MD-101 Co-management with Microsoft Endpoint Configuration Manager 2

Question 1

How many distinct co-management workloads can be individually configured in Microsoft Endpoint Manager?

Accepted Answer

7 workloads

Answer

4 workloads

Answer

6 workloads

Answer

10 workloads

Question 2

Which co-management workload, when switched to Intune, enables management of Microsoft Defender Antivirus and Windows Firewall policies from the Intune console?

Accepted Answer

Endpoint Protection workload

Answer

Device Configuration workload

Answer

Compliance Policies workload

Answer

Resource Access Policies workload

Question 3

What must be configured in Azure AD to allow existing Configuration Manager clients to automatically enroll in Intune for co-management?

Accepted Answer

Automatic MDM enrollment set to 'All' or 'Some' in Azure AD, or via Group Policy MDM enrollment settings

Answer

An Azure AD device enrollment restriction policy targeting the devices

Answer

Azure Services configuration with a dedicated Intune connector in Configuration Manager

Answer

Cloud Management Gateway with Intune synchronization enabled

Question 4

What is the primary purpose of the Cloud Management Gateway (CMG) in co-managed environments?

Accepted Answer

It enables Configuration Manager to manage and communicate with internet-based clients without requiring VPN

Answer

It replaces the Intune connector and handles all device enrollment requests

Answer

It synchronizes policy differences between Configuration Manager and Intune in real time

Answer

It serves as a backup management channel automatically activated if Intune becomes unavailable

Question 5

Which Azure AD Connect feature is required to enable Hybrid Azure AD Join for co-management scenarios?

Accepted Answer

Azure AD Connect with device writeback enabled

Answer

Azure AD Connect with password hash synchronization only, no additional features needed

Answer

Azure AD Application Proxy configured for internal device registration

Answer

Azure AD B2B collaboration settings enabled for device objects

Question 6

When the 'Client Apps' workload is switched to Intune in a co-management configuration, what happens to applications already deployed through Configuration Manager?

Accepted Answer

Existing Configuration Manager app deployments continue unaffected, but new app deployments should use Intune

Answer

All Configuration Manager app deployments are immediately uninstalled and removed from devices

Answer

Apps remain installed but must be manually re-deployed through Intune to receive future updates

Answer

All application management transfers instantly to Intune, including existing deployment records

Question 7

Which co-management workload must be set to Intune to allow Wi-Fi profiles, VPN configurations, and certificate profiles to be managed through the Intune admin center?

Accepted Answer

Resource Access Policies workload

Answer

Device Configuration workload

Answer

Compliance Policies workload

Answer

Endpoint Protection workload