Exam MD-101 All Questions

View all questions & answers for the MD-101 exam

Exam MD-101 topic 2 question 75 discussion

Actual exam question from Microsoft's MD-101

Question #: 75
Topic #: 2

HOTSPOT -
You have a Microsoft 365 tenant that contains the users shown in the following table.

You have Windows 10 devices enrolled in Microsoft Intune as shown in the following table.

You create a Windows 10 update ring that has the following settings:
✑ Basics:
- Name: Ring1
✑ Update ring settings:
- Active hours start: 8 AM
- Active hours end: 8 PM
✑ Assignments:
- Included Groups: All devices
- Excluded Groups: Group1
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Box 1: Yes -
Device1 is a personal device, but personal devices enrolled in Intune are included in the policies unless you use a specific FILTER to exclude personal devices.

Box 3: Yes -
You cannot mix User and Device Groups while Excluding groups. It is not supported, and the Excluded group will be ignored.
Reference:
https://docs.microsoft.com/en-us/mem/intune/fundamentals/filters https://docs.microsoft.com/en-us/mem/intune/protect/windows-10-update-rings

by Davidchercm at July 13, 2021, 3:53 a.m.

Comments

Submit Cancel

Alfred666

Highly Voted 3 years, 10 months ago

no, yes, yes

upvoted 9 times

RodrigoT

3 years, 2 months ago

Based on what? Link please. There is no mention on Microsoft documentation about update rings and personally-owned devices. I had to do the lab myself. And the result was Y Y Y. Check my comment above.

upvoted 4 times

RodrigoT

3 years, 1 month ago

From Microsoft: with MDM mobile device management you can set rules and configure settings on "personal" and organization-owned devices. Once enrolled, they receive your rules and settings through policies configured in Intune. https://docs.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune

upvoted 1 times

...

Sir_Berus

Highly Voted 3 years, 11 months ago

Provided answer is INCORRECT. You can't mix User and Device Groups while Excluding groups. It is not supported, and the Excluded group will be ignored. Intune doesn't evaluate user-to-device group relationships, and devices of the included users will not be excluded. https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#exclude-groups-from-a-profile-assignment

upvoted 9 times

daonga

3 years, 10 months ago

So if I understand correctly, the Update ring applies to all devices regardless? Then this is YYY?

upvoted 5 times

AVP_Riga

3 years, 9 months ago

NYY, personal device isn't property of company...

upvoted 7 times

[Removed]

3 years, 8 months ago

Is there a source that proves personal devices are not served? Can't find anything here: https://docs.microsoft.com/en-us/mem/intune/protect/windows-10-update-rings

upvoted 2 times

...

RodrigoT

3 years, 3 months ago

It doesn't matter, the device1 is enrolled in Microsoft Intune as Ownership: Personal, but this is not a filter. You still have to create a specific filter in Endpoint > Tenant administration > Filters to exclude personal owned devices. There is no filter created in this question. I tested in my lab. So, for me is Y Y Y. https://docs.microsoft.com/en-us/mem/intune/fundamentals/filters#create-a-filter

upvoted 5 times

Angarali

3 years, 2 months ago

the answer is N Y Y, the device will be marked as non compliant, until updated by owner

upvoted 1 times

RodrigoT

3 years, 2 months ago

That's not true, I enrolled my personal laptop in my test MDM. After that I was unable to change my active hours. This setting disappeared, and the first two settings in Windows Update > Advanced options were disabled showing a message that it was because of policies from my organization. I checked in Azure and Endpoint and my device showed Personally owned. Then I disconnected the MDM and the settings came back. I insist Y Y Y.

upvoted 10 times

...

keenehteek

3 years, 10 months ago

"While update rings can deploy to both device and user groups, consider using only device groups when you also use feature updates." See bullet point 6 under Create and Assign Update Rings: https://docs.microsoft.com/en-us/mem/intune/protect/windows-10-update-rings

upvoted 3 times

...

Cristyy

Most Recent 1 year, 9 months ago

I do not understand why not YNY ?

upvoted 1 times

...

Meebler

2 years, 5 months ago

NYN, A. The Active Hours of Device 1 are not affected by the update ring settings because it is not part of the Group1 which is excluded in the assignments of the update ring. As per the given information, Device1 is part of the Group1 but it is excluded in the assignments of the update ring so the active hours of Device1 which is 10am to 6pm will not be affected. B. The Active Hours of Device 2 are from 9am to 5pm, as specified in the table, but since it is not part of the Group1, it will be affected by the update ring settings. And the update ring setting specified active hours start at 8 am and end at 8 pm so the active hours of device2 will be 8am to 8pm. C. The Active Hours of Device 3 are not affected by the update ring settings because it is not part of the Group1 which is excluded in the assignments of the update ring. As per the given information, Device3 is part of the Group1 but it is excluded in the assignments of the update ring so the active hours of Device3 which is 10am to 6pm will not be affected

upvoted 2 times

...

AK4U_111

2 years, 8 months ago

So the fact the User1 is a memebr of Group1 doesn't matter at all here?

upvoted 1 times

KiwE

2 years, 7 months ago

No because it's a personal device

upvoted 1 times

...

PiPe

3 years, 4 months ago

Personal devices are assigned to the update ring, as they are a member of the All Devices group. You could filter these personal devices out with a filter on a dynamic device group, but that is beyond the scope of this question: https://stealthpuppy.com/dynamic-software-update-rings/ The Group1 user group exclusion can be ignored as assigning a policy to a static device group and excluding user groups (both dynamic and static) isn't supported. (case 7 on the below URL) https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#exclude-groups-from-a-profile-assignment Device1: Y Device2: Y Device3: Y

upvoted 8 times

PiPe

3 years, 4 months ago

Correction typo: *(case 4 & 7 on the below URL)

upvoted 2 times

RodrigoT

3 years, 3 months ago

After doing a lot of research I agree with you. Y Y Y, because personal devices enrolled in Intune are included in the policies unless you use a specific FILTER to exclude personal devices. Here is the link explaining this: https://docs.microsoft.com/en-us/mem/intune/fundamentals/filters

upvoted 2 times

...

syougun200x

2 years ago

Probably some change made on intune? could not find the "user exclusion is not supported" said on the article. https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#exclude-groups-from-a-profile-assignment I tested with my tenant and the profile was created excluding some users without an error.

upvoted 1 times

...

rovert94

3 years, 5 months ago

I believe the supplied answer is correct. I think the question is testing our knowledge of filters. In the example they give, they specifically talk about excluding personal devices. Now this would have to be explicitly configured, but I think because, in this question, they specifically point out some devices are personal and some are corporate, I think we have to assume the exclusion for them will be set. But I would be happy to hear what others think. https://docs.microsoft.com/en-us/mem/intune/fundamentals/filters

upvoted 1 times

RodrigoT

3 years, 3 months ago

Ok, the device1 is enrolled in Microsoft Intune as Ownership: Personal, but this is not a filter. You still have to create a specific filter in Endpoint > Tenant administration > Filters to exclude personal owned devices. There is no filter created in this question. I tested in my lab. So, for me is Y Y Y.

upvoted 1 times

...

Davidchercm

3 years, 11 months ago

answer looks correct as computer 1 and 3 are in the excluded group 1

upvoted 1 times

...