Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure
AD).
You have a Microsoft Office 365 subscription. All computers are joined to the domain and have the latest
Microsoft OneDrive sync client (OneDrive.exe) installed.
On all the computers, you configure the OneDrive settings as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Box 1:
Silently move known folders to OneDrive is enabled. Known folder include:
Desktop, Documents, Pictures, Screenshots, and Camera Roll
Box 2:
OneDrive Files On-Demand enables users to view, search for, and interact with files stored in OneDrive from
within File Explorer without downloading them and taking up space on the local hard drive.
References:
https://docs.microsoft.com/en-us/onedrive/redirect-known-folders
https://docs.microsoft.com/en-us/onedrive/plan-onedrive-enterprise

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 E5 subscription.
You need to create a Conditional Access policy to ensure that when a user accesses the Microsoft 365 portal,
the user will be prompted to sign in again after seven days.
What should you configure to specify the sign-in frequency?

• A.Session access controls
• B.an assignment that uses the Cloud apps or actions settings
• C.Grant access controls
• D.an assignment condition

Comment: *

Name: *

Email: *

Verification: *

You have a server named Server1 and computers that run Windows 8.1. Server1 has the Microsoft
Deployment Toolkit (MDT) installed.
You plan to upgrade the Windows 8.1 computers to Windows 10 by using the MDT deployment wizard.
You need to create a deployment share on Server1.
What should you do on Server1, and what are the minimum components you should add to the MDT
deployment share? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation
Box 1: Install the Windows Deployment Services role.
Install and initialize Windows Deployment Services (WDS)
On the server:
Open an elevated Windows PowerShell prompt and enter the following command:
Install-WindowsFeature -Name WDS -IncludeManagementTools
WDSUTIL /Verbose /Progress /Initialize-Server /Server:MDT01 /RemInst:"D:\RemoteInstall"
WDSUTIL /Set-Server /AnswerClients:All
Box 2: Windows 10 image and task sequence only
Create the reference image task sequence
In order to build and capture your Windows 10 reference image for deployment using MDT, you will create a
task sequence.
Reference:
https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-w
https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-ima

Comment: *

Name: *

Email: *

Verification: *

You use Windows Admin Center to remotely administer computers that run Windows 10.
When connecting to Windows Admin Center, you receive the message shown in the following exhibit.

You need to prevent the message from appearing when you connect to Windows Admin Center.
To which certificate store should you import the certificate?

• A.Personal
• B.Trusted Root Certification Authorities
• C.Client Authentication Issuers

Comment: *

Name: *

Email: *

Verification: *

You have the on-premises servers shown in the following table.

You have a Microsoft 365 E5 subscription that contains Android and iOS devices. All the devices are
managed by using Microsoft Intune.
You need to implement Microsoft Tunnel for Intune. The solution must minimize the number of open firewall
ports.
To which server can you deploy a Tunnel Gateway server, and which inbound ports should be allowed on the
server to support Microsoft Tunnel connections? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation
Box 1: Server4
Microsoft Tunnel is a VPN gateway solution for Microsoft Intune that runs in a container on Linux and allows
access to on-premises resources from iOS/iPadOS and Android Enterprise devices using modern
authentication and Conditional Access.
Box 2: TCP 443 and UDP 443 only
Some traffic goes to your public facing IP address for the Tunnel. The VPN channel will use TCP, TLS, UDP,
and DTLS over port 443.
By default, port 443 is used for both TCP and UDP, but this can be customized via the Intune Saerver
Configuration - Server port setting. If changing the default port (443) ensure your inbound firewall rules are
adjusted to the custom port.
Incorrect:
TCP 1723 is not used.
Reference: https://docs.microsoft.com/en-us/mem/intune/protect/microsoft-tunnel-overview

Comment: *

Name: *

Email: *

Verification: *