MD-101 Co-management with Microsoft Endpoint Configuration Manager 2

Question 1

How many distinct co-management workloads can be individually configured in Microsoft Endpoint Manager?

Accepted Answer

7 workloads

Answer

There are 7 co-management workloads: Compliance policies, Device Configuration, Endpoint Protection, Resource Access Policies, Office Click-to-Run apps, Windows Update policies, and Client apps.

Question 2

Which co-management workload, when switched to Intune, enables management of Microsoft Defender Antivirus and Windows Firewall policies from the Intune console?

Accepted Answer

Endpoint Protection workload

Answer

The Endpoint Protection workload, when set to Intune, transfers control of Microsoft Defender Antivirus, Windows Defender Firewall, and related security settings to Intune management.

Question 3

What must be configured in Azure AD to allow existing Configuration Manager clients to automatically enroll in Intune for co-management?

Accepted Answer

Automatic MDM enrollment set to 'All' or 'Some' in Azure AD, or via Group Policy MDM enrollment settings

Answer

Automatic MDM enrollment must be enabled in Azure AD (set to All or Some users) or configured via Group Policy to trigger silent Intune enrollment for existing Configuration Manager clients.

Question 4

What is the primary purpose of the Cloud Management Gateway (CMG) in co-managed environments?

Accepted Answer

It enables Configuration Manager to manage and communicate with internet-based clients without requiring VPN

Answer

The Cloud Management Gateway (CMG) allows Configuration Manager to reach and manage clients over the internet, which is essential for co-managed devices that work remotely without VPN connectivity.

Question 5

Which Azure AD Connect feature is required to enable Hybrid Azure AD Join for co-management scenarios?

Accepted Answer

Azure AD Connect with device writeback enabled

Answer

Hybrid Azure AD Join requires Azure AD Connect with device writeback enabled, which allows on-premises AD-joined devices to also be registered in Azure AD.

MD-101 - Managing Modern Desktops Practice Test

MD-101 - Managing Modern Desktops Practice Test

MD-101 Co-management with Microsoft Endpoint Configuration Manager 2