Microsoft MDM & Apps

As the Enterprise Administrator for Northwind Traders, All Deyoung wants to enroll several new Android and iOS devices in MDM (mobile device management). How can Allan enroll these devices in MDM?

• Automatically enroll them through Group Policy

• Manually enter them through Group Policy

• Manually enroll them through the Company Portal app

• All of the above

Contoso has several new users who could not enroll their Windows 10 devices in Intune. Which of the following could be the reason why these users could not enroll their devices in Intune?

• Contoso did not create an APNS certificate

• The users were not assigned an Intune license

• Contoso created an enrollment restriction that restricted enrollment of personally owned devices

• All of the above

When a Device Enrollment Manager (DEM) account enrolls a device, which user is associated with the device?

• The DEM account is associated with the device

• The 1st user assigned to the DEM account is associated with the device

• No user is associated with the device

As the Enterprise Administrator for Contoso, Holly Dickson used a DEM account to bulk enroll multiple devices to MDM. Holly later attempted to retire some older devices using the DEM account but could not do so. Why could Holly not retire the devices?

• Holly needed to assign Retire permissions to the DEM account

• The DEM account had not been assigned the Microsoft 365 Global admin role

• The DEM account is only used for device enrollment

As the Enterprise Administrator for Lucerne Publishing, Patti Fernandez wants to ensure that Lucerne's users enroll their devices to MDM. To do so, Patti plans to create a policy that only allows access to company resources from enrolled devices. What type of policy can Patti create to provide this feature?

• Security policy in Microsoft 365

• Compliance Policy in Intune

• Conditional Access policy in Microsoft 365

Fabrikam plans to purchase several Apple iOS devices for its employees. As the Enterprise Administrator for Fabrikam, Holly Spencer wants to ensure these devices get enrolled and configured to MDM through the Apple Device Enrollment Program (DEP). What is the 1st thing Holly must do to enable this scenario?

• Create a Conditional Access policy in Intune that only allows access to company resources from enrolled devices

• Purchase the devices through either Apple or an authorized reseller

• Create a Security policy in Microsoft 365 that only allows access to company resources from enrolled devices

• All of the above

As the Enterprise Administrator for Northwind Traders, Allan Deyoung wants to change Northwind's MDM authority from Configuration Manager MDM Authority to Intune MDM Authority. How should Allan make this change?

• Allan should contact Microsoft Support to make this change

• Unenroll the existing managed devices, make the change through the Intune portal, then re-enroll the devices

• Through the Configuration Manager console

Contoso wants to use Conditional Access with Microsoft Intune to keep its corporate data secure while giving users an experience that enables them to do their best work from any device and location. What must Contoso do to enable Conditional Access?

• Purchase an Azure AD Premium license

• Enable it through the Company Portal app

• Enable it in Microsoft Defender for Endpoint

Which type of policy should Contoso create to control the devices and apps that can connect to its email and company resources?

• Device Compliance Policy

• Security Policy

• Conditional Access Policy

An Enterprise Administrator wants to implement Microsoft Intune as MDM authority for her company. Which of the following rules must she consider when planning this implementation?

• Only Group Policy can manage Windows 10 devices that are domain members

• Only MDM can manage Windows 10 devices that are domain members

• Group Policy and MDM can simultaneously manage Windows 10 devices that are domain members