You manage Microsoft Intune for a company named Contoso. Intune client computers run Windows
10 Enterprise. You notice that there are 25 mandatory updates listed in the Intune administration
console. You need to prevent users from receiving prompts to restart Windows following the
installation of mandatory updates. Which policy template should you use?

Your network contains an Active Directory domain named contoso.com. Contoso.com is

synchronized to a Microsoft Azure Active Directory. You have a Microsoft Intune subscription. Your
company plans to implement a Bring Your Own Device (BYOD) policy. You will provide users with
access to corporate data from their personal iOS devices. You need to ensure that you can manage
the personal iOS devices. What should you do first?

You are an IT consultant for small and mid-sized business. One of your clients wants to start using
Virtual Smart Cards on its Windows 10 Enterprise laptops and tablets. Before implementing any
changes, the client wants to ensure that the laptops and tablets support Virtual Smart Cards. You
need to verify that the client laptops and tablets support Virtual Smart Cards. What should you do?

Employees are permitted to bring personally owned portable Windows 10 Enterprise computers to
the office. They are permitted to install corporate applications by using the management
infrastructure agent and access corporate email by using the Mail app. An employee’s personally

owned portable computer is stolen. You need to protect the corporate applications and email
messages on the computer. Which two actions should you perform? Each correct answer presents
part of the solution.

A company has an Active Directory Domain Services (AD DS) domain. All client computers run
Windows 10 Enterprise. Some computers have a Trusted Platform Module (TPM) chip. You need
to configure a single Group Policy object (GPO) that will allow Windows BitLocker Drive Encryption
on all client computers. Which two actions should you perform? Each correct answer presents part
of the solution.

You are the desktop administrator for a small company. Your workgroup environment consists of
Windows 10 Enterprise computers. You want to prevent 10 help desk computers from sleeping.
However, you want the screens to shut off after a certain period of time if the computers are not
being used. You need to configure and apply a standard power configuration scheme for the 10
help desk computers on your network. Which two actions should you perform? Each correct answer
presents part of the solution.

You deploy several tablet PCs that run Windows 10 Enterprise. You need to minimize power usage
when the user presses the sleep button. What should you do?

You have a Windows 10 Enterprise computer named Computer1 that has the Hyper-V feature
installed. Computer1 hosts a virtual machine named VM1. VM1 runs Windows 10 Enterprise. VM1
connects to a private virtual network switch. From Computer1, you need to remotely execute
Windows PowerShell cmdlets on VM1. What should you do?

Your Windows 10 Enterprise work computer is a member of an Active Directory domain. You use
your domain account to log on to the computer. You use your Microsoft account to log on to a home
laptop. You want to access Windows 10 Enterprise apps from your work computer by using your
Microsoft account. You need to ensure that you are able to access the Windows 10 Enterprise apps
on your work computer by logging on only once. What should you do?

Hotspot Question
You manage a Microsoft Azure RemoteApp deployment. The deployment consists of a cloud
collection named CloudCollection1 and a hybrid collection named HybridCollection1. Both
collections reside in a subscription named Subscription1. Subscription1 contains two Active
Directory instances named AzureAD1 and AzureAD2. AzureAD1 is the associated directory of
Subcsription1. AzureAD1 is synchronized to an on-premises Active Directory forest named
constoso.com. Passwords are synchronized between AzureAD1 and the on-premises Active
Directory. You have the following user accounts.

You need to identify to which collections each user can be assigned access. What should you
identify? To answer, select the appropriate options in the answer area.