Strategies to pass the Azure Security Engineer: MD-101 Exam<\/strong><\/h3>\n\n\n\nApplicants must be familiar with the topics covered in the Azure certification examination. Those topics are acting as a blueprint, with a wealth of information to assist you. These are the domains:<\/p>\n\n\n\n
MD-101 Exam Course outline was updated on February 3, 2023.<\/strong><\/p>\n\n\n\n1. Deploy Windows client (25\u201330%)<\/strong><\/a><\/h6>\n\n\n\nPlan a Windows client deployment<\/p>\n\n\n\n
- Assess infrastructure readiness by using Endpoint Analytics (Microsoft Documentation:<\/strong> What is Endpoint analytics?<\/a>)<\/li>
- Select a deployment tool based on requirements (Microsoft Documentation:<\/strong> Windows 10 deployment scenarios and tools<\/a>)<\/li>
- Choose between migrate and rebuild (Microsoft Documentation:<\/strong> Windows upgrade and migration considerations<\/a>)<\/li>
- Choose an imaging and\/or provisioning strategy (Microsoft Documentation:<\/strong> Windows 10 deployment considerations<\/a>, deployment scenarios<\/a>)<\/li>
- Plan and implement changes to Windows edition by using subscription activation or MAK license management (Microsoft Documentation:<\/strong> Windows subscription activation<\/a>, Deploy Windows Enterprise licenses<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Plan and implement Windows client provisioning by using Windows Autopilot<\/p>\n\n\n\n
- Choose an Autopilot deployment method based on requirements, including user-driven mode, self-deploying mode, autopilot reset, and pre-provisioning (Microsoft Documentation:<\/strong> Windows Autopilot self-deploying mode<\/a>, Windows Autopilot user-driven mode<\/a>, Windows Autopilot for pre-provisioned deployment<\/a>)<\/li>
- Configure device registration for Autopilot (Microsoft Documentation:<\/strong> Windows Autopilot registration overview<\/a>)<\/li>
- Create, validate, and assign deployment profiles (Microsoft Documentation:<\/strong> Configure Autopilot profiles<\/a>, Create a device profile in Microsoft Intune<\/a>)<\/li>
- Set up the Enrollment Status Page (Microsoft Documentation:<\/strong> Set up the Enrollment Status Page<\/a>)<\/li>
- Provision Windows devices by using Autopilot<\/li>
- Troubleshoot an Autopilot deployment (Microsoft Documentation:<\/strong> Troubleshooting overview<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Plan and implement Windows client deployment by using Microsoft Deployment Toolkit (MDT)<\/p>\n\n\n\n
- Plan and implement an MDT deployment infrastructure (Microsoft Documentation:<\/strong> Prepare for deployment with MDT<\/a>, Get started with MDT<\/a>)<\/li>
- Choose configuration options based on requirements, such as boot images, OS images, upgrade packages, task sequences, and drivers (Microsoft Documentation:<\/strong> Task sequence steps<\/a>, Manage drivers in Configuration Manager<\/a>, Manage boot images with Configuration Manager<\/a>, Manage OS images with Configuration Manager<\/a>)<\/li>
- Create, manage, and deploy images<\/li>
- Plan and implement PXE boot by using Windows Deployment Services (WDS) (Microsoft Documentation:<\/strong> Configure a PXE server to load Windows PE<\/a>)<\/li>
- Create and use task sequences (Microsoft Documentation:<\/strong> Manage task sequences<\/a>)<\/li>
- Manage application and driver deployment (Microsoft Documentation:<\/strong> Manage drivers in Configuration Manager<\/a>, Get started with MDT<\/a>)<\/li>
- Customize an MDT deployment by using customsettings.ini and bootstrap.ini<\/li>
- Monitor and troubleshoot deployment (Microsoft Documentation:<\/strong> Deployment Monitoring Tool<\/a>)<\/li>
- Plan and configure user state migration (Microsoft Documentation:<\/strong> Getting started with the User State Migration Tool (USMT)<\/a>)<\/a><\/li><\/ul>\n\n\n\n
2. Manage identity and access (10\u201315%)<\/strong><\/a><\/h6>\n\n\n\nManage identity<\/p>\n\n\n\n
- Register devices in and join devices to Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra (Microsoft Documentation:<\/strong> Azure AD registered devices<\/a>, Azure AD joined devices<\/a>)<\/li>
- Enable users and groups from Azure AD to access Windows client (Microsoft Documentation:<\/strong> Assign users and groups to an application<\/a>)<\/li>
- Manage AD DS and Azure AD groups (Microsoft Documentation:<\/strong> What is Azure Active Directory Domain Services?<\/a>)<\/li>
- Manage AD DS and Azure AD users<\/li>
- Configure Enterprise State Roaming in Azure AD (Microsoft Documentation:<\/strong> Enable Enterprise State Roaming in Azure Active Directory<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Plan and implement conditional access policies<\/p>\n\n\n\n
- Plan conditional access (Microsoft Documentation:<\/strong> What is conditional access<\/a>)<\/li>
- Set up conditional access policies (Microsoft Documentation:<\/strong> Building a Conditional Access policy<\/a>)<\/li>
- Determine which users are affected by a conditional access policy (Microsoft Documentation:<\/strong> Conditional Access: Users, groups, and workload identities<\/a>, Conditional Access: Conditions<\/a>)<\/li>
- Troubleshoot conditional access (Microsoft Documentation:<\/strong> Troubleshooting Conditional Access policy changes<\/a>)<\/a><\/li><\/ul>\n\n\n\n
3. Manage compliance policies and configuration profiles (10\u201315%)<\/strong><\/a><\/h6>\n\n\n\nImplement device compliance policies<\/p>\n\n\n\n
- Plan device compliance policies (Microsoft Documentation:<\/strong> Use compliance policies to set rules for devices you manage with Intune<\/a>)<\/li>
- Implement device compliance policies<\/li>
- Manage notifications for device compliance policies (Microsoft Documentation:<\/strong> Use compliance policies to set rules for devices you manage with Intune<\/a>)<\/li>
- Monitor device compliance (Microsoft Documentation:<\/strong> Monitor results of your Intune Device compliance policies<\/a>)<\/li>
- Troubleshoot device compliance policies<\/a><\/li><\/ul>\n\n\n\n
Plan and implement device configuration profiles<\/p>\n\n\n\n
- Plan device configuration profiles (Microsoft Documentation:<\/strong> Create a device profile in Microsoft Intune<\/a>)<\/li>
- Implement device configuration profiles<\/li>
- Monitor and troubleshoot device configuration profiles (Microsoft Documentation:<\/strong> Monitor device configuration profiles in Microsoft Intune<\/a>)<\/li>
- Configure and implement assigned access on public devices, including kiosks and dedicated devices (Microsoft Documentation:<\/strong> Set up a single-app kiosk on Windows 10\/11<\/a>, Set up a multi-app kiosk on Windows 10 devices<\/a>, Prepare a device for kiosk configuration<\/a>)<\/a><\/li><\/ul>\n\n\n\n
4. Manage, maintain, and protect devices (25\u201330%)<\/strong><\/a><\/h6>\n\n\n\nManage device lifecycle<\/p>\n\n\n\n
- Configure enrollment settings in Intune (Microsoft Documentation:<\/strong> Set up automatic enrollment for Windows 10\/11 devices<\/a>)<\/li>
- Configure automatic and bulk enrollment in Intune (Microsoft Documentation:<\/strong> Bulk enrollment for Windows devices<\/a>)<\/li>
- Configure policy sets (Microsoft Documentation:<\/strong> Use policy sets to group collections of management objects<\/a>)<\/li>
- Restart, retire, or wipe devices (Microsoft Documentation:<\/strong> Remove devices by using wipe, retire, or manually unenrolling the device<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Monitor devices<\/p>\n\n\n\n
- Monitor devices by using Azure Monitor (Microsoft Documentation:<\/strong> Azure Monitor overview<\/a>)<\/li>
- Monitor device hardware and software inventory by using Endpoint Manager Admin Center<\/li>
- Monitor devices by using Endpoint Analytics (Microsoft Documentation:<\/strong> What is Endpoint analytics?<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Manage device updates<\/p>\n\n\n\n
- Plan for device updates (Microsoft Documentation:<\/strong> Feature updates for Windows 10 and later policy in Intune<\/a>)<\/li>
- Create and manage quality update policies by using Intune (Microsoft Documentation:<\/strong> Update rings for Windows 10 and later policy in Intune<\/a>)<\/li>
- Create and manage feature update policies by using Intune<\/li>
- Create and manage iOS\/iPadOS update policies by using Intune (Microsoft Documentation:<\/strong> Manage iOS\/iPadOS software update policies in Intune<\/a>)<\/li>
- Manage Android updates by using device configuration profiles<\/li>
- Monitor updates<\/li>
- Troubleshoot updates in Intune<\/li>
- Configure Windows client delivery optimization by using Intune (Microsoft Documentation:<\/strong> Delivery Optimization settings in Microsoft Intune<\/a>)<\/li>
- Create and manage update rings by using Intune (Microsoft Documentation:<\/strong> Update rings for Windows 10 and later policy in Intune<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Plan and implement endpoint protection<\/p>\n\n\n\n
- Plan endpoint security (Microsoft Documentation:<\/strong> Microsoft Defender for Endpoint<\/a>)<\/li>
- Implement and manage security baselines in Intune (Microsoft Documentation:<\/strong> Use security baselines to configure Windows devices in Intune<\/a>)<\/li>
- Create and manage configuration policies for Endpoint Security including antivirus, encryption, firewall, endpoint detection and response, and attack surface reduction<\/li>
- Onboard devices into Microsoft Defender for Endpoint (Microsoft Documentation:<\/strong> Onboard devices and configure Microsoft Defender for Endpoint capabilities<\/a>)<\/li>
- Monitor Microsoft Defender for Endpoint (Microsoft Documentation:<\/strong> Microsoft Defender for Endpoint<\/a>)<\/li>
- Investigate and respond to threats (Microsoft Documentation:<\/strong> Threat investigation and response<\/a>)<\/a><\/li><\/ul>\n\n\n\n
5. Manage apps (10\u201315%)<\/strong><\/a><\/h6>\n\n\n\nDeploy and update applications<\/p>\n\n\n\n
- Deploy apps by using Intune (Microsoft Documentation:<\/strong> Windows 10\/11 app deployment by using Microsoft Intune<\/a>)<\/li>
- Configure Microsoft 365 Apps deployment by using Office Deployment Toolkit or Office Customization Tool (Microsoft Documentation:<\/strong> Overview of the Office Deployment Tool<\/a>)<\/li>
- Manage Microsoft 365 Apps by using Microsoft 365 Apps Admin Center (Microsoft Documentation:<\/strong> Overview of the Microsoft 365 Apps admin center<\/a>)<\/li>
- Deploy Microsoft 365 Apps by using Intune (Microsoft Documentation:<\/strong> Add Microsoft 365 Apps to Windows 10\/11 devices with Microsoft Intune<\/a>)<\/li>
- Manage Office app settings by using group policy or Intune (Microsoft Documentation:<\/strong> Policies for Office apps<\/a>)<\/li>
- Deploy apps by using Microsoft Store for Business, Apple store, and Google store (Microsoft Documentation:<\/strong> Distribute apps using your private store<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Implement app protection and app configuration policies<\/p>\n\n\n\n
- Plan app protection policies (Microsoft Documentation:<\/strong> App protection policies overview<\/a>)<\/li>
- Plan app configuration policies for iOS and Android (Microsoft Documentation:<\/strong> App configuration policies for Microsoft Intune<\/a>)<\/li>
- Implement app protection policies<\/li>
- Implement app configuration policies for iOS and Android (Microsoft Documentation:<\/strong> App configuration policies for Microsoft Intune<\/a>)<\/li>
- Manage app protection policies<\/li>
- Manage app configuration policies<\/li><\/ul>\n\n\n\n
The MD-101 exam has the advantage of being simple. Because the domains are the building blocks, you don’t need any rigorous or in-depth knowledge to take this exam. Here are a few pro tips you can incorporate into your prep strategy to make it even easier:<\/em><\/strong><\/h6>\n\n\n\n- Examine the Microsoft study guide. Understand the exam objectives and make a schedule. You won’t leave anything until the last minute this way.<\/li>
- Also, Begin with the subjects covered in the prerequisites and recommendations. Examine client computer networking, policy-based and device management rules, and cloud solutions in greater depth.<\/li>
- Then follow Microsoft’s learning path to delve deeper into the domains and subtopics. Watch the instructor-led videos to gain a better understanding of the subject.<\/li>
- Furthermore, When you are confident in your preparation, go ahead and take the MD-101 practice test and MD-101 sample questions. There are numerous question dumps available for Microsoft certifications. Proceed with self-evaluation, close any learning gaps, and try again.<\/li><\/ul>\n\n\n\n
Let us now have a look at some preparation resources – <\/em><\/strong><\/p>\n\n\n\nUse the practice tests to evaluate yourself.<\/strong><\/h5>\n\n\n\nPractice exams can help you determine how much time you’ll need to answer each question and how well you understand each topic. Furthermore, the practice tests help you focus on single-domain subjects, which can be a good first step. After you’ve mastered the domain, start taking full-length practice exams to hone your revision skills. Begin by taking an MD-101 practice exam <\/a>to learn more about your strengths and weaknesses.<\/p>\n\n\n\n
1. Deploy Windows client (25\u201330%)<\/strong><\/a><\/h6>\n\n\n\nPlan a Windows client deployment<\/p>\n\n\n\n
- Assess infrastructure readiness by using Endpoint Analytics (Microsoft Documentation:<\/strong> What is Endpoint analytics?<\/a>)<\/li>
- Select a deployment tool based on requirements (Microsoft Documentation:<\/strong> Windows 10 deployment scenarios and tools<\/a>)<\/li>
- Choose between migrate and rebuild (Microsoft Documentation:<\/strong> Windows upgrade and migration considerations<\/a>)<\/li>
- Choose an imaging and\/or provisioning strategy (Microsoft Documentation:<\/strong> Windows 10 deployment considerations<\/a>, deployment scenarios<\/a>)<\/li>
- Plan and implement changes to Windows edition by using subscription activation or MAK license management (Microsoft Documentation:<\/strong> Windows subscription activation<\/a>, Deploy Windows Enterprise licenses<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Plan and implement Windows client provisioning by using Windows Autopilot<\/p>\n\n\n\n
- Choose an Autopilot deployment method based on requirements, including user-driven mode, self-deploying mode, autopilot reset, and pre-provisioning (Microsoft Documentation:<\/strong> Windows Autopilot self-deploying mode<\/a>, Windows Autopilot user-driven mode<\/a>, Windows Autopilot for pre-provisioned deployment<\/a>)<\/li>
- Configure device registration for Autopilot (Microsoft Documentation:<\/strong> Windows Autopilot registration overview<\/a>)<\/li>
- Create, validate, and assign deployment profiles (Microsoft Documentation:<\/strong> Configure Autopilot profiles<\/a>, Create a device profile in Microsoft Intune<\/a>)<\/li>
- Set up the Enrollment Status Page (Microsoft Documentation:<\/strong> Set up the Enrollment Status Page<\/a>)<\/li>
- Provision Windows devices by using Autopilot<\/li>
- Troubleshoot an Autopilot deployment (Microsoft Documentation:<\/strong> Troubleshooting overview<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Plan and implement Windows client deployment by using Microsoft Deployment Toolkit (MDT)<\/p>\n\n\n\n
- Plan and implement an MDT deployment infrastructure (Microsoft Documentation:<\/strong> Prepare for deployment with MDT<\/a>, Get started with MDT<\/a>)<\/li>
- Choose configuration options based on requirements, such as boot images, OS images, upgrade packages, task sequences, and drivers (Microsoft Documentation:<\/strong> Task sequence steps<\/a>, Manage drivers in Configuration Manager<\/a>, Manage boot images with Configuration Manager<\/a>, Manage OS images with Configuration Manager<\/a>)<\/li>
- Create, manage, and deploy images<\/li>
- Plan and implement PXE boot by using Windows Deployment Services (WDS) (Microsoft Documentation:<\/strong> Configure a PXE server to load Windows PE<\/a>)<\/li>
- Create and use task sequences (Microsoft Documentation:<\/strong> Manage task sequences<\/a>)<\/li>
- Manage application and driver deployment (Microsoft Documentation:<\/strong> Manage drivers in Configuration Manager<\/a>, Get started with MDT<\/a>)<\/li>
- Customize an MDT deployment by using customsettings.ini and bootstrap.ini<\/li>
- Monitor and troubleshoot deployment (Microsoft Documentation:<\/strong> Deployment Monitoring Tool<\/a>)<\/li>
- Plan and configure user state migration (Microsoft Documentation:<\/strong> Getting started with the User State Migration Tool (USMT)<\/a>)<\/a><\/li><\/ul>\n\n\n\n
2. Manage identity and access (10\u201315%)<\/strong><\/a><\/h6>\n\n\n\nManage identity<\/p>\n\n\n\n
- Register devices in and join devices to Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra (Microsoft Documentation:<\/strong> Azure AD registered devices<\/a>, Azure AD joined devices<\/a>)<\/li>
- Enable users and groups from Azure AD to access Windows client (Microsoft Documentation:<\/strong> Assign users and groups to an application<\/a>)<\/li>
- Manage AD DS and Azure AD groups (Microsoft Documentation:<\/strong> What is Azure Active Directory Domain Services?<\/a>)<\/li>
- Manage AD DS and Azure AD users<\/li>
- Configure Enterprise State Roaming in Azure AD (Microsoft Documentation:<\/strong> Enable Enterprise State Roaming in Azure Active Directory<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Plan and implement conditional access policies<\/p>\n\n\n\n
- Plan conditional access (Microsoft Documentation:<\/strong> What is conditional access<\/a>)<\/li>
- Set up conditional access policies (Microsoft Documentation:<\/strong> Building a Conditional Access policy<\/a>)<\/li>
- Determine which users are affected by a conditional access policy (Microsoft Documentation:<\/strong> Conditional Access: Users, groups, and workload identities<\/a>, Conditional Access: Conditions<\/a>)<\/li>
- Troubleshoot conditional access (Microsoft Documentation:<\/strong> Troubleshooting Conditional Access policy changes<\/a>)<\/a><\/li><\/ul>\n\n\n\n
3. Manage compliance policies and configuration profiles (10\u201315%)<\/strong><\/a><\/h6>\n\n\n\nImplement device compliance policies<\/p>\n\n\n\n
- Plan device compliance policies (Microsoft Documentation:<\/strong> Use compliance policies to set rules for devices you manage with Intune<\/a>)<\/li>
- Implement device compliance policies<\/li>
- Manage notifications for device compliance policies (Microsoft Documentation:<\/strong> Use compliance policies to set rules for devices you manage with Intune<\/a>)<\/li>
- Monitor device compliance (Microsoft Documentation:<\/strong> Monitor results of your Intune Device compliance policies<\/a>)<\/li>
- Troubleshoot device compliance policies<\/a><\/li><\/ul>\n\n\n\n
Plan and implement device configuration profiles<\/p>\n\n\n\n
- Plan device configuration profiles (Microsoft Documentation:<\/strong> Create a device profile in Microsoft Intune<\/a>)<\/li>
- Implement device configuration profiles<\/li>
- Monitor and troubleshoot device configuration profiles (Microsoft Documentation:<\/strong> Monitor device configuration profiles in Microsoft Intune<\/a>)<\/li>
- Configure and implement assigned access on public devices, including kiosks and dedicated devices (Microsoft Documentation:<\/strong> Set up a single-app kiosk on Windows 10\/11<\/a>, Set up a multi-app kiosk on Windows 10 devices<\/a>, Prepare a device for kiosk configuration<\/a>)<\/a><\/li><\/ul>\n\n\n\n
4. Manage, maintain, and protect devices (25\u201330%)<\/strong><\/a><\/h6>\n\n\n\nManage device lifecycle<\/p>\n\n\n\n
- Configure enrollment settings in Intune (Microsoft Documentation:<\/strong> Set up automatic enrollment for Windows 10\/11 devices<\/a>)<\/li>
- Configure automatic and bulk enrollment in Intune (Microsoft Documentation:<\/strong> Bulk enrollment for Windows devices<\/a>)<\/li>
- Configure policy sets (Microsoft Documentation:<\/strong> Use policy sets to group collections of management objects<\/a>)<\/li>
- Restart, retire, or wipe devices (Microsoft Documentation:<\/strong> Remove devices by using wipe, retire, or manually unenrolling the device<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Monitor devices<\/p>\n\n\n\n
- Monitor devices by using Azure Monitor (Microsoft Documentation:<\/strong> Azure Monitor overview<\/a>)<\/li>
- Monitor device hardware and software inventory by using Endpoint Manager Admin Center<\/li>
- Monitor devices by using Endpoint Analytics (Microsoft Documentation:<\/strong> What is Endpoint analytics?<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Manage device updates<\/p>\n\n\n\n
- Plan for device updates (Microsoft Documentation:<\/strong> Feature updates for Windows 10 and later policy in Intune<\/a>)<\/li>
- Create and manage quality update policies by using Intune (Microsoft Documentation:<\/strong> Update rings for Windows 10 and later policy in Intune<\/a>)<\/li>
- Create and manage feature update policies by using Intune<\/li>
- Create and manage iOS\/iPadOS update policies by using Intune (Microsoft Documentation:<\/strong> Manage iOS\/iPadOS software update policies in Intune<\/a>)<\/li>
- Manage Android updates by using device configuration profiles<\/li>
- Monitor updates<\/li>
- Troubleshoot updates in Intune<\/li>
- Configure Windows client delivery optimization by using Intune (Microsoft Documentation:<\/strong> Delivery Optimization settings in Microsoft Intune<\/a>)<\/li>
- Create and manage update rings by using Intune (Microsoft Documentation:<\/strong> Update rings for Windows 10 and later policy in Intune<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Plan and implement endpoint protection<\/p>\n\n\n\n
- Plan endpoint security (Microsoft Documentation:<\/strong> Microsoft Defender for Endpoint<\/a>)<\/li>
- Implement and manage security baselines in Intune (Microsoft Documentation:<\/strong> Use security baselines to configure Windows devices in Intune<\/a>)<\/li>
- Create and manage configuration policies for Endpoint Security including antivirus, encryption, firewall, endpoint detection and response, and attack surface reduction<\/li>
- Onboard devices into Microsoft Defender for Endpoint (Microsoft Documentation:<\/strong> Onboard devices and configure Microsoft Defender for Endpoint capabilities<\/a>)<\/li>
- Monitor Microsoft Defender for Endpoint (Microsoft Documentation:<\/strong> Microsoft Defender for Endpoint<\/a>)<\/li>
- Investigate and respond to threats (Microsoft Documentation:<\/strong> Threat investigation and response<\/a>)<\/a><\/li><\/ul>\n\n\n\n
5. Manage apps (10\u201315%)<\/strong><\/a><\/h6>\n\n\n\nDeploy and update applications<\/p>\n\n\n\n
- Deploy apps by using Intune (Microsoft Documentation:<\/strong> Windows 10\/11 app deployment by using Microsoft Intune<\/a>)<\/li>
- Configure Microsoft 365 Apps deployment by using Office Deployment Toolkit or Office Customization Tool (Microsoft Documentation:<\/strong> Overview of the Office Deployment Tool<\/a>)<\/li>
- Manage Microsoft 365 Apps by using Microsoft 365 Apps Admin Center (Microsoft Documentation:<\/strong> Overview of the Microsoft 365 Apps admin center<\/a>)<\/li>
- Deploy Microsoft 365 Apps by using Intune (Microsoft Documentation:<\/strong> Add Microsoft 365 Apps to Windows 10\/11 devices with Microsoft Intune<\/a>)<\/li>
- Manage Office app settings by using group policy or Intune (Microsoft Documentation:<\/strong> Policies for Office apps<\/a>)<\/li>
- Deploy apps by using Microsoft Store for Business, Apple store, and Google store (Microsoft Documentation:<\/strong> Distribute apps using your private store<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Implement app protection and app configuration policies<\/p>\n\n\n\n
- Plan app protection policies (Microsoft Documentation:<\/strong> App protection policies overview<\/a>)<\/li>
- Plan app configuration policies for iOS and Android (Microsoft Documentation:<\/strong> App configuration policies for Microsoft Intune<\/a>)<\/li>
- Implement app protection policies<\/li>
- Implement app configuration policies for iOS and Android (Microsoft Documentation:<\/strong> App configuration policies for Microsoft Intune<\/a>)<\/li>
- Manage app protection policies<\/li>
- Manage app configuration policies<\/li><\/ul>\n\n\n\n
The MD-101 exam has the advantage of being simple. Because the domains are the building blocks, you don’t need any rigorous or in-depth knowledge to take this exam. Here are a few pro tips you can incorporate into your prep strategy to make it even easier:<\/em><\/strong><\/h6>\n\n\n\n- Examine the Microsoft study guide. Understand the exam objectives and make a schedule. You won’t leave anything until the last minute this way.<\/li>
- Also, Begin with the subjects covered in the prerequisites and recommendations. Examine client computer networking, policy-based and device management rules, and cloud solutions in greater depth.<\/li>
- Then follow Microsoft’s learning path to delve deeper into the domains and subtopics. Watch the instructor-led videos to gain a better understanding of the subject.<\/li>
- Furthermore, When you are confident in your preparation, go ahead and take the MD-101 practice test and MD-101 sample questions. There are numerous question dumps available for Microsoft certifications. Proceed with self-evaluation, close any learning gaps, and try again.<\/li><\/ul>\n\n\n\n
Let us now have a look at some preparation resources – <\/em><\/strong><\/p>\n\n\n\nUse the practice tests to evaluate yourself.<\/strong><\/h5>\n\n\n\nPractice exams can help you determine how much time you’ll need to answer each question and how well you understand each topic. Furthermore, the practice tests help you focus on single-domain subjects, which can be a good first step. After you’ve mastered the domain, start taking full-length practice exams to hone your revision skills. Begin by taking an MD-101 practice exam <\/a>to learn more about your strengths and weaknesses.<\/p>\n\n\n\n
Plan and implement Windows client provisioning by using Windows Autopilot<\/p>\n\n\n\n
- Choose an Autopilot deployment method based on requirements, including user-driven mode, self-deploying mode, autopilot reset, and pre-provisioning (Microsoft Documentation:<\/strong> Windows Autopilot self-deploying mode<\/a>, Windows Autopilot user-driven mode<\/a>, Windows Autopilot for pre-provisioned deployment<\/a>)<\/li>
- Configure device registration for Autopilot (Microsoft Documentation:<\/strong> Windows Autopilot registration overview<\/a>)<\/li>
- Create, validate, and assign deployment profiles (Microsoft Documentation:<\/strong> Configure Autopilot profiles<\/a>, Create a device profile in Microsoft Intune<\/a>)<\/li>
- Set up the Enrollment Status Page (Microsoft Documentation:<\/strong> Set up the Enrollment Status Page<\/a>)<\/li>
- Provision Windows devices by using Autopilot<\/li>
- Troubleshoot an Autopilot deployment (Microsoft Documentation:<\/strong> Troubleshooting overview<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Plan and implement Windows client deployment by using Microsoft Deployment Toolkit (MDT)<\/p>\n\n\n\n
- Plan and implement an MDT deployment infrastructure (Microsoft Documentation:<\/strong> Prepare for deployment with MDT<\/a>, Get started with MDT<\/a>)<\/li>
- Choose configuration options based on requirements, such as boot images, OS images, upgrade packages, task sequences, and drivers (Microsoft Documentation:<\/strong> Task sequence steps<\/a>, Manage drivers in Configuration Manager<\/a>, Manage boot images with Configuration Manager<\/a>, Manage OS images with Configuration Manager<\/a>)<\/li>
- Create, manage, and deploy images<\/li>
- Plan and implement PXE boot by using Windows Deployment Services (WDS) (Microsoft Documentation:<\/strong> Configure a PXE server to load Windows PE<\/a>)<\/li>
- Create and use task sequences (Microsoft Documentation:<\/strong> Manage task sequences<\/a>)<\/li>
- Manage application and driver deployment (Microsoft Documentation:<\/strong> Manage drivers in Configuration Manager<\/a>, Get started with MDT<\/a>)<\/li>
- Customize an MDT deployment by using customsettings.ini and bootstrap.ini<\/li>
- Monitor and troubleshoot deployment (Microsoft Documentation:<\/strong> Deployment Monitoring Tool<\/a>)<\/li>
- Plan and configure user state migration (Microsoft Documentation:<\/strong> Getting started with the User State Migration Tool (USMT)<\/a>)<\/a><\/li><\/ul>\n\n\n\n
2. Manage identity and access (10\u201315%)<\/strong><\/a><\/h6>\n\n\n\n
Manage identity<\/p>\n\n\n\n
- Register devices in and join devices to Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra (Microsoft Documentation:<\/strong> Azure AD registered devices<\/a>, Azure AD joined devices<\/a>)<\/li>
- Enable users and groups from Azure AD to access Windows client (Microsoft Documentation:<\/strong> Assign users and groups to an application<\/a>)<\/li>
- Manage AD DS and Azure AD groups (Microsoft Documentation:<\/strong> What is Azure Active Directory Domain Services?<\/a>)<\/li>
- Manage AD DS and Azure AD users<\/li>
- Configure Enterprise State Roaming in Azure AD (Microsoft Documentation:<\/strong> Enable Enterprise State Roaming in Azure Active Directory<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Plan and implement conditional access policies<\/p>\n\n\n\n
- Plan conditional access (Microsoft Documentation:<\/strong> What is conditional access<\/a>)<\/li>
- Set up conditional access policies (Microsoft Documentation:<\/strong> Building a Conditional Access policy<\/a>)<\/li>
- Determine which users are affected by a conditional access policy (Microsoft Documentation:<\/strong> Conditional Access: Users, groups, and workload identities<\/a>, Conditional Access: Conditions<\/a>)<\/li>
- Troubleshoot conditional access (Microsoft Documentation:<\/strong> Troubleshooting Conditional Access policy changes<\/a>)<\/a><\/li><\/ul>\n\n\n\n
3. Manage compliance policies and configuration profiles (10\u201315%)<\/strong><\/a><\/h6>\n\n\n\n
Implement device compliance policies<\/p>\n\n\n\n
- Plan device compliance policies (Microsoft Documentation:<\/strong> Use compliance policies to set rules for devices you manage with Intune<\/a>)<\/li>
- Implement device compliance policies<\/li>
- Manage notifications for device compliance policies (Microsoft Documentation:<\/strong> Use compliance policies to set rules for devices you manage with Intune<\/a>)<\/li>
- Monitor device compliance (Microsoft Documentation:<\/strong> Monitor results of your Intune Device compliance policies<\/a>)<\/li>
- Troubleshoot device compliance policies<\/a><\/li><\/ul>\n\n\n\n
Plan and implement device configuration profiles<\/p>\n\n\n\n
- Plan device configuration profiles (Microsoft Documentation:<\/strong> Create a device profile in Microsoft Intune<\/a>)<\/li>
- Implement device configuration profiles<\/li>
- Monitor and troubleshoot device configuration profiles (Microsoft Documentation:<\/strong> Monitor device configuration profiles in Microsoft Intune<\/a>)<\/li>
- Configure and implement assigned access on public devices, including kiosks and dedicated devices (Microsoft Documentation:<\/strong> Set up a single-app kiosk on Windows 10\/11<\/a>, Set up a multi-app kiosk on Windows 10 devices<\/a>, Prepare a device for kiosk configuration<\/a>)<\/a><\/li><\/ul>\n\n\n\n
4. Manage, maintain, and protect devices (25\u201330%)<\/strong><\/a><\/h6>\n\n\n\n
Manage device lifecycle<\/p>\n\n\n\n
- Configure enrollment settings in Intune (Microsoft Documentation:<\/strong> Set up automatic enrollment for Windows 10\/11 devices<\/a>)<\/li>
- Configure automatic and bulk enrollment in Intune (Microsoft Documentation:<\/strong> Bulk enrollment for Windows devices<\/a>)<\/li>
- Configure policy sets (Microsoft Documentation:<\/strong> Use policy sets to group collections of management objects<\/a>)<\/li>
- Restart, retire, or wipe devices (Microsoft Documentation:<\/strong> Remove devices by using wipe, retire, or manually unenrolling the device<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Monitor devices<\/p>\n\n\n\n
- Monitor devices by using Azure Monitor (Microsoft Documentation:<\/strong> Azure Monitor overview<\/a>)<\/li>
- Monitor device hardware and software inventory by using Endpoint Manager Admin Center<\/li>
- Monitor devices by using Endpoint Analytics (Microsoft Documentation:<\/strong> What is Endpoint analytics?<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Manage device updates<\/p>\n\n\n\n
- Plan for device updates (Microsoft Documentation:<\/strong> Feature updates for Windows 10 and later policy in Intune<\/a>)<\/li>
- Create and manage quality update policies by using Intune (Microsoft Documentation:<\/strong> Update rings for Windows 10 and later policy in Intune<\/a>)<\/li>
- Create and manage feature update policies by using Intune<\/li>
- Create and manage iOS\/iPadOS update policies by using Intune (Microsoft Documentation:<\/strong> Manage iOS\/iPadOS software update policies in Intune<\/a>)<\/li>
- Manage Android updates by using device configuration profiles<\/li>
- Monitor updates<\/li>
- Troubleshoot updates in Intune<\/li>
- Configure Windows client delivery optimization by using Intune (Microsoft Documentation:<\/strong> Delivery Optimization settings in Microsoft Intune<\/a>)<\/li>
- Create and manage update rings by using Intune (Microsoft Documentation:<\/strong> Update rings for Windows 10 and later policy in Intune<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Plan and implement endpoint protection<\/p>\n\n\n\n
- Plan endpoint security (Microsoft Documentation:<\/strong> Microsoft Defender for Endpoint<\/a>)<\/li>
- Implement and manage security baselines in Intune (Microsoft Documentation:<\/strong> Use security baselines to configure Windows devices in Intune<\/a>)<\/li>
- Create and manage configuration policies for Endpoint Security including antivirus, encryption, firewall, endpoint detection and response, and attack surface reduction<\/li>
- Onboard devices into Microsoft Defender for Endpoint (Microsoft Documentation:<\/strong> Onboard devices and configure Microsoft Defender for Endpoint capabilities<\/a>)<\/li>
- Monitor Microsoft Defender for Endpoint (Microsoft Documentation:<\/strong> Microsoft Defender for Endpoint<\/a>)<\/li>
- Investigate and respond to threats (Microsoft Documentation:<\/strong> Threat investigation and response<\/a>)<\/a><\/li><\/ul>\n\n\n\n
5. Manage apps (10\u201315%)<\/strong><\/a><\/h6>\n\n\n\n
Deploy and update applications<\/p>\n\n\n\n
- Deploy apps by using Intune (Microsoft Documentation:<\/strong> Windows 10\/11 app deployment by using Microsoft Intune<\/a>)<\/li>
- Configure Microsoft 365 Apps deployment by using Office Deployment Toolkit or Office Customization Tool (Microsoft Documentation:<\/strong> Overview of the Office Deployment Tool<\/a>)<\/li>
- Manage Microsoft 365 Apps by using Microsoft 365 Apps Admin Center (Microsoft Documentation:<\/strong> Overview of the Microsoft 365 Apps admin center<\/a>)<\/li>
- Deploy Microsoft 365 Apps by using Intune (Microsoft Documentation:<\/strong> Add Microsoft 365 Apps to Windows 10\/11 devices with Microsoft Intune<\/a>)<\/li>
- Manage Office app settings by using group policy or Intune (Microsoft Documentation:<\/strong> Policies for Office apps<\/a>)<\/li>
- Deploy apps by using Microsoft Store for Business, Apple store, and Google store (Microsoft Documentation:<\/strong> Distribute apps using your private store<\/a>)<\/a><\/li><\/ul>\n\n\n\n
Implement app protection and app configuration policies<\/p>\n\n\n\n
- Plan app protection policies (Microsoft Documentation:<\/strong> App protection policies overview<\/a>)<\/li>
- Plan app configuration policies for iOS and Android (Microsoft Documentation:<\/strong> App configuration policies for Microsoft Intune<\/a>)<\/li>
- Implement app protection policies<\/li>
- Implement app configuration policies for iOS and Android (Microsoft Documentation:<\/strong> App configuration policies for Microsoft Intune<\/a>)<\/li>
- Manage app protection policies<\/li>
- Manage app configuration policies<\/li><\/ul>\n\n\n\n
The MD-101 exam has the advantage of being simple. Because the domains are the building blocks, you don’t need any rigorous or in-depth knowledge to take this exam. Here are a few pro tips you can incorporate into your prep strategy to make it even easier:<\/em><\/strong><\/h6>\n\n\n\n
- Examine the Microsoft study guide. Understand the exam objectives and make a schedule. You won’t leave anything until the last minute this way.<\/li>
- Also, Begin with the subjects covered in the prerequisites and recommendations. Examine client computer networking, policy-based and device management rules, and cloud solutions in greater depth.<\/li>
- Then follow Microsoft’s learning path to delve deeper into the domains and subtopics. Watch the instructor-led videos to gain a better understanding of the subject.<\/li>
- Furthermore, When you are confident in your preparation, go ahead and take the MD-101 practice test and MD-101 sample questions. There are numerous question dumps available for Microsoft certifications. Proceed with self-evaluation, close any learning gaps, and try again.<\/li><\/ul>\n\n\n\n
Let us now have a look at some preparation resources – <\/em><\/strong><\/p>\n\n\n\n
Use the practice tests to evaluate yourself.<\/strong><\/h5>\n\n\n\n
Practice exams can help you determine how much time you’ll need to answer each question and how well you understand each topic. Furthermore, the practice tests help you focus on single-domain subjects, which can be a good first step. After you’ve mastered the domain, start taking full-length practice exams to hone your revision skills. Begin by taking an MD-101 practice exam <\/a>to learn more about your strengths and weaknesses.<\/p>\n\n\n\n
- Plan app configuration policies for iOS and Android (Microsoft Documentation:<\/strong> App configuration policies for Microsoft Intune<\/a>)<\/li>
- Configure Microsoft 365 Apps deployment by using Office Deployment Toolkit or Office Customization Tool (Microsoft Documentation:<\/strong> Overview of the Office Deployment Tool<\/a>)<\/li>
- Implement and manage security baselines in Intune (Microsoft Documentation:<\/strong> Use security baselines to configure Windows devices in Intune<\/a>)<\/li>
- Create and manage quality update policies by using Intune (Microsoft Documentation:<\/strong> Update rings for Windows 10 and later policy in Intune<\/a>)<\/li>
- Configure automatic and bulk enrollment in Intune (Microsoft Documentation:<\/strong> Bulk enrollment for Windows devices<\/a>)<\/li>
- Set up conditional access policies (Microsoft Documentation:<\/strong> Building a Conditional Access policy<\/a>)<\/li>
- Enable users and groups from Azure AD to access Windows client (Microsoft Documentation:<\/strong> Assign users and groups to an application<\/a>)<\/li>
- Choose configuration options based on requirements, such as boot images, OS images, upgrade packages, task sequences, and drivers (Microsoft Documentation:<\/strong> Task sequence steps<\/a>, Manage drivers in Configuration Manager<\/a>, Manage boot images with Configuration Manager<\/a>, Manage OS images with Configuration Manager<\/a>)<\/li>
- Configure device registration for Autopilot (Microsoft Documentation:<\/strong> Windows Autopilot registration overview<\/a>)<\/li>
![\"Tips](\"https:\/\/www.testpreptraining.ai\/blog\/wp-content\/uploads\/2022\/09\/Tips-and-Tricks-to-pass-the-Azure-Security-Engineer-MD-101-Exam-1.png\")
<\/a><\/figure><\/div>\n\n\n\n