Apply features and settings on your devices using device profiles in Microsoft Intune Flashcards

(69 cards)

1
Q

What does Microsoft Intune include?

A

Settings and features that can be enabled or disabled on different devices within an organization

These settings and features are added to configuration profiles.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which platforms can you create profiles for in Microsoft Intune?

A

Android, iOS/iPadOS, macOS, and Windows.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Fill in the blanks: Some configuration settings are —– to each platform.

A

Unique

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is one example of a task that can be completed with configuration profiles?

A

Allow or prevent access to Bluetooth on the device.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What type of profile can be created to give devices access to a corporate network?

A

WiFi or VPN profile.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What feature can be allowed on iOS/iPadOS and macOS devices using Intune?

A

Users can use AirPrint printers in the organization.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the two policy types available when creating a device configuration profile in Intune?

A

Templates or the Settings Catalog

These policy types help in configuring device management settings.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What does the settings catalog in Intune provide?

A

A list of all the settings you can configure, all in one place

This allows for easier management of device settings.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What do templates in Intune include?

A

A logical grouping of settings that configure a feature or concept

Examples include email, kiosk devices, and device firmware.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What types of settings do Intune templates focus on?

A
  • Accessing resources (VPN, Wi-Fi)
  • Security (antivirus, firewall, certificates)
  • Group Policy Objects (ADMX administrative templates)

These settings help manage devices effectively.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What can you create to ensure all devices must have a baseline in Intune?

A

A baseline of profiles

This helps maintain consistent settings across devices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

True or False: The settings catalog and templates serve the same purpose in Intune.

A

False

They serve different functions in device configuration.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Fill in the blank: In Intune, you can configure specific features based on your organization’s _______.

A

[needs and levels of security]

This flexibility allows for tailored device management.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What do administrative templates include?

A

Hundreds of settings for Internet Explorer, Microsoft Edge, OneDrive, remote desktop, Word, Excel, and other Office apps

These templates provide a simplified view of settings similar to group policy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the purpose of Group Policy analytics?

A

To analyze on-premises GPOs and determine their translation in the cloud

It helps identify deprecated settings and those available to MDM providers, including Microsoft Intune.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which operating systems does this Administrative templates and Group policy support?

A

Windows 11 and Windows 10

This ensures compatibility with the latest Windows environments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

True or False: Administrative templates are not cloud-based.

A

False

Administrative templates are 100% cloud-based.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Fill in the blank: Group Policy analytics helps identify _______ settings and settings available to MDM providers.

A

deprecated

This includes settings that may not be available for use in cloud environments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the purpose of certificates in Intune?

A

To authenticate users for access to applications and corporate resources through VPN, Wi-Fi, and email profiles, without needing usernames and passwords

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

How are certificates used in email communication?

A

For signing and encrypting email using S/MIME

S/MIME stands for Secure/Multipurpose Internet Mail Extensions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the common types of certificates used in Intune?

A
  • Trusted root certificates
  • SCEP certificates
  • PKCS certificates

SCEP stands for Simple Certificate Enrollment Protocol, and PKCS stands for Public Key Cryptography Standards.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Which Android deployment types are supported by Intune regarding certificates?

A
  • Android device administrator
  • Android (AOSP)
  • Android Enterprise

AOSP stands for Android Open Source Project.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Which operating systems are supported by Intune for certificate usage?

A
  • Android
  • iOS/iPadOS
  • macOS
  • Windows 11
  • Windows 10
  • Windows 8.1
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

True or False: Certificates in Intune require users to input their usernames and passwords.

A

False

Certificates allow for seamless authentication without the need for user credentials.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What do custom settings in Intune allow administrators to do?
Assign device settings that aren't built in to Intune ## Footnote Custom settings enhance device management capabilities.
26
What can you enter for Android devices in Intune?
OMA-URI values ## Footnote OMA-URI values are used to configure specific settings on Android devices.
27
How can you configure iOS/iPadOS devices in Intune?
Import a configuration file created in the Apple Configurator ## Footnote This allows for customized settings management for iOS devices.
28
Which platforms are supported by the custom settings feature in Intune?
* Android device administrator * iOS/iPadOS * macOS * Windows 11 * Windows 10 ## Footnote These platforms allow for extensive device configuration through Intune.
29
What does delivery optimization provide?
A better experience to delivery software updates ## Footnote This includes improvements in the efficiency and effectiveness of how updates are delivered to devices.
30
What settings are being replaced by delivery optimization?
Software Updates > Windows 10 update ring settings ## Footnote This indicates a shift in how organizations manage and control software updates.
31
Which versions of Windows does the delivery optimization feature support?
Windows 11 and Windows 10 ## Footnote This ensures that both the latest and previous versions of Windows can benefit from the feature.
32
What are derived credentials used for?
Derived credentials are commonly used for Wi-Fi & VPN connections, app & email authentication, or S/MIME signing & encryption. ## Footnote Derived credentials are created from a user's smart card.
33
Which platforms does Intune support for derived credentials?
Intune supports derived credentials for: * Android Enterprise * iOS/iPadOS ## Footnote Each platform has its own set of settings for configuring derived credentials.
34
What is the purpose of derived credentials in an organization?
Derived credentials are used for authentication, signing, or encryption. ## Footnote Organizations may use smart cards for these purposes.
35
True or False: Intune allows for the configuration of a certificate derived from a user's smart card.
True ## Footnote This feature enhances security by leveraging existing smart card infrastructure.
36
What device features are controlled on iOS/iPadOS and macOS devices?
AirPrint, notifications, lock screen messages ## Footnote These features enhance user experience and functionality across Apple devices.
37
What do device restrictions control?
Security, hardware, data sharing, and more settings on the devices. For example: * Access to app stores * Viewing corporate documents in unmanaged apps * Requiring a password to unlock the device * Using only specific Wi-Fi networks * Prevents iOS/iPadOS device users from using the device camera.
38
Which platforms are supported by the device restrictions feature?
* Android device administrator * Android (AOSP) * Android Enterprise * iOS/iPadOS * macOS * Windows 11 * Windows 10 * Windows 10 Team
39
True or False: Device restrictions can prevent users from viewing corporate documents in unmanaged apps.
True
40
What is the purpose of creating a device restriction profile?
To enforce security and usage policies on devices.
41
What does Email settings create, assign, and monitor?
Exchange ActiveSync email settings on the devices ## Footnote This involves managing how email is accessed and synchronized on various devices.
42
What is the purpose of email profiles?
Help with consistency, reduce support calls, and let end-users access company email on their personal devices ## Footnote Email profiles streamline the process of accessing corporate email without manual setup.
43
Which platforms does Email settings feature support?
* Android device administrator * Android Enterprise * iOS/iPadOS * Windows 11 * Windows 10 ## Footnote This indicates compatibility with major mobile and desktop operating systems.
44
True or False: Email profiles require setup on the end-users' part.
False ## Footnote End-users can access company email without any required setup.
45
Fill in the blank: Email settings create, assign, and monitor _______ email settings on the devices.
Exchange ActiveSync ## Footnote Exchange ActiveSync is a protocol for synchronizing emails, calendars, contacts, and tasks.
46
What are macOS system extensions and kernel extensions used for?
They allow administrators to add features or programs that extend the native capabilities of the operating system. ## Footnote System extensions operate at a higher level than kernel extensions and are designed to enhance security and stability.
47
What can administrators configure regarding macOS system and kernel extensions?
Administrators can configure settings to trust all extensions from a specific developer or partner, or allow specific extensions. ## Footnote This configuration is important for managing security and functionality in macOS.
48
Which operating system supports system extensions and kernel extensions?
macOS. ## Footnote This feature is specific to macOS and is part of the operating system's capability to extend functionality.
49
What does a network boundary create?
A list of sites that your organization trusts ## Footnote This is crucial for establishing security protocols in a network environment.
50
Which application does the network boundary feature work with?
Microsoft Defender Application Guard and Microsoft Edge ## Footnote These applications utilize the network boundary for enhanced security.
51
Which operating systems support the network boundary feature?
Windows 11 and Windows 10 ## Footnote Compatibility with these operating systems allows for broader security measures in enterprise environments.
52
What is the purpose of the settings catalog?
To list all the available settings you can configure in one place.
53
How is the settings catalog similar to on-premises Group Policy Objects (GPOs)?
It allows configuration of settings but is cloud native.
54
What types of devices does the settings catalog support?
* iOS/iPadOS * macOS * Android Enterprise * Android (AOSP) * Windows 11 * Windows 10
55
What should you use if you want a complete list of all the settings?
The settings catalog.
56
If you prefer a logical grouping of settings, what should you continue to use?
The templates.
57
True or False: The settings catalog contains only the settings found in the templates.
False.
58
Fill in the blank: The settings catalog is a good resource for completing tasks using _______.
[Intune]
59
What is one key feature of the settings catalog?
It provides a comprehensive list of settings not found in templates.
60
What do iOS/iPadOS update policies enable you to do?
Create and assign iOS/iPadOS policies to install software updates on devices. ## Footnote This includes both creating the policies and assigning them to the relevant devices.
61
What does VPN settings do?
Assigns VPN profiles to users and devices in your organization for secure network connection ## Footnote VPN profiles are configurations that allow users to connect securely to a company's network remotely.
62
What is used by devices to start a connection with the VPN server?
VPN connection profile ## Footnote A VPN connection profile contains the settings necessary for the device to connect to the VPN server.
63
List the operating systems supported by the VPN settings.
* Android Enterprise / device administrator * iOS/iPadOS * macOS * Windows 11 * Windows 10 * Windows 8.1 ## Footnote These operating systems can utilize VPN profiles for secure connections.
64
What does Wi-Fi settings assign to users and devices?
Wireless network settings ## Footnote This includes configuration for accessing corporate WiFi.
65
What benefit do users get when a WiFi profile is assigned?
Access to corporate WiFi without self-configuration ## Footnote This simplifies the process for users.
66
Which Android versions are supported by Wi-Fi settings feature?
Android device administrator, Android (AOSP), Android Enterprise ## Footnote These are specific configurations for Android devices.
67
Which Apple operating systems are supported by the Wi-Fi settings feature?
iOS/iPadOS, macOS ## Footnote This includes both iPhones and iPads.
68
List the Windows versions that support the Wi-Fi settings feature.
Windows 11, Windows 10, Windows 8.1 (import only) ## Footnote Windows 8.1 is limited to import functionality.
69
Device profiles allow you to add and configure settings, and then push these settings to devices in your organization. List 4 options when creating policies
* **Administrative templates** : On Windows 10/11 devices, these templates are ADMX settings that you configure. If you're familiar with ADMX policies or group policy objects (GPO), then using administrative templates is a natural step to Microsoft Intune. * **Baselines** : On Windows 10/11 devices, these baselines include preconfigured security settings. If you want to create security policy using recommendations by Microsoft security teams, then security baselines are for you. * **Settings catalog** : On your Apple, Android, and Windows devices, you can use the settings catalog to configure device features and settings. The settings catalog has all the available settings, and in one location. * **Templates** : On Android, iOS/iPadOS, macOS, and Windows devices, the templates include a logical grouping of settings that configure a feature or concept, such as VPN, email, kiosk devices, and more.