You need to prepare for the deployment of the Phoenix office computers.
What should you do first?

• A.Extract the hardware ID information of each computer to a CSV file and upload the file from the
  Devices settings in Microsoft Store for Business.
• B.Generalize the computers and configure the Mobility (MDM and MAM) settings from the Azure Active
  Directory blade in the Azure portal.
• C.Generalize the computers and configure the Device settings from the Azure Active Directory blade in
  the Azure portal.
• D.Extract the hardware ID information of each computer to an XLSX file and upload the file from the
  Devices settings in Microsoft Store for Business.

Comment: *

Name: *

Email: *

Verification: *

You have 10 computers that run Windows 7 and have the following configurations:
* A single MBR disk
* A disabled TPM chip
* Disabled hardware virtualization
* UEFI firmware running in BIOS mode
* Enabled Data Execution Prevention (DEP)
You plan to upgrade the computers to Windows 10.
You need to ensure that the computers can use Secure Boot.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.Convert the MBR disk to a GPT disk
• B.Enable the TPM chip.
• C.Disable DEP
• D.Enable hardware virtualization
• E.Convert the firmware from BIOS to UEFI.

Comment: *

Name: *

Email: *

Verification: *

Your network contains an Active Directory domain. The domain contains 100 computers that run Windows
10.
You need to prevent users and apps from accessing dangerous websites.
What should you configure?

• A.Microsoft Defender Application Control
• B.Microsoft Defender Exploit Guard
• C.Microsoft Defender Application Guard
• D.Microsoft Defender Firewall

Comment: *

Name: *

Email: *

Verification: *

Your network contains an Active Directory domain named contoso.com. The domain contains 500 computers
that run Windows 7. Some of the computers are used by multiple users.
You plan to refresh the operating system of the computers to Windows 10.
You need to retain the personalization settings to applications before you refresh the computers. The solution
must minimize network bandwidth and network storage space.
Which command should you run on the computer? To answer, select the appropriate options in the answer
area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

References:
https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-scanstate-syntax#how-to-use-ui-and-ue

Comment: *

Name: *

Email: *

Verification: *

You need a new conditional access policy that has an assignment for Office 365 Exchange Online.
You need to configure the policy to meet the technical requirements for Group4.
Which two settings should you configure in the policy? To answer, select the appropriate settings in the
answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

The policy needs to be applied to Group4 so we need to configure Users and Groups.
The Access controls are set to Block access

We therefore need to exclude compliant devices.
From the scenario:
* Ensure that the users in a group named Group4 can only access Microsoft Exchange Online from
devices that are enrolled in Intune.
Note: When a device enrolls in Intune, the device information is updated in Azure AD to include the device
compliance status. This compliance status is used by conditional access policies to block or allow access to
e-mail and other organization resources.
References:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/conditions
https://docs.microsoft.com/en-us/intune/device-compliance-get-started

Comment: *

Name: *

Email: *

Verification: *