Policies & Profiles Flashcards

1
Q

<p>Traditional Management</p>

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

<p>Modern Management</p>

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is CYOD?

A

Choose your own device

Allowing users to select a device from a list of devices you provide

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How do you configure Co-Management Precedence?

A

Within SCCM:

Administration -> Cloud Services -> Co-Management -> Properties

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Pilot Intune?

A

A UAT group for Intune use for testing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

To configure precedence, which tab do we use in Co-Management?

A

Workloads

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Group Policy vs MDM, who wins!?

A

In 1709 Group Policy will override MDM Policies

in 1803+, there is a new Policy CSP setting called ControlPolicyConflict that includes the poolicy of MDMWinsOverGP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

To ensure that MDM settings win out over GP settings, which value should MDMWinsOverGP receive?

A

1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is Conditional Access

A

Control access to resources for:

User attributes, devices, application, location, risk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are the two types of conditional access?

A

Device-based

App-based

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Is there conditional Access in Azure AD?

A

Yes after you navigate to Azure AD then Coditional Acess

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Where can you create Device compliance policies in Intune?

A

Device compliance -> Policies -> Create policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What can you do what a device does not meet compliance?

A

Remediate

Quarantine

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the three Compliance Policy settings for devices?

A

Mark devices with no compliance policy assigned as…

Enhanced jailbreak detection

Compliance status validity period (days)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How do you configure profiles for Intune devices?

A

Intune -> Device Configuration -> Profile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Yes or No?

Will the OneDrive Known Folder Move Group Policy objects won’t work if you previously used Windows Folder Redirection Group Policy objects to redirect the Documents, Pictures, or Desktop folders to a location other than OneDrive?

A

No

You have to remove the Windows Group Policy objects for these folders before you enable the OneDrive Group Policy objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which status of a device compliance policy is displayed if a device failed to apply one or more device compliance policy settings. Or, the user hasn’t complied with the policies?

A

In-grace period

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which status of a device compliance policy is displayed if a device failed to report its device compliance policy status because its offline or failed to communicate with Intune or Azure AD for other reasons?

A

Device not synced

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What value should you configure for the Profile Type of a device configuration profile in Microsoft Intune if you are trying to deploy a third party ADMX file to devices managed in Intune?

A

Custom

20
Q

What do you need to configure for Windows to sync your settings across all your Windows 10 devices that you’ve signed in to with your Microsoft account?

A

Enable “Sync Settings”

21
Q

What are the two primary advantages of moving or redirecting Windows known folders (Desktop, Documents, Pictures, Screenshots, and Camera Roll) to OneDrive for Business for the users in your domain?

A

Your users don’t have to change their daily work habits to save files to OneDrive

Savings files to OneDrive backs up your user’s data in the cloud and gives them access to their files from any device

22
Q

To stop syncing your settings across all your Windows 10 devices that you’ve signed in to with your Microsoft account, what must you configure?

A

Turn the “Sync settings” to off

23
Q

What is the term to describe the object that redirects user profiles to a file share so that users receive the same operating system and application settings on multiple computers?

A

Roaming User Profile

24
Q

What are the different operating systems that are supported with Intune device profiles?

A

iOS

Android

Windows 8.1+

Windows Phone 8.1

25
Q

Which free Microsoft tool will help with the technical transition from Group Policies to MDM Policies?

A

MMAT Tool

MDM Migration Analysis Tool

26
Q

What tool is a Windows Analytics solution that allows you to see the status of Windows Defender Antivirus signatures and threats?

A

Update Compliance

27
Q

Which status of a device compliance policy is displayed if a device failed to report its device compliance policy status because one of the following reasons?

A

Device not synced

28
Q

What is the term to describe the object that makes network files available to a user, even if the network connection server is unavailable or slow?

A

Offline Files

29
Q

Yes or No:

Can you implement conditional access policies for Windows 7 and Windows 8.1 devices?

A

No

Only windows 8.1 and Windows 10+

30
Q

what action enables users and administrators to redirect path of a known folder to a new location, manually or by using group policy?

A

Folder Redirection

31
Q

What tool is a Windows Analytics solution that allows you to check bandwidth savings incurred across multiple content types by using Delivery Optimization?

A

Update Compliance

32
Q

Which type of profiles allow you to add and configure settings, and then push these settings to devices used by users in your organization?

A

Device profiles

33
Q

User profiles become mandatory profiles when administrator renames the NTuser.dat file (the registry hive) of each user’s profile in the file system of the profile server to which file name?

A

NTuser.man

34
Q

What tool is a Windows Analytics solution that allows you to view a report of device and update issues related to compliance that need attention?

A

Update compliance

35
Q

What type of profile is a roaming profile that has been pre-configured by an administrator to specify settings for users?

A

Mandatory

36
Q

Enterprise State Roaming is available to any organization with which type of subscription?

A

Premium Azure Active Directory (Azure AD) subscription

37
Q

What can you use to control how users access your cloud apps in Azure Active Directory?

A

Conditional Access Policies

38
Q

Which policy CSP setting when enabled will all MDM policy to be used and GP policy is to be blocked?

A

ControlPolicyConflict

39
Q

What are the two types of conditional access policies?

A

Baseline and Standard

40
Q

What is a roaming user profile?

A

A roaming user profile is a user profile that resides on a server and contains a user’s desktop settings and connections. A roaming profile enables a user to log on to a Windows 2000 domain and use the same user profile from any workstation in the domain

41
Q

Which free tool will generate both XML and HTML reports indicating the level of support for each Group Policy in terms of MDM equivalents?

A

MDM Migration Analysis tool

42
Q

To improve sign-in performance for users with mandatory user profiles, which three Group Policy settings should you apply?

A

Disable Show first sign-in animation

Disable Cortana

Turn off Microsoft Consumer Experience

43
Q

Which status of a device compliance policy is displayed if a devices successful applied one or more device compliance policy settings?

A

Compliant

44
Q

Which status of a device compliance policy is displayed if a device is targeted with one or more device compliance policy settings, but, the user hasn’t applied the policies yet?

A

In-grace Period

45
Q

What steps must you perform to enable Enterprise State Roaming in AD?

A

Azure Active Directory -> Devices -> Enterprise State Roaming

Select “Users may sync settings and app data across devices”

46
Q

What information is stored in a user’s appdata\roaming folder?

A

Default templates, configuration files, and other support data that applications might user