Update Management Flashcards

An administrator needs to immediately deploy a critical security update to all Windows devices without waiting for the configured deferral period. Which Intune feature should they use?

Answer: Expedite update

Expedite updates in Intune allow administrators to push a specific quality update to devices immediately, bypassing any configured deferral periods for urgent security patches.

In an Intune update ring, what does the 'Active hours' setting control?

Answer: The time window during which Windows will not restart devices to apply updates

Active hours defines the time window when Windows will not restart a device to complete update installation, ensuring users are not interrupted during their working hours.

Which Windows Autopatch feature automatically manages update rings and deployment schedules without requiring manual administrator configuration?

Answer: Autopatch groups

Autopatch groups in Windows Autopatch automatically manage device grouping and phased update deployment, reducing the administrative overhead of manually configuring update rings.

A company wants to keep 50 devices on Windows 10 21H2 indefinitely while the rest upgrade. Which Long-Term Servicing Channel version supports this scenario for non-specialized devices?

Answer: Windows 10 LTSC 2021

Windows 10 LTSC 2021 is the appropriate Long-Term Servicing Channel release for devices that require a stable, unchanging OS version, with 5 years of mainstream support.

What is the recommended approach for managing Microsoft 365 Apps update channels within Microsoft Intune?

Answer: Use the Microsoft 365 Apps Update channel policy under App configuration

Microsoft 365 Apps update channels are managed through App configuration policies in Intune, which control which update channel (Monthly Enterprise, Current, etc.) is used for Office apps.

An update ring in Intune is set to 'Pause quality updates.' How long can quality updates be paused before the pause automatically expires?

Answer: 35 days

Quality update pauses in Intune update rings automatically expire after 35 days, after which the device will resume receiving quality updates.

Which Intune policy type should be used to enforce that devices install all pending updates within a specific number of days, even if the user postpones the restart?

Answer: Update ring deadline settings

Update ring deadline settings in Intune include options to set a deadline by which devices must install quality and feature updates and restart, overriding user postponements.