Exam MD-101 All Questions

View all questions & answers for the MD-101 exam

Exam MD-101 topic 2 question 34 discussion

Actual exam question from Microsoft's MD-101

Question #: 34
Topic #: 2

HOTSPOT -
You have a hybrid Microsoft Azure Active Directory (Azure AD) tenant.
You configure a Windows Autopilot deployment profile as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Box 1: import a CSV file into Windows Autopilot
You can perform Windows Autopilot device registration within your organization by manually collecting the hardware identity of devices (hardware hashes) and uploading this information in a comma-separated-values (CSV) file.

Box 2: joined to Azure AD only -
As per exhibit (Azure AD joined).
Reference:
https://docs.microsoft.com/en-us/mem/autopilot/add-devices
https://docs.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-join-hybrid

by jeroenski at May 3, 2021, 9:30 a.m.

Comments

Submit Cancel

jeroenski

Highly Voted 4 years, 3 months ago

I would lean towards "CSV" and Azure Ad Joined Only.

upvoted 62 times

larry_cse20

4 years, 3 months ago

me too,

upvoted 6 times

...

Wilf32

4 years, 3 months ago

I also agree with this.

upvoted 6 times

...

mikl

3 years, 7 months ago

I agree.

upvoted 1 times

...

Solaris2002

3 years, 6 months ago

I have tested this in a production environment and this is correct. It doesn't matter if you are a hybrid environment. If a Autopilot profile is set to Azure-AD Join only, then the Device will be joined to Azure AD, not registered.

upvoted 6 times

RodrigoT

3 years, 4 months ago

Tested creating an Autopilot deployment profile and when I hover the mouse pointer over the information symbol next to the line "Join to Azure Ad as" it shows: "Azure AD joined: Cloud-only without an on-premises Windows Server Active Directory". So, for me is: CSV Join to Azure AD only

upvoted 5 times

MitchF

3 years ago

This source also supports that "Azure AD joined only" is the answer for part 2. And mid-page, you can read... "Azure AD join can be accomplished using self-service (e.g., "User Driven Mode" in our Question) options like the Out of Box Experience (OOBE), bulk enrollment, or Windows Autopilot (e.g. Autopilot was used in our Question)". https://docs.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-join

upvoted 1 times

...

JurFur

Highly Voted 4 years, 3 months ago

What is the difference between Azure AD joined and registered? Devices that are Azure AD registered are typically personally owned or mobile devices, and are signed in with a personal Microsoft account or another local account. Devices that are Azure AD joined are owned by an organization, and are signed in with an Azure AD account belonging to that organization. https://docs.microsoft.com/en-us/azure/active-directory/devices/overview Registered in Azure AD Only seems to be the correct answer

upvoted 10 times

Mujja

4 years, 1 month ago

A registered device is where a user signs in with a local or MS account and adds a work account. In an Autopilot scenario, the user signs in to the device using a work account, which joins the device to Azure AD

upvoted 4 times

...

Danohav

4 years, 2 months ago

I guess you just answered your reasoning wrong. Nowhere it write that the devices are user owned > only User Driven (but that is a different topic) SO, I would also incline towards Azure AD Joined only

upvoted 3 times

...

raduM

2 years, 9 months ago

on autopilot the device is always joind

upvoted 1 times

...

Amir1909

Most Recent 1 year, 6 months ago

Correct

upvoted 1 times

...

jt2214

2 years, 6 months ago

this is correct. This is how we do it in our organization. Import the hash in intune and join it to Azure AD.

upvoted 1 times

...

okkies

2 years, 6 months ago

as administrator of an hybrid enviorment with autopilot setup. i can confirm the answers are correct. the devices are not added to local AD

upvoted 1 times

...

Nen0

3 years, 9 months ago

The corret answer is: import CSV, and Azure AD Joined (as it states in the example screen - Azure AD joined).

upvoted 5 times

...

BAbdalla

3 years, 9 months ago

The correct anwser: To apply the profile to a new computer, you must first: Import a CSV file into Windows Autopilot. When the Windows Autopilot profile is applied to a computer, the computer will be: Registered in Azure AD only. In all labs that I maked, after a new computer received a new profile of Autopilot, this PC has registered in Azure AD (not only joined).

upvoted 1 times

Bouncy

3 years, 5 months ago

"registered in Azure AD (not only joined)" <-- You might be confusing those terms - if there's something like a hierarchy in this case, "Joined" is more\higher than "Registered"

upvoted 3 times

...

Solaris2002

3 years, 11 months ago

I have tested this multiple times and in a production environment. A hybrid AD environment doesn't matter unless the machine has some way of also joining on-prem AD using something like Intune Connector. If you use Autopilot to provision a machine, and select "Azure AD Join" the assumption is you are using a Azure AD email during setup. Therefore the answer is CSV and Azure AD Joined. No where in the question does it state that Intune Connector is installed, or that we are using a personal device/email. https://docs.microsoft.com/en-us/mem/autopilot/windows-autopilot-hybrid

upvoted 5 times

...

afhelton

4 years ago

Directly from MS Docs as it pertains to a hybrid scenario: A Windows Autopilot profile for user-driven mode must be created and Hybrid Azure AD joined must be specified as the selected option under Join to Azure AD as in the Autopilot profile. Unfortunately, doesn't specify what happens when you select Azure AD joined instead of Hybrid Azure AD joined, but the use of the word "must" makes it sound like an imperative. As such, I also lean toward Azure AD only. Notice also that the first part of the questions says, "To apply the profile to a NEW computer.." This implies that this computer is neither currently joined to the on-prem domain nor Intune/MECM. At least that's how I read it, but this question is certainly vague...

upvoted 1 times

...

Perycles

4 years, 2 months ago

answers are "CSV file" for new devices. Azure AD joined : Microsoft says "When applying Autopilot Profile, devices join Azure AD...". for existing devices in Hybride AAD mode, this profile will change their connection status as "Azure AD joined" . If we want them to keep their "Hybrid AAD connection", we have to change the "join option" inside the autopilot profile from "Azure AD joined " to "Hybride Azure AD joined".

upvoted 3 times

...

Malfureeon

4 years, 2 months ago

CSV and Registered not joined. See below. "If your environment has an on-premises AD footprint and you also want benefit from the capabilities provided by Azure Active Directory, you can implement hybrid Azure AD joined devices. These devices, are devices that are joined to your on-premises Active Directory and registered with your Azure Active Directory." https://docs.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-join-hybrid

upvoted 2 times

uns_uns

4 years, 1 month ago

Just a heads up, I also agreed with this at a point but changed my mind. Look at the screenshot once more and you'll see that: "Join to Azure AD as = Azure AD Join". If the other option had been chosen: "Hybrid Azure AD joined", then your note/answer would have applied and the answer would have been "joined to AD and registered in AAD". I believe that the correct answer for this would be: Box1 > CSV & Box2 > joined to Azure AD only

upvoted 2 times

...

FlailingLimbs

4 years, 2 months ago

This is correct. Key phrase "These devices, are devices that are joined to your on-premises Active Directory and registered with your Azure Active Directory."

upvoted 1 times

...

pogap64757

3 years, 6 months ago

https://docs.microsoft.com/en-us/azure/active-directory/devices/faq "When your users add their accounts to apps on a domain-joined device, they might be prompted with Add account to Windows? If they enter Yes on the prompt, the device registers with Azure AD. The trust type is marked as Azure AD registered. After you enable hybrid Azure AD join in your organization, the device also gets hybrid Azure AD joined. Then two device states show up for the same device. In most cases, Hybrid Azure AD join takes precedence over the Azure AD registered state, resulting in your device being considered hybrid Azure AD joined for any authentication and Conditional Access evaluation. However, sometimes, this dual state can result in a non-deterministic evaluation of the device and cause access issues. We strongly recommend upgrading to Windows 10 version 1803 and above where we automatically clean up the Azure AD registered state. Learn how to avoid or clean up this dual state on the Windows 10 machine."

upvoted 1 times

...

jcgm1990

3 years, 1 month ago

You are wrong, the autopilot settings clearly show join as Azure AD joined, if this was set to join as hybrid Azure AD THEN at that point it will join machines to the domain and register with AD, look it up before providing misleading information.

upvoted 2 times

...

Technik

4 years, 2 months ago

Given aswer is correct. Question states: Hybrid AAD. This means the user is joined with AD and Registered with AAD.

upvoted 2 times

Perycles

4 years, 2 months ago

totaly wrong,

upvoted 2 times

...

densyo

4 years, 2 months ago

Agree with jeroenski. box 1: import a CSV box 2: joined to Azure AD only Found it here: https://docs.microsoft.com/en-us/mem/autopilot/profiles

upvoted 4 times

...