10.2.10 practice questions
SecurityFirst is a security services company that sells and installs home security solutions. The company headquarters is in Seattle, Washington, with branch offices in Los Angeles and Atlanta. The company hires both full-time employees and part-time seasonal sales representatives, who work several months and then return home to continue schooling or other jobs. The company includes several departments, including: Information Technology (IT) Human Resources (HR) Sales (SLS) Marketing (MKTG) As the IT system engineer for the company, you work out of the company headquarters in Seattle, but you're responsible for maintaining the company's mobile devices for both company headquarters and the branch offices. The company is doing well and is planning on opening a new branch office in Salt Lake City, where most of the employees will work from home. Your current networking environment includes the following: You manage all of your mobile devices by using Microsoft Intune and Microsoft Endpoint Configuration Manager. You use the Active Directory domain named secfirst.com, which is synced to Microsoft Azure Active Directory (Azure AD). Each department has an organizational unit (OU) that includes a child OU called Mobile with accounts for mobile devices. The secfirst.com domain is configured for co-management. You use a Windows 10 workstation or laptop to manage your mobile devices. While all laptops and desktop computers run Windows 10, mobile devices run on a variety of platforms and hardware. The secfirst.com domain includes the following users: Admin1 - Policy and Profile Manager - GroupA Admin2 - Intune Service Administrator - GroupB The executive manager of Sales currently has 4 mobile devices, which are assigned to the following Intune groups: Device1 (Android) - Group2 Device2 (iOS) - Group1 Device3 (Android) - Group3 Device 4 (iOS) - Group2, Group3 You've created the following device restriction (compliance) policies in Microsoft Intune to block or include specific groups of mobile devices from enrolling: Policy1 (Android) - Include Group3; Exclude Group2 Policy2 (Android) - Include Group2; Exclude Group1 Policy3 (iOS) - Include Group3; Exclude Group2 In addition, you've configured the following device limit restrictions in Microsoft Intune: DeviceLimit1 - 25 devices - GroupB DeviceLimit2 - 15 devices - GroupA All users - 5 (default) - All users What is the maximum number of devices that Admin1 and Admin2 can enroll in Intune? Drag an answer from the list on the left and drop it under the heading on the right.
Admin1 (maximum number of enrolled devices) 15 devices Admin2 (maximum number of enrolled devices) 25 devices
You're a system engineer for a financial advisory group. You're currently writing an IT business proposal for the purchase of a mobile device management (MDM) solution for your company. The company has recently completed a new company headquarters building with the latest IoT (Internet of Things) technology, including A smart security system Biometric cybersecurity scanners Ultra-high speed wireless internet An HVAC system with smart thermostats No other company offices employ smart technology, and there are no plans to implement it. Company employees in all offices use a variety of company-owned mobile devices, including cell phones, tablets, and laptops. They're used for both personal and business purposes. All mobile devices are purchased by the company and are standardized on the same hardware and Android operating system. For all mobile devices, you want to be able to: Track the device, push apps, manage security, and remotely wipe the device. Push security policies to the device that can provide limitations, such as disabling copy and paste functions. Uninstall both company and licensed apps in case the device is lost or stolen. Manage personal mobile devices that employees may use for business purposes in the future. Manage a wide variety of mobile devices with different hardware and systems. You also want to be able to manage the following in the new corporate headquarters building: Internet of Things (IoT) devices Printers Desktop computers You currently have an Azure license and Microsoft Intune available to you. You decide to include several options in the business proposal, including an option to provide one type of mobile device management solution for company headquarters and another for all other offices. Which of the following mobile device management solutions would you propose for company headquarters? Which would you propose for all other company offices? Drag your answers from the left to the Company Headquarters Proposal heading or to the All Other Offices Proposal heading.
Company Headquarters Proposal Unified endpoint management (UEM) All Other Offices Proposal Enterprise mobility management (EMM)
SecurityFirst is a security services company that sells and installs home security solutions. The company headquarters is in Seattle, Washington, with branch offices in Los Angeles and Atlanta. The company hires both full-time employees and part-time seasonal sales representatives, who work several months and then return home to continue schooling or other jobs. As the IT systems engineer for the company, you work out of the company headquarters in Seattle, but you're responsible for maintaining the company's mobile devices for both company headquarters and the branch offices. Your current networking environment includes the following: You manage all of your mobile devices by using Microsoft Intune and Microsoft Endpoint Configuration Manager. You use the Active Directory domain named secfirst.com, which is synced to Microsoft Azure Active Directory (Azure AD). The secfirst.com domain is configured for co-management. You've purchased 50 new mobile devices at company headquarters that run Windows 10. These devices are already registered in Endpoint Configuration Management, and you want to enroll them in Intune automatically without any user interaction. Which of the following methods would BEST meet your enrollment requirements? Endpoint Configuration Manager co-management Add a work or school account Azure AD Join during OOBE (out-of-box experience) Enroll in MDM only
Endpoint Configuration Manager co-management
You have an executive user who keeps sensitive information about the company on a company-owned tablet device. All tablet devices in the company are the same, including the hardware and system. The company doesn't currently use Azure. The executive user is known to often lose or misplace his company mobile devices. You want to be prepared to keep company information secure if he loses this device or if it gets stolen. Given this scenario, which of the following solutions would be the BEST mobile management solution to help you secure the data on the tablet device? Enterprise mobility management (EMM) Microsoft Intune Mobile application management (MAM) Mobile device management (MDM)
Mobile device management (MDM)
As a system administrator for an international trading company, Andre currently uses Azure AD and Microsoft Intune to manage all of the company-owned mobile devices. The company has recently acquired another trading company, and he needs to include those employees as users in Microsoft Intune. He decides to use the Bulk Create feature in Intune to import a CSV file that will automatically create the user accounts for him. He's downloaded the sample CSV template from Azure, and he's ready to add the new employees to the file using an Excel worksheet. He decides to create a pilot CSV file with only 10 employees to make sure the Bulk feature is working properly. After importing the file, he notices that 3 employees haven't been added. Review the graphic of Andre's Excel worksheet below. Which 3 users weren't created as user accounts in Intune?
Pamela Gustaf, Allen Harim, and Andre Helman
SecurityFirst is a security services company that sells and installs home security solutions. The company headquarters is in Seattle, Washington, with branch offices in Los Angeles and Atlanta. The company hires both full-time employees and part-time seasonal sales representatives, who work several months and then return home to continue schooling or other jobs. The company includes several departments, including: Information Technology (IT) Human Resources (HR) Sales (SLS) Marketing (MKTG) As the IT systems engineer for the company, you work out of the company headquarters in Seattle, but you're responsible for maintaining the company's mobile devices for both company headquarters and the branch offices. The company is doing well and is planning on opening a new branch office in Salt Lake City, where most of the employees will work from home. Your current networking environment includes the following: You manage all your mobile devices by using Microsoft Intune and Microsoft Endpoint Configuration Manager. You use the Active Directory domain named secfirst.com, which is synced to Microsoft Azure Active Directory (Azure AD). Each department has an organizational unit (OU) that includes a child OU called Mobile with accounts for mobile devices. The secfirst.com domain is configured for co-management. You use a Windows 10 workstation or laptop to manage your mobile devices. While all laptops and desktop computers run Windows 10, mobile devices run on a variety of platforms and hardware. The executive manager of Sales currently has 4 mobile devices, which are assigned to the following Intune groups: Device1 (Android) - Group2 Device2 (iOS) - Group1 Device3 (Android) - Group3 Device 4 (iOS) - Group2, Group3 You've created the following device restriction (compliance) policies in Microsoft Intune to block or include specific groups of mobile devices from enrolling: Policy1 (Android) - Include Group3; Exclude Group2 Policy2 (Android) - Include Group2; Exclude Group1 Policy3 (iOS) - Include Group3; Exclude Group2 Which of the following devices are impacted by Policy1 and Policy3? Drag an answer from the list on the left and drop it under the Policy1 or Policy3 heading.
Policy1 Device3 only Policy3 Device4 only
Jared is a system engineer for a financial advisory group. The company has recently completed a new company headquarters building with the latest IoT (Internet of Things) technology, including: A smart security system Biometric cybersecurity scanners Ultra-high speed wireless internet An HVAC system with smart thermostats For all mobile devices at company headquarters, Jared wants to be able to: Track the device, push apps and updates, manage security, and remotely wipe the device. Push security policies that provide limitations, such as disabling copy and paste functions. Manage personal mobile devices that employees may use for business purposes in the future. Manage a wide variety of mobile devices with different hardware and systems. He also wants to be able to manage the following in the new corporate headquarters building: Internet of Things (IoT) devices Printers Desktop computers He's looking for a mobile device management solution, and currently has an Azure license and Microsoft Intune available to him. SOLUTION: Jared decides to use Microsoft Intune (an enterprise mobile management solution) to manage the devices at company headquarters. He already has an Azure license and access to Intune, which will save the company from having to purchase another solution.
no
SecurityFirst is a security services company that sells and installs home security solutions. The company headquarters is in Seattle, Washington, with branch offices in Los Angeles and Atlanta. The company hires both full-time employees and part-time seasonal sales representatives, who work several months and then return home to continue schooling or other jobs. As the IT systems engineer for the company, you work out of the company headquarters in Seattle, but you're responsible for maintaining the company's computer and mobile devices for both company headquarters and the branch offices. You've been using Azure AD to register and manage devices, but you now want to enroll the devices in Microsoft Intune. You want to start by enrolling a select group of pilot devices that include the following: Corporate Windows 10 laptops (15) Personal (BYOD) Android tablets (10) Corporate iPhones (10) Personal iPads (5) Your enrollment requirements include the need for employees to keep personal and work data separate on their personal Android tablets. You decide to create a Device type restriction for Microsoft Intune that allows for only the pilot devices to be enrolled, limiting the personally owned devices to those in the pilot group. The following are the Platform settings in your Device type restriction: Drag Yes No Drop Do the Platform settings in the following Create restriction page meet these requirements?
no
As a system administrator for an international trading company, you currently use Azure AD to manage your company's computer devices. These include a variety of mobile device platforms and hardware, including the following: Android tablets (1,000) Windows 10 laptops (1,500) iPadOS tablets (500) You've recently received a license for Microsoft Intune and would like to begin using Intune to manage all of your mobile devices. Your IT system engineer has already installed Intune, and it's now accessible from the Azure AD admin center as a service. The first task you want to accomplish is to enroll all your Android tables into Intune. These tablets are already registered as devices in Azure AD and are company owned. The enrollment process needs to meet the following requirements: You need to have complete management control over the tablets. You want to be able to deploy policies to the tablets. You want this initial enrollment to apply only to your Android tablets (not to any other mobile devices). SOLUTION: You decide to use the Android Enterprise fully managed enrollment option. In addition, you create a device type restriction for the enrollment that blocks everything except the Android Enterprise (work profile) type and enrollment for personal devices.
yes
Jared is a system engineer for a financial advisory group. The company has recently completed a new company headquarters building with the latest IoT (Internet of Things) technology, including: A smart security system Biometric cybersecurity scanners Ultra-high speed wireless internet An HVAC system with smart thermostats For all mobile devices at company headquarters, Jared wants to be able to: Track the device, push apps and updates, manage security, and remotely wipe the device. Push security policies that provide limitations, such as disabling copy and paste functions. Uninstall both company and licensed apps and the data related to them in case the device is lost or stolen. Manage personal mobile devices that employees may use for business purposes in the future. Manage a wide variety of mobile devices with different hardware and systems. He also wants to be able to manage the following in the new corporate headquarters building: Internet of Things (IoT) devices Printers Desktop computers He's looking for a mobile device management solution, and currently has an Azure license and Microsoft Intune available to him. SOLUTION: Jared decides to purchase and implement a unified endpoint management (UEM) solution.
yes
