Knowledge check

1.

Your security director asks for a single report showing which enrolled Windows devices are not compliant with your security baseline policy. Which Intune built-in report category is the most appropriate starting point?

The Compliance reports category, which provides per-device and per-policy compliance state for all enrolled devices.

The Endpoint analytics category, which scores device boot performance and application reliability.

The Windows Update for Business reports category, which shows update deployment progress and error codes.

2.

An administrator wants to see only the Intune compliance report rows for Windows devices in the Finance department that have been non-compliant for more than seven days, and wants to revisit this view weekly without reconfiguring it each time. What is the correct approach?

Apply OS platform, department group, compliance status, and last-check-in date filters to the compliance report, then save the configuration as a named saved view.

Export the full compliance report to CSV each week and sort the spreadsheet manually to isolate Finance devices.

Create a new custom compliance policy scoped only to Finance devices so that a separate non-compliant count appears in the overview.

3.

A compliance officer needs a monthly report on device compliance trends delivered to their email as a PDF, without requiring them to log into the Intune admin center. Which approach best meets this requirement?

Use the Microsoft Graph API with a scheduled Azure Automation runbook to export the compliance report data monthly, format it, and send it via an email connector such as Logic Apps or Power Automate.

Add the compliance officer as an Intune administrator so they can open the admin center and view reports directly each month.

Configure Intune diagnostic settings to stream compliance data to an event hub, which will automatically email monthly PDFs.

Check your knowledge

Feedback