Correct Answer: A

Litware identifies the following device management requirements:

Ensure that Microsoft Edge Favorites are accessible from all computers to which the developers sign in.

Enterprise State Roaming allows for the synchronization of Microsoft Edge browser setting, including favorites and reading list, across devices.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/devices/enterprise-state-roaming-windows-settings-reference

Correct Answer: B

Instead use Windows Defender Application Control (WDAC).

Windows Defender Application Control and virtualization-based protection of code integrity.

Using WDAC to restrict devices to only authorized apps has these advantages over other solutions:

1.

WDAC lets you set application control policy for code that runs in user mode, kernel mode hardware and software drivers, and even code that runs as part of Windows.

2.

WDAC policy is enforced by the Windows kernel itself, and the policy takes effect early in the boot sequence before nearly all other OS code and before traditional antivirus solutions run.

3.

Etc.

Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control

Correct Answer: C

iOS/iPadOS LOB apps: Select Line-of-business app as the app type, select the App package file, and then enter an iOS/iPadOS installation file with the extension .ipa. Reference:https://docs.microsoft.com/en-us/mem/intune/apps/lob-apps-ios

Correct Answer: B

Distribute content to the CM01 (for example) distribution portal.

In Configuration Manager, you can distribute all packages needed by a task sequence in a single task. In this section, you distribute packages that have not yet been distributed to the CM01 distribution point.

On CM01:

1.

Open the Deployment Workbench, right-click Deployment Shares and click New Deployment Share. Use the following settings for the New Deployment Share Wizard:

Deployment share path: D:\MDTProduction

Share name: MDTProduction$

Deployment share description: MDT Production

Options:

2.

Etc.

Reference: https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-cm/finalize-the-os-configuration-for-windows-10-deployment-with-configuration-manager

Correct Answer: D

Device experience Use these settings to configure a kiosk-style experience on your dedicated devices, or to customize the home screen experiences on your fully managed devices. You can configure devices to run one app, or run many apps. When a device is set with kiosk mode, only the apps you add are available. Device experience, Enrollment profile type: Select an enrollment profile type to start configuring Microsoft Launcher or the Microsoft Managed Home Screen on your devices. Your options:

*

Dedicated device, Kiosk mode, Single App

*

etc.

Reference: https://docs.microsoft.com/en-us/mem/intune/configuration/device-restrictions-android-for-work

Correct Answer: B

One for Android, and one for iOS.

Reference:

https://docs.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-overview

Correct Answer: A

Before accessing certain cloud apps in your environment, you might want to get consent from users in form of accepting your terms of use (ToU). Azure Active

Directory (Azure AD) Conditional Access provides you with:

A simple method to configure ToU

The option to require accepting your terms of use through a Conditional Access policy.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/require-tou

Correct Answer: D

Sysprep (System Preparation) prepares a Windows client or Windows Server installation for imaging. Sysprep can remove PC-specific information from a Windows installation (generalizing) so it can be installed on different PCs.

Reference: https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/sysprep--system-preparation--overview

Correct Answer:

Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/import-export-exploit-protection-emet-xml#manage-or-deploy-a-configuration https://docs.microsoft.com/en-us/intune/endpoint-protection-windows-10 https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection

Correct Answer:

Box 1: Download mode

Download mode specifies the download method that Delivery Optimization uses to download content.

Box 2: A configuration profile

Delivery Optimization settings are configured as part of the device configuration profile.

Reference:

https://docs.microsoft.com/en-us/mem/intune/configuration/delivery-optimization-settings

https://docs.microsoft.com/en-us/mem/intune/configuration/delivery-optimization-windows