Exam MD-102 topic 1 question 271 discussion

Actual exam question from Microsoft's MD-102

Question #: 271
Topic #: 1

HOTSPOT
-

You have a Microsoft 365 E5 subscription that includes Microsoft Intune. The subscription contains a group named Group1. Group1 contains devices enrolled in Intune.

You deploy Remote Help in Intune.

You need to configure Remote Help to only allow support administrators to join Remote Help sessions from the devices in Group1.

Which type of Microsoft Entra object should you create, and which type of policy should you configure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by chafe at July 13, 2024, 8:11 p.m.

Comments

Submit Cancel

GeorgeMar

3 months, 3 weeks ago

The security principal defines the access policy and permissions for the user/application in the Microsoft Entra tenant. This enables core features such as authentication of the user/application during sign-in, and authorization during resource access. https://learn.microsoft.com/en-us/entra/identity-platform/app-objects-and-service-principals?tabs=browser

upvoted 1 times

...

sorinaccio

4 months, 3 weeks ago

My take: An enterprise application Conditional Access When you enable Remote Help in Intune, an Enterprise Application for Remote Help is automatically present in your tenant and if you you want to restrict or control access to Remote Help (e.g., only allow certain admins from certain devices), you configure a Conditional Access policy that targets the Remote Help enterprise application.

upvoted 2 times

cd2cfde

2 weeks, 1 day ago

Tested in my tenant. Your answer is correct. Once it’s enabled in Intune it’s automatically added to the enterprise application. Answers are: an enterprise application and conditional access

upvoted 1 times

...

Moot2

7 months, 3 weeks ago

Answers look correct https://learn.microsoft.com/en-us/mem/intune/fundamentals/remote-help-windows#create-the-service-principal

upvoted 2 times

...

AleFCI1908

8 months, 1 week ago

entra object: service principal Policy: conditional access https://learn.microsoft.com/en-us/mem/intune/fundamentals/remote-help-windows#setup-conditional-access-for-remote-help I had to study that to understand... Remote Help is not a standard app, so you can't find it in Conditional Access without creating a service principal. It's some kind of link to a non-standard app in your AzureAD. I hope I'm not mistaken.

upvoted 2 times

...

EUC_PRO

10 months, 1 week ago

Answer seems to be correct - https://learn.microsoft.com/en-us/mem/intune/fundamentals/remote-help-windows#create-the-service-principal

upvoted 1 times

...

chafe

1 year ago

https://learn.microsoft.com/en-us/entra/identity-platform/howto-create-service-principal-portal You need to register an app in order to setup a service principal but I believe the answer to be correct as the criteria won't be fulfilled until you enable role based access with the service principal. Conditional access seems correct too

upvoted 2 times

...