ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MD-101 All Questions

View all questions & answers for the MD-101 exam
Go to Exam

Exam MD-101 topic 2 question 75 discussion

Actual exam question from Microsoft's MD-101
Question #: 75
Topic #: 2
[All MD-101 Questions]

HOTSPOT -
You have a Microsoft 365 tenant that contains the users shown in the following table.

You have Windows 10 devices enrolled in Microsoft Intune as shown in the following table.

You create a Windows 10 update ring that has the following settings:
✑ Basics:
- Name: Ring1
✑ Update ring settings:
- Active hours start: 8 AM
- Active hours end: 8 PM
✑ Assignments:
- Included Groups: All devices
- Excluded Groups: Group1
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Box 1: Yes -
Device1 is a personal device, but personal devices enrolled in Intune are included in the policies unless you use a specific FILTER to exclude personal devices.

Box 3: Yes -
You cannot mix User and Device Groups while Excluding groups. It is not supported, and the Excluded group will be ignored.
Reference:
https://docs.microsoft.com/en-us/mem/intune/fundamentals/filters https://docs.microsoft.com/en-us/mem/intune/protect/windows-10-update-rings
by Davidchercm at July 13, 2021, 3:53 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Alfred666
Highly Voted 3 years, 9 months ago
no, yes, yes
upvoted 9 times
RodrigoT
3 years ago
Based on what? Link please. There is no mention on Microsoft documentation about update rings and personally-owned devices. I had to do the lab myself. And the result was Y Y Y. Check my comment above.
upvoted 4 times
RodrigoT
3 years ago
From Microsoft: with MDM mobile device management you can set rules and configure settings on "personal" and organization-owned devices. Once enrolled, they receive your rules and settings through policies configured in Intune. https://docs.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune
upvoted 1 times
...
...
...
Sir_Berus
Highly Voted 3 years, 9 months ago
Provided answer is INCORRECT. You can't mix User and Device Groups while Excluding groups. It is not supported, and the Excluded group will be ignored. Intune doesn't evaluate user-to-device group relationships, and devices of the included users will not be excluded. https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#exclude-groups-from-a-profile-assignment
upvoted 9 times
daonga
3 years, 8 months ago
So if I understand correctly, the Update ring applies to all devices regardless? Then this is YYY?
upvoted 5 times
AVP_Riga
3 years, 7 months ago
NYY, personal device isn't property of company...
upvoted 7 times
[Removed]
3 years, 6 months ago
Is there a source that proves personal devices are not served? Can't find anything here: https://docs.microsoft.com/en-us/mem/intune/protect/windows-10-update-rings
upvoted 2 times
...
RodrigoT
3 years, 1 month ago
It doesn't matter, the device1 is enrolled in Microsoft Intune as Ownership: Personal, but this is not a filter. You still have to create a specific filter in Endpoint > Tenant administration > Filters to exclude personal owned devices. There is no filter created in this question. I tested in my lab. So, for me is Y Y Y. https://docs.microsoft.com/en-us/mem/intune/fundamentals/filters#create-a-filter
upvoted 5 times
Angarali
3 years ago
the answer is N Y Y, the device will be marked as non compliant, until updated by owner
upvoted 1 times
RodrigoT
3 years ago
That's not true, I enrolled my personal laptop in my test MDM. After that I was unable to change my active hours. This setting disappeared, and the first two settings in Windows Update > Advanced options were disabled showing a message that it was because of policies from my organization. I checked in Azure and Endpoint and my device showed Personally owned. Then I disconnected the MDM and the settings came back. I insist Y Y Y.
upvoted 10 times
...
...
...
...
...
keenehteek
3 years, 8 months ago
"While update rings can deploy to both device and user groups, consider using only device groups when you also use feature updates." See bullet point 6 under Create and Assign Update Rings: https://docs.microsoft.com/en-us/mem/intune/protect/windows-10-update-rings
upvoted 3 times
...
...
Cristyy
Most Recent 1 year, 7 months ago
I do not understand why not YNY ?
upvoted 1 times
...
Meebler
2 years, 3 months ago
NYN, A. The Active Hours of Device 1 are not affected by the update ring settings because it is not part of the Group1 which is excluded in the assignments of the update ring. As per the given information, Device1 is part of the Group1 but it is excluded in the assignments of the update ring so the active hours of Device1 which is 10am to 6pm will not be affected. B. The Active Hours of Device 2 are from 9am to 5pm, as specified in the table, but since it is not part of the Group1, it will be affected by the update ring settings. And the update ring setting specified active hours start at 8 am and end at 8 pm so the active hours of device2 will be 8am to 8pm. C. The Active Hours of Device 3 are not affected by the update ring settings because it is not part of the Group1 which is excluded in the assignments of the update ring. As per the given information, Device3 is part of the Group1 but it is excluded in the assignments of the update ring so the active hours of Device3 which is 10am to 6pm will not be affected
upvoted 2 times
...
AK4U_111
2 years, 6 months ago
So the fact the User1 is a memebr of Group1 doesn't matter at all here?
upvoted 1 times
KiwE
2 years, 6 months ago
No because it's a personal device
upvoted 1 times
...
...
PiPe
3 years, 3 months ago
Personal devices are assigned to the update ring, as they are a member of the All Devices group. You could filter these personal devices out with a filter on a dynamic device group, but that is beyond the scope of this question: https://stealthpuppy.com/dynamic-software-update-rings/ The Group1 user group exclusion can be ignored as assigning a policy to a static device group and excluding user groups (both dynamic and static) isn't supported. (case 7 on the below URL) https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#exclude-groups-from-a-profile-assignment Device1: Y Device2: Y Device3: Y
upvoted 8 times
PiPe
3 years, 3 months ago
Correction typo: *(case 4 & 7 on the below URL)
upvoted 2 times
RodrigoT
3 years, 1 month ago
After doing a lot of research I agree with you. Y Y Y, because personal devices enrolled in Intune are included in the policies unless you use a specific FILTER to exclude personal devices. Here is the link explaining this: https://docs.microsoft.com/en-us/mem/intune/fundamentals/filters
upvoted 2 times
...
...
syougun200x
1 year, 10 months ago
Probably some change made on intune? could not find the "user exclusion is not supported" said on the article. https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#exclude-groups-from-a-profile-assignment I tested with my tenant and the profile was created excluding some users without an error.
upvoted 1 times
...
...
rovert94
3 years, 3 months ago
I believe the supplied answer is correct. I think the question is testing our knowledge of filters. In the example they give, they specifically talk about excluding personal devices. Now this would have to be explicitly configured, but I think because, in this question, they specifically point out some devices are personal and some are corporate, I think we have to assume the exclusion for them will be set. But I would be happy to hear what others think. https://docs.microsoft.com/en-us/mem/intune/fundamentals/filters
upvoted 1 times
RodrigoT
3 years, 1 month ago
Ok, the device1 is enrolled in Microsoft Intune as Ownership: Personal, but this is not a filter. You still have to create a specific filter in Endpoint > Tenant administration > Filters to exclude personal owned devices. There is no filter created in this question. I tested in my lab. So, for me is Y Y Y.
upvoted 1 times
...
...
Davidchercm
3 years, 9 months ago
answer looks correct as computer 1 and 3 are in the excluded group 1
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago