You have 500 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory
(Azure AD) and enrolled in Microsoft Intune.
You plan to distribute certificates to the computers by using Simple Certificate Enrollment Protocol (SCEP).
You have the servers shown in the following table.
NDES issues certificates from the subordinate CA.
You are configuring a device profile as shown in the exhibit. (Click the tab.)
You need to complete the SCEP profile.
You have following types of devices enrolled in Microsoft Intune:
* Windows 10
* Android
* iOS
For which types of devices can you create VPN profiles in Microsoft Endpoint Manager?
You use the Microsoft Deployment Toolkit (MDT) to deploy Windows 10.
You create a new task sequence by using the Standard Client Task Sequence template to deploy Windows 10
Enterprise to new computers. The computers have a single hard disk.
You need to modify the task sequence to create a system volume and a data volume.
Which phase should you modify in the task sequence?
Your company has a Microsoft 365 subscription.
A new user named Admin1 is responsible for deploying Windows 10 to computers and joining the computers
to Microsoft Azure Active Directory (Azure AD).
Admin1 successfully joins computers to Azure AD.
Several days later, Admin1 receives the following error message: "This user is not authorized to enroll. You
can try to do this again or contact your system administrator with the error code (0x801c0003)."
You need to ensure that Admin1 can join computers to Azure AD and follow the principle of least privilege.
Your company has 200 computers that run Windows 10. The computers are managed by using Microsoft
Intune.
Currently, Windows updates are downloaded without using Delivery Optimization.
You need to configure the computers to use Delivery Optimization.
What should you create in Intune?
