Exam MS-101 topic 2 question 40 discussion

I agree with you! Except for two details: 1) To enroll mobile devices you have to deploy an app, not an app configuration policy (or not only that) 2) It's still possible to enroll older Windows and Windows Server versions, just not with MEM/Intune. Check here: https://docs.microsoft.com/it-it/microsoft-365/security/defender-endpoint/onboard-downlevel?view=o365-worldwide

I agree with your comment that the answer is correct and all info is in this link. 1) Create the device configuration profile to onboard Windows devices. (Displayed in article at bottom) 2) Onboard iOS/iPadOS devices using app configuration policy(this is different than device configuration as you advised and displayed in article at bottom) 3) Onboard Android devices using app configuration policy(this appears to be the most complicated and they link to other articles for this work and one is: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/android-intune?view=o365-worldwide 4) Windows 8.1 is not supported per article and is listed at the top of article in regards to onboarding. Main article for 1, 2, and 4: https://docs.microsoft.com/en-us/mem/intune/protect/advanced-threat-protection-configure https://docs.microsoft.com/en-us/mem/intune/protect/advanced-threat-protection-configure

if we mention device configuration profile - I would choose win 10 + onboarding package

Question states "Microsoft Defender Advanced Threat Protection" not "Microsoft Defender for Endpoint" as stated in the article you linked?.