Configuring connectivity Flashcards

You have a Windows 10 device named Computer1 enrolled in Microsoft Intune. You need to configure Computer1 as a public workstation that will run a single customer-facing, full-screen application. Which configuration profile type template should you use in Microsoft Intune admin center?

Answer: Kiosk

To configure a Windows 10 device as a public workstation running a single customer-facing, full-screen application, the "Kiosk" configuration profile type is the appropriate choice in Microsoft Intune. Kiosk mode locks down the device to run only specified applications, preventing users from accessing other system functions or applications. This ensures a dedicated and secure experience for public-facing use cases.

You plan to deploy Windows 11 Pro to 200 new computers by using the Microsoft Deployment Toolkit (MDT) and Windows Deployment Services (WDS). The company has a Volume Licensing Agreement and uses a product key to activate Windows 11. You need to ensure that the new computers will be configured to have the correct product key during the installation. What should you configure?

Answer: an MDT task sequence

When deploying Windows with MDT, the product key for activation is configured within the MDT task sequence. The task sequence orchestrates all steps of the deployment, including operating system installation, driver injection, application installation, and crucially, the entry of the product key for volume licensing. This ensures that all 200 new computers are correctly activated during the automated deployment process.

You have a Microsoft 365 E5 subscription that uses Microsoft Intune. Vou configure Intune to send log data to Log Analytics. You need to review events involving devices that fail to enroll in Intune. What should you monitor?

Answer: the Intune Device log

To review events related to devices failing to enroll in Intune, you should monitor the Intune Device log. This log specifically captures information about device enrollment, compliance, and other device-related activities. When integrated with Log Analytics, these logs provide detailed insights into enrollment failures, helping administrators troubleshoot and resolve issues efficiently.

You have a Microsoft 365 subscription. You use Microsoft Intune to manage Windows 11 devices. You need to implement Windows Local Administrator Password Solution (Windows LAPS). What should you configure?

Answer: an account protection policy

To implement Windows Local Administrator Password Solution (Windows LAPS) for Windows 11 devices managed by Microsoft Intune, you should configure an "account protection policy." This policy type in Intune is specifically designed to manage and secure local administrator accounts on Windows devices, including enabling and configuring LAPS to automatically rotate and back up local administrator passwords in Azure AD.

You have a Microsoft 365 subscription that includes Microsoft Intune. The subscription contains corporate-owned, fully managed Android Enterprise devices. You plan to deploy a configuration profile that will have a device restrictions profile type named Profile1. Profile1 will assign maintenance windows for system updates. What should you configure from the Configuration settings for Profile1?

Answer: Device experience

For Android Enterprise corporate-owned, fully managed devices, settings related to system updates, including defining maintenance windows, are found under the "Device experience" category within a device restrictions configuration profile. This section allows administrators to control various aspects of the device's user experience and operational behavior, such as update policies, kiosk modes, and display settings.