Update Ring

********************************************************************************************************
*******************UPDATE RING
********************************************************************************************************
Question #86Topic 1
You have a Microsoft 365 subscription. All devices run Windows 10.
You need to prevent users from enrolling the devices in the Windows Insider Program.
What two configurations should you perform from the Microsoft Intune admin center? Each correct answer is a complete solution.
NOTE: Each correct selection is worth one point.
A. a device restrictions device configuration profile
B. an app configuration policy
C. a Windows 10 and later security baseline
D. a custom device configuration profile
E. a Windows 10 and later update ring
********************************************************************************************************
Question #205Topic 1
You manage 1,000 computers that run Windows 10. All the computers are enrolled in Microsoft Intune. You manage the servicing channel settings
of the computers by using Intune.
You need to review the servicing status of a computer.
What should you do?
A. From Device configuration – Profiles, view the device status.
B. From Software updates, view the Per update ring deployment state.
C. From Software updates, view the audit logs.
D. From Device compliance, view the device compliance.
********************************************************************************************************
You have a Microsoft 365 subscription. The subscription contains 500 computers that run Windows 11 and are enrolled in Microsoft Intune.
You need to manage the deployment of monthly security updates. The solution must meet the following requirements:
• Updates must be deployed to a group of test computers for quality assurance.
• Updates must be deployed automatically 15 days after the quality assurance testing.
What should you create in the Microsoft Intune admin center?
A. a device configuration profile
B. a feature update policy
C. a security baseline
D. an update ring
********************************************************************************************************
*******************APP PROTECTION POLICY
********************************************************************************************************
Question #81Topic 1
Your company implements Azure AD, Microsoft 365, Microsoft Intune, and Azure Information Protection.
The company's security policy states the following:
• Personal devices do not need to be enrolled in Intune.
• Users must authenticate by using a PIN before they can access corporate email data.
• Users can use their personal iOS and Android devices to access corporate cloud services.
• Users must be prevented from copying corporate email data to a cloud storage service other than Microsoft OneDrive for Business.
You need to configure a solution to enforce the security policy.
What should you create?
A. a device configuration profile from the Microsoft Intune admin center
B. a data loss prevention (DLP) policy from the Microsoft Purview compliance portal
C. an insider risk management policy from the Microsoft Purview compliance portal
D. an app protection policy from the Microsoft Intune admin center
********************************************************************************************************
You have a Microsoft 365 subscription that contains 1,000 iOS devices and includes Microsoft Intune.
You need to prevent the printing of corporate data from managed apps on the devices.
What should you configure?
A. an app configuration policy
B. a security baseline
C. an app protection policy
D. an iOS app provisioning profile
********************************************************************************************************
You have a Microsoft 365 subscription that uses Microsoft Intune Suite.
You use Intune to manage all devise.
Users have iOS devices with Microsoft apps installed.
You need to prevent users from cutting, copying, and pasting data between Microsoft Excel and other apps installed on the devices.
A. an app protection policy
C. an iOS app provisioning profile
D. policies for Microsoft Office apps
********************************************************************************************************
*******************APP CONFIGURATION POLICY
********************************************************************************************************
Question #82Topic 1
You have a Microsoft 365 subscription that contains 500 Android Enterprise devices.
All the devices are enrolled in Microsoft Intune.
You need to deliver bookmarks to the Chrome browser on the devices.
A. a compliance policy
B. a configuration profile
C. an app protection policy
D. an app configuration policy
Correct Answer: C
Community vote distribution
D (81%)
Other
********************************************************************************************************
*******************CONDITIONAL ACCESS POLICY
********************************************************************************************************
You have a Microsoft 365 subscription.
You use app protection policies to protect corporate data on Android devices.
You need to ensure that any user connecting from an Android device can only access the corporate data if they connect from an app that supports
mobile application management (MAM).
B. a Conditional Access policy
C. a device configuration profile
D. a device compliance policy
********************************************************************************************************
*******************DEVICE CONFIGURATION
********************************************************************************************************
Question #62Topic 1
Case study -
Overview -
Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York.
Contoso has the users and computers shown in the following table.
The company has IT, human resources (HR), legal (LEG), marketing (MKG), and finance (FIN) departments.
Contoso recently purchased a Microsoft 365 subscription.
The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office will work from home.
Existing Environment -
The network contains an Active Directory domain named contoso.com that is synced to Azure AD.
All member servers run Windows Server 2016. All laptops and desktop computers run Windows 10 Enterprise.
The computers are managed by using Microsoft Configuration Manager. The mobile devices are managed by using Microsoft Intune.
The naming convention for the computers is the department acronym, followed by a hyphen, and then four numbers, for example FIN-6785. All the
computers are joined to the on-premises Active Directory domain.
Each department has an organizational unit (OU) that contains a child OU named Computers. Each computer account is in the Computers OU of
its respective department.
Intune Configuration -
The domain has the users shown in the following table.
User2 is a device enrollment manager (DEM) in Intune.
The devices enrolled in Intune are shown in the following table.
The device compliance policies in Intune are configured as shown in the following table.
The device compliance policies have the assignments shown in the following table.
The device limit restrictions in Intune are configured as shown in the following table.
Requirements -
Planned changes -
Contoso plans to implement the following changes:
• Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro preinstalled and were purchased already.
• Implement co-management for the computers.
Technical Requirements -
Contoso must meet the following technical requirements:
• Ensure that the users in a group named Group4 can only access Microsoft Exchange Online from devices that are enrolled in Intune.
• Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows Autopilot.
• Create a provisioning package for new computers in the HR department.
• Block iOS devices from sending diagnostic and usage telemetry data.
• Use the principle of least privilege whenever possible.
• Enable the users in the MKG department to use App1.
• Pilot co-management for the IT department.
You need to meet the technical requirements for the iOS devices.
Which object should you create in Intune?
A. a deployment profile
B. an app protection policy
D. a compliance policy
********************************************************************************************************
Question #90Topic 1
You have a Microsoft 365 E5 subscription and 100 unmanaged iPad devices.
You need to deploy a specific iOS update to the devices. Users must be prevented from manually installing a more recent version of iOS.
Which two actions should you perform? Each correct answer presents part of the solution.
A. Create a device configuration profile.
B. Enroll the devices in Microsoft Intune by using the Intune Company Portal.
C. Create a compliance policy.
D. Create an iOS app provisioning profile.
E. Enroll the devices in Microsoft Intune by using Apple Business Manager.
********************************************************************************************************
You have computers that run Windows 11 Pro. The computers are joined to Azure AD and enrolled in Microsoft Intune.
You need to upgrade the computers to Windows 11 Enterprise.
What should you configure in Intune?
A. a device compliance policy
B. a device cleanup rule
C. a device enrollment policy
D. a device configuration profile
********************************************************************************************************
Your company has 200 computers that run Windows 10. The computers are managed by using Microsoft Intune.
Currently, Windows updates are downloaded without using Delivery Optimization.
You need to configure the computers to use Delivery Optimization.
What should you create in Intune?
B. a Windows 10 update ring
D. an app protection policy
********************************************************************************************************
You have a Microsoft 365 E5 subscription that contains 100 iOS devices enrolled in Microsoft Intune.
You need to ensure that notifications of iOS updates are deferred for 30 days after the updates are released.
A. an iOS app provisioning profile
B. a device configuration profile based on the Device features templates
C. an update policy for iOS/iPadOS
D. a device configuration profile based on the Device restrictions template
********************************************************************************************************
You have a Windows 10 device named Device1 that is joined to Active Directory and enrolled in Microsoft Intune.
Device1 is managed by using Group Policy and Intune.
You need to ensure that the Intune settings override the Group Policy settings.
B. a device compliance policy
C. an MDM Security Baseline profile
D. a Group Policy Object (GPO)
********************************************************************************************************
You have 200 computers that run Windows 10. The computers are joined to Azure AD and enrolled in Microsoft Intune.
You need to enable self-service password reset on the sign-in screen.
Which settings should you configure from the Microsoft Intune admin center?
A. Device configuration
B. Device enrollment
C. Conditional access
D. Device compliance
********************************************************************************************************
*******************ACCOUNT PROTECTION POLICY
********************************************************************************************************
You have a Microsoft 365 subscription that contains a user named User1 and uses Microsoft Intune Suite.
You use Microsoft Intune to manage devices that run Windows 11.
User provides remote support for 75 devices in the marketing department.
You need to add User1 to the Remote Desktop Users group on each marketing department device.
C. an account protection policy
********************************************************************************************************
You have a Microsoft 365 subscription that contains a user named User1 and uses Microsoft Intune Suite.
You use Microsoft Intune to manage devices that run Windows 11.
You need to remove User1 from the local Administrators group on all enrolled devices.
B. an account protection policy
C. an app configuration policy
********************************************************************************************************
*******************LOG ANALYTICS
********************************************************************************************************
You have an Azure subscription.
You have an on-premises Windows 11 device named Device1.
You plan to monitor Device1 by using Azure Monitor.
You create a data collection rule (DCR) named DCR1 in the subscription.
To what should you associate DCR1?
A. Azure Network Watcher
B. Device1
C. a Log Analytics workspace
D. a Monitored Object
********************************************************************************************************
*******************DEVICE COMPLIANCE POLICY
********************************************************************************************************
You use a Microsoft Intune subscription to manage iOS devices.
You configure a device compliance policy that blocks jailbroken iOS devices.
You need to enable Enhanced jailbreak detection.
A. the Compliance policy settings
B. the device compliance policy
C. a network location
D. a configuration profile
********************************************************************************************************
*******************ENROLLMENT STATUS PAGE
********************************************************************************************************
Question #52Topic 1
You have a Microsoft 365 subscription that uses Microsoft Intune Suite.
You use Microsoft Intune to manage devices.
You use Windows Autopilot to deploy Windows 11 to devices.
A support engineer reports that when a deployment fails, they cannot collect deployment logs from failed device.
You need to ensure that when a deployment fails, the deployment logs can be collected.
A. the automatic enrollment settings
B. the Windows Autopilot deployment profile
C. the enrollment status page (ESP) profile
D. the device configuration profile
********************************************************************************************************
You have a Microsoft 365 subscription that includes Microsoft Intune.
You plan to use Windows Autopilot to deploy Windows 11 devices.
You need to meet the following requirements during Autopilot provisioning:
• Display the app and profile configuration progress.
• Block users from using the devices until all apps and profiles are installed
C. an enrollment device platform restriction
D. an enrollment status page
********************************************************************************************************
*******************CONFIGURATION PROFILE
********************************************************************************************************
Question #20Topic 1
You have a Microsoft 365 E5 subscription that contains 500 macOS devices enrolled in Microsoft Intune.
You need to ensure that you can apply Microsoft Defender for Endpoint antivirus policies to the macOS devices. The solution must minimize
administrative effort.
What should you do?
A. Onboard the macOS devices to the Microsoft Purview compliance portal.
B. From the Microsoft Intune admin center, create a security baseline.
C. Install Defender for Endpoint on the macOS devices.
D. From the Microsoft Intune admin center, create a configuration profile.
********************************************************************************************************
Question #21Topic 1
You have an Azure AD tenant and 100 Windows 10 devices that are Azure AD joined and managed by using Microsoft Intune.
You need to configure Microsoft Defender Firewall and Microsoft Defender Antivirus on the devices. The solution must minimize administrative
effort.
A. To configure Microsoft Defender Antivirus, create a Group Policy Object (GPO) and configure the Windows Defender Antivirus settings.
B. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Device restrictions settings.
C. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Endpoint protection settings.
D. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Device restrictions settings.
E. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Endpoint protection settings.
F. To configure Microsoft Defender Firewall, create a Group Policy Object (GPO) and configure Windows Defender Firewall with Advanced Security.
********************************************************************************************************
Question #34Topic 1
You have a Microsoft 365 E5 subscription that contains 150 hybrid Azure AD joined Windows devices. All the devices are enrolled in Microsoft
Intune.
You need to configure Delivery Optimization on the devices to meet the following requirements:
Allow downloads from the internet and from other computers on the local network.
Limit the percentage of used bandwidth to 50.
What should you use?
A. a configuration profile
B. a Windows Update for Business Group Policy setting
C. a Microsoft Peer-to-Peer Networking Services Group Policy setting
D. an Update ring for Windows 10 and later profile
********************************************************************************************************
Question #62Topic 1
Case study -
Overview -
Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York.
Contoso has the users and computers shown in the following table.
The company has IT, human resources (HR), legal (LEG), marketing (MKG), and finance (FIN) departments.
Contoso recently purchased a Microsoft 365 subscription.
The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office will work from home.
Existing Environment -
The network contains an Active Directory domain named contoso.com that is synced to Azure AD.
All member servers run Windows Server 2016. All laptops and desktop computers run Windows 10 Enterprise.
The computers are managed by using Microsoft Configuration Manager. The mobile devices are managed by using Microsoft Intune.
The naming convention for the computers is the department acronym, followed by a hyphen, and then four numbers, for example FIN-6785. All the
computers are joined to the on-premises Active Directory domain.
Each department has an organizational unit (OU) that contains a child OU named Computers. Each computer account is in the Computers OU of
its respective department.
Intune Configuration -
The domain has the users shown in the following table.
User2 is a device enrollment manager (DEM) in Intune.
The devices enrolled in Intune are shown in the following table.
The device compliance policies in Intune are configured as shown in the following table.
The device compliance policies have the assignments shown in the following table.
The device limit restrictions in Intune are configured as shown in the following table.
Requirements -
Planned changes -
Contoso plans to implement the following changes:
• Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro preinstalled and were purchased already.
• Implement co-management for the computers.
Technical Requirements -
Contoso must meet the following technical requirements:
• Ensure that the users in a group named Group4 can only access Microsoft Exchange Online from devices that are enrolled in Intune.
• Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows Autopilot.
• Create a provisioning package for new computers in the HR department.
• Block iOS devices from sending diagnostic and usage telemetry data.
• Use the principle of least privilege whenever possible.
• Enable the users in the MKG department to use App1.
• Pilot co-management for the IT department.
You need to meet the technical requirements for the iOS devices.
Which object should you create in Intune?
A. a deployment profile
D. a compliance policy
********************************************************************************************************
Question #86Topic 1
You have a Microsoft 365 subscription. All devices run Windows 10.
You need to prevent users from enrolling the devices in the Windows Insider Program.
What two configurations should you perform from the Microsoft Intune admin center? Each correct answer is a complete solution.
A. a device restrictions device configuration profile
C. a Windows 10 and later security baseline
D. a custom device configuration profile
E. a Windows 10 and later update ring
********************************************************************************************************
Question #90Topic 1
You have a Microsoft 365 E5 subscription and 100 unmanaged iPad devices.
You need to deploy a specific iOS update to the devices. Users must be prevented from manually installing a more recent version of iOS.
A. Create a device configuration profile.
B. Enroll the devices in Microsoft Intune by using the Intune Company Portal.
C. Create a compliance policy.
D. Create an iOS app provisioning profile.
E. Enroll the devices in Microsoft Intune by using Apple Business Manager.
********************************************************************************************************
You have computers that run Windows 11 Pro. The computers are joined to Azure AD and enrolled in Microsoft Intune.
You need to upgrade the computers to Windows 11 Enterprise.
What should you configure in Intune?
B. a device cleanup rule
C. a device enrollment policy
********************************************************************************************************
Your company has 200 computers that run Windows 10. The computers are managed by using Microsoft Intune.
Currently, Windows updates are downloaded without using Delivery Optimization.
You need to configure the computers to use Delivery Optimization.
What should you create in Intune?
B. a Windows 10 update ring
D. an app protection policy
********************************************************************************************************
You have a Microsoft 365 E5 subscription that contains 100 iOS devices enrolled in Microsoft Intune.
You need to ensure that notifications of iOS updates are deferred for 30 days after the updates are released.
A. an iOS app provisioning profile
B. a device configuration profile based on the Device features templates
C. an update policy for iOS/iPadOS
D. a device configuration profile based on the Device restrictions template
********************************************************************************************************
You have a Windows 10 device named Device1 that is joined to Active Directory and enrolled in Microsoft Intune.
Device1 is managed by using Group Policy and Intune.
You need to ensure that the Intune settings override the Group Policy settings.
C. an MDM Security Baseline profile
D. a Group Policy Object (GPO)
********************************************************************************************************

Update Ring

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Update Ring

Uploaded by

Copyright:

Available Formats

********************************************************************************************************

You might also like