Download Endpoint Administrator.MD-102.PassLeader.2024-11-13.163q.vcex

Re-provision the sales department computers by using Windows AutoPilot. Windows Autopilot Deployment for existing devices, install required modules: Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force Install-Module AzureAD -Force Install-Module WindowsAutopilotIntune -Force Install-Module Microsoft.Graph.Intune -Force Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/existing-devices   

Ensure that users can sign in to the Azure AD-joined computers by using a PIN. The PIN must expire every 30 days. Group Policy settings for Windows Hello for Business. These policy settings are available in User configuration and Computer Configuration under Policies > Administrative Templates > Windows Components > Windows Hello for Business. Reference: https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-manage-in-organization 

Ensure that the projects in Azure DevOps can be accessed from the corporate network only. Reference: https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/manage-conditional-access?view=azure-devops

The Los Angeles office has 500 developers. The developers work flexible hours ranging from 11 AM to 10 PM. 

From the scenario: Ensure that the company name and logo appears during the Out of Box Experience (OOBE) when using Windows AutoPilot. Company Branding: When you use Windows AutoPilot to deploy new devices, you want the process to be friendly and familiar for the users going through the process. One of the ways that is done is by customizing the logon experience to include logos and company-specific text. The basic steps: Sign into the Azure Portal as a tenant admin. Navigate to Azure Active Directory -> Company branding. Click Edit to configure the needed settings. Fill in all the customizations (Including the company logo and company name) Properties: you can set that value in the Name field of the Azure AD tenant properties: Reference: https://blogs.technet.microsoft.com/mniehaus/2017/12/22/windows-autopilot-azure-ad-branding/ 

Box 1: Employees in the research department must be prevented from copying patented information from trusted applications to untrusted applications. This requires an App protection policy. App protection policies make sure that the app-layer protections are in place. For example, you can: Require a PIN to open an app in a work context Control the sharing of data between apps Prevent the saving of company app data to a personal storage location  Box 2: Employees in the sales department must be prevented from forwarding email that contains bank account information. Azure Information Protection is a cloud-based solution that helps an organization to classify and optionally, protect its documents and emails by applying labels. Labels can be applied automatically by administrators who define rules and conditions, manually by users, or a combination where users are given recommendations.  Reference: https://docs.microsoft.com/en-us/intune/app-protection-policy https://docs.microsoft.com/en-us/azure/information-protection/what-is-information-protection 

- Users (for each user profile, set the location and apply a license) - Devices | Device settings (select Users may join devices to Azure AD > All) You can confirm this in the walkthrough video on this link: https://docs.microsoft.com/en-us/mem/autopilot/configuration-requirements 

For Windows 10 hybrid Azure AD join, the minimum domain controller version is Windows Server 2008 R2, so there's no need to upgrade domain controllers or domain functional levels. Windows Server Update Services (WSUS) is not mentioned in the requirement as Schra mentioned. The possible answer is Microsoft Endpoint Configuration Manager. https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-plan 

https://docs.microsoft.com/en-us/azure/active-directory/devices/enterprise-state-roaming-faqs Microsoft Edge browser settings, such as favorites and reading list.   

Scenario: Technical requirements include: Block iOS devices from sending diagnostic and usage telemetry data. Intune includes device restriction policies that help administrators control Android, iOS, macOS, and Windows devices. These restrictions let you control a wide range of settings and features to protect your organization's resources. For example, administrators can: Allow or block the device camera Control access to Google Play, app stores, viewing documents, and gaming Block built-in apps, or create a list of apps that allowed or prohibited Allow or prevent backing up files to cloud and storage accounts Set a minimum password length, and block simple passwords  Reference: https://docs.microsoft.com/en-us/intune/device-restrictions-configure https://docs.microsoft.com/en-us/mem/intune/configuration/device-restrictions-ios#settings-apply-to-all-enrollment-types-4