- (Exam Topic 4)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to ensure that feature and quality updates install automatically during a maintenance window. Solution: From the Windows Update settings, you enable Configure Automatic Updates, select 3 – Auto download and notify for Install, and then enter a time.
Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: B

References:
https://docs.microsoft.com/en-us/sccm/sum/deploy-use/automatically-deploy-software-updates

- (Exam Topic 4)
You have a Microsoft 365 tenant that uses Microsoft Intune and contains the devices shown in the following table.

In Endpoint security, you need to configure a disk encryption policy for each device.
Which encryption type should you use for each device, and which role-based access control (RBAQ role in Intune should you use to manage the encryption keys? To answer, select the appropriate options m the answer area.
NOTE: Each correct selection is worth one point.

Solution:
Graphical user interface, text, application Description automatically generated

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company uses Windows AutoPilot to configure the computer settings of computers issued to users. A user named User1 has a computer named Computer1 that runs Windows 10. User1 leaves the company. You plan to transfer the computer to a user named User2.
You need to ensure that when User2 first starts the computer, User2 is prompted to select the language setting and to agree to the license agreement.
Solution: You perform a remote Windows AutoPilot Reset. Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: B
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot-reset-remote

- (Exam Topic 4)
Your company has a Microsoft 365 subscription.
A new user named Admin1 is responsible for deploying Windows 10 to computers and joining the computers to Microsoft Azure Active Directory (Azure AD).
Admin1 successfully joins computers to Azure AD.
Several days later, Admin1 receives the following error message: “This user is not authorized to enroll. You can try to do this again or contact your system administrator with the error code (0x801c0003).”
You need to ensure that Admin1 can join computers to Azure AD and follow the principle of least privilege.

1. A. Assign the Global administrator role to Admin1.
2. B. Modify the Device settings in Azure AD.
3. C. Assign the Cloud device administrator role to Admin1.
4. D. Modify the User settings in Azure AD.

Correct Answer: B
References:
https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal

- (Exam Topic 4)
Your network contains an Active Directory domain. The domain contains 100 computers that run Windows 10.
You need to prevent users and apps from accessing dangerous websites. What should you configure?

1. A. Microsoft Defender Application Control
2. B. Microsoft Defender Exploit Guard
3. C. Microsoft Defender Application Guard
4. D. Microsoft Defender Firewall

Correct Answer: B

Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/enable-network-protection?
view=o365-worldwide