Question 1

HOTSPOT You have a server named Server1 and computers that run Windows 10. Server1 has the Microsoft Deployment Toolkit (MDT) installed.
You plan to upgrade the Windows 10 computers to Windows 11 by using the MDT deployment wizard.
You need create a deployment share on Server1.
What should you do on Server1, and what are the minimum components you should add to the MDT deployment share? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Question 2

You have a Microsoft 365 E5 subscription that contains 500 macOS devices enrolled in Microsoft Intune.
You need to ensure that you can apply Microsoft Defender for Endpoint antivirus policies to the macOS devices. The solution must minimize administrative effort.
What should you do?

• A. Onboard the macOS devices to the Microsoft Purview compliance portal.
• B. From the Microsoft Intune admin center, create a security baseline.
• C. Install Defender for Endpoint on the macOS devices.
• D. From the Microsoft Intune admin center, create a configuration profile.

Question 3

HOTSPOT You have 100 Windows 10 devices enrolled in Microsoft Intune.
You need to configure the devices to retrieve Windows updates from the internet and from other computers on a local network.
Which Delivery Optimization setting should you configure, and which type of Intune object should you create? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Question 4

You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

You use Microsoft Intune to manage devices.

You have the devices shown in the following table.



Which devices can be changed to Windows 11 Enterprise by using subscription activation?

• A. Device3 only
• B. Device2 and Device3 only
• C. Device1 and Device2 only
• D. Device1, Device2, and Device3

Question 5

DRAG DROP You have a Microsoft 365 subscription that contains the devices shown in the following table.

You need to ensure that only devices running trusted firmware or operating system builds can access network resources.
Which compliance policy setting should you configure for each device? To answer, drag the appropriate settings to the correct devices. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Question 6

You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

You use Microsoft Intune to manage Windows 11 devices.

You need to implement passwordless authentication that requires users to use number matching.

Which authentication method should you use?

• A. Microsoft Authenticator
• B. voice calls
• C. FIDO2 security keys
• D. text messages

Question 7

You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.



All devices have Microsoft Edge installed.

From the Microsoft Intune admin center, you create a Microsoft Edge Baseline profile named Edge1.

You need to apply Edge1 to all the supported devices.

To which devices should you apply Edge1?

• A. Device1 only
• B. Device1 and Device2 only
• C. Device1, Device2, and Device3 only
• D. Device1, Device2, and Device4 only
• E. Device1, Device2, Device3, and Device4

Question 8

You have a Microsoft 365 Subscription that uses Microsoft Intune.

You add apps to Intune as shown in the following table.



You need to create an app configuration policy named Policy1 for the Android Enterprise platform.

Which apps can you manage by using Policy1?

• A. App2 only
• B. App3 only
• C. App1 and App3 only
• D. App2 and App3 only
• E. App1, App2, and App3

Question 9

DRAG DROP You have a Microsoft Deployment Toolkit (MDT) server named MDT1.
When computers start from the LiteTouchPE_x64.iso image and connect to MDT1, the welcome screen appears as shown in the following exhibit.

You need to prevent the welcome screen from appearing when the computers connect to MDT1.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question 10

You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

You use Microsoft Intune to manage devices.

You need to ensure that the startup performance of managed Windows 11 devices is captured and available for review in the Intune admin center.

What should you configure?

• A. the Azure Monitor agent
• B. a device compliance policy
• C. a Conditional Access policy
• D. an Intune data collection policy