You have a Microsoft 365 subscription. All devices run Windows 10.You need to prevent users from enrolling the devices in the Windows Insider Program.What two configurations should you perform from the Microsoft Intune admin center? Each correct answer is a complete solution.Note: Each correct selection is worth one point.
Answer(s): D,E
D: Microsoft Intune includes many built-in settings to control different features on a device. You can also create custom profiles, which are created similar to built-in profiles. Custom profiles are great when you want to use device settings and features that aren't built in to Intune. These profiles include features and settings for you to control on devices in your organization. For example, you can create a custom profile that sets the same feature for every Windows device.E Set up Insider Preview builds using Intune1. Log in to the Azure portal and select Intune.2. Go to Software Updates > Windows 10 Update Rings and select + Create to make an Update Ring policy.Add a name and select the Settings section to configure its settings.3. Etc.
https://docs.microsoft.com/en-us/windows-insider/business/manage-builds
You have a Microsoft 365 E5 subscription that contains 100 Windows 10 devices enrolled in Microsoft Intune.You plan to use Endpoint analytics.You need to create baseline metrics.What should you do first?
Answer(s): B
Onboarding from the Endpoint analytics portal is required for Intune managed devices.
https://docs.microsoft.com/en-us/mem/analytics/enroll-intune
You install a feature update on a computer that runs Windows 10.How many days do you have to roll back the update?
Microsoft has changed the time period associated with operating system rollbacks with Windows 10 version 1607, decreasing it to 10 days. Previously, Windows 10 had a 30-day rollback period.
https://redmondmag.com/articles/2016/08/04/microsoft-shortens-windows-10-rollback-period.aspx
You have a Microsoft Azure subscription that contains an Azure Log Analytics workspace.You deploy a new computer named Computer1 that runs Windows 10. Computer1 is in a workgroup.You need to ensure that you can use Log Analytics to query events from Computer1.What should you do on Computer1?
Answer(s): A
You have a Microsoft 365 E5 subscription and 100 unmanaged iPad devices.You need to deploy a specific iOS update to the devices. Users must be prevented from manually installing a more recent version of iOS.Which two actions should you perform? Each correct answer presents part of the solution.Note: Each correct selection is worth one point.
Answer(s): A,E
A: iOS and iPadOS device settings to allow or restrict features using Intune There are different settings you can control on iOS and iPadOS devices. As part of your mobile device management (MDM) solution, use these settings to allow or disable features, set password rules, allow or restrict specific apps, and more.This feature applies to:iOS/iPadOSThese settings are added to a device configuration profile in Intune, and then assigned or deployed to your iOS/iPadOS devices.E: Enroll iOS and iPadOS devices in Microsoft IntunePersonal and organization-owned devices can be enrolled in Intune. Once they're enrolled, they receive the policies and profiles you create. You have the following options when enrolling iOS/iPadOS devices:Automated device enrollment (ADE)Apple ConfiguratorBYOD: User and Device enrollmentAutomated Device Enrollment (ADE) (supervised)Previously called Apple Device Enrollment Program (DEP). Use on devices owned by your organization. This option configures settings using Apple Business Manager (ABM) or Apple School Manager (ASM). It enrolls a large number of devices, without you ever touching the devices. These devices are purchased from Apple, have your preconfigured settings, and can be shipped directly to users or schools. You create an enrollment profile in the Intune admin center, and push this profile to the devices.
https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-ios https://learn.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-enrollment-ios-ipados
You have a Microsoft 365 subscription that includes Microsoft Intune.You have an update ring named UpdateRing1 that contains the following settings:Automatic update behavior: Auto install and restart at a scheduled timeAutomatic behavior frequency: First week of the monthScheduled install day: TuesdayScheduled install time: 3 AMFrom the Microsoft Intune admin center, you select Uninstall for the feature updates of UpdateRing1.When will devices start to remove the feature updates?
Update rings for Windows 10 and later policy in IntuneUninstallAn Intune administrator can use Uninstall to uninstall (roll back) the latest feature update or the latest quality update for an active or paused update ring. After uninstalling one type, you can then uninstall the other type.Intune doesn't support or manage the ability of users to uninstall updates.ImportantWhen you use the Uninstall option, Intune passes the uninstall request to devices immediately.Windows devices start removal of updates as soon as they receive the change in Intune policy. Update removal isn't limited to maintenance schedules, even when they're configured as part of the update ring.If the update removal requires a device restart, the device restarts without offering device users an option to delay.
https://learn.microsoft.com/en-us/mem/intune/protect/windows-10-update-rings
You have a hybrid deployment of Microsoft Entra that contains 50 Windows 11 devices. All the devices are enrolled in Microsoft Intune.You discover that Group Policy settings override the settings configured in Microsoft Intune policies.You need to ensure that the settings configured in Microsoft Intune override the Group Policy settings.What should you do?
Creating the policyLet's create a new policy in Intune to control the GP vs. MDM winner1) Navigate to portal.azure.com and locate Intune2) Select "Device configuration à Profiles à Create profile"3) Under Platform select Windows 10 and later4) Under Profile type select "custom" and "add"5) Name the custom setting with something intuitive6) For OMA-URI add the policy OMA-URI string: ./Device/Vendor/MSFT/Policy/Config/ControlPolicyConflict/ MDMWinsOverGP7) For Data type select Integer and add the numberNote: The following describes which policy wins according to Windows 10 version.Windows 10 versions 1709 and earlier Group Policy will override MDM policies, even if an identical policy is configured in MDM.Windows 10 version 1803 and beyond there is a new Policy CSP (configuration service provider) setting called ControlPolicyConflict that includes the policy of MDMWinsOverGP, where the preference of which policy wins can be controlled, i.e. Microsoft Intune MDM policy.Note 2: the ControlPolicyConflict policy allows the IT admin to control which policy will be used whenever both the MDM policy and its equivalent Group Policy (GP) are set on the device.
https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-controlpolicyconflict https://uem4all.com/2018/04/02/windows-10-group-policy-vs-intune-mdm-policy-who-wins/
You have a Microsoft 365 subscription that uses Microsoft Intune Suite.You use Microsoft Intune to manage devices.You need to ensure that the startup performance of managed Windows 11 devices is captured and available for review in the Intune admin center.What should you configure?
Answer(s): D
Post your Comments and Discuss Microsoft MD-102 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MD-102 content, but please register or login to continue.