MD-101 Microsoft Intune Device Configuration Profiles 3

Question 1

Which protocol does Intune use to deploy certificates to devices using a Certificate Authority integration?

Accepted Answer

SCEP (Simple Certificate Enrollment Protocol)

Answer

Intune uses SCEP to request and deliver certificates from a CA via the NDES server, enabling certificate-based authentication for Wi-Fi and VPN.

Question 2

What must be configured in Intune before deploying a SCEP certificate profile to devices?

Accepted Answer

A Trusted certificate profile with the root CA certificate

Answer

A Trusted certificate profile containing the root CA certificate must be deployed to devices before SCEP certificates can be trusted and used.

Question 3

Which Intune profile type delivers per-app VPN configuration on Windows 10/11 devices?

Accepted Answer

VPN profile with per-app VPN rules

Answer

A VPN profile in Intune supports per-app VPN configuration, routing only specific application traffic through the VPN tunnel.

Question 4

A Windows device shows 'Error' status for a configuration profile. Where should an administrator look first to diagnose the issue?

Accepted Answer

Intune — Device > Configuration profiles > select device and view profile details with error codes

Answer

The device detail view in Intune configuration profiles shows per-profile status with error codes that identify why a specific profile failed.

Question 5

Which Intune setting prevents users from adding personal Microsoft accounts to a corporate Windows device?

Accepted Answer

Block personal Microsoft account under Device restrictions > Accounts

Answer

The 'Block personal Microsoft account' setting under Device restrictions > Accounts prevents users from adding MSA accounts to corporate devices.

MD-101 - Managing Modern Desktops Practice Test