2 - Execute device enrollment Flashcards

1
Q

What is the first step in configuring automatic enrollment for Windows devices in Microsoft Intune?

A) Create a device configuration profile
B) Set up a device compliance policy
C) Enable automatic enrollment in Azure AD
D) Assign an enrollment policy

Source

A

C) Enable automatic enrollment in Azure AD (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is required to enroll iOS devices using the Device Enrollment Program (DEP) in Intune?

A) Apple MDM Push certificate
B) DEP token
C) Apple Configurator
D) Company Portal app

Source

A

B) DEP token (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How can you ensure that only corporate-owned devices are enrolled in Intune?

A) Configure a device compliance policy
B) Set up a device enrollment restriction
C) Deploy a device configuration profile
D) Use the Company Portal app

Source

A

B) Set up a device enrollment restriction (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

You need to enroll 500 Android devices in Intune with work profiles. What should you configure first?

A) A device compliance policy
B) A device configuration profile
C) A managed Google Play account
D) A device enrollment restriction

Source

A

C) A managed Google Play account (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which method should be used to bulk enroll multiple Windows 10 devices in Intune?

A) Windows Autopilot
B) Configuration Manager
C) Provisioning packages
D) Azure AD join

Source

A

C) Provisioning packages (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What tool allows you to block personal devices from accessing corporate resources unless they are enrolled in Intune?

A) Conditional access policy
B) Device compliance policy
C) App protection policy
D) Device configuration profile

Source

A

A) Conditional access policy (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which Intune feature should be used to prevent users from enrolling more devices than allowed by company policy?

A) Device enrollment restrictions
B) Device compliance policies
C) App protection policies
D) Conditional access policies

Source

A

A) Device enrollment restrictions (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

You need to ensure that only Windows 10 devices with BitLocker enabled can be enrolled in Intune. What should you use?

A) A device compliance policy
B) A device enrollment restriction
C) A conditional access policy
D) A device configuration profile

Source

A

A) A device compliance policy (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which feature allows you to automate the application of specific enrollment profiles to iOS devices during enrollment in Intune?

A) Apple Configurator
B) Enrollment rules
C) Enrollment program tokens
D) Device compliance policies

Source

A

C) Enrollment program tokens (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the primary tool used to enroll macOS devices into Intune?

A) Apple Business Manager
B) Company Portal app
C) Apple Configurator
D) Device Enrollment Manager

Source

A

B) Company Portal app (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which role in Intune allows a user to manage the enrollment of a large number of devices?

A) Device Enrollment Manager (DEM)
B) Global Administrator
C) Intune Administrator
D) Help Desk Operator

Source

A

A) Device Enrollment Manager (DEM) (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How can you enforce multi-factor authentication (MFA) during device enrollment in Intune?

A) Configure MFA in Azure AD
B) Set up a device compliance policy
C) Use a conditional access policy
D) Implement an app protection policy

Source

A

C) Use a conditional access policy (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which feature in Intune can be used to specify that only corporate-owned devices can enroll using a specific enrollment profile?

A) Device compliance policies
B) Enrollment restrictions
C) Device configuration profiles
D) Enrollment token restrictions

Source

A

B) Enrollment restrictions (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

You need to ensure that only devices that meet specific security requirements can access corporate resources. Which Intune feature should you configure?

A) App protection policies
B) Conditional access policies
C) Device compliance policies
D) Device configuration profiles

Source

A

B) Conditional access policies (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What tool should be used to configure settings and install apps during the enrollment of Windows 10 devices in Intune?

A) Device compliance policies
B) Device configuration profiles
C) Provisioning packages
D) Windows Autopilot

Source

A

D) Windows Autopilot (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which scenario would require the use of the Intune Enrollment Program token?

A) Enrolling corporate-owned iOS devices
B) Enrolling personal Android devices
C) Enrolling Windows 10 devices
D) Enrolling macOS devices

Source

A

A) Enrolling corporate-owned iOS devices (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Your company needs to ensure that all Android devices are enrolled in Intune with a specific enrollment profile. What should you configure?

A) Enrollment token
B) Enrollment restriction
C) App configuration policy
D) Device compliance policy

Source

A

A) Enrollment token (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which Intune feature is used to assign a specific configuration to newly enrolled Windows 10 devices?

A) Device compliance policies
B) Device configuration profiles
C) App protection policies
D) Enrollment restrictions

Source

A

B) Device configuration profiles (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How can you automate the assignment of a specific configuration profile during the enrollment of iOS devices in Intune?

A) Use a DEP token
B) Set up a configuration profile
C) Assign the profile to a group
D) Use a provisioning package

Source

A

A) Use a DEP token (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What action should be taken to enroll devices in Intune using Windows Autopilot?

A) Create a device compliance policy
B) Configure an Autopilot profile
C) Assign a configuration profile
D) Set up a conditional access policy

Source

A

B) Configure an Autopilot profile (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Which policy should be configured to restrict the enrollment of personal devices into Intune?

A) Device compliance policy
B) Device enrollment restriction
C) Device configuration profile
D) Conditional access policy

Source

A

B) Device enrollment restriction (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What configuration in Intune ensures that only corporate-owned devices are allowed to be enrolled?

A) Conditional access policy
B) Device enrollment restriction
C) Device compliance policy
D) App protection policy

Source

A

B) Device enrollment restriction (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Which tool can be used to enforce security policies during device enrollment in Intune?

A) Device compliance policy
B) Device enrollment restriction
C) Conditional access policy
D) Device configuration profile

Source

A

C) Conditional access policy (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What method is used to configure bulk enrollment of Android devices in Intune?

A) Android Enterprise
B) Device Enrollment Manager (DEM)
C) Provisioning packages
D) Azure AD join

Source

A

A) Android Enterprise (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Which enrollment method should be used for personal Windows 10 devices in BYOD scenarios?

A) Azure AD join
B) Windows Autopilot
C) BYOD Enrollment with Intune
D) Co-management with Configuration Manager

Source

A

C) BYOD Enrollment with Intune (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What should be configured in Intune to ensure that only specific users can enroll devices?

A) Enrollment restrictions
B) Device compliance policies
C) Device configuration profiles
D) Conditional access policies

Source

A

A) Enrollment restrictions (6)

27
Q

How can you automatically enroll Windows 10 devices in Intune during the initial setup process?

A) Use Windows Autopilot
B) Use Azure AD join
C) Configure a device compliance policy
D) Configure a conditional access policy

Source

A

A) Use Windows Autopilot (6)

28
Q

Which enrollment method should be used to enroll macOS devices into Intune?

A) Device Enrollment Manager
B) Apple Configurator
C) Enrollment Program Token
D) Company Portal app

Source

A

D) Company Portal app (7)

29
Q

How can you ensure that a specific enrollment profile is used during the enrollment of Android devices in Intune?

A) Use a managed Google Play account
B) Configure an enrollment token
C) Assign a compliance policy
D) Set up a device configuration profile

Source

A

B) Configure an enrollment token (6)

30
Q

What is the role of the Device Enrollment Manager (DEM) in Intune?

A) To enroll a large number of devices
B) To manage compliance policies
C) To configure device configuration profiles
D) To enforce app protection policies

Source

A

A) To enroll a large number of devices (7)

31
Q

You need to deploy Windows 11 to new devices using Windows Autopilot. Which profile should you configure in Intune?

A) Device compliance profile
B) Enrollment profile
C) Autopilot deployment profile
D) Device configuration profile

Source

A

C) Autopilot deployment profile (7)

32
Q

How can you configure Intune to prevent users from accessing corporate resources on jailbroken devices?

A) Use a device compliance policy
B) Use an app protection policy
C) Configure a conditional access policy
D) Set up a device enrollment restriction

Source

A

A) Use a device compliance policy (7)

33
Q

Which Intune feature should be used to ensure that only compliant devices can access corporate apps?

A) Device configuration profiles
B) App protection policies
C) Conditional access policies
D) Device compliance policies

Source

A

C) Conditional access policies (7)

34
Q

How can you ensure that a specific compliance policy is enforced during the enrollment of Windows 10 devices?

A) Set up an Autopilot deployment profile
B) Configure a conditional access policy
C) Assign the compliance policy to the enrollment group
D) Use a provisioning package

Source

A

C) Assign the compliance policy to the enrollment group (6)

35
Q

You need to prevent personal devices from accessing corporate resources unless they are compliant. What should you configure?

A) Device compliance policies
B) Conditional access policies
C) Device enrollment restrictions
D) Device configuration profiles

Source

A

B) Conditional access policies (6)

36
Q

Which enrollment method is recommended for enrolling corporate-owned, single-use Android devices?

A) BYOD Enrollment
B) Android Enterprise Dedicated
C) Android Enterprise Work Profile
D) Device Enrollment Manager (DEM)

Source

A

B) Android Enterprise Dedicated (7)

37
Q

What configuration in Intune ensures that a device must be compliant before it can be enrolled?

A) Device compliance policy
B) Conditional access policy
C) Enrollment restriction
D) Enrollment token

Source

A

C) Enrollment restriction (6)

38
Q

Which enrollment method should be used for corporate-owned macOS devices in Intune?

A) Apple Configurator
B) Device Enrollment Manager
C) Enrollment Program Token
D) Company Portal app

Source

A

C) Enrollment Program Token (7)

39
Q

How can you automate the deployment of a specific compliance policy during the enrollment of Android devices?

A) Use a device configuration profile
B) Assign a compliance policy to the enrollment group
C) Use a provisioning package
D) Set up an Autopilot deployment profile

Source

A

B) Assign a compliance policy to the enrollment group (6)

40
Q

What is required to enforce device compliance during the enrollment of iOS devices in Intune?

A) A device compliance policy
B) A conditional access policy
C) A device enrollment restriction
D) An enrollment token

Source

A

A) A device compliance policy (7)

41
Q

You need to ensure that only devices that meet specific security requirements are enrolled in Intune. What should you configure?

A) Device compliance policies
B) Conditional access policies
C) Enrollment restrictions
D) Device configuration profiles

Source

A

C) Enrollment restrictions (6)

42
Q

What should you configure in Intune to automatically deploy a compliance policy during device enrollment?

A) Use a device configuration profile
B) Assign a compliance policy to an enrollment profile
C) Set up a conditional access policy
D) Use Windows Autopilot

Source

A

B) Assign a compliance policy to an enrollment profile (7)

43
Q

You need to configure a compliance policy that requires devices to have the latest security updates installed. What should you configure first?

A) Device compliance policy
B) Device configuration profile
C) Conditional access policy
D) Enrollment restriction

Source

A

A) Device compliance policy (6)

44
Q

How can you ensure that corporate-owned iOS devices are automatically enrolled in Intune with the correct profile?

A) Use a DEP token
B) Configure a conditional access policy
C) Use the Apple Configurator
D) Use a provisioning package

Source

A

A) Use a DEP token (7)

45
Q

What feature in Intune allows you to manage device enrollment and apply specific policies during the enrollment process?

A) Enrollment restrictions
B) Device compliance policies
C) Device configuration profiles
D) Conditional access policies

Source

A

A) Enrollment restrictions (6)

46
Q

You need to configure a compliance policy that restricts device enrollment based on specific security requirements. What should you use?

A) Device compliance policies
B) Conditional access policies
C) Device enrollment restrictions
D) Device configuration profiles

Source

A

C) Device enrollment restrictions (7)

47
Q

What action should be taken to enroll corporate-owned devices using Apple Configurator in Intune?

A) Create an enrollment profile
B) Assign a compliance policy
C) Use a DEP token
D) Set up a conditional access policy

Source

A

A) Create an enrollment profile (6)

48
Q

Which Intune feature allows you to restrict the enrollment of devices to specific platforms or ownership types?

A) Enrollment restrictions
B) Device compliance policies
C) Device configuration profiles
D) Conditional access policies

Source

A

A) Enrollment restrictions (7)

49
Q

You need to ensure that Android devices are automatically enrolled in Intune upon setup. What configuration should be used?

A) Managed Google Play
B) Android Enterprise Enrollment Profile
C) Android Device Administrator
D) Company Portal App

Source

A

B) Android Enterprise Enrollment Profile (6)

50
Q

Which enrollment method allows iOS devices to be automatically managed by Intune immediately after being unboxed?

A) Apple Configurator
B) Device Enrollment Program (DEP)
C) Manual enrollment
D) Company Portal App

Source

A

B) Device Enrollment Program (DEP) (7)

51
Q

To ensure only compliant devices access Office 365 resources, what should you configure in Intune?

A) Device Configuration Profile
B) Conditional Access Policy
C) Compliance Policy
D) Enrollment Restrictions

Source

A

B) Conditional Access Policy (6)

52
Q

You need to assign a specific configuration profile automatically during the Windows Autopilot process. What should you configure?

A) Device Compliance Policy
B) Enrollment Status Page
C) Windows Autopilot Deployment Profile
D) Conditional Access Policy

Source

A

C) Windows Autopilot Deployment Profile (7)

53
Q

How can you limit the number of devices a user can enroll into Intune?

A) Configure device compliance policies
B) Use device enrollment restrictions
C) Set up Conditional Access policies
D) Implement a Device Configuration Profile

Source

A

B) Use device enrollment restrictions (6)

54
Q

Which feature ensures that only corporate-owned devices can enroll in Intune without user intervention?

A) Automatic Enrollment
B) Conditional Access Policy
C) Device Enrollment Manager (DEM)
D) Enrollment Program Token (EPT)

Source

A

D) Enrollment Program Token (EPT) (7)

55
Q

You need to enforce a compliance policy that requires a minimum OS version for enrollment. What should you configure?

A) Device Configuration Profile
B) Device Enrollment Restriction
C) Compliance Policy
D) Conditional Access Policy

Source

A

C) Compliance Policy (6)

56
Q

How can you ensure that devices are automatically enrolled into Intune as part of the out-of-box experience for Windows 11?

A) Azure AD Join
B) Windows Autopilot
C) Device Enrollment Manager (DEM)
D) Co-Management

Source

A

B) Windows Autopilot (7)

57
Q

You are deploying Android devices to field workers and need them enrolled with minimal user interaction. Which method should you use?

A) Device Enrollment Manager (DEM)
B) Managed Google Play
C) Android Enterprise Dedicated
D) BYOD Enrollment

Source

A

C) Android Enterprise Dedicated (6)

58
Q

What should you configure to allow only specific Android devices with approved OEM versions to enroll in Intune?

A) Conditional Access Policies
B) Compliance Policies
C) Enrollment Restrictions
D) Device Configuration Profiles

Source

A

C) Enrollment Restrictions (7)

59
Q

You need to restrict enrollment to corporate-owned devices only. Which Intune feature should you configure?

A) Compliance Policy
B) Enrollment Restrictions
C) Conditional Access Policy
D) Device Configuration Profile

Source

A

B) Enrollment Restrictions (7)

60
Q

What feature should be used to ensure that all corporate-owned devices are configured uniformly during enrollment?

A) Device Compliance Policy
B) Windows Autopilot
C) Enrollment Status Page
D) Device Configuration Profile

Source

A

B) Windows Autopilot (6)

61
Q

Which policy should be used to enforce encryption requirements during the enrollment process?

A) Device Compliance Policy
B) Conditional Access Policy
C) Device Enrollment Restriction
D) Endpoint Protection Policy

Source

A

A) Device Compliance Policy (7)

62
Q

You need to enroll macOS devices into Intune using Apple Business Manager. Which enrollment method should you choose?

A) Apple Configurator
B) Device Enrollment Program (DEP)
C) BYOD Enrollment
D) Manual Enrollment

Source

A

B) Device Enrollment Program (DEP) (7)

63
Q

How can you ensure that only devices that pass a specific compliance check can be enrolled in Intune?

A) Device Compliance Policy
B) Enrollment Restriction
C) Conditional Access Policy
D) Device Configuration Profile

Source

A

B) Enrollment Restriction (7)