Exam MD-102 All Questions

View all questions & answers for the MD-102 exam

Exam MD-102 topic 1 question 90 discussion

Actual exam question from Microsoft's MD-102

Question #: 90
Topic #: 1

You have a Microsoft 365 E5 subscription and 100 unmanaged iPad devices.

You need to deploy a specific iOS update to the devices. Users must be prevented from manually installing a more recent version of iOS.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Create a device configuration profile.
B. Enroll the devices in Microsoft Intune by using the Intune Company Portal.
C. Create a compliance policy.
D. Create an iOS app provisioning profile.
E. Enroll the devices in Microsoft Intune by using Apple Business Manager.

Show Suggested Answer

Suggested Answer: AE 🗳️

by BJS78 at Sept. 22, 2023, 1:26 p.m.

Comments

Submit Cancel

Besxp

2 weeks, 2 days ago

Selected Answer: AE

A. Create a device configuration profile – to control the OS version and restrict updates. E. Enroll devices via Apple Business Manager – to enable supervision and enforce update policies. B is wrong because enrolling iPads using the Intune Company Portal does not make them supervised, and only supervised devices can: Receive iOS update policies from Intune. Be prevented from manually installing newer iOS versions.

upvoted 1 times

...

1655b71

8 months ago

A en B B. Enroll the devices in Microsoft Intune by using the Intune Company Portal: In order to manage iPads and deploy iOS updates, the devices must first be enrolled in Microsoft Intune. The Intune Company Portal app allows users to register their devices for management, which is essential to control updates and enforce policies. A. Create a device configuration profile: After enrollment, a device configuration profile can be created to control OS updates. Within Intune, iOS update policies allow you to specify the iOS version to install on devices and prevent users from updating to newer versions than what is specified in the profile.

upvoted 1 times

...

Prasis

11 months, 3 weeks ago

A and E https://learn.microsoft.com/en-us/mem/intune/protect/software-updates-ios

upvoted 1 times

...

MR_Eliot

1 year, 4 months ago

Selected Answer: AE

The answer is correct. However it sucks for users since they need to reset their device.

upvoted 1 times

...

Darkfire

1 year, 4 months ago

Selected Answer: AE

AE is correct https://learn.microsoft.com/en-us/mem/intune/protect/software-updates-ios

upvoted 1 times

...

ckmay

1 year, 4 months ago

Selected Answer: AE

Config profiles sill allow you to prevent user from updating for up to 90 days but it will not deploy specific updates or versions. to deploy specific updates or versions, you must create an iOS update policy but this is not one of the answer choices however, the only way to achieve either of the other 2 steps, the device MUST be supervised and the ONLY way a device can be is if it is enrolled via ABM. Devices enrolled via company portal are NOT supervised.

upvoted 1 times

ckmay

1 year, 4 months ago

https://download.microsoft.com/download/e/6/2/e6233fdd-a956-4f77-93a5-1aa254ee2917/msft-intune-enrollment-options.pdf https://learn.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-enrollment-ios-ipados Device enrollment with Company Portal: This option is a typical enrollment in the Company Portal app for personal devices. The device is managed, not just specifics apps or features. With this option, consider the following information: You can deploy certificates that apply to the whole device. Users must install updates. Only devices enrolled using Automated Device Enrollment (ADE) can receive updates using MDM policies or profiles. A user must be associated with the device. This user can be a device enrollment manager (DEM) account.

upvoted 1 times

...

Amir1909

1 year, 5 months ago

Correct

upvoted 1 times

...

Tonsku

1 year, 6 months ago

Selected Answer: AE

Create a device configuration profile, to configure settings on the devices, preventing users from manually installing a more recent version of iOS. Enroll using Apple Business Manager to manage the devices and deploy the iOS update.

upvoted 1 times

...

yosry

1 year, 7 months ago

AE seems correct

upvoted 2 times

...

fco168

1 year, 7 months ago

Selected Answer: AE

Correct. You need to create a configuration profile to avoid users running the update. Also, with the Apple Business Manager you can install a specific iOS Version manually to the device.

upvoted 4 times

...

RabbitB

1 year, 8 months ago

Selected Answer: AB

Configure defer software update in Configuration profiles, but iOS need to be enrolled via Intune company portal.

upvoted 1 times

...

Contactfornitish

1 year, 8 months ago

Compliance or app provisioning is irrelevant. To manage updates, you need device configuration profile so that's a given. Enrollment is required though you need to via ABM to manage updates ref: https://learn.microsoft.com/en-us/mem/intune/protect/software-updates-ios

upvoted 2 times

...

BJS78

1 year, 9 months ago

Stupid question. You can set iOS update policy ONLY on SUPERVISED devices, so yes, ABM is required. iOS update policy is REQUIRED to define the exact update to have, but does not block you to update manually, for that you need a Device restriction policy in place. That also blocks the user up to 90 days only, after that user can install update manually again.

upvoted 4 times

...