personally owned. Device3, although it is also part of Group1, is a personally-owned device and thus cannot be registered by Autopilot. Therefore, the only device registered by using the Windows Autopilot deployment service is Device1.

Discussion
jofraarcherOption: A

Answer: A my source to pass: https://docs.google.com/document/d/1Yxh9Pg5hzlUcv-Hv5x-xUm9LtB6mPIOx_o6A4IgQv7I/edit?usp=sharing

voltoOption: A

It worries me that there is so much irrelevant information in this question. But let's focus on the answer. "Currently, there are no devices deployed by using Windows Autopilot." But in autopilot profile, they mark option "Convert all targeted devices to Autopilot - yes". It means "register all targeted devices to Autopilot if they are not already registered" "The setting only registers the devices in the assigned group(s) for the Autopilot service" Autopilot profile is assigned to Group1 exclude Group2 -> Device 1 and Device 3. But we still have additional requirements: - Running a supported version of Windows - Device 1 and 3 - Enrolled in an MDM service such as Intune - Device 1 and 3 - A corporate device that's not already registered with Autopilot - only Device 1. In my opinion, the correct answer is A

Tati_Oliveira

Sorry If, but I could not found where you saw that the only device not yet enrolled was Device 1. Device 1 is a corporate device and makes more sense to be already provisioned then Device 3. But I could find this info on the text "Currently, there are no devices deployed by using Windows Autopilot." Is it right to say Device 1 and 3 or could be Device 1, Device 2, Device 3 since Device two is part of 2 groups (included and excluded of OOBE).

fco168

The setting will register the devices that are not, but will also apply the configuration to the once that are already.

AnoGOption: A

If all devices in the assigned groups should automatically register to Autopilot, set Convert all targeted devices to Autopilot to Yes. All corporate owned, non-Autopilot devices in assigned groups register with the Autopilot deployment service. Personally owned devices aren't registered to Autopilot. Answer is A

kiik32Option: A

including a device group while excluding a device group works so device 2 wont get autopilot, also autopilot will not work with personal devices, so A) https://learn.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#exclude-groups-from-a-profile-assignment

SajjH

"The Windows 10 devices are joined to Azure AD and enrolled in Microsoft Intune." As long as a device is enrolled, it will be assigned the profile even if it is personal. So, Device 1 and 3.

TestTaker09876

This dump is accurate up to May 9th, 2024. For my exam there was 60 questions and no lab. Unlike examtopic, the question like the compliance one here were split up into multiple sections that you have to click through and sort; kind of annoying. I would personally focus on the true or false questions or the compliance questions cause those are gonna give you the most trouble, otherwise.

RazielLycasOption: A

"...Personally owned devices aren't registered to Autopilot." - https://learn.microsoft.com/en-us/autopilot/profiles

MR_EliotOption: A

Correct answer is A. Corprated-Owned devices, are devices that has been enrolled in Intune with device hash, AutopilotConfigurationFile.json or synced in Intune by Hybrid Enrollement. Personally-Owned devices, are devices enrolled by users, using either Company Portal or adding their work account from Settings.

Engr001

personal devices can be registered in intune. but not by the deployment method. They can register in intune via a work or school account. https://learn.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-enroll?tabs=work-profile%2Ccorporate-owned-apple%2Cbyod-enrollment#tabpanel_3_byod-enrollment

Engr001

so the answer is A

091095fOption: A

To those who took the exam recently: Did you encounter this question? What is the correct answer? Is it C or A?

kiik32Option: D

inclusion wins over exclusion

ClausterOption: A

Answer is A Basically it's all because Device 3 it's a Personally owned device and o tho you can join it to AutPilot it will mark it as a "Corporate Owned" and the problem with this is that now the Coporation will have control over it and if it's a personal device user might not necesarlly want that and it's not best practices. I had a lab with personal devices and i joined them to my Tenant using AutoPilot but now they are corp managed and i would have to remove them from Intune to make them Personal devices again. Please see this link: https://learn.microsoft.com/en-us/autopilot/registration-overview

wicis

Owning a home-raised intelligent parrot from https://homeraisedparrots.com brings joy, companionship, and mental stimulation into your life. Our parrots, including macaws and African greys, are bred in a loving home environment, ensuring they are well-socialized and healthy. Unlike mass-bred birds, they receive individualized care, making them more adaptable and affectionate. Adopting from us (homeraisedparrots.com) guarantees a high-quality, intelligent parrot ready to become a cherished family member.

WORKHOLICOption: A

Corporate owned devices are covered by Autopilot

evrybobryOption: A

Personal devices cannot be covered to Autopilot

IrismOption: A

Only corporated devices can use autopilot

DarkfireOption: A

I think A. Based on Device2 which is excluded from the Deployment Profile because its in Group2. Device3 is a personally owned device which cannot be registred based on: https://learn.microsoft.com/en-us/autopilot/windows-autopilot-hybrid#:~:text=If%20you%20want%20all,the%20device%20directly. So based on the question, which devices are registered via Deployment? Only Device1 ticks al boxes being registered. But the main question is. Which answer will be right @ the exam?! =O Anyone recently passed and had this quest? =P

MerrybobOption: A

A. Device1 only