HOTSPOT

You have the Microsoft Deployment Toolkit (MDT) installed in three sites as shown in the following table.

You use Distributed File System (DFS) Replication to replicate images in a share named Production.

You configure the following settings in the Bootstrap.ini file.

You plan to deploy Windows 10 to the computers shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Hot Area:

Lösung einblenden Lösung ausblenden

Richtige Antwort:

Explanation:

Box 1: No

Box 2: Yes

Box 3: Yes

Reference: https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/build-a-distributed-

environment-for-windows-10-deployment

HOTSPOT

You have the Microsoft Deployment Toolkit (MDT) installed in three sites as shown in the following table.

You use Distributed File System (DFS) Replication to replicate images in a share named Production.

You configure the following settings in the Bootstrap.ini file.

You plan to deploy Windows 10 to the computers shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Hot Area:

Lösung einblenden Lösung ausblenden

Richtige Antwort:

Explanation:

Box 1: No

Box 2: Yes

Box 3: Yes

Reference: https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/build-a-distributed-

environment-for-windows-10-deployment

HOTSPOT

You have a Microsoft 365 E5 subscription that contains three Windows devices named Device1, Device2, and Device3.

Each device contains two apps named App1 and App2.

You manage the devices by using Microsoft Intune.

The subscription contains the groups shown in the following table.

You have an Endpoint Privilege Management (EPM) elevation settings policy named Policy1 that has the following settings:

Endpoint Privilege Management: Enabled

Default elevation response: Require user confirmation

Validation: Windows authentication

Assignments: Group1, Group2

You create an Endpoint Privilege Management elevation rules policy named RulesPolicy1 that has the following settings:

Rule name: Rule1

Elevation type: Automatic

Child process behavior: Deny all

File name: App1.exe

Assignments: Group1

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Hot Area:

Lösung einblenden Lösung ausblenden

Richtige Antwort:

Explanation:

A user on Device1 must provide credentials to run App2 with elevated access.

Yes. Since App2 is not included in RulesPolicy1 (which is specific to App1.exe), the default elevation response will apply. This means the user will need to provide credentials (due to the validation setting being Windows authentication) to elevate App2.

A user on Device2 can run App1 with elevated access without providing credentials.

No. Device2 is in Group2, but RulesPolicy1, which allows automatic elevation for App1.exe, is assigned only to Group1. Therefore, users on Device2 must follow the default elevation response, which requires credentials.

A user on Device3 must provide credentials to run App1 with elevated credentials.

No. Device3 is part of Group1, which is assigned to RulesPolicy1. Since RulesPolicy1 allows automatic elevation for App1.exe, users on Device3 will not need to provide credentials when running App1.

You have a Microsoft 365 subscription that includes Microsoft Intune. The subscription contains Windows 11 devices enrolled in Intune. The subscription contains three groups named Departement1, Department2, and Department3.

You need to deploy Microsoft 365 Apps to the Windows 11 devices. The solution must meet the following requirements:

Users in Department1 and Department2 must receive the full Microsoft 365 Apps suite, including Microsoft Project and Visio.

Users in Department3 must receive the full Microsoft 365 Apps suite, including Microsoft Project, but without Visio.

All other users must receive the full Microsoft 365 Apps suite without Microsoft Project or Visio.

What is the minimum number of deployments you should create?

Lösung einblenden Lösung ausblenden

You plan to deploy Windows 11 Pro to 200 new computers by using the Microsoft Deployment Toolkit (MDT) and Windows Deployment Services (WDS).

The company has a Volume Licensing Agreement and uses a product key to activate Windows 11.

You need to ensure that the new computers will be configured to have the correct product key during the installation.

What should you configure?

Lösung einblenden Lösung ausblenden

You plan to deploy Windows 11 Pro to 200 new computers by using the Microsoft Deployment Toolkit (MDT) and Windows Deployment Services (WDS).

The company has a Volume Licensing Agreement and uses a product key to activate Windows 11.

You need to ensure that the new computers will be configured to have the correct product key during the installation.

What should you configure?

Lösung einblenden Lösung ausblenden

HOTSPOT

Your network contains an Active Directory domain. Active Directory is synced with a Microsoft Entra tenant.

There are 500 Active Directory domain-joined computers that run Windows 10 and are enrolled in Microsoft Intune.

You plan to implement Microsoft Defender Exploit Guard.

You need to create a custom Microsoft Defender Exploit Guard policy, and then distribute the policy to all the computers.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

Lösung einblenden Lösung ausblenden

Richtige Antwort:

Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/import-export-

exploit-protection-emet-xml#manage-or-deploy-a-configuration

https://docs.microsoft.com/en-us/intune/endpoint-protection-windows-10

https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-

protection

HOTSPOT

You have a Microsoft Deployment Toolkit (MDT) deployment share named Share1.

You add Windows 10 images to Share1 as shown in the following table.

Which images can be used in the Standard Client Task Sequence, and which images can be used in the Standard Client Upgrade Task Sequence?

NOTE: Each correct selection is worth one point.

Hot Area:

Lösung einblenden Lösung ausblenden

Richtige Antwort:

Explanation:

Box 1: Image1, Image2, Image3, Image4, and Image5.

All images.

Standard Client Task Sequence

Standard Client task sequence. The most frequently used task sequence. Used for creating reference images and for deploying clients in production.

Box 2: Image1, Image2, Image3, and Image4 only.

Exclude image5 with applications.

Standard Client Upgrade Task Sequence

Standard Client Upgrade task sequence. A simple task sequence template used to perform an in-place upgrade from Windows 7, Windows 8, or Windows 8.1 directly to Windows 10, automatically preserving existing data, settings, applications, and drivers.

Reference: https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-

deployment-toolkit

HOTSPOT

You have a Microsoft Deployment Toolkit (MDT) deployment share named Share1.

You add Windows 10 images to Share1 as shown in the following table.

Which images can be used in the Standard Client Task Sequence, and which images can be used in the Standard Client Upgrade Task Sequence?

NOTE: Each correct selection is worth one point.

Hot Area:

Lösung einblenden Lösung ausblenden

Richtige Antwort:

Explanation:

Box 1: Image1, Image2, Image3, Image4, and Image5.

All images.

Standard Client Task Sequence

Standard Client task sequence. The most frequently used task sequence. Used for creating reference images and for deploying clients in production.

Box 2: Image1, Image2, Image3, and Image4 only.

Exclude image5 with applications.

Standard Client Upgrade Task Sequence

Standard Client Upgrade task sequence. A simple task sequence template used to perform an in-place upgrade from Windows 7, Windows 8, or Windows 8.1 directly to Windows 10, automatically preserving existing data, settings, applications, and drivers.

Reference: https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-

deployment-toolkit

You have 100 computers that run Windows 10 and connect to an Azure Log Analytics workspace.

Which three types of data can you collect from the computers by using Log Analytics? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden