Manage Device Updates MD-102 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   An organization has deployed Windows update rings in Intune. The IT team wants to verify that all devices have installed the latest quality update and identify any devices that are failing to install. You need to monitor update compliance. What should you do?

   • AUse the Delivery Optimization reports to determine update installation status.
   • BUse the Intune console's 'Updates' page to view the per-ring update status and drill into device-level errors.
   • CRun a PowerShell script on each device to check the installed update version.
   • DCheck the Microsoft 365 admin center for update compliance reports.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   An Intune administrator is planning update management for a fleet of Windows 11 devices. Which two settings are typically configured in an update ring policy?

   • ADevice naming format and primary user assignment
   • BQuality update deferral period and feature update deferral period
   • CApplication installation deadline and app removal grace period
   • DDisk encryption method and BitLocker recovery key rotation
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company has 2,000 Windows 10 devices enrolled in Intune. They want to deploy the Windows 11 feature update to a pilot group of 100 devices first, and then to the rest of the fleet over the next month. They also want to avoid overwhelming the network during the rollout. You need to configure the deployment. What should you do?

   • ACreate two update rings: one for the pilot group with a short deferral and one for the rest with a longer deferral, and configure Delivery Optimization.
   • BDeploy the feature update as a line-of-business app to all devices.
   • CUse a Windows Autopatch deployment to automatically roll out the feature update to all devices.
   • DCreate one update ring for all devices and set the feature update deferral to 30 days.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company has a mixed environment of Windows 10 and Windows 11 devices. They want to deploy the Windows 11 23H2 feature update to a pilot group first, then to the rest. They also need to ensure that devices that are not yet eligible for Windows 11 (due to hardware requirements) do not attempt the upgrade. What should they do?

   • AUse an update ring with a feature update deferral of 0 days for all devices.
   • BDeploy the feature update via a configuration profile that checks hardware compatibility.
   • CCreate a feature update profile for Windows 11 23H2 and assign it to the pilot group, then later to all devices, and use a device filter to exclude non-compliant hardware.
   • DUse Windows Autopatch to manage the feature update deployment.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company has 200 Android Enterprise devices enrolled in Intune. They want to ensure that all devices are running a minimum security patch level and that updates are installed during off-hours. You need to configure update management. What should you do?

   • AUse a configuration profile to set the system update policy to 'Automatic' and rely on the device manufacturer's schedule.
   • BCreate a compliance policy that requires a minimum security patch level and a configuration profile that sets the update window to off-hours.
   • CUse the Settings Catalog to configure a Windows update ring for Android devices.
   • DDeploy firmware-over-the-air (FOTA) updates from Intune to all devices.
   Reveal Solution Discussion Select an answer first