Microsoft MD-102 - Questions & Answers

Scenario: Technical requirements include: Block iOS devices from sending diagnostic and usage telemetry data.

Create a device configuration profile.

Note: Intune includes device restriction policies that help administrators control Android, iOS, macOS, and Windows devices. These restrictions let you control a wide range of settings and features to protect your organization's resources. For example, administrators can:

Allow or block the device camera Control access to Google Play, app stores, viewing documents, and gaming Block built-in apps, or create a list of apps that allowed or prohibited Allow or prevent backing up files to cloud and storage accounts
Set a minimum password length, and block simple passwords

References:
https://docs.microsoft.com/en-us/intune/device-restrictions-configure

To manage devices through Microsoft Store for Business and Education, you'll need a .csv file that contains specific information about the devices. You should be able to get this from your Microsoft account contact, or the store where you purchased the devices. Upload the .csv file to Microsoft Store to add the devices.

Note:
Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro preinstalled and were purchased already.
Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows Autopilot.

References:
https://docs.microsoft.com/en-us/microsoft-store/add-profile-to-devices

The Intune connector for Active Directory is installed on Server1.
Contoso must meet the following technical requirements:

1. Users in GroupA must be able to deploy new computers.
2. Administrative effort must be minimized.

Note: To be clear, the entire domain join process will work without any direct connection to the on-premise network and domain controllers. The computer object is created on-premises through the Intune Connector for Active Directory triggered by the Windows Autopilot and Intune.

References:
https://blog.matrixpost.net/set-up-windows-autopilot-production-environment-part-2/

Both Personal and Corporate devices can be enrolled to Intune, the network boundary can be assigned to enrolled Windows 10/11 devices.
https://learn.microsoft.com/en-us/mem/intune/configuration/network-boundary-windows

The Boundary is assigned to Group 1 & 2, Devices 1,2,3 and 4 have membership to these groups. Device 5 is not part of the membership for Group 1 & 2 so doesnt receive the policy.