Your company has a Microsoft Azure Active Directory (Azure AD) tenant. All users in the company are licensed for Microsoft Intune. You need to ensure that the users enroll their iOS device in Intune. What should you configure first?
Suggested Answer:D🗳️
You need to create an Apple MDM push certificate and use it to manage Apple devices with Intune. The Apple MDM push certificate must be added to Endpoint Manager, and must be active. Reference: https://docs.microsoft.com/en-us/mem/intune/enrollment/apple-mdm-push-certificate-get
I have done this several times and I can tell you that:
It is literally impossible to configure an "Enrollment program tokens" before you configure "Configure MDM Push Certificate" (APN). The intune portal does not allow you to do that.
So the answer to this question is still to first configure an apple push cert (answer D) and after that you configure the enrollment program token.
Even then after configuring that, your apple devices themselves need to be registered as DEP/Autoenrollment in Apple Business Manager or Apple School Manager, this can be done either by buying the devices DEP enabled or adding them manually to DEP by using the Apple Configurator 2 software.
Then Devices also need to be assigned to an enrollment profile. After that, and also only from the Apple device setup wizard (Intune integrated or not) the users will be forced to enroll their devices.
On the iOS enrollment page, it literally says "Intune requires an Apple MDM Push certificate to manage Apple devices, and supports multiple enrollment methods. Set up the MDM push certificate to begin. Learn more."
Unfortunately, this is not correct, see https://docs.microsoft.com/en-us/mem/intune/enrollment/ios-enroll
The Apple MDM push certificate is a requirement to set up the different enrollment methods, among them DEP (now called ADE).
D is correct. If you go to Intune > Devices > Enroll Devices > Apple you can't do anything at all before getting the Apple MDM Push certificate. Everything is grayed out.
Push certificate is a prerequisite for DEP
https://docs.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-program-enroll-ios#prerequisites
Answer is D
These are "their" IOS devices = BYOD. Therefor, you need to first addan Apple MDM push certificate. Check section "User and Device enrollment administrator tasks" of : https://docs.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-enrollment-ios-ipados#byod-user-and-device-enrollment
Answer is D:
In article linked as reference:
Automatically enroll iOS/iPadOS devices by using Apple's Automated Device Enrollment
Prerequisites
Devices purchased in Apple's ADE
Mobile device management (MDM) authority
An Apple MDM push certificate
Well look at this: https://vceguide.com/when-you-try-to-enroll-an-ios-device-in-intune-you-get-an-error-you-need-to-ensure-that-you-can-enroll-the-ios-device-in-intune/
User and Device enrollment administrator tasks
This task list provides an overview. For more specific information, see Set up iOS/iPadOS and iPadOS User Enrollment.
Be sure your devices are supported.
Be sure the Apple MDM push certificate is added to Endpoint Manager, and is active. This certificate is required to enroll iOS/iPadOS devices. For more information, see Get an Apple MDM push certificate.
The push certificate is the bare minimum requirement. Without this the other options are not even available to configure (enrollment program tokens included).
This section is not available anymore. Please use the main Exam Page.MD-101 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
wx78
Highly Voted 5 years, 8 months agolucidgreen
4 years, 2 months agogeoffC
4 years agoMr01z0
4 years, 1 month agoconfigmike
4 years agoDJHASH786
4 years agozordss
Highly Voted 5 years, 3 months ago[Removed]
3 years, 1 month ago[Removed]
3 years, 1 month agoRodrigoT
3 years agoAK4U_111
Most Recent 2 years, 6 months agotrevderpy
2 years, 9 months agoBLYBOI
3 years, 11 months agoRodrigoT
3 years agoslaoui
4 years agoJeffoort
4 years agoKryan
4 years, 1 month agohawkens
4 years, 1 month agocubalondon
4 years, 2 months agoBalena
4 years, 2 months agoHamilcar
4 years, 2 months agoVig
4 years, 2 months agolijk_manson
4 years, 2 months agohawkens
4 years, 3 months agoromanticflower
4 years, 3 months agolucidgreen
4 years, 2 months agoBaxter
4 years, 4 months ago