MD-101 Microsoft Intune Device Configuration Profiles

Question 1

Which profile type in Intune allows administrators to configure Windows Defender Firewall rules for managed devices?

Accepted Answer

Endpoint security — Firewall policy

Answer

Device restrictions profile

Answer

Custom OMA-URI profile

Answer

Identity protection profile

Question 2

An administrator needs to deploy a Wi-Fi profile to iOS and Android devices. Which Intune profile type should be used?

Accepted Answer

Wi-Fi profile under Device configuration

Answer

Device restrictions

Answer

VPN profile

Answer

Email profile

Question 3

What is the purpose of an OMA-URI setting in a custom Intune configuration profile?

Accepted Answer

To apply settings not exposed in Intune's built-in profile UI using raw MDM CSP paths

Answer

To configure Azure AD Conditional Access rules

Answer

To push scripts to managed devices

Answer

To configure BitLocker recovery keys

Question 4

Which Intune profile type enforces Windows Hello for Business on enrolled Windows 10/11 devices?

Accepted Answer

Both B and C are valid

Answer

Device restrictions profile

Answer

Identity protection profile (Windows Hello for Business)

Answer

Endpoint security — Account protection

Question 5

A configuration profile assigned to a device group conflicts with a profile assigned to a user group. Which takes precedence by default?

Accepted Answer

Device group assignment always wins

Answer

User group assignment always wins

Answer

The profile with higher priority number wins

Answer

The most recently created profile wins

Question 6

Which Intune report shows which devices have successfully applied a specific configuration profile?

Accepted Answer

Device configuration — per-profile assignment status report

Answer

Device compliance report

Answer

Endpoint analytics — Device health

Answer

Windows Update compliance report