Exam MS-101 All Questions

View all questions & answers for the MS-101 exam

Exam MS-101 topic 1 question 78 discussion

Actual exam question from Microsoft's MS-101

Question #: 78
Topic #: 1

HOTSPOT -
You have a Microsoft 365 E5 subscription that uses Microsoft Intune.
You have devices enrolled in Intune as shown in the following table.

You create the device configuration profiles shown in the following table.

Which profiles will be applied to each device? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

by goape at Dec. 10, 2021, 3:15 p.m.

Comments

Submit Cancel

goape

Highly Voted 3 years, 6 months ago

Device 1 will only take Profile 4. It is a member of Group 3 which is excluded from profile 1. Answer is: Device 1: Profile 4 Device 2: Profile 3

upvoted 70 times

Sledgehammer

3 years, 4 months ago

Agreed with Goape. Exclusion takes precedence over inclusion. Scopre tags are not relevant

upvoted 5 times

...

TimurKazan

3 years, 6 months ago

correct. Scope tags only determine which objects admins can see.

upvoted 9 times

...

jodtzz

3 years, 6 months ago

This is as close to a correct answer as I see possible with the configuration of this question. How can you include a group and also exclude the same group? Makes no sense.

upvoted 5 times

...

sonnen_x

3 years, 5 months ago

Device 2: No Profile I think because Tag does not match

upvoted 5 times

KennethYY

2 years, 12 months ago

tag for management only

upvoted 3 times

veteran_tech

2 years, 10 months ago

Correct. Tags don't impact what device a profile applies to. Tags limit what a local admin can see.

upvoted 7 times

...

ubt

Highly Voted 3 years, 6 months ago

I thought it would be Device 1: Profile 4 Device 2: No Profile (as Tag doesn't match Profile 3)

upvoted 5 times

Durden871

2 years, 10 months ago

Tags are for management.

upvoted 2 times

...

TimNov

Most Recent 3 years ago

Agree 100% with goape. Exclusions take precedence and scope tags are irrelevant.

upvoted 3 times

...

Zardu

3 years, 1 month ago

Just went through this one and agree with goape -- for Dev 1 the Exclusion prevents Profile 1, so it gets Profile 4 only. Dev 2 gets Policy 3 can ignore the Scope tags in this situation

upvoted 3 times

...

Sledgehammer

3 years, 4 months ago

Agreed with Goape. Exclusion takes precedence over inclusion. Scopre tags are not relevant

upvoted 1 times

...

stealthster

3 years, 4 months ago

I think it should be: Device 1: No Profiles Device 2: No Profiles For Device 1: https://docs.microsoft.com/en-us/mem/intune/apps/apps-inc-exl-assignments : Exclusion takes precedence over inclusion in the following same group type scenarios so that makes Profile 1 not apply. For Device 1 & 2: https://tech.nicolonsky.ch/intune-scope-tags-rbac-explained/- A scope tag assigns an Intune configuration (e.g. device configuration, compliance policy, mobile app or managed device) to one or more specific management scope(s). Default tag: By default, all Intune entities which are created from a user without an Intune role (which means it was either an Intune Administrator or Global Admin) get automatically assigned this built-in scope tag. Every object in Intune needs to have at least one scope tag assigned. This seems to make profile 4 for device 1 not apply and profile 3 for device 2 not apply so I believe it No Profiles for both.

upvoted 4 times

stealthster

3 years, 3 months ago

After reviewing again, I believe it is Device 1 - Profile 4 Only and Device 2 - Profile 3 only.

upvoted 5 times

...

AlexBa

3 years, 6 months ago

I think, No profil for device 1 and 2 because the tag scope is not correct.

upvoted 1 times

AlexBa

3 years, 6 months ago

https://tech.nicolonsky.ch/intune-scope-tags-rbac-explained/

upvoted 3 times

...

Futfuyfyjfj

2 years, 1 month ago

Apparently you don’t know what scope tags are, they are not relevant in profile/configuration deployment.

upvoted 1 times

...

Goena

3 years, 6 months ago

Answer seems correct: Device 1: Profile 1 and 4 only - member of Group 1 and excluded of Group 3, but still member of Group 1. Device 2: Profile 3 only.

upvoted 2 times