Enrollment & Autopilot
If a customer wants devices to be pre-configured before users receive them, what Microsoft Intune feature should they use?
What is Windows Autopilot?
If a customer wants to block access to corporate email from non-compliant devices, what should they configure?
What is Conditional Access with a compliance policy?
If a customer wants to deploy Office apps to Windows devices, what should they use?
What is the Microsoft 365 Apps deployment profile in Intune?
If a customer wants to set Wi-Fi profiles on all company devices, what feature should be used?
What is a configuration profile in Intune?
If a customer is asking for a report of all compliant devices, where should they go?
What is the Device compliance report in Intune?
If a customer is asking for a zero-touch experience for iOS devices, what solution should you recommend?
What is Apple Automated Device Enrollment via ABM?
If a customer is asking how to require a passcode on mobile devices, what policy should be created?
What is a compliance policy with passcode requirements?
If a customer is asking to block personal app usage on Android, what feature helps?
What is App Protection Policies (MAM)?
If a customer is asking how to deploy security baselines, what should you recommend?
What is Microsoft Intune security baselines?
If a customer wants a list of apps installed across the fleet, what feature provides that?
What is the App inventory under Device details?
If a customer wants users to authenticate before enrolling devices, what feature should be enabled?
What is multifactor authentication for device enrollment?
If a customer wants to allow access to SharePoint only from compliant devices, what service helps enforce this?
What is Conditional Access in Entra ID?
If a customer wants to deploy an internal app to iOS devices, what method is used?
What is Line-of-business (LOB) app deployment via Intune?
If a customer wants to apply BitLocker settings automatically, what should they configure?
What is an endpoint security policy or device configuration profile for BitLocker?
If a customer wants to be alerted when devices fall out of compliance, what can be configured?
What is a compliance policy with email or Intune notifications?
If a customer is asking how to enforce naming conventions during Autopilot, what should you configure?
What is a deployment profile with naming template settings?
If a customer is asking why compliant iOS devices are being blocked, what should be reviewed first?
What are device compliance policies and Conditional Access policies?
If a customer wants to ensure apps update automatically, what setting should be enforced?
What is configure app update policies in Intune or via Store integration?
If a customer wants to block USB storage on corporate laptops, what setting can they use?
What is an Endpoint Protection configuration profile?
If a customer is asking how to audit policy changes, what should they review?
What is Intune audit logs or Entra audit logs?
If a customer wants to reuse hardware hash files across tenants, what limitation should they be aware of?
What is hardware hash binding to tenant restrictions?
If a customer wants to apply different access policies based on location, what feature can be used?
What is Named Locations in Conditional Access?
If a customer wants to restrict copying data between apps, what feature is needed?
What is Data Transfer settings in App Protection Policies?
If a customer wants to use custom scripts to configure Windows settings, what should they use?
What is PowerShell script deployment in Intune?
If a customer wants to export detailed device data regularly, what can they use?
What is Intune Data Warehouse or Graph API?