HOTSPOT -Overview -Background -Blue Yonder Airlines provides regional commercial jet services in the continental United States. The company also designs, manufactures, and sells custom parts for jet aircraft. The custom parts business is growing rapidly. Blue Yonder airlines has developed a new part that will help airlines comply with new safety regulations. The company has a backlog of customers that would like to purchase the part.The Sales department has 500 users and the Engineering department has 200 users. All employees work eight hour shifts. The Sales and Engineering teams cannot effectively collaborate on projects. This has resulted in missed deadlines for releasing new products to manufacturing.Mobile device management -Blue Yonder Airlines has a subscription to Microsoft Intune for Mobile Device Management (MDM). The subscription includes the MDM Authority and Terms andConditions components. The company has deployed the Network Device Enrollment service, Enterprise Certification Authority, and the Intune CertificateConnector. Blue Yonder Airlines has an on-premises Microsoft Exchange environment.The company will use a combination of Intune and Azure RemoteApp for Mobile Application Management.Mobile devices for employees -Blue Yonder Airlines plans to deploy mobile devices to the Sales and Engineering department employees for use while they are outside of the company network.The company plans to deploy the latest iOS devices for Sales department users and Windows 10 tablet devices for Engineering department users.You configure a Sales group for Sales department users and an Engineering group for Engineering department users. In Intune, you configure a computer device group for Windows 10 devices, and a mobile device group for iOS devices. You synchronize the Sales and Engineering groups with Azure Active Directory (AD).Network resources -You have a network file share that is used by Engineering department users to collaborate on projects. The file share is configured with full control permissions.The company is concerned that users may be disrupted if they are suddenly denied access to the file share.Applications -Inventory Management App -Blue Yonder Airlines has developed a custom inventory management app. Sales department users must be able to access the app from enrolled mobile devices.The data that the app uses is considered confidential and must be encrypted.New product Sales App -You procure a third-party app from a vendor to support new product sales. The data that the app uses is highly confidential. You must restrict access to the app and the apps data to only Engineering department users. The app has been signed by using a Blue Airlines certificate. This certificate is not trusted by devices that run Windows 10.Product Request Program App -The company has developed the Product Request Program app as a 32-bit Windows application. The application allows the company to manage the sales fulfillment process. It is also used to record customer requests for new parts and services. You plan to publish the Product Request Program app in AzureRemoteApp and configure access for users in the Engineering and Sales departments. This app is not compatible with the iOS platform and cannot by published by using Intune. You create a virtual machine in Azure that runs Windows Server 2012 R2. You install the Product Request Program app on the virtual machine.Business Requirements -You must ensure that the Sales and Engineering teams can share documents and collaborate effectively. Any collaboration solution must be highly available and must be accessible from the internet. You must restrict access to any shared files to prevent access.You must restrict permissions to the Engineering file share. You must monitor access to the file share.You must provide users in the Sales and Engineering departments access to the following resources:✑ Corporate email✑ File Shares hosted in Microsoft SharePoint Online✑ The Product Request Program appTechnical Requirements -You have the following technical requirements:✑ Allow all Sales department users to enroll iOS devices for device management and enable encryptednotifications to the devices.✑ Employees must be able to access company resources without having to manually install certificates or using an out-of-band process.✑ Employees must only access corporate resources from devices that comply with the companys security policies.Mobile device protection policies✑ All devices must include a trusted build and must comply with Blue Yonder Airlines password complexity rules.✑ You must clear all corporate data from a mobile device when the number of repeated log on failures is more than 10.✑ All devices must be protected from data loss in the event that a device is lost or damaged.✑ Data that is considered confidential must be encrypted on devices.Additional technical requirements for Engineering department users and devices✑ Users must not be challenged for credentials after they initially enroll a device in Intune.✑ Users must be able to access corporate email on enrolled Windows 10 devices.✑ Devices must be automatically updated when an update is available. You must configure the Intune agent to prompt for restart no more than one time during normal business hours. System restarts to complete update installations must occur outside of normal business hours.Problem Statements -Sales and Engineering teams -Sales and Engineering department users report that it is difficult to share documents and collaborate on new projects. Blue Yonder Airlines has an urgent need to improve collaboration between the Sales department and Engineering department. Any collaboration solution must be highly available and accessible from theInternet.Engineering department users report that Intune prompts them to restart their Windows 10 devices every 30 minutes when an update is available for installation.The prompts are disruptive to users.Security issues -The Blue Yonder Airlines Security team has detected a vulnerability in Windows 10 devices. Microsoft has released a patch to address the vulnerability. TheSecurity department has issued a service announcement. They request that you deploy the patch to all Windows 10 devices managed by Microsoft Intune.You need to configure the required security measures for the sales department mobile devices.What should you do? To answer, select the appropriate action from each list in the answer area. Each correct answer is worth one point.Hot Area:
This is a case study. Case studies are not timed separately. You can use as much exam times as you would like to complete each case. However, there may be additional studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.To start the case study -To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has anAll Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.Overview -You are the system administrator for an insurance company named Contoso, Ltd. The company has an on-premises Active Directory Services (AD DS) domain named contoso.com, and a Microsoft Office 365 environment. You deploy the following operating systems across the enterprise:You configure removable storage usage auditing for all Dallas devices.Contractors -You hire 25 contractors. The contractors must use their own devices to access Microsoft SharePoint Online sites in the companys Office 365 environment. They must use Windows BitLocker and store a recovery key in Microsoft OneDrive.User synchronization and authenticationYou need to implement synchronization between the on-premises AD DS domain and the Office 365 environment. The solution must use the latest supportedMicrosoft technologies.Users must be able to reset their own passwords by using the Microsoft Office 365 portal. When a user resets their Office 365 password, the password for the users on-premises AD DS account must also reset.Users must be able to sign in to Office 365 by using their AD DS credentials.Security -You must prevent all users in Seattle except Sales users from using any removable devices. Sales users must be able to fully access local attached tape drives.Sales users must be prevented from writing to removable drives.Technical requirements -General -You deploy a new application to the devices in Seattle. Sales department users in Seattle run an application that only works on devices that run windows 7.You deploy a new display driver to all devices in Dallas.Backup and Recovery -You create system images for all devices that run Windows 7. You must create a new system image each time you update these devices. You schedule file versioning for these devices to occur at 09:00 and 17:00 each day on Monday through Friday.All devices that run Windows 10 must back up the C:\CompanyDoes folder to a network drive.You must configure all devices that run Windows 8.1 to use a recovery drive.Monitoring -You must review and take action on any alerts for Active Directory Federation Services (AD FS) application. You must create detailed views of AD FS log on patterns. You must minimize the number of open firewall ports.You must monitor audit events for all devices used by the Marketing user group.Problem Statements -User1 makes frequent changes to a Microsoft Excel workbook each day. Today at 12:00, User overwrites the existing document on a device that runs Windows 7.Users in Seattle report a variety of computer issues. You must use the quickest method to revert the devices to a working state. Users in Dallas also report issues.You must correct the issues that are interfering with existing applications or files.A Sales department user overwrites a version of a Word document on their device.You need to configure access for the contractors.Which two actions should you perform? Each correct answer presents part of the solution.
HOTSPOT -This is a case study. Case studies are not timed separately. You can use as much exam times as you would like to complete each case. However, there may be additional studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.To start the case study -To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has anAll Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.Overview -You are the system administrator for an insurance company named Contoso, Ltd. The company has an on-premises Active Directory Services (AD DS) domain named contoso.com, and a Microsoft Office 365 environment. You deploy the following operating systems across the enterprise:You configure removable storage usage auditing for all Dallas devices.Contractors -You hire 25 contractors. The contractors must use their own devices to access Microsoft SharePoint Online sites in the companys Office 365 environment. They must use Windows BitLocker and store a recovery key in Microsoft OneDrive.User synchronization and authenticationYou need to implement synchronization between the on-premises AD DS domain and the Office 365 environment. The solution must use the latest supportedMicrosoft technologies.Users must be able to reset their own passwords by using the Microsoft Office 365 portal. When a user resets their Office 365 password, the password for the users on-premises AD DS account must also reset.Users must be able to sign in to Office 365 by using their AD DS credentials.Security -You must prevent all users in Seattle except Sales users from using any removable devices. Sales users must be able to fully access local attached tape drives.Sales users must be prevented from writing to removable drives.Technical requirements -General -You deploy a new application to the devices in Seattle. Sales department users in Seattle run an application that only works on devices that run windows 7.You deploy a new display driver to all devices in Dallas.Backup and Recovery -You create system images for all devices that run Windows 7. You must create a new system image each time you update these devices. You schedule file versioning for these devices to occur at 09:00 and 17:00 each day on Monday through Friday.All devices that run Windows 10 must back up the C:\CompanyDoes folder to a network drive.You must configure all devices that run Windows 8.1 to use a recovery drive.Monitoring -You must review and take action on any alerts for Active Directory Federation Services (AD FS) application. You must create detailed views of AD FS log on patterns. You must minimize the number of open firewall ports.You must monitor audit events for all devices used by the Marketing user group.Problem Statements -User1 makes frequent changes to a Microsoft Excel workbook each day. Today at 12:00, User overwrites the existing document on a device that runs Windows 7.Users in Seattle report a variety of computer issues. You must use the quickest method to revert the devices to a working state. Users in Dallas also report issues.You must correct the issues that are interfering with existing applications or files.A Sales department user overwrites a version of a Word document on their device.You need to plan the backup and recovery options for the devices in the environment.Which recovery options should you implement? To answer, select the appropriate option from each list in the answer area.Hot Area:
HOTSPOT -This is a case study. Case studies are not timed separately. You can use as much exam times as you would like to complete each case. However, there may be additional studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.To start the case study -To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has anAll Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.Overview -You are the system administrator for an insurance company named Contoso, Ltd. The company has an on-premises Active Directory Services (AD DS) domain named contoso.com, and a Microsoft Office 365 environment. You deploy the following operating systems across the enterprise:You configure removable storage usage auditing for all Dallas devices.Contractors -You hire 25 contractors. The contractors must use their own devices to access Microsoft SharePoint Online sites in the companys Office 365 environment. They must use Windows BitLocker and store a recovery key in Microsoft OneDrive.User synchronization and authenticationYou need to implement synchronization between the on-premises AD DS domain and the Office 365 environment. The solution must use the latest supportedMicrosoft technologies.Users must be able to reset their own passwords by using the Microsoft Office 365 portal. When a user resets their Office 365 password, the password for the users on-premises AD DS account must also reset.Users must be able to sign in to Office 365 by using their AD DS credentials.Security -You must prevent all users in Seattle except Sales users from using any removable devices. Sales users must be able to fully access local attached tape drives.Sales users must be prevented from writing to removable drives.Technical requirements -General -You deploy a new application to the devices in Seattle. Sales department users in Seattle run an application that only works on devices that run windows 7.You deploy a new display driver to all devices in Dallas.Backup and Recovery -You create system images for all devices that run Windows 7. You must create a new system image each time you update these devices. You schedule file versioning for these devices to occur at 09:00 and 17:00 each day on Monday through Friday.All devices that run Windows 10 must back up the C:\CompanyDoes folder to a network drive.You must configure all devices that run Windows 8.1 to use a recovery drive.Monitoring -You must review and take action on any alerts for Active Directory Federation Services (AD FS) application. You must create detailed views of AD FS log on patterns. You must minimize the number of open firewall ports.You must monitor audit events for all devices used by the Marketing user group.Problem Statements -User1 makes frequent changes to a Microsoft Excel workbook each day. Today at 12:00, User overwrites the existing document on a device that runs Windows 7.Users in Seattle report a variety of computer issues. You must use the quickest method to revert the devices to a working state. Users in Dallas also report issues.You must correct the issues that are interfering with existing applications or files.A Sales department user overwrites a version of a Word document on their device.You need to implement the required Group Policy settings.How should you configure the Group Policy Objects (GPOs)? To answer, select the appropriate option from each list in the answer area.Hot Area:
HOTSPOT -This is a case study. Case studies are not timed separately. You can use as much exam times as you would like to complete each case. However, there may be additional studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.To start the case study -To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has anAll Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.Overview -You are the system administrator for an insurance company named Contoso, Ltd. The company has an on-premises Active Directory Services (AD DS) domain named contoso.com, and a Microsoft Office 365 environment. You deploy the following operating systems across the enterprise:You configure removable storage usage auditing for all Dallas devices.Contractors -You hire 25 contractors. The contractors must use their own devices to access Microsoft SharePoint Online sites in the companys Office 365 environment. They must use Windows BitLocker and store a recovery key in Microsoft OneDrive.User synchronization and authenticationYou need to implement synchronization between the on-premises AD DS domain and the Office 365 environment. The solution must use the latest supportedMicrosoft technologies.Users must be able to reset their own passwords by using the Microsoft Office 365 portal. When a user resets their Office 365 password, the password for the users on-premises AD DS account must also reset.Users must be able to sign in to Office 365 by using their AD DS credentials.Security -You must prevent all users in Seattle except Sales users from using any removable devices. Sales users must be able to fully access local attached tape drives.Sales users must be prevented from writing to removable drives.Technical requirements -General -You deploy a new application to the devices in Seattle. Sales department users in Seattle run an application that only works on devices that run windows 7.You deploy a new display driver to all devices in Dallas.Backup and Recovery -You create system images for all devices that run Windows 7. You must create a new system image each time you update these devices. You schedule file versioning for these devices to occur at 09:00 and 17:00 each day on Monday through Friday.All devices that run Windows 10 must back up the C:\CompanyDoes folder to a network drive.You must configure all devices that run Windows 8.1 to use a recovery drive.Monitoring -You must review and take action on any alerts for Active Directory Federation Services (AD FS) application. You must create detailed views of AD FS log on patterns. You must minimize the number of open firewall ports.You must monitor audit events for all devices used by the Marketing user group.Problem Statements -User1 makes frequent changes to a Microsoft Excel workbook each day. Today at 12:00, User overwrites the existing document on a device that runs Windows 7.Users in Seattle report a variety of computer issues. You must use the quickest method to revert the devices to a working state. Users in Dallas also report issues.You must correct the issues that are interfering with existing applications or files.A Sales department user overwrites a version of a Word document on their device.You need to monitor the companys environment according to the technical requirements.What should you do? To answer, select the appropriate option from each list in the answer area.Hot Area:
This is a case study. Case studies are not timed separately. You can use as much exam times as you would like to complete each case. However, there may be additional studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.To start the case study -To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has anAll Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.Overview -You are the system administrator for an insurance company named Contoso, Ltd. The company has an on-premises Active Directory Services (AD DS) domain named contoso.com, and a Microsoft Office 365 environment. You deploy the following operating systems across the enterprise:You configure removable storage usage auditing for all Dallas devices.Contractors -You hire 25 contractors. The contractors must use their own devices to access Microsoft SharePoint Online sites in the companys Office 365 environment. They must use Windows BitLocker and store a recovery key in Microsoft OneDrive.User synchronization and authenticationYou need to implement synchronization between the on-premises AD DS domain and the Office 365 environment. The solution must use the latest supportedMicrosoft technologies.Users must be able to reset their own passwords by using the Microsoft Office 365 portal. When a user resets their Office 365 password, the password for the users on-premises AD DS account must also reset.Users must be able to sign in to Office 365 by using their AD DS credentials.Security -You must prevent all users in Seattle except Sales users from using any removable devices. Sales users must be able to fully access local attached tape drives.Sales users must be prevented from writing to removable drives.Technical requirements -General -You deploy a new application to the devices in Seattle. Sales department users in Seattle run an application that only works on devices that run windows 7.You deploy a new display driver to all devices in Dallas.Backup and Recovery -You create system images for all devices that run Windows 7. You must create a new system image each time you update these devices. You schedule file versioning for these devices to occur at 09:00 and 17:00 each day on Monday through Friday.All devices that run Windows 10 must back up the C:\CompanyDoes folder to a network drive.You must configure all devices that run Windows 8.1 to use a recovery drive.Monitoring -You must review and take action on any alerts for Active Directory Federation Services (AD FS) application. You must create detailed views of AD FS log on patterns. You must minimize the number of open firewall ports.You must monitor audit events for all devices used by the Marketing user group.Problem Statements -User1 makes frequent changes to a Microsoft Excel workbook each day. Today at 12:00, User overwrites the existing document on a device that runs Windows 7.Users in Seattle report a variety of computer issues. You must use the quickest method to revert the devices to a working state. Users in Dallas also report issues.You must correct the issues that are interfering with existing applications or files.A Sales department user overwrites a version of a Word document on their device.You need to configure Azure Active Directory (AD) Connect Health.Which additional port should you open?
