2 - Execute device enrollment Flashcards
What is the first step in configuring automatic enrollment for Windows devices in Microsoft Intune?
A) Create a device configuration profile B) Set up a device compliance policy C) Enable automatic enrollment in Azure AD D) Assign an enrollment policy
C) Enable automatic enrollment in Azure AD (7)
What is required to enroll iOS devices using the Device Enrollment Program (DEP) in Intune?
A) Apple MDM Push certificate B) DEP token C) Apple Configurator D) Company Portal app
B) DEP token (7)
How can you ensure that only corporate-owned devices are enrolled in Intune?
A) Configure a device compliance policy B) Set up a device enrollment restriction C) Deploy a device configuration profile D) Use the Company Portal app
B) Set up a device enrollment restriction (6)
You need to enroll 500 Android devices in Intune with work profiles. What should you configure first?
A) A device compliance policy B) A device configuration profile C) A managed Google Play account D) A device enrollment restriction
C) A managed Google Play account (7)
Which method should be used to bulk enroll multiple Windows 10 devices in Intune?
A) Windows Autopilot B) Configuration Manager C) Provisioning packages D) Azure AD join
C) Provisioning packages (6)
What tool allows you to block personal devices from accessing corporate resources unless they are enrolled in Intune?
A) Conditional access policy B) Device compliance policy C) App protection policy D) Device configuration profile
A) Conditional access policy (6)
Which Intune feature should be used to prevent users from enrolling more devices than allowed by company policy?
A) Device enrollment restrictions B) Device compliance policies C) App protection policies D) Conditional access policies
A) Device enrollment restrictions (7)
You need to ensure that only Windows 10 devices with BitLocker enabled can be enrolled in Intune. What should you use?
A) A device compliance policy B) A device enrollment restriction C) A conditional access policy D) A device configuration profile
A) A device compliance policy (6)
Which feature allows you to automate the application of specific enrollment profiles to iOS devices during enrollment in Intune?
A) Apple Configurator B) Enrollment rules C) Enrollment program tokens D) Device compliance policies
C) Enrollment program tokens (7)
What is the primary tool used to enroll macOS devices into Intune?
A) Apple Business Manager B) Company Portal app C) Apple Configurator D) Device Enrollment Manager
B) Company Portal app (6)
Which role in Intune allows a user to manage the enrollment of a large number of devices?
A) Device Enrollment Manager (DEM) B) Global Administrator C) Intune Administrator D) Help Desk Operator
A) Device Enrollment Manager (DEM) (7)
How can you enforce multi-factor authentication (MFA) during device enrollment in Intune?
A) Configure MFA in Azure AD B) Set up a device compliance policy C) Use a conditional access policy D) Implement an app protection policy
C) Use a conditional access policy (6)
Which feature in Intune can be used to specify that only corporate-owned devices can enroll using a specific enrollment profile?
A) Device compliance policies B) Enrollment restrictions C) Device configuration profiles D) Enrollment token restrictions
B) Enrollment restrictions (7)
You need to ensure that only devices that meet specific security requirements can access corporate resources. Which Intune feature should you configure?
A) App protection policies B) Conditional access policies C) Device compliance policies D) Device configuration profiles
B) Conditional access policies (6)
What tool should be used to configure settings and install apps during the enrollment of Windows 10 devices in Intune?
A) Device compliance policies B) Device configuration profiles C) Provisioning packages D) Windows Autopilot
D) Windows Autopilot (6)
Which scenario would require the use of the Intune Enrollment Program token?
A) Enrolling corporate-owned iOS devices B) Enrolling personal Android devices C) Enrolling Windows 10 devices D) Enrolling macOS devices
A) Enrolling corporate-owned iOS devices (6)
Your company needs to ensure that all Android devices are enrolled in Intune with a specific enrollment profile. What should you configure?
A) Enrollment token B) Enrollment restriction C) App configuration policy D) Device compliance policy
A) Enrollment token (7)
Which Intune feature is used to assign a specific configuration to newly enrolled Windows 10 devices?
A) Device compliance policies B) Device configuration profiles C) App protection policies D) Enrollment restrictions
B) Device configuration profiles (7)
How can you automate the assignment of a specific configuration profile during the enrollment of iOS devices in Intune?
A) Use a DEP token B) Set up a configuration profile C) Assign the profile to a group D) Use a provisioning package
A) Use a DEP token (6)
What action should be taken to enroll devices in Intune using Windows Autopilot?
A) Create a device compliance policy B) Configure an Autopilot profile C) Assign a configuration profile D) Set up a conditional access policy
B) Configure an Autopilot profile (6)
Which policy should be configured to restrict the enrollment of personal devices into Intune?
A) Device compliance policy B) Device enrollment restriction C) Device configuration profile D) Conditional access policy
B) Device enrollment restriction (7)
What configuration in Intune ensures that only corporate-owned devices are allowed to be enrolled?
A) Conditional access policy B) Device enrollment restriction C) Device compliance policy D) App protection policy
B) Device enrollment restriction (6)
Which tool can be used to enforce security policies during device enrollment in Intune?
A) Device compliance policy B) Device enrollment restriction C) Conditional access policy D) Device configuration profile
C) Conditional access policy (7)
What method is used to configure bulk enrollment of Android devices in Intune?
A) Android Enterprise B) Device Enrollment Manager (DEM) C) Provisioning packages D) Azure AD join
A) Android Enterprise (6)
Which enrollment method should be used for personal Windows 10 devices in BYOD scenarios?
A) Azure AD join B) Windows Autopilot C) BYOD Enrollment with Intune D) Co-management with Configuration Manager
C) BYOD Enrollment with Intune (7)
What should be configured in Intune to ensure that only specific users can enroll devices?
A) Enrollment restrictions B) Device compliance policies C) Device configuration profiles D) Conditional access policies
A) Enrollment restrictions (6)
How can you automatically enroll Windows 10 devices in Intune during the initial setup process?
A) Use Windows Autopilot B) Use Azure AD join C) Configure a device compliance policy D) Configure a conditional access policy
A) Use Windows Autopilot (6)
Which enrollment method should be used to enroll macOS devices into Intune?
A) Device Enrollment Manager B) Apple Configurator C) Enrollment Program Token D) Company Portal app
D) Company Portal app (7)
How can you ensure that a specific enrollment profile is used during the enrollment of Android devices in Intune?
A) Use a managed Google Play account B) Configure an enrollment token C) Assign a compliance policy D) Set up a device configuration profile
B) Configure an enrollment token (6)
What is the role of the Device Enrollment Manager (DEM) in Intune?
A) To enroll a large number of devices B) To manage compliance policies C) To configure device configuration profiles D) To enforce app protection policies
A) To enroll a large number of devices (7)
You need to deploy Windows 11 to new devices using Windows Autopilot. Which profile should you configure in Intune?
A) Device compliance profile B) Enrollment profile C) Autopilot deployment profile D) Device configuration profile
C) Autopilot deployment profile (7)
How can you configure Intune to prevent users from accessing corporate resources on jailbroken devices?
A) Use a device compliance policy B) Use an app protection policy C) Configure a conditional access policy D) Set up a device enrollment restriction
A) Use a device compliance policy (7)
Which Intune feature should be used to ensure that only compliant devices can access corporate apps?
A) Device configuration profiles B) App protection policies C) Conditional access policies D) Device compliance policies
C) Conditional access policies (7)
How can you ensure that a specific compliance policy is enforced during the enrollment of Windows 10 devices?
A) Set up an Autopilot deployment profile B) Configure a conditional access policy C) Assign the compliance policy to the enrollment group D) Use a provisioning package
C) Assign the compliance policy to the enrollment group (6)
You need to prevent personal devices from accessing corporate resources unless they are compliant. What should you configure?
A) Device compliance policies B) Conditional access policies C) Device enrollment restrictions D) Device configuration profiles
B) Conditional access policies (6)
Which enrollment method is recommended for enrolling corporate-owned, single-use Android devices?
A) BYOD Enrollment B) Android Enterprise Dedicated C) Android Enterprise Work Profile D) Device Enrollment Manager (DEM)
B) Android Enterprise Dedicated (7)
What configuration in Intune ensures that a device must be compliant before it can be enrolled?
A) Device compliance policy B) Conditional access policy C) Enrollment restriction D) Enrollment token
C) Enrollment restriction (6)
Which enrollment method should be used for corporate-owned macOS devices in Intune?
A) Apple Configurator B) Device Enrollment Manager C) Enrollment Program Token D) Company Portal app
C) Enrollment Program Token (7)
How can you automate the deployment of a specific compliance policy during the enrollment of Android devices?
A) Use a device configuration profile B) Assign a compliance policy to the enrollment group C) Use a provisioning package D) Set up an Autopilot deployment profile
B) Assign a compliance policy to the enrollment group (6)
What is required to enforce device compliance during the enrollment of iOS devices in Intune?
A) A device compliance policy B) A conditional access policy C) A device enrollment restriction D) An enrollment token
A) A device compliance policy (7)
You need to ensure that only devices that meet specific security requirements are enrolled in Intune. What should you configure?
A) Device compliance policies B) Conditional access policies C) Enrollment restrictions D) Device configuration profiles
C) Enrollment restrictions (6)
What should you configure in Intune to automatically deploy a compliance policy during device enrollment?
A) Use a device configuration profile B) Assign a compliance policy to an enrollment profile C) Set up a conditional access policy D) Use Windows Autopilot
B) Assign a compliance policy to an enrollment profile (7)
You need to configure a compliance policy that requires devices to have the latest security updates installed. What should you configure first?
A) Device compliance policy B) Device configuration profile C) Conditional access policy D) Enrollment restriction
A) Device compliance policy (6)
How can you ensure that corporate-owned iOS devices are automatically enrolled in Intune with the correct profile?
A) Use a DEP token B) Configure a conditional access policy C) Use the Apple Configurator D) Use a provisioning package
A) Use a DEP token (7)
What feature in Intune allows you to manage device enrollment and apply specific policies during the enrollment process?
A) Enrollment restrictions B) Device compliance policies C) Device configuration profiles D) Conditional access policies
A) Enrollment restrictions (6)
You need to configure a compliance policy that restricts device enrollment based on specific security requirements. What should you use?
A) Device compliance policies B) Conditional access policies C) Device enrollment restrictions D) Device configuration profiles
C) Device enrollment restrictions (7)
What action should be taken to enroll corporate-owned devices using Apple Configurator in Intune?
A) Create an enrollment profile B) Assign a compliance policy C) Use a DEP token D) Set up a conditional access policy
A) Create an enrollment profile (6)
Which Intune feature allows you to restrict the enrollment of devices to specific platforms or ownership types?
A) Enrollment restrictions B) Device compliance policies C) Device configuration profiles D) Conditional access policies
A) Enrollment restrictions (7)
You need to ensure that Android devices are automatically enrolled in Intune upon setup. What configuration should be used?
A) Managed Google Play B) Android Enterprise Enrollment Profile C) Android Device Administrator D) Company Portal App
B) Android Enterprise Enrollment Profile (6)
Which enrollment method allows iOS devices to be automatically managed by Intune immediately after being unboxed?
A) Apple Configurator B) Device Enrollment Program (DEP) C) Manual enrollment D) Company Portal App
B) Device Enrollment Program (DEP) (7)
To ensure only compliant devices access Office 365 resources, what should you configure in Intune?
A) Device Configuration Profile B) Conditional Access Policy C) Compliance Policy D) Enrollment Restrictions
B) Conditional Access Policy (6)
You need to assign a specific configuration profile automatically during the Windows Autopilot process. What should you configure?
A) Device Compliance Policy B) Enrollment Status Page C) Windows Autopilot Deployment Profile D) Conditional Access Policy
C) Windows Autopilot Deployment Profile (7)
How can you limit the number of devices a user can enroll into Intune?
A) Configure device compliance policies B) Use device enrollment restrictions C) Set up Conditional Access policies D) Implement a Device Configuration Profile
B) Use device enrollment restrictions (6)
Which feature ensures that only corporate-owned devices can enroll in Intune without user intervention?
A) Automatic Enrollment B) Conditional Access Policy C) Device Enrollment Manager (DEM) D) Enrollment Program Token (EPT)
D) Enrollment Program Token (EPT) (7)
You need to enforce a compliance policy that requires a minimum OS version for enrollment. What should you configure?
A) Device Configuration Profile B) Device Enrollment Restriction C) Compliance Policy D) Conditional Access Policy
C) Compliance Policy (6)
How can you ensure that devices are automatically enrolled into Intune as part of the out-of-box experience for Windows 11?
A) Azure AD Join B) Windows Autopilot C) Device Enrollment Manager (DEM) D) Co-Management
B) Windows Autopilot (7)
You are deploying Android devices to field workers and need them enrolled with minimal user interaction. Which method should you use?
A) Device Enrollment Manager (DEM) B) Managed Google Play C) Android Enterprise Dedicated D) BYOD Enrollment
C) Android Enterprise Dedicated (6)
What should you configure to allow only specific Android devices with approved OEM versions to enroll in Intune?
A) Conditional Access Policies B) Compliance Policies C) Enrollment Restrictions D) Device Configuration Profiles
C) Enrollment Restrictions (7)
You need to restrict enrollment to corporate-owned devices only. Which Intune feature should you configure?
A) Compliance Policy B) Enrollment Restrictions C) Conditional Access Policy D) Device Configuration Profile
B) Enrollment Restrictions (7)
What feature should be used to ensure that all corporate-owned devices are configured uniformly during enrollment?
A) Device Compliance Policy B) Windows Autopilot C) Enrollment Status Page D) Device Configuration Profile
B) Windows Autopilot (6)
Which policy should be used to enforce encryption requirements during the enrollment process?
A) Device Compliance Policy B) Conditional Access Policy C) Device Enrollment Restriction D) Endpoint Protection Policy
A) Device Compliance Policy (7)
You need to enroll macOS devices into Intune using Apple Business Manager. Which enrollment method should you choose?
A) Apple Configurator B) Device Enrollment Program (DEP) C) BYOD Enrollment D) Manual Enrollment
B) Device Enrollment Program (DEP) (7)
How can you ensure that only devices that pass a specific compliance check can be enrolled in Intune?
A) Device Compliance Policy B) Enrollment Restriction C) Conditional Access Policy D) Device Configuration Profile
B) Enrollment Restriction (7)
