WorksheetsAzure Fundamentals and Autopilot Quiz
Total questions: 30
Worksheet time: 15mins
What is the primary purpose of Azure Active Directory (Azure AD)?
Manage resources in Azure.
Provide identity and access management for users and applications.
Host virtual machines.
Manage network resources.
Which Azure role is required to create a Virtual Machine (VM)?
Network Contributor
Virtual Machine Contributor
Security Admin
Reader
What is the function of Azure Resource Groups?
Manage Azure subscriptions.
Log all Azure activity.
Group resources for easy management.
Provide network connectivity for resources.
Your organization wants to enforce conditional access policies requiring multi-factor authentication (MFA) for all remote workers. Which Azure service will you use?
Azure Policy
Azure AD Conditional Access
Azure Monitor
Azure Virtual Network
Which of the following is NOT a supported authentication method in Azure AD?
Passwordless authentication
Certificate-based authentication
Hardware-based authentication
Biometric authentication
What is the purpose of Azure AD Dynamic Groups?
Manually group users for access control.
Automatically assign users or devices to groups based on attributes.
Enable cross-region resource sharing.
Provide alerts for group membership changes.
A new employee logs in to an Azure AD-joined device but cannot access company resources. What is the first step to troubleshoot this issue?
Check device compliance in Intune.
Assign the employee to an admin role.
Add the employee to the 'All Users' group.
Check the device's connection to Azure AD.
What is Windows Autopilot used for?
Automating Azure resource deployment.
Simplifying and automating Windows device setup.
Managing Windows updates.
Configuring network security policies.
Which data is included in the hardware hash required for Autopilot registration?
Device serial number, firmware information, and TPM data.
User credentials, IP address, and MAC address.
Operating system details and user profiles.
Installed applications and security settings.
A user receives a new device and logs in with their Azure AD credentials. However, the device does not fetch the assigned Autopilot profile. What could be the issue?
The device is not connected to the internet.
The user's account is blocked in Azure AD.
The hardware hash was not uploaded to Intune.
All of the above.
What are the deployment modes available in Windows Autopilot?
User-Driven Mode, Self-Deploying Mode, Pre-Provisioning (White Glove).
Automatic Mode, Manual Mode, Hybrid Mode.
Cloud-Driven Mode, User-Based Mode, Shared Mode.
Remote Mode, Local Mode, Offline Mode.
What is the purpose of the Enrollment Status Page (ESP) in Autopilot?
Track device compliance with organizational policies.
Monitor and ensure all configurations and apps are applied before the user accesses the desktop.
Allow users to select their deployment profiles.
Enroll devices into Azure AD.
You are deploying shared devices in a library and want to configure them without user interaction during setup. Which Autopilot deployment mode should you use?
User-Driven Mode
Self-Deploying Mode
Pre-Provisioning Mode
Hybrid Azure AD Join Mode
What role does Azure AD play in Windows Autopilot deployment?
Stores user profiles for deployment.
Manages device compliance policies.
Authenticates and joins devices to the organization.
Deploys Autopilot profiles to devices.
What tool is used to generate the hardware hash for Autopilot registration?
Windows System Configuration Utility.
PowerShell Script (Get-WindowsAutopilotInfo.ps1).
Azure Resource Manager (ARM).
Windows Deployment Toolkit (WDT).
What is the difference between Azure AD Join and Hybrid Azure AD Join in Autopilot?
Azure AD Join is for on-premises environments, while Hybrid Azure AD Join is for cloud-only environments.
Azure AD Join requires Intune, while Hybrid Azure AD Join requires Group Policy.
Azure AD Join connects devices to Azure AD only, while Hybrid Azure AD Join connects to both Azure AD and on-premises AD.
Azure AD Join is used for personal devices, while Hybrid Azure AD Join is for corporate devices.
A device is registered in Autopilot, but the assigned user cannot access it. What should you check first?
Deployment profile assignment in Intune.
Azure AD group membership.
The device's hardware hash.
Enrollment Status Page logs.
How can you automate the assignment of Autopilot profiles to devices?
Use Intune's default device group.
Create a dynamic Azure AD group with device filters.
Manually assign profiles to each device.
Use Group Policy.
What is Pre-Provisioning (White Glove) in Autopilot?
A fully automated setup mode with no user interaction.
A process where IT sets up the device before delivering it to the user.
A method for resetting devices remotely.
A troubleshooting tool for failed deployments.
Your organization wants to configure Autopilot to deploy Office 365 apps during setup. How should you achieve this?
Create and assign an Intune app deployment policy.
Configure the Enrollment Status Page to track Office 365 installation.
Add Office 365 to the default Autopilot profile.
Use a custom script to deploy Office 365.
What is the primary log location for troubleshooting Autopilot deployments on a device?
C:\Windows\Logs\DeploymentLogs
C:\ProgramData\Microsoft\IntuneManagementExtension\Logs
C:\Windows\Panther\Setupact.log
C:\Windows\System32\Logs\Autopilot
A device fails to fetch its deployment profile during OOBE. What is the likely cause?
The device is not Azure AD joined.
Internet connectivity is unavailable.
The device is not assigned a profile in Intune.
Both B and C.
What permissions are required to upload devices for Autopilot in Intune?
Global Administrator
Intune Administrator or Windows Autopilot Device Administrator
User Access Administrator
Compliance Administrator
What happens if you reset an Autopilot device?
The device is removed from Azure AD.
The device is re-enrolled and configured based on the assigned Autopilot profile.
The hardware hash must be re-uploaded.
The deployment profile is deleted.
What role does Conditional Access play in Autopilot?
Enforces compliance policies during device enrollment.
Assigns users to devices dynamically.
Configures firewall and antivirus settings.
Tracks deployment status.
A user reports that the Autopilot deployment process is stuck at 'Setting up your device.' How would you resolve this issue?
Check the Enrollment Status Page for failed apps or policies.
Reset the device and reassign the profile.
Re-upload the hardware hash.
Disable Conditional Access policies temporarily.
What are the two main components of the Autopilot process?
Deployment Profiles and Device Policies.
Device Registration and Deployment Profiles.
Azure AD Join and Intune Compliance.
Enrollment Status Page and Group Policies.
What is the maximum number of devices that can be uploaded in a single Autopilot CSV file?
500
1,000
5,000
Unlimited
An organization wants to monitor Autopilot deployments in real-time. What tool should be used?
Event Viewer
Intune Monitoring Dashboard
Azure AD Audit Logs
Device Management Console
What feature of Autopilot ensures devices are compliant with policies and apps before the user logs in?
Conditional Access
Enrollment Status Page
Windows Update for Business
Device Compliance Policies
