Exam MS-101 All Questions

View all questions & answers for the MS-101 exam

Exam MS-101 topic 1 question 5 discussion

Actual exam question from Microsoft's MS-101

Question #: 5
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).
You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).
You configure pilot co-management.
You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.
You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.
Solution: You add Device1 to an Active Directory group.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
Reference:
https://docs.microsoft.com/en-us/mem/configmgr/comanage/tutorial-co-manage-clients

by VanillaWes at Dec. 5, 2019, 9:57 p.m.

Comments

Submit Cancel

Kelek

Highly Voted 5 years, 4 months ago

Device1 has the Configuration Manager client installed so you can manage Device1 by using Configuration Manager. To manage Device1 by using Microsoft Intune, the device has to be enrolled in Microsoft Intune. In the Co-management Pilot configuration, you configure a Configuration Manager Device Collection that determines which devices are auto-enrolled in Microsoft Intune. You need to add Device1 to the Device Collection, not an Active Directory Group. Therefore, this solution does not meet the requirements. Reference: https://docs.microsoft.com/en-us/configmgr/comanage/how-to-enable

upvoted 56 times

airairo

4 years, 1 month ago

The short answer is NO.

upvoted 11 times

...

moh15

5 years, 2 months ago

Agree must be in collection

upvoted 3 times

...

dailyup

4 years, 2 months ago

I'll go with Kelek cause I remember there is a question from MS-100 and the answer is add device to pilot collection.

upvoted 2 times

lucidgreen

4 years, 2 months ago

A pilot group is a collection containing a subset of your Configuration Manager devices. In other words, it needs to be a device collection consisting of only Windows 10 devices.

upvoted 2 times

...

GregD133

Highly Voted 5 years, 4 months ago

This answer is wrong. you need to add the device to the collection comanagement pilot was turned on for.

upvoted 15 times

...

Meebler

Most Recent 2 years, 4 months ago

B. No. Adding Device1 to an Active Directory group alone does not enable the device to be managed by both Microsoft Intune and Configuration Manager. To achieve this goal, you need to perform the following steps: Enable Co-Management in Configuration Manager. Configure the Co-Management workload in Configuration Manager. Create a Configuration Manager device collection for pilot Co-Management. Configure Azure AD automatic enrollment in Intune. Assign Configuration Manager policies to the pilot device collection. Verify that Device1 is enrolled in Intune and the Configuration Manager client is installed and registered. By completing these steps, you can manage Device1 by using both Microsoft Intune and Configuration Manager.

upvoted 2 times

...

Kevinfm_81

2 years, 12 months ago

Answer B. If you wanted to use AD you'd need to set up a AD group policy for device management

upvoted 1 times

...

jontini

3 years, 4 months ago

Answer is NO

upvoted 3 times

...

Tonysurge

3 years, 11 months ago

"Add Device1 to the collection" is a correct answer for this question, therefore, the answer is NO here.

upvoted 4 times

...

Stasn

4 years, 1 month ago

Similar question from Official MS prep exam: Your on-premises network is configured as a Windows AD domain. You setup Win 10 device management using SCCM. Windows AD domain users are synced with Azure AD Premium and all network devices are Azure AD joined. You need to prepare for a limited pilot test of co-management. What should you do? A. Create a Windows AD group for pilot users B. Unjoin the pilot devices from Windows AD C. Create an Azure AD group for pilot users D. Create a Windows AD group for pilot devices That correct answer they give is "D" - Create a Windows AD group for pilot devices

upvoted 3 times

...

Dan_Turnbull

4 years, 2 months ago

I've been trying to find the right answer to this, it does look like it's possible to use an AD Group: You can enable the synchronization of collection memberships to an Azure Active Directory (Azure AD) group. This synchronization allows you to use your existing on premises grouping rules in the cloud by creating Azure AD group memberships based on collection membership results. You can synchronize device or user collections. Only resources with an Azure AD record are reflected in the Azure AD group. https://docs.microsoft.com/en-us/mem/configmgr/core/clients/manage/collections/create-collections https://oxfordcomputergroup.com/resources/systems-center-configuration-manager-comanagement-intune/ Any thoughts welcome :)

upvoted 3 times

...

marckinez

4 years, 2 months ago

I think the answer is correct, AD is synchronized with AZAD and you can manage from Intune and it has the SCCM agent

upvoted 1 times

...

itmp

4 years, 4 months ago

Device1 needs to be in the pilot collection. Adding Device 1 to Active Directory group doesn't mean it is added to collection...just my 2cents.

upvoted 3 times

kiketxu

4 years, 2 months ago

Thanks!

upvoted 2 times

...

mkoprivnj

4 years, 5 months ago

No is correct!

upvoted 3 times

...

Mr01z0

4 years, 8 months ago

There is no evidence in the provided text that you have created a collection with a dynamic membership rule to include the AD security group, this answer should be: No

upvoted 3 times

...

Alvaroll

4 years, 8 months ago

Same as MS-100 Topic1-22 https://www.examtopics.com/exams/microsoft/ms-100/view/5/

upvoted 1 times

...

VTHAR

4 years, 8 months ago

Answer is "B.NO" Device1 needs to be added into Collection not Active Directory group. But it's possible to create collection based on AD group but there is no such set up mentioned in question. So, it's B.

upvoted 4 times

...

Benoit_HAMET

4 years, 9 months ago

co-management applies to device collection; adding the device to a group does not allow it unless the group is a collection membership rule which is not stated

upvoted 1 times

...

ExamStudy68

4 years, 9 months ago

I wonder if its because you need to add your device to AD because Co-Management requires auto-enrollment for Intune? Unsure but that is the only thing I can come up with

upvoted 1 times

...

Nibhath

4 years, 9 months ago

Since device is already managed using configuration manager clients, it needs AD security group to connect to Azure AD through which we connect to Microsoft Intune. So anser is YES.

upvoted 1 times

...

Load full discussion...