Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

MD 102 > Configure profiles for user and devices - Execute device profiles > Flashcards

Configure profiles for user and devices - Execute device profiles Flashcards

1
Q

What does Microsoft Intune manage on different devices?

A

Settings and features using profiles

Profiles are used to enable or disable features on devices within an organization.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is an example of a profile that provides access to corporate Wi-Fi?

A

Wi-Fi profile

This profile allows different devices to connect to the corporate Wi-Fi.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What type of profile gives devices access to a VPN server?

A

VPN profile

This profile is used to enable secure connections to the corporate network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are Administrative Templates in Microsoft Intune?

A

Hundreds of settings controlling features in various applications

These include Microsoft Edge, Internet Explorer, Microsoft Office, and more.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What do Certificates in Intune configure?

A
  • Trusted,
  • SCEP: Simple Certificate Enrollment Protocol
  • PKCS: Public Key Cryptography Standards

These certificates are used for authenticating Wi-Fi, VPN, and email profiles.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What features do Device features profiles control on iOS and macOS (examples)?

A
  • AirPrint,
    notifications,
  • shared device configurations

These settings are specific to iOS and macOS devices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What do Device restrictions control?

A

Security, hardware, data sharing, and more settings

For example, they can prevent iOS device users from using the device camera.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What does the Edition upgrade and mode switch profile do?

A

Automatically upgrades Windows devices

This applies to devices running specific versions of Windows.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What does the email settings profile do?

A

Creates, assigns, and monitors Exchange ActiveSync email settings

It helps ensure consistency and reduces support calls for email access.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What settings does Endpoint protection configure for Windows devices?

A

BitLocker and Microsoft Defender settings

These are essential for securing Windows devices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What does Identity protection control in Windows?

A

Windows Hello for Business experience

It specifies requirements for device PINs and gestures.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does the Kiosk settings profile configure?

A

Runs one app or multiple apps

It allows customization of features like the start menu and web browser.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What do VPN settings assign in an organization?

A

VPN profiles to users and devices

This enables secure remote access to the company network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What do Wi-Fi settings assign to users and devices?

A

Wireless network settings

Users gain access to corporate Wi-Fi without needing to configure it themselves.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are Custom profiles in Intune?

A

Ability to assign non-built-in device settings

These settings will be explained in detail in a later unit.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Where should you go to create a Windows device profile ?

A

In the Microsoft Intune admin center,
1. select Devices,
2. then select Windows platform,
3. then select Configuration Profiles
4 Then select Create Profile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

After selecting “create profile”, what can of properties are mandatory to reate the windows device profile?

A

Platform: Choose which versions of Windows to include.
Profile type: Select the type you want to create.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Once you create the profile, you’ll be prompted to configure the settings of the profile?
What are the 5 steps you must fill to complete the profile ?

A
  1. Basics. Define a name for the profile and a description
  2. Configuration Settings. The profile type you defined in step 3 will determine what options are here. For example, if you choose the Device Restrictions profile, you’ll see several options such as which control panel options are available, Microsoft Edge configurations, or App Store restrictions. Choosing the WiFi profile will allow you to configure settings such as SSID and EAP settings.
  3. Assignments The profile can be assigned to the following:
    Selected Groups
    All Users & All Devices
    All Devices
    All Users
    Intune device configuration profiles let you exclude groups from policy assignment.
  4. Applicability Rules. These rules allow further restriction of the profile assignment or exclusion specific OS versions or editions.
  5. Review + create. As the end of the process, a summary of the profile settings will be displayed, with the option to create the profile.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What do Intune device configuration profiles allow regarding policy assignment?

A

They let you exclude groups from policy assignment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Can you assign a device profile to the All sales users group while excluding members of the Sales Managers group?

A

Yes, you can assign a device profile to the All sales users group and exclude members of the Sales Managers group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

When excluding groups from an assignment, what types of groups can you exclude?

A

You can exclude only users or only exclude device groups, but not a mixture of both.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Does Intune consider user-to-device relationships when excluding groups?

A

No, Intune doesn’t consider any user-to-device relationship when excluding groups.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What happens when you include user groups while excluding device groups?

A

It might not create the results you expect.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

In a scenario where mixed groups are used, which takes precedence: inclusion or exclusion?

A

Inclusion takes precedence over exclusion.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What is an example of a policy assignment scenario involving kiosk devices?
Assigning a device profile to all devices except kiosk devices.
26
If you include the All Users group and exclude the All Devices group, what happens?
All users and their devices get the policy.
27
Why do devices without a user not receive the policy?
Because those devices have no relationship to the All Users group.
28
What occurs if you include All Devices and exclude All Users?
All the devices receive the policy.
29
What is the intent when excluding devices that have an associated user from a policy?
The intent is to exclude those devices from the policy.
30
How does exclusion work in terms of group members?
Exclusion only looks at the direct members of the groups.
31
What is the purpose of creating a custom device profile in Intune?
To configure the profile with custom device settings that may not be available by default.
32
Which profile is used to deploy OMA-URI values for Windows 10 and later devices?
Microsoft Intune custom profile for Windows 10 and later.
33
What can be found in the Windows device restriction profile?
Many built-in settings that are available in Intune without the need for custom values.
34
What is the first step to create a custom profile in the Microsoft Intune admin center?
Select Devices > Configuration profiles > Create profile > Windows 10 and later as the platform.
35
For a Windows device, what should you do in the Configuration tab when adding OMA-URI settings?
Select Add to create a new setting.
36
For a Windows device, what file format can you use to export configured OMA-URI values?
.csv (comma-separated values) file.
37
For a Windows device, what information is required for each OMA-URI setting?
Name, Description, OMA-URI, Data type, Value.
38
What are the possible data types you can choose from when adding an OMA-URI setting for a Windows device?
* String * String (XML) * Date and time * Integer * Floating point * Boolean * Base64
39
What must you do after entering the OMA-URI setting details?
Select OK and then select Create in the Create profile pane.
40
True or False: Not all settings are compatible with all Windows versions.
True.
41
Where can you find out which Windows versions are supported for each Configuration Service Provider (CSP)?
In the configuration service provider reference.
42
What must a setting support to work with Intune?
The Add or Replace operations.
43
What are Android Enterprise custom profiles used for?
To control features on Android Enterprise devices using OMA-URI settings ## Footnote OMA-URI stands for Open Mobile Alliance Uniform Resource Identifier.
44
How do the steps for creating a custom Android profile compare to creating a Windows custom profile?
The steps are identical, except that the profile is created under the Android platform.
45
What is the OMA-URI for creating a Wi-Fi profile with a pre-shared key?
./Vendor/MSFT/WiFi/Profile/SSID/Settings
46
What is the OMA-URI for creating a per-app VPN profile?
./Vendor/MSFT/VPN/Profile/Name/PackageList
47
What OMA-URI setting is used to restrict copy and paste actions between work and personal apps on Android Enterprise devices?
./Vendor/MSFT/WorkProfile/DisallowCrossProfileCopyPaste
48
Can Android devices expose a complete list of OMA-URI settings that can be configured?
No, Android devices do not expose a complete list of OMA-URI settings.
49
What is OEMConfig used for in the context of Android Enterprise devices?
To add, create, and customize OEM-specific settings that aren't built in to Intune.
50
True or False: Only a limited number of Android Enterprise custom profiles are supported by Intune.
True
51
Fill in the blank: For an android device, the OMA-URI for restricting copy and paste actions is _______.
./Vendor/MSFT/WorkProfile/DisallowCrossProfileCopyPaste
52
What does OEM in OEMConfig stand for?
Original Equipment Manufacturer
53
What tool is used to create settings for custom profile for Apple devices in Microsoft Intune?
Apple Configurator tool ## Footnote The Apple Configurator tool allows the creation of settings that control device operation.
54
What is the first step in creating a custom profile for Apple devices in Intune?
Create a device profile for iOS/iPadOS or macOS, selecting Custom as the profile type ## Footnote This is done in the Microsoft Intune admin center.
55
What is required for the configuration profile file created by Apple Configurator?
It must be compatible with the version of the OS on the devices ## Footnote Incompatible settings must be resolved according to Apple's documentation.
56
True or False: Intune allows the assignment of settings that are configurable with other Apple device profile types.
False ## Footnote Custom profiles allow settings that aren't configurable with other profile types.
57
Fill in the blank: The Apple Configurator tool lets you create many settings that control the _______ of these devices.
operation
58
What can you do with the configuration profile after creating it with Apple Configurator?
Import it into an Intune iOS/iPadOS/macOS custom profile ## Footnote This allows the settings to be assigned to users and devices.
59
What is the purpose of the Custom Configuration Profile in Microsoft Intune for apple devices?
To assign settings to Apple devices that are not configurable with other profile types ## Footnote This enhances device management capabilities.
60
As an IT administrator, you need to create a device profile for Windows devices that will enable the automation and validation of the creation and teardown of environments to help deliver secure and stable application hosting platforms. **Which type of device profile should you create?** 1. Device Security Profile 2. Device Compliance Profile 3. Device Configuration Profile
Device Configuration Profile
61
Your organization wants to prevent iOS device users from using the device camera. **Which type of profile should you create in Intune?** 1. VPN profile 2. Wi-Fi profile 3. Device restrictions profile
Device restrictions profile
62
Why would you create a custom device profile in Intune? 1. To add settings that aren't available in Intune or to use settings available in other device profiles 2. To use only built-in settings in Intune 3. To restrict access to device settings for all user
To add settings that aren't available in Intune or to use settings available in other device profiles
63
Intune policies fall into multiple categories. Which category is commonly used to manage security settings and features on devices, including defining access to company resources? 1. Conditional access policies 2. Configuration policies 3. Device compliance policies
Configuration policies

MD 102 (26 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions