4.1.10 Practice Questions - Device & User Management

You do not want any on-premises servers, and you want users to be able to sign in and access both internal and external resources. Which option would you select for user accounts? Local user accounts Domain accounts Online user accounts Azure AD accounts

Azure AD accounts (cloud based)

You have several personal mobile devices that you use on a daily basis. You want to be able to authenticate to each device with the same user account so you can share your personal data and apps regardless of which mobile device you use. Which type of user account must you create? Local user account Azure AD user account Online user account Domain user account

Online User account (auth each personal device)

You are configuring a small Workgroup. You open System Properties on each computer that will be in the Workgroup. Click the System Properties options you can use to configure each computer's workgroup association. (Select two. Each option is a complete solution.)

Change & Network ID

You are consulting a small startup company that needs to know which kind of Windows computer network model they should implement. The company will start small, with only twelve employees, but they plan to double or triple in size within 12 months. The company founders want to make sure they are prepared for growth. Which networking model should they implement? Public Standalone Workgroup Client-server Wired Wireless

Client-server (domain)

Your user account is User1. You want to sign in to the corpwest domain from a computer that you haven't used before. You are at the sign-in screen. Just below the username and password fields, you see that this computer will try to sign in to the corpsouth domain by default. Which of the following should you enter in the username field to change the domain the computer signs onto? User1\corpwest corpwest\User1 User1@corpwest corpwest@User1

corpwest\User1 (domain\user)

As the systems administrator for an international trading firm, your company uses Azure Active Directory (AD) to manage users and devices, enrolling these users and devices in Microsoft Intune as well. You want to create an Intune app protection policy for everyone with the Sales Representative title that meets the following company requirements: Personal devices don't need to be enrolled in Intune. Employees can user their personal iOS and Android devices to access company apps. Employees must use the Intune Company Portal to download and install company apps. Employees can only use Microsoft OneDrive for cloud storage of company data. Which of the following Azure Active Directory (AD) group types would you create to include all Sales Representatives in the app protection policy? Microsoft 365 group Global group Security group Distribution group

Security Group (can apply company security policies)

Which of the following Azure Active Directory (AD) group types lets you give people outside of your organization access to the group?

Microsoft 365 group

You're the systems administrator for an international trading company that uses Azure Active Directory (AD) and Microsoft Intune to manage their mobile devices. All company-owned mobile devices are registered in Azure AD and enrolled in Microsoft Intune. You've created the following dynamic user groups to manage access to company resources: Managers: jobTitle = "Manager" Consultants: jobTitle = "Customer Consultant" OfficeAdmin: jobTitle = "Office Administrator" SalesReps: jobTitle ="Sales Representative" You've also created a device compliance policy that: Sends an email notification to an employee (and you) to indicate that a device is non-compliant. Is assigned to All Groups, with the exception of users in the OfficeAdmin group. After deploying the device compliance policy, you notice that a Windows 10 device for a Sales Representative isn't listed as a compliant device. SOLUTION: You check with the Sales Representative and find out that she has just been hired for that position after working as an Office Administrator. You change the OfficeAdmin group from a dynamic group to a static group and make sure that the Sales Representative is included in the OfficeAdmin group. Drag Yes No Drop Does this action resolve the device compliance policy issue?

No - change her job title in user account

Get-Which of the following are networking models that can be used with the Windows operating system? (Select two.) Active Directory Workgroup Domain controller Client-server Organizational unit

Workgroup Client-Server

You're the systems administrator for an international trading company that uses Azure Active Directory (AD) and Microsoft Intune to manage their mobile devices. All company-owned mobile devices are registered in Azure AD and enrolled in Microsoft Intune. You've created the following dynamic user groups to manage access to company resources: Managers: jobTitle = "Manager" Consultants: jobTitle = "Customer Consultant" OfficeAdmin: jobTitle = "Office Administrator" SalesReps: jobTitle ="Sales Representative" You've also created a device compliance policy that: Sends an email notification to an employee (and you) to indicate that a device is non-compliant. Is assigned to All Groups, with the exception of users in the OfficeAdmin group. After deploying the device compliance policy, you notice that the Windows 10 device for a Sales Representative isn't listed as a compliant device. SOLUTION: You check with the Sales Representative and find out that she has just been hired for that position after working as an Office Administrator. You update the job title for her account to Sales Representative (from Office Administrator).

Yes - the user just needed updated job title