You have a Microsoft 365 E5 subscription that contains a user named User1.
You need to perform the following tasks for User1:
* Set the Usage location to Canada.
* Configure the Phone and Email authentication contact info for self-service password reset (SSPR).
Which two settings should you configure in the Azure Active Directory admin center? To answer, select the
appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation
Graphical user interface, application Description automatically generated

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 E5 subscription.
You create an app protection policy for Android devices named Policy1 as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation
Box 1: Install the Intune Company Portal app on the device
On Android, Android devices will prompt to install the Intune Company Portal app regardless of which Device
type is chosen.
Bix 2: Devices only
For Android devices, unmanaged devices are devices where Intune MDM management has not been detected.
This includes devices managed by third-party MDM vendors.
Reference:
https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policies#app-protection-policies-for-iosipados

Comment: *

Name: *

Email: *

Verification: *

You have an Azure Active Directory (Azure AD) tenant that syncs to an on-premises Active Directory
domain.
The tenant contains computers that run Windows 10. The computers are hybrid Azure AD joined and enrolled
in Microsoft Intune. The Microsoft Office settings on the computers are configured by using a Group Policy
Object (GPO).
You need to migrate the GPO to Intune.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of
actions to the answer area and arrange them in the correct order.

Correct Answer:

Explanation

Reference:
https://docs.microsoft.com/en-us/mem/intune/configuration/administrative-templates-windows

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 subscription.
You need to configure access to Microsoft Office 365 for unmanaged devices. The solution must meet the
following requirements:
* Allow only the Microsoft Intune Managed Browser to access Office 365 web interfaces.
* Ensure that when users use the Intune Managed Browser to access Office 365 web interfaces, they can
only copy data to applications that are managed by the company.
Which two settings should you configure from the Microsoft Intune blade? To answer, select the appropriate
settings in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

References:
https://docs.microsoft.com/en-us/intune/app-configuration-managed-browser#application-protection-policies-for

Comment: *

Name: *

Email: *

Verification: *

Your network contains an Active Directory domain. The domain contains the computers shown in the
following table.

Microsoft Defender Application Guard is installed on the computers.
Application Guard Group Policy settings are applied to the computers as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation
Text Description automatically generated

Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-application-guard/confi

Comment: *

Name: *

Email: *

Verification: *