You have a Microsoft 365 E5 subscription that contains 100 Windows 10 devices enrolled in Microsoft Intune.
You plan to use Endpoint analytics.
You need to create baseline metrics.
What should you do first?

• A.Create an Azure Monitor workbook.
• B.Onboard 10 devices to Endpoint analytics.
• C.Create a Log Analytics workspace.
• D.Modify the Baseline regression threshold.

Comment: *

Name: *

Email: *

Verification: *

Your company uses Microsoft System Center Configuration Manager (Current Branch) and purchases 365
subscription.
You need to set up Desktop Analytics for Configuration Manager.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Reference:
https://docs.microsoft.com/en-us/mem/configmgr/desktop-analytics/connect-configmgr

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 E5 subscription that uses Microsoft Intune.
You need to ensure that users can only enroll devices that meet the following requirements:
* Android devices that support the use of work profiles.
* iOS devices that run iOS 11.0 or later.
Which two restrictions should you modify? To answer, select the restrictions in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation
Box 1: Android device administrator, Platform: Block
Restrict devices running on the following platforms:
Android device administrator
Android Enterprise work profile
iOS/iPadOS
macOS
Windows
Note: If you allow both Android platforms for the same group, devices that support work profile will enroll
with a work profile. Devices that don't support it will enroll on the Android device administrator platform.
Neither work profile nor device administrator enrollment will work until you complete all prerequisites for
Android enrollment.
Box 2: iOS/PadOS, Allow min/max Range: Min
Reference: https://docs.microsoft.com/en-us/mem/intune/enrollment/enrollment-restrictions-set

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 E5 subscription that contains a user named User1 and the devices shown in the
following table.

User1 can access her Microsoft Exchange Online mailbox from both Device 1 and Device2.
You plan to create a Conditional Access policy named CAPolicy1 that will have the following settings:
* Assignments
* Users or workload identities: User1
* Cloud apps or actions: Office 365 Exchange Online
* Access controls
* Grant: Block access
You need to configure CAPolicy1 to allow mailbox access from Device 1 but block mailbox access from
Device2.
Solution: You add a condition that specifies device platforms.
Does this meet the goal?

• A.Yes
• B.No

Comment: *

Name: *

Email: *

Verification: *

Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
Your company has an Azure Active Directory (Azure AD) tenant named contoso.com and a Microsoft Intune
subscription.
Contoso.com contains a user named [email protected].
You have a computer named Computer1 that runs Windows 8.1.
You need to perform an in-place upgrade of Computer1 to Windows 10.
Solution: You assign a Windows 10 license to User1. You instruct User1 to sign in to Computer1.
Does this meet the goal?

• A.Yes
• B.No

Comment: *

Name: *

Email: *

Verification: *