This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
At Contoso, you need to deploy a configuration profile that enables BitLocker encryption on all Windows devices. Which profile type should you use, and why?
Device restrictions template
Settings catalog
Custom profile with OMA-URI settings
You create a compliance policy requiring devices to have antivirus enabled and OS version 19041 or later. A device fails compliance because it's running Windows 10 version 18363. What happens to the device?
The device automatically upgrades to Windows 10 version 19041.
The device is marked as noncompliant, and configured actions for noncompliance are triggered.
The device is immediately wiped and removed from Intune.
You want to apply a Wi-Fi configuration profile only to Windows devices in the Sales department that are running Windows 11. How should you configure the assignment?
Create a separate profile for each sales team member and assign individually.
Assign the profile to the 'Sales Department' user group and use an assignment filter to include only Windows 11 devices.
Assign the profile to the 'All devices' group and use an applicability rule to filter by OS version.
A device is marked as noncompliant because the user disabled Windows Defender Firewall. You configure a remediation script to re-enable the firewall automatically. Where do you deploy the remediation script?
As part of the configuration profile for Windows Defender Firewall.
As a PowerShell script policy in Intune under Devices > Manage devices > Scripts and remediations.
As an action for noncompliance in the compliance policy.
You must answer all questions before checking your work.
Was this page helpful?
Need help with this topic?
Want to try using Ask Learn to clarify or guide you through this topic?