Exam SC-400 All Questions

View all questions & answers for the SC-400 exam

Exam SC-400 topic 2 question 43 discussion

Actual exam question from Microsoft's SC-400

Question #: 43
Topic #: 2

HOTSPOT
-

You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

You need to onboard the devices to Microsoft Purview. The solution must ensure that you can apply Endpoint data loss prevention (Endpoint DLP) policies to the devices.

What can you use to onboard each device? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by See_Es at Jan. 22, 2023, 10:02 p.m.

Comments

Submit Cancel

See_Es

Highly Voted 1 year, 10 months ago

I would say the answer is wrong. The Win11 device is not enrolled in Intune so the Endpoint Manager is not an option. The macos device is enrolled in intune so this devices can be enrolled with endpoint manager https://learn.microsoft.com/en-us/microsoft-365/compliance/device-onboarding-macos-overview?view=o365-worldwide

upvoted 8 times

itsadel

5 months, 3 weeks ago

Device1 (Windows 11, Not Enrolled in Intune): A local script and Group Policy only Explanation: As you pointed out, the Company Portal app is primarily used for Intune enrollment and management. Since Device1 is not enrolled, it cannot utilize the Company Portal app for onboarding. For unenrolled devices, you would need to rely on alternative methods like: Local scripts: To install necessary agents or components for Endpoint DLP. Group Policy: To enforce security settings and configurations related to data protection. Device2 (macOS, Enrolled in Intune): Microsoft Endpoint Manager only

upvoted 1 times

...

See_Es

1 year, 10 months ago

I would say Win11 would be local script and GPO (however we don't even know the device is AD-Joined so GPO might not even be an option. And for the mac it is endpoint management only.

upvoted 11 times

...

JambonBlanc

Most Recent 1 month, 1 week ago

Device1 (Windows 11, Not Enrolled in Intune): Local Script and Group Policy only To onboard this device to Microsoft Purview and apply Endpoint DLP policies, you can use a local script and Group Policy only. Since the device is not enrolled in Intune, options involving Intune or Microsoft Endpoint Manager are not applicable. Device2 (macOS, Enrolled in Intune): Microsoft Endpoint Manager only For this device, the onboarding method would be Microsoft Endpoint Manager only, as it is already enrolled in Intune, allowing seamless management through Endpoint Manager.

upvoted 1 times

...

Sango

1 year, 3 months ago

macOS is now both Local Script and Intune.

upvoted 4 times

Ruslan23

7 months, 2 weeks ago

Where did you found this information? Take a look of the Microsoft Doc, you can only use Intune or JAMF: https://learn.microsoft.com/en-us/purview/device-onboarding-macos-overview#next-steps

upvoted 1 times

...

cris_exam

1 year, 5 months ago

Based on the below documentation my answer is: Device1: Local Script, GPO and Ms Endpoint Config Manager Device2: Microsoft Endpoint Config Manager only For Win: https://learn.microsoft.com/en-us/microsoft-365/compliance/device-onboarding-overview?view=o365-worldwide#onboarding-windows-10-or-windows-11-devices In this deployment scenario, you'll onboard Windows 10 or Windows 11 devices that have not been onboarded yet. 5. Choose the appropriate procedure to follow from the table below: - Intune - Config Manager - Group Policy - Local Script - VDI For macOS: https://learn.microsoft.com/en-us/microsoft-365/compliance/device-onboarding-macos-overview?view=o365-worldwide MacOS devices can be onboarded into Microsoft Purview solutions using either Intune or JAMF Pro.

upvoted 1 times

...

js124

1 year, 8 months ago

Mac OS is enrolled by Endpoint management(Intune). "MacOS devices can be onboarded into Microsoft Purview solutions using either Intune or JAMF Pro." https://learn.microsoft.com/en-us/microsoft-365/compliance/device-onboarding-macos-overview?view=o365-worldwide

upvoted 2 times

...

formazionehs

1 year, 9 months ago

The Win 11 device is not enrolled in Intune so can be onboarded using a Local Script or GPO. The Mac OS device is enrolled in Intune and can be onboarded using a Local Script or MEM / Intune.

upvoted 4 times

...