Your company has a Microsoft Azure Active Directory (Azure AD) tenant.
The company has a Volume Licensing Agreement and uses a product key to activate Windows 10.
You plan to deploy Windows 10 Pro to 200 new computers by using the Microsoft Deployment Toolkit (MDT) and Windows Deployment Services (WDS).
You need to ensure that the new computers will be configured to have the correct product key during the installation.
What should you configure?

• A.the Device settings in Azure AD
• B.a Windows AutoPilot deployment profile
  References:
  https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-imageusing-mdt#a-href-idsec08astep-8-deploy-the-windows-10-client-image
• C.a WDS boot image
• D.an MDT task sequence

Comment: *

Name: *

Email: *

Verification: *

Your company has a Microsoft 365 subscription.
A new user named Admin1 is responsible for deploying Windows 10 to computers and joining the computers to Microsoft Azure Active Directory (Azure AD).
Admin1 successfully joins computers to Azure AD.
Several days later, Admin1 receives the following error message: "This user is not authorized to enroll. You can try to do this again or contact your system administrator with the error code (0x801c0003)." You need to ensure that Admin1 can join computers to Azure AD and follow the principle of least privilege.

• A.Modify the User settings in Azure AD.
  References:
  https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal
• B.Modify the Device settings in Azure AD.
• C.Assign the Cloud device administrator role to Admin1.
• D.Assign the Global administrator role to Admin1.

Comment: *

Name: *

Email: *

Verification: *

You have 10 computers that run Windows 7 and have the following configurations:
* A single MBR disk
* A disabled TPM chip
* Disabled hardware virtualization
* UEFI firmware running in BIOS mode
* Enabled Data Execution Prevention (DEP)
You plan to upgrade the computers to Windows 10.
You need to ensure that the computers can use Secure Boot.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.Convert the MBR disk to a GPT disk
• B.Enable the TPM chip.
• C.Disable DEP
• D.Enable hardware virtualization
• E.Convert the firmware from BIOS to UEFI.

Comment: *

Name: *

Email: *

Verification: *

To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Reference:
https://docs.microsoft.com/en-us/intune/device-profile-assign

Comment: *

Name: *

Email: *

Verification: *

You use the Antimalware Assessment solution in Microsoft Azure Log Analytics.
From the Protection Status dashboard, you discover the computers shown in the following table.

You verify that both computers are connected to the network and running.
What is a possible cause of the issue on each computer? To answer, drag the appropriate causes to the correct computers. Each cause may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Correct Answer:

Reference:
https://docs.microsoft.com/ga-ie/azure/security-center/security-center-install-endpoint-protection

Comment: *

Name: *

Email: *

Verification: *