MD-102 Practice Test 5 — 10 Questions

Question 1

A company is planning to deploy Windows 11 using Microsoft Deployment Toolkit (MDT). The administrator needs to ensure that the deployment can be fully automated without user interaction. Which TWO settings should be configured in the CustomSettings.ini file?

Accepted Answer

SkipTaskSequence=YES. Option A is correct because setting SkipTaskSequence=YES in CustomSettings.ini allows MDT to bypass the Task Sequence Wizard, enabling a fully automated, zero-touch deployment. Option E is correct because SkipFinalSummary=YES suppresses the final summary dialog that would otherwise require user acknowledgment to complete the deployment. Together, these two settings eliminate all interactive prompts during the deployment process.

Answer

SkipComputerBackup=YES

Answer

SkipBitLocker=YES

Answer

SkipDomainMembership=YES

Question 2

An organization uses Configuration Manager to deploy Windows 11. The administrator needs to ensure that after deployment, the devices are automatically enrolled in Microsoft Intune for co-management. Which THREE actions are required?

Accepted Answer

Configure Azure AD hybrid join in the environment.. Azure AD hybrid join is required for co-management because it allows devices to be registered in both on-premises Active Directory and Azure AD, enabling them to be managed by both Configuration Manager and Intune simultaneously. Without hybrid join, devices cannot authenticate to Intune for enrollment, as co-management relies on Azure AD identity for device registration and policy assignment.

Answer

Enable WinRM on the target devices.

Answer

Configure a Group Policy for automatic Intune enrollment.

Question 3

An administrator is deploying Windows 11 using Configuration Manager. The task sequence fails on some devices during the 'Apply Operating System' step with a notice that the image file is not valid. All other devices succeed. What is the most likely cause?

Accepted Answer

The OS image download was corrupted on the client.. Option D is correct because a corrupted OS image download on the client will cause the 'Apply Operating System' step to fail with an 'image file is not valid' error. Since the issue occurs only on some devices, a per-client download corruption (e.g., due to network interruption or disk I/O errors during BITS transfer) is the most likely cause, while the image itself remains valid on the distribution point.

Answer

The boot image is not compatible with the device firmware.

Answer

The distribution point is out of disk space.

Answer

The task sequence variable OSDPackagePath is missing.

Question 4

During a Windows 10 in-place upgrade using Configuration Manager, the task sequence fails with error code 0x800706BE. The smsts.log shows 'Failed to run the action: Upgrade Operating System'. What is the most likely cause?

Accepted Answer

Antivirus software blocking the upgrade process. Error code 0x800706BE is a generic 'The remote procedure call failed' error, which in the context of a Configuration Manager task sequence during an in-place upgrade is most commonly caused by antivirus software interfering with the setup process. Antivirus real-time scanning can lock files or block critical RPC calls that the Windows Setup engine requires, leading to the 'Failed to run the action: Upgrade Operating System' failure in smsts.log.

Answer

Incompatible third-party drivers

Answer

Corrupted setup files in the OS upgrade package

Answer

Insufficient disk space on the system drive

Question 5

A company is using Windows Autopilot for user-driven deployments. Users report that after OOBE, the device is not Azure AD joined. The enrollment status page shows 'Securing your device' for over an hour. What should you check first?

Accepted Answer

Ensure the device's hardware hash is uploaded and an Autopilot profile is assigned. Option C is correct because the device must have its hardware hash uploaded to Intune and an Autopilot profile assigned before it can join Azure AD during OOBE. Without this, the device falls back to a generic provisioning state, causing the 'Securing your device' screen to hang indefinitely as it waits for the Autopilot profile to trigger the Azure AD join.

Answer

Verify that the device has internet connectivity

Answer

Confirm that the enrollment status page timeout is set correctly

Answer

Check that the user has Intune license

Question 6

A company uses Configuration Manager to deploy Windows 11. During the deployment, several devices fail with error code 0x80070002. The administrator suspects the issue is related to missing boot images or content distribution. What should the administrator do first to resolve the issue?

Accepted Answer

Verify that the boot image and OS image are distributed to all distribution points.. Error code 0x80070002 translates to 'The system cannot find the file specified.' In a Configuration Manager task sequence deployment, this typically indicates that the boot image or OS image content is not available on the distribution point that the client is accessing. Verifying distribution ensures the required content is present and accessible, which is the most direct and common fix for this error.

Answer

Increase the client cache size on the affected devices.

Answer

Check the driver packages in the task sequence.

Answer

Recreate the task sequence with new OS image.

Question 7

An organization needs to deploy Windows 11 to remote users who do not have access to the corporate network. The devices are brand new and have internet connectivity. Which deployment method should the administrator recommend?

Accepted Answer

Use Windows Autopilot with user-driven mode.. Windows Autopilot with user-driven mode is the correct choice because it enables remote, zero-touch deployment of new Windows 11 devices using only internet connectivity. The devices are pre-registered in Autopilot, and during the out-of-box experience (OOBE), they automatically download the organization-specific configuration, join Azure AD, and enroll in MDM without requiring any VPN or on-premises infrastructure.

Answer

Use Configuration Manager with a task sequence over VPN.

Answer

Use PXE boot from a distribution point at the local office.

Answer

Deploy using MDT with a bootable USB drive.

Question 8

A company plans to deploy Windows 11 to 500 devices using Microsoft Deployment Toolkit (MDT). The deployment must support UEFI-based devices with Secure Boot enabled. During a pilot deployment, several devices fail to boot after deployment. You suspect the issue is related to the boot image configuration. Which boot image setting should you verify?

Accepted Answer

Ensure the boot image is set to x64 UEFI. UEFI-based devices with Secure Boot require a 64-bit boot image because UEFI firmware does not support legacy BIOS boot modes. Selecting an x64 UEFI boot image ensures the deployment environment is compatible with Secure Boot and GPT disk partitioning, which are mandatory for Windows 11 on UEFI systems. An incorrect boot image type (e.g., BIOS-based) will cause boot failures on UEFI-only hardware.

Answer

Ensure the boot image is set to x64 BIOS

Answer

Ensure the boot image is set to x86 BIOS

Answer

Ensure the boot image includes the WinPE optional component for Secure Boot

Question 9

You are designing a Windows Autopilot deployment for a global organization. Devices are purchased from multiple OEMs and shipped directly to users. Some users report that their devices do not register in Autopilot automatically. You confirm the devices have Windows 11 Pro preinstalled and meet hardware requirements. What is the most likely reason for the registration failure, and what should you do to resolve it?

Accepted Answer

The devices are not registered in Autopilot by the OEM; collect the hardware hash using a script. The most likely reason is that the OEM did not register the devices in Windows Autopilot by uploading their hardware hashes to the Microsoft Partner Center. Without this registration, the devices will not be recognized during OOBE and will not automatically receive the Autopilot deployment profile. To resolve this, you must collect the hardware hash from each device using a PowerShell script (e.g., Get-WindowsAutopilotInfo.ps1) and manually upload it to Intune or the Partner Center.

Answer

The devices have a TPM chip that is not compliant with Autopilot requirements

Answer

The Autopilot deployment profile is assigned to a dynamic device group that excludes these devices

Answer

The devices are not connected to the internet during OOBE

Question 10

A company uses Microsoft Intune to manage Windows 10 devices. They need to ensure that only devices that have a BitLocker encryption status of 'fully encrypted' are allowed to access corporate resources. They create a device compliance policy that requires BitLocker. However, some devices are still accessing resources even though they are not fully encrypted. What should you check?

Accepted Answer

The compliance policy is not assigned to the user or device groups.. Option B is correct because a device compliance policy must be assigned to the appropriate user or device groups to take effect. If the policy is not assigned, Intune will not evaluate the devices against the BitLocker requirement, and non-compliant devices will continue to access corporate resources. The scenario indicates that the policy was created but not enforced, which points directly to a missing assignment.

Answer

The devices are running Windows 10 Home edition, which does not support BitLocker.

Answer

The compliance policy is set to 'Report non-compliant' instead of 'Block non-compliant'.

Answer

The compliance policy has a grace period configured that allows access for non-compliant devices.