Exam MD-101 topic 5 question 20 discussion

Only applies to 4 and 5. 'Exclude' overrides 'Apply'. 1, 2 and 3 are excluded by membership. 4 and 5 are the only ones that get it applied.

Answer is C - Exclusion takes precedence over inclusion in the following same group type scenarios: • Including user groups and excluding user groups when assigning apps • Including device groups and excluding device group when assigning apps For example, if you assign a device group to the All corporate users user group, but exclude members in the Senior Management Staff user group, All corporate users except the Senior Management staff get the assignment, because both groups are user groups.

So many comments for an easy question. Answer is C.

Exclude with override.

4 - 5 is correct ! :D

It has to be C https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#exclude-groups-from-a-profile-assignment

Device 2 is a android platform is Windows only so def can't be device 2 so has to be C

correct answer must be device 4 and 5

When creating an App Protection Policy, in step 5 "Assignments" there's a link to an article that explains excluded groups. https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#exclude-groups-from-a-profile-assignment Excerpt: Exclusion takes precedence over inclusion in the following same group type scenarios: Including user groups and excluding user groups Including device groups and excluding device group For example, you assign a device profile to the All corporate users user group, but exclude members in the Senior Management Staff user group. Since both groups are user groups, All corporate users except the Senior Management staff get the profile.

For information about creating app protection policies for Windows apps, see Create and deploy Windows Information Protection (WIP) policy with Intune

here's another link Exclude overrides include https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/tasks/AssignUserGroupsToIntuneAppProtectionPolicy.html

Exclusion takes precedence over inclusion in the following same group type scenarios: Including user groups and excluding user groups when assigning apps Including device groups and excluding device group when assigning apps For example, if you assign a device group to the All corporate users user group, but exclude members in the Senior Management Staff user group, All corporate users except the Senior Management staff get the assignment, because both groups are user groups. so then anything in group 3 does not apply the policy.... and since 2 is not win 10 it has to be C

Guys, common, its obvious 4 and 5, no takes precendence over yes!

Directly from the MS endpoint manager admin center: When creating a new policy, the very first selection to be made is platform That means we're only dealing with Windows 10 in this scenario (can cross out any answers with non-windows 10 platforms now) Proceeding through the policy steps in the admin center brings you to Assignments You can Include groups AND you can Exclude groups Exclusions take precedence OVER Inclusions (see link below) https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#exclude-groups-from-a-profile-assignment For example, you assign a device profile to the All corporate users user group, but exclude members in the Senior Management Staff user group. Since both groups are user groups, All corporate users except the Senior Management staff get the profile.

Correct answer is C (Exclusion takes preferance over inclusion in same group scenerio)

Answer is C. From https://docs.microsoft.com/en-us/mem/intune/apps/apps-inc-exl-assignments. Exclusion takes precedence over inclusion in the following same group type scenarios: Including user groups and excluding user groups when assigning apps Including device groups and excluding device group when assigning apps

I believe its B