Your company has a Microsoft 365 subscription.
A new user named Admin1 is responsible for deploying Windows 10 to computers and joining the computers to Microsoft Azure Active Directory (Azure AD).
Admin1 successfully joins computers to Azure AD.
Several days later, Admin1 receives the following error message: "This user is not authorized to enroll. You can try to do this again or contact your system administrator with the error code (0x801c0003)." You need to ensure that Admin1 can join computers to Azure AD and follow the principle of least privilege.

• A.Assign the Global administrator role to Admin1.
• B.Modify the Device settings in Azure AD.
• C.Modify the User settings in Azure AD.
  References:
  https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal
• D.Assign the Cloud device administrator role to Admin1.

Comment: *

Name: *

Email: *

Verification: *

You have an Azure Active Directory (Azure AD) tenant named adatum.com that contains the users shown in the following table.

You configure the following device settings for the tenant:
Users may join devices to Azure AD: User1
Additional local administrators on Azure AD joined devices: None
You install Windows 10 on a computer named Computer1.
You need to identify which users can join Computer1 to adatum.com, and which users will be added to the Administrators group after joining adatum.com.
Which users should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin

Comment: *

Name: *

Email: *

Verification: *

Your company has computers that run Windows 8.1, Windows 10, or macOS.
The company uses Microsoft Intune to manage the computers.
You need to create an Intune profile to configure Windows Hello for Business on the computers that support it.
Which platform type and profile type should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Reference:
https://docs.microsoft.com/en-us/intune/endpoint-protection-configure

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 subscription.
All computers are enrolled in Microsoft Intune.
You have business requirements for securing your Windows 10 environment as shown in the following table.

What should you implement to meet each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Reference:
https://github.com/MicrosoftDocs/IntuneDocs/blob/master/intune/advanced-threat-protection.md

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 subscription.
You have 10 computers that run Windows 10 and are enrolled in mobile device management (MDM) You need to deploy the Microsoft Office 365 ProPlus suite to all the computers. What should you do?

• A.From Microsoft Azure Active Directory (Azure AD), add an app registration.
• B.From the Device Management admin center, add an app.
• C.From the Device Management admin center, create a Windows 10 device profile.
• D.From Microsoft Azure Active Directory (Azure AD), add an enterprise application

Comment: *

Name: *

Email: *

Verification: *