Exam MD-101 All Questions

View all questions & answers for the MD-101 exam

Exam MD-101 topic 3 question 69 discussion

Actual exam question from Microsoft's MD-101

Question #: 69
Topic #: 3

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Directory group named Group1 that contains Windows 10 Enterprise devices and Windows 10 Pro devices.
From Microsoft Intune, you create a device configuration profile named Profile1.
You need to ensure that Profile1 applies to only the Windows 10 Enterprise devices in Group1.
Solution: You create a scope tag, and then you add the scope tag to the Windows 10 Enterprise devices. You edit the settings of Profile1.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
Instead: You configure an applicability rule for Profile1. You assign Profile1 to Group1.
Note: Applicability rules allow administrators to target devices in a group that meet specific criteria. For example, you create a device restrictions profile that applies to the All Windows 10/11 devices group. And, you only want the profile assigned to devices running Windows Enterprise.
To do this task, create an applicability rule.
Reference:
https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-create

by DJM at Nov. 20, 2020, 11:03 a.m.

Comments

Submit Cancel

Anthony_2770

Highly Voted 4 years, 4 months ago

When you create or update a profile, you can also add scope tags and applicability rules to the profile. Scope tags are a great way to filter profiles to specific groups, such as US-NC IT Team or JohnGlenn_ITDepartment. Use RBAC and scope tags for distributed IT has more information. On Windows 10 devices, you can add applicability rules so the profile only applies to a specific OS version or a specific Windows edition. Applicability rules has more information. Applicability rules is the better concept in this scenario but the question is does scope tags meet this goal. Applicability rules more clearly define the operating system filter that you need in this scenario and this is what you need to be using. Voting for No.

upvoted 14 times

Anthony_2770

4 years, 3 months ago

Additionally : Use Intune scope tags to provide administrative users with a filtered a view to securable objects. Scope tags are filtering option provided in Intune to ease the admin jobs. So in this question the Scope tags are not used in the way that they are intended to be used. So again No.

upvoted 3 times

...

MR_Eliot

Most Recent 3 years, 1 month ago

Selected Answer: B

Correct.

upvoted 1 times

...

BLYBOI

4 years ago

Answer is No. Use scope tags or applicability rules When you create or update a profile, you can also add scope tags and applicability rules to the profile. Scope tags are a great way to filter profiles to specific groups, such as US-NC IT Team or JohnGlenn_ITDepartment. On Windows 10 devices, you can add applicability rules so the profile only applies to a specific OS version or a specific Windows edition. Applicability rules has more information.

upvoted 2 times

...

petir

4 years, 1 month ago

This is such a confusing ass question. If you edit the settings you can add a scope tag to the configuration profile. so I think Yes but also.... I edited the settings but wtf did I do?

upvoted 1 times

Moorebid

4 years, 1 month ago

The answer is No because scope tags have no effect on applying the device profile; scope tags are only used for limiting view access to objects in Intune.

upvoted 6 times

...

vinnyct

4 years, 6 months ago

It's No it's Applicability rules you have to use when you create a profile 1 Applicability rules allow administrators to target devices in a group that meet specific criteria. For example, you create a device restrictions profile that applies to the All Windows 10 devices group. And, you only want the profile assigned to devices running Windows 10 Enterprise. https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-create

upvoted 3 times

Timmi

4 years, 4 months ago

the question is if "scope tags" meet the goal, nt if there is a better way

upvoted 1 times

...

DJM

4 years, 6 months ago

Yes - create a scope tag called e.g. ENT and apply to enterprise devices. Only the devices both in the group and containing the ENT scope tag will be in scope to receive the policy.

upvoted 3 times

gchristina

4 years, 2 months ago

I could agree but aren't we missing the part that the profile should be assigned to the group (in conjunction with the editing of the settings (adding scope)). So this would be a 'no'?

upvoted 4 times

...

silver_bullet666

2 years, 11 months ago

My answer is No. Reading on the usage of Scope Tags, their usage appears to be for an IT admin to be able to manage objects that have the scope tags they have access to. It is not used as a filtering mechanism for the applicable devices the policy may apply to. Applying the scope tag to the profile would mean any Admin with access to this scope tag would then be able to manage the profile.

upvoted 1 times

...