A company has deployed Microsoft Tunnel Gateway for their Android devices. They now want to extend access to iOS devices that are managed via Mobile Application Management (MAM) without enrolling them in Intune. The security team requires that all tunnel connections be monitored. What should you do?

Require iOS devices to be enrolled in Intune before using the Tunnel.

Disable monitoring for MAM devices to simplify the configuration.

Enable MAM support in the Tunnel site and use Intune reports to monitor connections.

Use a separate VPN solution for iOS devices.

What is a benefit of automating certificate issuance in Intune?

Reduces the administrative effort required to manage certificates

Eliminates the need for certificate revocation

Increases the number of certificates that can be issued

Guarantees that certificates never expire

In Endpoint Privilege Management, what is the primary purpose of monitoring elevated actions?

To increase the number of applications that can be elevated

To prevent all users from using elevated privileges

To automatically revoke elevated privileges after each use

To track and analyze actions performed with elevated privileges for compliance and security

In Microsoft Intune Endpoint Privilege Management, what is the primary purpose of an elevation policy?

To monitor user activity and generate compliance reports

To define which applications can run with elevated privileges and under what conditions

To automatically approve all elevation requests without user interaction

To remove all administrative privileges from users permanently

Which of the following is a benefit of extending Microsoft Tunnel to MAM devices?

Allows BYOD devices to access corporate resources without full device enrollment

Provides full control over the device

Microsoft 365 Certified:Endpoint Administrator Associate

Domain 2Objective 3

Implement Intune Suite Add-On Capabilities MD-102 Practice Questions (Page 7)

Part of the Manage and maintain devices domain, which accounts for 25–30% of the MD-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 59 practice questions to prepare you well beyond it. (estimate)

59questions here

12free pages

15concepts

25–30%of the exam

Questions 31–35

31expert · hard
A company has deployed Microsoft Tunnel Gateway for their Android devices. They now want to extend access to iOS devices that are managed via Mobile Application Management (MAM) without enrolling them in Intune. The security team requires that all tunnel connections be monitored. What should you do?
Select an answer first
32foundation · easy
What is a benefit of automating certificate issuance in Intune?
Select an answer first
33foundation · easy
In Endpoint Privilege Management, what is the primary purpose of monitoring elevated actions?
Select an answer first
34foundation · easy
In Microsoft Intune Endpoint Privilege Management, what is the primary purpose of an elevation policy?
Select an answer first
35foundation · easy
Which of the following is a benefit of extending Microsoft Tunnel to MAM devices?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MD-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MD-102” is a trademark of its owner, used for identification only.