You have devices enrolled in Microsoft Intune as shown in the following table. 
For which devices can you manage updates by using Intune?
DRAG DROP - You have a Microsoft 365 subscription. The subscription contains computers that run Windows 11 and are enrolled in Microsoft Intune. You need to create a compliance policy that meets the following requirements: Requires BitLocker Drive Encryption (BitLocker) on each device Requires a minimum operating system version Which setting of the compliance policy should you configure for each requirement? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. 
HOTSPOT - You have a Microsoft 365 E5 subscription that uses Microsoft Intune. You have the Windows 11 devices shown in the following table. 
You deploy the device compliance policy shown in the exhibit. (Click the Exhibit tab.) 
For each of the following statements, select Yes if the statement is true. Otherwise, select No. 
DRAG DROP - You have a Microsoft Deployment Toolkit (MDT) deployment share named DS1. You import a Windows 11 image to DS1. You have an executable installer for an application named App1. You need to ensure that App1 will be installed for all the task sequences that deploy the image. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. 
HOTSPOT - You have a Microsoft 365 E5 subscription. You need to review and implement Microsoft 365 Defender device onboarding. The solution must meet the following requirements: View onboarded devices that have the Chromium-based version for Microsoft Edge installed. Download an onboarding package for a Windows 11 device. Minimize administrative effort. Which two settings should you use in the Microsoft 365 Defender portal? To answer, select the appropriate settings in the answer area. 
You have a Microsoft 365 subscription that uses Microsoft Intune Suite. You use Intune to manage all devise. Users have iOS devices with Microsoft apps installed. You need to prevent users from cutting, copying, and pasting data between Microsoft Excel and other apps installed on the devices. What should you configure?
Your company has an Azure AD tenant named contoso.com that contains several Windows 10 devices. When you join new Windows 10 devices to contoso.com, users are prompted to set up a four-digit pin. You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 10 devices to contoso.com. Solution: From the Microsoft Entra admin center, you modify the User settings and the Device settings. Does this meet the goal?
You have a Microsoft 365 E5 subscription that contains 100 iOS devices enrolled in Microsoft Intune. You need to deploy a custom line-of-business (LOB) app to the devices by using Intune. Which extension should you select for the app package file?
HOTSPOT - You have a Microsoft 365 E5 subscription that uses Microsoft Intune. The subscription contains the resources shown in the following table. 
User1 is the owner of Device1. You deploy Microsoft 365 Apps Windows 10 and later app types to Intune as shown in the following table. 
The next day you review the results of the app deployments. For each of the following statements, select Yes if the statement is true. Otherwise, select No. 
You have a Microsoft 365 E5 subscription. You purchase the following types of devices: • Windows • Android • iOS You plan to enroll the devices in Microsoft Intune. You need to configure enrollment restrictions. For which device types can you configure device manufacturer restrictions?
You have an on-premises server named Server1 that hosts a Microsoft Deployment Toolkit (MDT) deployment share named MDT1. You need to ensure that MDT1 supports multicast deployments. What should you install on Server1?
DRAG DROP - You have a Microsoft 365 subscription that includes Microsoft Intune. You need to implement a Microsoft Defender for Endpoint solution that meets the following requirements: Enforces compliance for Defender for Endpoint by using Conditional Access Prevents suspicious scripts from running on devices What should you configure? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. 
DRAG DROP - You have a computer that runs Windows 10 and contains two local users named User1 and User2. You need to ensure that the users can perform the following actions: User1 must be able to adjust the date and time. User2 must be able to clear Windows logs. The solution must use the principle of least privilege. To which group should you add each user? To answer, drag the appropriate groups to the correct users. Each group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. 
HOTSPOT - You have a Microsoft 365 subscription. You need to enable passwordless authentication for all users. The solution must meet the following requirements: Users in the research department cannot use mobile devices and must authenticate from unmanaged Linux devices by using an alternative method. To access services, users in the sales department must authenticate by using their mobile phone. Administrative effort must be minimized. Which authentication method should you use for each department? To answer, select the appropriate options in the answer area. 
SIMULATION - Username and password - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and select the username below. To enter your password, place your cursor in the Enter password box and select the password below. Microsoft 365 Username: [email protected] Microsoft 365 Password: i7A4$3o^HGD3L~=c[9xuOhM%^4:s11Ai If the Microsoft Edge browser or Microsoft 365 portal does not load successfully, select the Microsoft Edge browser icon from the task bar, type the URL “https://portal.office.com”, and press Enter. The following information is for technical support purposes only: Lab Instance: 48262079 - You need to join your computer to the Microsoft Entra tenant.
HOTSPOT - Case study - Overview - Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York. Contoso has the users and computers shown in the following table. 
The company has IT, human resources (HR), legal (LEG), marketing (MKG), and finance (FIN) departments. Contoso recently purchased a Microsoft 365 subscription. The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office will work from home. Existing Environment - The network contains an Active Directory domain named contoso.com that is synced to Azure AD. All member servers run Windows Server 2016. All laptops and desktop computers run Windows 10 Enterprise. The computers are managed by using Microsoft Configuration Manager. The mobile devices are managed by using Microsoft Intune. The naming convention for the computers is the department acronym, followed by a hyphen, and then four numbers, for example FIN-6785. All the computers are joined to the on-premises Active Directory domain. Each department has an organizational unit (OU) that contains a child OU named Computers. Each computer account is in the Computers OU of its respective department. Intune Configuration - The domain has the users shown in the following table. 
User2 is a device enrollment manager (DEM) in Intune. The devices enrolled in Intune are shown in the following table. 
The device compliance policies in Intune are configured as shown in the following table. 
The device compliance policies have the assignments shown in the following table. 
The device limit restrictions in Intune are configured as shown in the following table. 
Requirements - Planned changes - Contoso plans to implement the following changes: • Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro preinstalled and were purchased already. • Implement co-management for the computers. Technical Requirements - Contoso must meet the following technical requirements: • Ensure that the users in a group named Group4 can only access Microsoft Exchange Online from devices that are enrolled in Intune. • Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows Autopilot. • Create a provisioning package for new computers in the HR department. • Block iOS devices from sending diagnostic and usage telemetry data. • Use the principle of least privilege whenever possible. • Enable the users in the MKG department to use App1. • Pilot co-management for the IT department. To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area. 
This domain focuses on the day-to-day operational tasks for endpoint lifecycle management. It covers device configuration, software update servicing, endpoint monitoring, and implementing security controls using Microsoft Intune and related services.
This domain covers Windows client OS deployment and configuration. It emphasizes modern deployment methods like Windows Autopilot and traditional methods like Microsoft Deployment Toolkit (MDT). You will also manage device activation and subscriptions.
This domain covers managing device and user identities in Microsoft Entra ID. It focuses on implementing compliance policies and security baselines using Microsoft Intune. You will also configure core endpoint security features to protect organizational data.
This domain covers the lifecycle management of applications on endpoints. You will focus on deploying, updating, and securing applications using Microsoft Intune and Microsoft 365 services. Key areas include application deployment strategies, policy enforcement, and application control.
