Knowledge check

1.

At Contoso Healthcare, clinical coordinator Maria is moving from Cardiology to Emergency Medicine. You created a dynamic group named 'Emergency-Devices' with the rule (user.department -eq "Emergency Medicine") to assign compliance policies. What happens to Maria's enrolled devices after her department attribute is updated in Microsoft Entra ID?

The devices remain in the Cardiology group until manually moved by an administrator

The devices are automatically added to the Emergency-Devices group during the next membership evaluation

Maria must re-enroll her devices to join the new department's device group

2.

You're configuring role-based access control (RBAC) at Contoso Healthcare. The Helpdesk team needs to remotely wipe lost devices, view device inventory, and disable noncompliant devices. They should NOT be able to create or modify Intune policies. Which Microsoft Entra ID role should you assign?

Intune Administrator

Cloud Device Administrator

Helpdesk Operator

3.

Contoso Healthcare implemented a BYOD program for administrative staff. You need to allow personal iOS and Android devices to register in Microsoft Entra ID, but require multifactor authentication (MFA) during registration. Where should you configure this requirement?

In Device settings under the 'Devices may be Microsoft Entra joined' option

In User settings under 'Users may register their devices with Microsoft Entra ID'

In Conditional Access policies by creating a policy that requires MFA for device registration

4.

Contoso Healthcare is purchasing 100 new Windows 11 Pro laptops for nursing staff. These corporate-owned devices need access to Azure resources and full Intune management. Your organization doesn't have on-premises Active Directory. Which device identity approach should you implement?

Microsoft Entra hybrid join

Microsoft Entra join

Microsoft Entra registration

5.

You need to create groups at Contoso Healthcare to target Intune compliance policies and configuration profiles. You have clinical staff with shared workstations, administrative staff with personal laptops, and IT staff with corporate devices. Which combination of group types best supports efficient policy targeting?

Create three static user groups for each department and manually assign members

Create dynamic user groups based on department attributes and dynamic device groups based on device ownership (corporate vs. personal)

Create static device groups and assign devices manually based on their physical location

Check your knowledge

الملاحظات