Lesson 1

Lesson 4

Understanding Cloud Services

Multiple Choice

1. Which of the following represent security and management tasks that can be handled with
Microsoft Intune? (Choose all that apply)

a. Track hardware and software inventory

b. Provide remote assistance

c. Protect computers from malware

d. Manage the deployment of software updates

Answer: A, B, C, D

Difficulty: Medium

Section Reference: Understanding Microsoft Intune

Explanation: Microsoft Intune helps you manage your computers and mobile devices through a
web console. It provides the tools, reports, and licenses to ensure your computers are always
current and protected. For mobile devices, it also allows you to manage your remote workforce
by working through Exchange ActiveSync or directly through Microsoft Intune.

2. On which operating system can you install Microsoft Intune? (Choose all that apply)

a. Windows XP Professional (SP3)

b. Windows Vista Business Edition

c. Windows 8/8.1 Consumer (virtual client)

d. Windows 8/8.1 Professional (physical computer)

Answer: A, B, D

Difficulty: Medium

Section Reference: Deploying the Microsoft Intune Client

Explanation: You can install the Microsoft Intune client on computers running Windows XP
Professional (SP3), Windows Vista (Enterprise, Ultimate, or Business Edition), Windows 7
(Enterprise, Ultimate, or Professional), and Windows 8/8.1 (Professional and Enterprise). You
can deploy the Microsoft Intune client on both physical computers and virtual machines.

1-1
Lesson 1

3. Which administrator role in Microsoft Intune can create and delete all other types of
accounts?

a. Microsoft Intune Service administrator role

b. Microsoft Intune Tenant Administrator

c. Microsoft Intune User Management Administrator role

d. Microsoft Intune SuperAdmin Role

Answer: B

Difficulty: Medium

Section Reference: Reviewing Microsoft Intune Administrator Roles

Explanation: The Microsoft Intune Tenant Administrator has full control and rights regarding the
Administrator console. They can add or delete service administrator accounts and assign other
tenant administrators.

4. Which type of group is created manually in the Microsoft Intune Administration console?

a. dynamic query-based group

b. direct-based group

c. security group

d. dynamic group

Answer: B

Difficulty: Medium

Section Reference: Managing User and Computer Groups

Explanation: Direct membership is the process of manually adding users or devices from within
the Microsoft Intune console. You manually include and exclude specific members from the
group.

5. Which of the following actions removes only company data?

a. Performing a company portal wipe

b. Performing a mobile wipe

c. Performing a full wipe

d. Performing a selective wipe

Answer: D

Difficulty: Medium

1-2
Lesson 1

Section Reference: Understanding Selective Wipe

Explanation: A full wipe will restore the device to its factory defaults for Windows Phone, iOS,
and Android devices. A select wipe removes only company data.

6. Which configuration allows you to see devices that are managed by Microsoft Intune to
appear in System Center 2012 R2/2016 Configuration Manager?

a. Microsoft Intune Stand-Alone Cloud Configuration

b. Microsoft Intune Cloud+ On-Premise Configuration

c. Microsoft Intune + System Center Configuration Manager

d. Microsoft Intune with System Center Plug-in

Answer: C

Difficulty: Medium

Section Reference: Understanding Microsoft Intune Capabilities

Explanation: This configuration allows you to manage your computers and mobile devices from
the System Center Configuration Manager 2012 R2/2016 console.

7. Which type of membership should be used to add devices automatically to groups in

Microsoft Intune?

a. Criteria

b. Direct

c. Dynamic

d. Auto

Answer: A

Difficulty: Medium

Section Reference: Managing User and Computer Groups

Explanation: Criteria membership involves defining certain types of criteria that Microsoft
Intune runs a query against to find users or devices. When it finds users or computers that
match the criteria, it dynamically adds them as members to the group. The group automatically
updates with members as changes occur.

8. Which of the following tools can be used to deploy and manage servers running Windows
Server 2012 R2/2016 on public and private clouds? (Choose all that apply)

a. Microsoft Azure virtual machine (VM) tools

b. System Center 2012 R2/2016 Virtual Machine Manager (VMM)

c. Remote Desktop Connection

1-3
Lesson 1

d. System Center 2012 R2/2016 App Controller

Answer: A, B, C, D

Difficulty: Medium

Section Reference: Understanding Virtual Machines

Explanation: All of these can be used to deploy and manage servers running Windows Server
2012 R2/2016 on public and private clouds.

9. When using Microsoft Azure, which of the following is a popular open source cache for your
Azure applications?

a. Service Bus

b. Managed Cache

c. Redis Cache

d. Stream Analytics

Answer: C

Difficulty: Medium

Section Reference: Understanding Azure Services

Explanation: Redis Cache is a popular open source cache for your Azure applications.

10. Which cloud service is provided by Microsoft Office 365?

a. Storage services

b. Productivity services

c. Communication services

d. Search services

Answer: B

Difficulty: Medium

Section Reference: Understanding the Types of Cloud Services

Explanation: Productivity services allow users to work and collaborate. An example of

productivity services is Office 365, which allows users to create and share documents.

Fill in the Blank

1. The _____ is a web-based service that is hosted outside of your organization and allows users
to access services and documents over the Internet.

1-4
Lesson 1

Answer: public cloud

Difficulty: Easy

Section Reference: Understanding the Types of Cloud Services

Explanation: Public cloud services provide a way to access information from anywhere at any
time. Microsoft defines a public cloud as a web-based service that is hosted outside of your
organization. This means the information technology infrastructure (hardware, servers,
software, and so on) is located somewhere other than your office and is managed by a third
party (such as hosted).

2. _____ allows you to buy, develop, test, deploy, and manage software applications so that the
application can be accessed by the user.

Answer: Platform as a Service (PaaS)

Difficulty: Medium

Section Reference: Understanding the Types of Cloud Services

Explanation: Platform as a Service (PaaS) allows you to buy, develop, test, deploy, and manage
software applications so that the applications can be accessed by users.

3. _____ provides the infrastructure that the cloud runs on such as servers, switches, routers,
and other equipment.

Answer: Infrastructure as a Service (IaaS)

Difficulty: Medium

Section Reference: Understanding the Types of Cloud Services

Explanation: Infrastructure as a Service (IaaS) provides the infrastructure that the cloud runs on,
such as servers, switches, routers, storage area networks, firewalls, and other equipment.

4. _____ provide communications between users over the cloud.

Answer: Communication services

Difficulty: Medium

Section Reference: Understanding the Types of Cloud Services

Explanation: Communications services provide communication between users. Examples of

communications services include Exchange Online and Skype for Business Online. Exchange
Online provides email, calendar, and contact sharing; Skype for Business Online provides
instance messaging, PC-to-PC audio and video calls, and screen sharing.

5. _____ is a cloud-based management solution that allows you to manage your computers
when the users are not inside your corporate network.

Answer: Microsoft Intune

1-5
Lesson 1

Difficulty: Medium

Section Reference: Understanding Microsoft Intune

Explanation: Microsoft Intune is a cloud-based management solution that allows you to manage
your computers when they are not inside your corporate network. Microsoft Intune helps you
manage your computers and mobile devices through a web console. It provides the tools,
reports, and licenses to ensure your computers are always current and protected. For mobile
devices, it also allows you to manage your remote workforce by working through Exchange
ActiveSync or directly through Microsoft Intune.

6. _____ are used to quickly organize and manage your computers and users for Microsoft
Intune.

Answer: Microsoft Intune Groups

Difficulty: Medium

Section Reference: Managing User and Computer Groups

Explanation: Microsoft Intune Groups are used to quickly organize and manage your computers
and users, are created and managed in the Groups workspace. These groups apply only to
Microsoft Intune and are completely separate from Active Directory groups, although you can
use AD security groups as part of a query to select members when creating a group. After your
groups are set up, you can deploy Microsoft Intune policies, software packages, and software
updates to them.

7. _____ is a cloud-computing platform used for building, deploying, and managing applications
and services through a global network of Microsoft-managed datacenters.

Answer: Microsoft Azure

Difficulty: Medium

Section Reference: Understanding Microsoft Azure

Explanation: Formerly known as Windows Azure, Microsoft Azure is a cloud-computing platform

used for building, deploying, and managing applications and services through a global network
of Microsoft-managed datacenters. Although Microsoft Azure has its own web-based tools, you
can also use System Center 2012 R2/2016 Virtual Machine Manager (VMM) and App Controller.

8. _____ is a software component that is used to orchestrate protection for virtual machines
that are located on on-premises Hyper-V host servers located in the VMM cloud.

Answer: Microsoft Azure Site Recovery

Difficulty: Medium

Section Reference: Understanding Disaster Recovery, High Availability, Redundancy, and Fault
Tolerance

1-6
Lesson 1

Explanation: Microsoft Azure Site Recovery is a software component used to orchestrate

protection for virtual machines that are located on on-premises Hyper-V host servers located in
the VMM cloud.

9. The cloud provides a _____ approach when users access services on the Internet.

Answer: black box

Difficulty: Medium

Section Reference: Understanding the Types of Cloud Services

Explanation: From the standpoint of users, the cloud is simply a black box that the user
accesses. However, users are not concerned with what happens inside the black box. With
regard to cloud services, an organization signs up for cloud services and the cloud service is
provided without concerns about how those services are provided.

10. Microsoft Intune policies are used to apply settings that apply to _____ computers in any
domain.

Answer: domain-joined

Difficulty: Difficult

Section Reference: Managing Microsoft Intune Policies

Explanation: To help control the security settings on mobile devices, computer updates,
Endpoint Protection, firewall settings, and the end-user experience, Microsoft Intune has
policies. These policies apply to domain-joined computers in any domain and to non-domain
joined computers.

Short Answer
1. Define the term "hosted private cloud."

Answer: A hosted private cloud is a cloud that is provided by a third-party company but is
accessible only by users within a specific organization.

Difficulty: Difficult

Section Reference: Understanding the Types of Cloud Services

2. Describe a hybrid cloud.

Answer: A hybrid cloud is a cloud-computing environment in which the organization will

manage some of the resources in-house and a third-party organization will provide the cloud
resources externally. In other words, a hybrid cloud utilizes both a public cloud and a private
cloud.

1-7
Lesson 1

Difficulty: Medium

Section Reference: Understanding the Types of Cloud Services

1-8