Configuring connectivity Flashcards

Which Intune feature allows administrators to deploy trusted root certificates to Windows devices so they trust internal certificate authorities?

Answer: Trusted certificate profile

Trusted certificate profiles in Intune push a trusted root or intermediate CA certificate to the device's certificate store, enabling trust for internally issued certificates.

An administrator needs to restrict which wireless networks a corporate Windows device can connect to. Which Intune setting achieves this?

Answer: Device restrictions to allow only specific Wi-Fi networks

Device restriction profiles in Intune include settings to prevent devices from connecting to non-approved Wi-Fi networks, enforcing corporate Wi-Fi usage only.

Which protocol is used by Windows Always On VPN for device-level tunnel authentication?

Answer: IKEv2 with machine certificates

Always On VPN device tunnels use IKEv2 with machine certificates for device authentication, establishing connectivity before user sign-in.

A Windows device is unable to resolve a corporate internal website by hostname despite being connected to VPN. What is the most likely cause?

Answer: NRPT rules are not configured for the internal namespace

If NRPT rules are not configured, the device uses its default DNS servers (typically public) and cannot resolve internal hostnames, even when VPN is connected.

Which Windows connectivity feature allows devices to sync work files from a corporate file server over HTTPS without requiring a full VPN connection?

Answer: Work Folders

Work Folders is a Windows feature that syncs files from a corporate file server to a user's device over HTTPS, without requiring a full VPN connection.

An Intune administrator needs to ensure all VPN traffic routes through the corporate network rather than directly to the internet. Which VPN setting should be configured?

Answer: Disable split tunnelling to route all traffic through VPN

Disabling split tunnelling forces all device traffic through the VPN tunnel rather than routing internet traffic directly, ensuring corporate security policies apply to all traffic.