You have 200 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune.
You need to ensure that only applications that you explicitly allow can run on the computers.
What should you use?
https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/introduction-to-device-guardvirtualization-
based-security-and-windows-defender-application-control
What should you configure to meet the technical requirements for the Azure AD-joined computers?
You are creating a device configuration profile in Microsoft Intune.
You need to configure specific OMA-URI settings in the profile.
Which profile type should you use?
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer that runs Windows 8.1.
Two days ago, you upgraded the computer to Windows 10.
You need to downgrade the computer to Windows 8.1.
Solution: From Windows Update in the Settings app, you use the Advanced options.
Does this meet the goal?
You have a Microsoft 365 subscription. The subscription contains 500 computers that run Windows 11 and are enrolled in Microsoft Endpoint Manager. You need to manage the deployment of monthly security updates. The solution must meet the following requirements:
* Updates must be deployed to a group of test computers for quality assurance.
* Updates must be deployed automatically 15 days after the quality assurance testing.
What should you create in the Microsoft Endpoint Manager admin center?
