ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MD-102 All Questions

View all questions & answers for the MD-102 exam
Go to Exam

Exam MD-102 topic 1 question 24 discussion

Actual exam question from Microsoft's MD-102
Question #: 24
Topic #: 1
[All MD-102 Questions]

Your network contains an on-premises Active Directory domain and an Azure AD tenant.
The Default Domain Policy Group Policy Object (GPO) contains the settings shown in the following table.

You need to migrate the existing Default Domain Policy GPO settings to a device configuration profile.
Which device configuration profile type template should you use?

  • A. Administrative Templates
  • B. Endpoint protection
  • C. Device restrictions
  • D. Custom
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by Gr8Greet at Aug. 11, 2023, 5:47 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
volto
Highly Voted 1 year, 9 months ago
Selected Answer: C
Answer C is correct https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-windows-10#password
upvoted 28 times
RomanV
8 months ago
You are so wrong. Read between the lines please or don't respond here... Answer is A! The question states: "You need to MIGRATE the existing Default Domain Policy GPO settings to a device configuration profile." So according to Microsoft and myself, as an Intune administrator, after you Import and analyze your on-premises GPOs using Group Policy analytics in Microsoft Intune, you CREATE the template. Which profile type? Administrative Templates!
upvoted 4 times
bigdaddyzaddy
1 month, 3 weeks ago
Actually you’re wrong. Administrative template has been retired. The answer is c. Funny thing is you spoke so confidently as if you’re the sole authority on this. 😂😂
upvoted 2 times
...
...
krzysztofbr
1 year, 8 months ago
You are correct! so many wrong answers again! inside device restrictions, You have password settings. your link shows everything regarding password
upvoted 5 times
LionelDerBoven
8 months, 1 week ago
The correct answer is A. Administrative Templates. Explanation: To migrate the existing Default Domain Policy GPO settings (like password policies, lockout settings, etc.) to Intune as a device configuration profile, Administrative Templates is the correct template type to use. Administrative Templates in Intune mirror many Group Policy Object (GPO) settings, making it the right choice for applying these specific configurations (like password length, complexity, and history). The settings shown in the image (such as MaximumPasswordAge, PasswordComplexity, etc.) are commonly found in Group Policies, which can be replicated in Intune via Administrative Templates. Other options such as Device Restrictions, Endpoint Protection, or Custom profiles do not cover the breadth of traditional GPO settings like password policies as well as Administrative Templates do. Thus, Administrative Templates is the correct profile type for this scenario.
upvoted 2 times
...
vijay0715
1 year, 3 months ago
Password setting usually reflect on accounts know?
upvoted 1 times
...
...
...
iTomi
Highly Voted 1 year, 5 months ago
Selected Answer: A
In this question you are MIGRATING the EXISTING GPO settings from AD to Intune, not creating new one. Steps are: Import and analyze your on-premises GPOs using Group Policy analytics in Microsoft Intune https://learn.microsoft.com/en-us/mem/intune/configuration/group-policy-analytics Create a Settings Catalog policy using your imported GPOs in Microsoft Intune (public preview) https://learn.microsoft.com/en-us/mem/intune/configuration/group-policy-analytics-migrate Use Windows 10/11 templates to configure group policy settings in Microsoft Intune https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-windows
upvoted 12 times
...
AnindaR
Most Recent 2 months, 3 weeks ago
Selected Answer: D
It should be custome as you get all mentioned options under settings catalog by choosing device lock optioins.
upvoted 1 times
...
RJTW070
3 months, 1 week ago
Selected Answer: A
Since the Default Domain Policy GPO typically contains Group Policy settings related to security, user experience, and system configurations, the best way to migrate these settings to Microsoft Intune is by using the Administrative Templates profile type. Why Use Administrative Templates? Administrative Templates in Intune mimic Group Policy Objects (GPOs) in Active Directory. They allow you to apply the same settings as traditional GPOs without requiring on-premises Active Directory. Many common GPO settings are already available in Intune Administrative Templates, making migration easier.
upvoted 2 times
...
hieunm2411
3 months, 4 weeks ago
Selected Answer: C
Starting with the December 2412 release, you can't create new Administrative Templates policies from the Templates > Administrative Templates profile type in the Intune admin center. https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-windows?tabs=template
upvoted 2 times
...
wakka9876
4 months ago
Selected Answer: C
Answer is C - Device Restrictions Administrative templates has been deprecated by Microsoft and now shows as retired when you create a configuration profile
upvoted 2 times
...
Grimmgore
4 months, 2 weeks ago
Selected Answer: A
https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-import-custom#create-a-profile-using-your-imported-files
upvoted 1 times
...
vfnj
4 months, 3 weeks ago
Selected Answer: A
https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-windows?tabs=template
upvoted 1 times
...
Moot2
5 months, 2 weeks ago
Selected Answer: A
A use admin templates
upvoted 1 times
...
yaktownboii
5 months, 3 weeks ago
Selected Answer: A
Answer A is correct. https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-windows?tabs=template
upvoted 1 times
...
AleFCI1908
6 months, 2 weeks ago
Selected Answer: A
it's a migration, vote for A
upvoted 2 times
...
d3a3d8a
6 months, 2 weeks ago
Password policy settings are not in the Administrative Templates part of Group Policies. they are in the Computer>Windows Settings. only Administrative Templates (which are represented as xml text files) can be "migrated" from GPOs. The correct answer is C. The word "migrate" in the question is there to fool you.
upvoted 1 times
59c6be3_111
5 months, 2 weeks ago
Exactly. Therefor the answer remains C.
upvoted 1 times
...
...
AleFCI1908
6 months, 2 weeks ago
Selected Answer: A
migrate, so A
upvoted 1 times
...
Nav90
6 months, 4 weeks ago
Selected Answer: A
We are migrating GPO here not creating new policy to have same settings.
upvoted 1 times
...
SSL2
7 months ago
Selected Answer: A
The correct answer is **A. Administrative Templates**. Here's why: * **Administrative Templates** device configuration profile type template is used to configure settings related to user and computer policies, similar to Group Policy Objects (GPOs). * The settings in the Default Domain Policy GPO are related to user and computer policies (password complexity, lockout policy, etc.), which aligns with the Administrative Templates template. * **Endpoint protection** is used for configuring antivirus and firewall settings. * **Device restrictions** is used for configuring device-level restrictions, such as blocking specific apps or websites. * **Custom** is used for creating custom profiles with specific settings not covered by other templates. Therefore, the Administrative Templates template is the most appropriate choice for migrating the Default Domain Policy GPO settings to a device configuration profile.
upvoted 1 times
...
King_shola
8 months, 1 week ago
Selected Answer: C
C - Over complicating it using A
upvoted 1 times
...
King_shola
8 months, 1 week ago
C - Over complicating it using A
upvoted 1 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago