Microsoft Intune Device Configuration Profiles Flashcards

Which profile type in Intune allows administrators to configure Windows Defender Firewall rules for managed devices?

Answer: Endpoint security — Firewall policy

Endpoint security Firewall policies in Intune allow granular configuration of Windows Defender Firewall rules across managed devices.

An administrator needs to deploy a Wi-Fi profile to iOS and Android devices. Which Intune profile type should be used?

Answer: Wi-Fi profile under Device configuration

A Wi-Fi profile under Device configuration in Intune enables administrators to push network credentials and settings to mobile devices automatically.

What is the purpose of an OMA-URI setting in a custom Intune configuration profile?

Answer: To apply settings not exposed in Intune's built-in profile UI using raw MDM CSP paths

OMA-URI settings allow administrators to configure MDM CSP paths directly when Intune's built-in templates don't expose the needed setting.

Which Intune profile type enforces Windows Hello for Business on enrolled Windows 10/11 devices?

Answer: Both B and C are valid

Both Identity protection profiles and Endpoint security Account protection policies can configure Windows Hello for Business settings in Intune.

A configuration profile assigned to a device group conflicts with a profile assigned to a user group. Which takes precedence by default?

Answer: Device group assignment always wins

When a device-group-assigned profile conflicts with a user-group-assigned profile for the same setting, the device group assignment takes precedence in Intune.

Which Intune report shows which devices have successfully applied a specific configuration profile?

Answer: Device configuration — per-profile assignment status report

The per-profile assignment status report under Device configuration shows each device's status (succeeded, failed, pending) for that specific profile.