Exam MD-101 topic 1 question 17 discussion

Correct answer is to create a dynamic membership groups so none of the anwsers are correct.

Sometimes I have trouble in what Microsoft means. Example with "A: You should start by accessing Intune and configuring corporate device identifiers". Define please? I would think to set up enrolement profiles for these platforms "maybe".

A. You should start by accessing Intune and configuring corporate device identifiers. This option decides if the device is corporate owned or personally owned. If you know the OS and want to manage this manually then remotely a solution is possible but that's not want Microsoft would like you to do. B. You should start by accessing Microsoft Azure Active Directory (Azure AD) and configuring Device settings. Only option which can work, so that's the solution. C. You should start by accessing Microsoft Azure Active Directory (Azure AD) and configuring Application settings. Application setting has nothing to do with the question. D. You should start by creating a distribution group. If it was dynamic security group then would have worked since you can create dynamic group basis OS version and then can apply or deny policies. But it says distribution group, so its not the answer

A. Used to identifying if a device is corporate or personal owned via IMEI or Serial B. CORRECT ANSWER C. Has nothing to do with the OS version of a device D. Is for mail purposed and thus, has nothing to do with the OS version of a device

The correct answer is A. You should start by accessing Intune and configuring corporate device identifiers. To target Android and iOS devices based on the version of the operating system they are running, you will need to create device groups in Intune based on the device type and version. To do this, you will need to start by configuring corporate device identifiers in Intune. This will allow you to create device groups based on the device type and version, as well as other criteria such as device ownership and enrollment status. Once you have configured corporate device identifiers, you can create device groups and assign policies to them based on the device type and version. Accessing Microsoft Azure Active Directory (Azure AD) and configuring Device settings or Application settings is not directly related to targeting devices based on the version of the operating system they are running. Creating a distribution group is also not a relevant action in this context.

The answer is A, and here is why: To deploy new Intune policies that will apply to Android and iOS devices based on the version of the operating system that is being run, you should start by accessing Intune and configuring corporate device identifiers. Corporate device identifiers are a feature of Microsoft Intune that allow you to identify devices in your organization based on various criteria, such as the device model, manufacturer, or operating system version. You can use corporate device identifiers to target specific devices when deploying Intune policies. To configure corporate device identifiers, you will need to create a new device identifier rule that specifies the criteria for identifying the devices, and use this rule to target the devices when deploying policies. Accessing Azure AD and configuring Device settings is not related to targeting devices based on the version of the operating system. Therefore, option B is not the correct answer.

so how exactly does that help?

B, D..First step should be to create Distribution Group for targetting the right devices and they applying Device setting on the Group.

The best answer would be to create a filter that allows to define the desired OS version for Android, iOS & Windows 10/11. It could look like "Apply to Android 9 and above" and exclude all devices that don't meet this criteria. https://docs.microsoft.com/en-us/mem/intune/fundamentals/filters

distribution group is nothing but device collection for a specific model

none of these are correct. :(

One can change device settings in Android and IOS via Intune.

At the previously similar question, the answer is: D. Groups that have dynamic membership rules in Microsoft Azure Active Directory (Azure AD)