MD-101 Microsoft Intune Device Configuration Profiles 2 — Questions and Answers
Question 1: What format does Intune use for administrative templates (ADMX-backed policies) to configure Group Policy-equivalent settings?
- Custom OMA-URI profiles only
- Administrative Templates profile type in Device configuration (Correct answer)
- PowerShell scripts deployed via Intune
- Windows Information Protection policies
Correct answer: Administrative Templates profile type in Device configuration
Intune's Administrative Templates profile type provides a cloud-based equivalent to ADMX Group Policy settings for Windows 10/11 devices.
Question 2: Which setting in a Device restrictions profile prevents users from resetting their device using the Settings app?
- Block factory reset (Correct answer)
- Require device lock
- Disable recovery mode
- Block manual unenrollment
Correct answer: Block factory reset
The 'Block factory reset' setting in a Device restrictions profile prevents users from using the Settings app to reset the device to factory defaults.
Question 3: An Intune configuration profile shows a status of 'Not applicable' for several devices. What does this mean?
- The profile failed to deploy to those devices
- The profile settings do not apply to the OS version or device type (Correct answer)
- The devices are offline and have not checked in
- The profile requires manual approval
Correct answer: The profile settings do not apply to the OS version or device type
'Not applicable' means the profile's settings are not compatible with the device's OS, platform, or version, so the profile is intentionally skipped.
Question 4: Which Intune profile type is used to deploy trusted root certificates to managed devices?
- Device restrictions
- Trusted certificate profile under Device configuration (Correct answer)
- Endpoint security — Certificate authority
- SCEP certificate profile
Correct answer: Trusted certificate profile under Device configuration
A Trusted certificate profile in Intune deploys root CA certificates to devices, which is often a prerequisite for SCEP or PKCS certificate profiles.
Question 5: What is the check-in interval for Intune-managed Windows devices to retrieve new policies?
- Every 5 minutes
- Every 8 hours with an initial check-in within 15 minutes of enrollment (Correct answer)
- Every 24 hours
- Only when a user signs in
Correct answer: Every 8 hours with an initial check-in within 15 minutes of enrollment
Windows devices check in with Intune approximately every 8 hours, with an initial sync within 15 minutes of enrollment and after device restart.
Question 6: Which Intune feature allows configuration profiles to be applied only when devices are on a corporate network?
- Applicability rules
- Scope tags
- Filters (Correct answer)
- Conditional Access
Correct answer: Filters
Intune filters allow profiles to be dynamically included or excluded based on device properties, including network location when combined with Conditional Access.
MD-101 Microsoft Intune Device Configuration Profiles 2
What format does Intune use for administrative templates (ADMX-backed policies) to configure Group Policy-equivalent settings?