QUESTION: 209 Exam Topic: Policies and Profiles Questions

You have a Microsoft 365 tenant that contains the devices shown in the following table.

The devices are managed by using Microsoft Intune.

You create a compliance policy named Policy1 and assign Policy1 to Group1. Policy1 is configured to mark a device as Compliant only if the device security settings match the settings specified in the policy.

You discover that devices that are not members of Group1 are shown as Compliant.

You need to ensure that only devices that are assigned a compliance policy can be shown as Compliant. All other devices must be shown as Not compliant.

What should you do?

From Endpoint security, configure the Conditional access settings.
From Device compliance, configure the Compliance policy settings.
From Policy1, modify the actions for noncompliance.
From Tenant administration, modify the Diagnostic settings.

Answer(s): B

Reference:

https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started

Reveal Solution Next Question

QUESTION: 210 Exam Topic: Policies and Profiles Questions

Your network contains an Active Directory domain. The domain contains 5,000 computers that run Windows 10.

All users use Roaming User Profiles.

Some users report that it takes a long time to sign in to the computers. You discover that the users have user profiles that are larger than 1 GB. You need to reduce the amount of time it takes for the users to sign in. What should you configure?

Folder Redirection by using a Group Policy Object (GPO)
Sync your settings in the Settings app
Delivery Optimization in the Settings app
Microsoft User Experience Virtualization (UE-V) by using PowerShell

Answer(s): D

Reference:

https://docs.microsoft.com/en-us/windows/configuration/ue-v/uev-for-windows

Reveal Solution Next Question

QUESTION: 211 Exam Topic: Policies and Profiles Questions

You have a Microsoft 365 tenant that contains the objects shown in the following table.

You are creating a compliance policy named Compliance1.
Which objects can you specify in Compliance1 as additional recipients of noncompliance notifications?

Group1, Group2, Group3, Group4, and Admin1
Group1, Group2, Group3, and Group4 only
Group3, Group4, and Admin1 only
Group1, Group2, and Group3 only
Group3 and Group4 only

Answer(s): D

Reference:

https://www.ravenswoodtechnology.com/microsoft-intune-compliance-notifications/
https://docs.microsoft.com/en-us/microsoft-365/admin/create-groups/compare-groups?view=o365- worldwide

Reveal Solution Next Question

QUESTION: 212 Exam Topic: Policies and Profiles Questions

HOTSPOT (Drag and Drop is not supported)
Your network contains an Active Directory forest named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).
You use Microsoft Endpoint Configuration Manager for device management.
You have the Windows 10 devices shown in the following table.

You configure Endpoint Configuration Manager co-management as follows:
-Automatic enrollment in Intune: Pilot
-Pilot collection for all workloads: Collection2
You configure co-management workloads as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area: