Knowledge check

1.

Users across multiple sites are suddenly unable to access corporate email on their Intune-managed devices. Before investigating device configuration or policy assignments, what should you check first?

Review the Microsoft 365 Service Health dashboard in the admin center to determine whether an active Intune service incident is affecting device synchronization.

Wipe and re-enroll all affected devices to force a fresh policy sync and restore email access.

Open a Microsoft Support ticket immediately, because widespread failures are always caused by Microsoft infrastructure problems.

2.

Your organization wants to be automatically notified by email whenever more than 10% of managed devices become non-compliant with the corporate security baseline. Which Intune feature should you configure to meet this requirement?

Create an Intune notification message template, then configure a compliance policy with an action for noncompliance that triggers the email notification when the threshold is reached.

Schedule a manual review of the Intune compliance report each day and send a team email if the non-compliant count exceeds the threshold.

Configure a diagnostic settings export to a storage account and write a custom script to email the team when the CSV file changes.

3.

After a change management window, help desk calls spike with reports of failed device enrollments. You need to quickly identify whether a recent policy or configuration change caused the issue. What is the most efficient first step?

Review the Intune audit logs filtered to the previous change window to see which administrative actions were performed, then cross-reference those changes with your documented operational baseline.

Re-apply the enrollment restriction policies to all device platforms to reset them to their last known good state.

Ask the change management team to verbally recall what was modified during the window, then test each recalled change one at a time.

Check your knowledge

Feedback