Practice Exams:

View All

Microsoft MD-102 Cloud PKI Tunnel For MAM And Intune Advanced Analytics Practice Test

Skills 2.3 • 25 original questions

This Microsoft MD-102 Endpoint Administrator practice test focuses on cloud pki tunnel for mam and intune advanced analytics through original scenario-based questions aligned to the skills measured as of July 24, 2026. Use the full ExamSnap MD-102 collection for broader practice across all current skill areas. For broader exam preparation, review the Microsoft MD-102 Exam Dumps page.

Instructions: Select the best answer for each question. Review the explanation after answering; each distractor includes a reason it is not the best choice for that scenario.

Question 1

During a BYOD program at Wide World Importers, the service desk lead must issue and manage certificates for Intune-managed devices using a cloud-based PKI service. Which action most directly satisfies the requirement? The affected devices are in the lab-device cohort, rollout wave 1.

Configure Microsoft Intune Remote Help with the required permissions and session controls
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune
Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations

Correct answer: D

Why: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. This directly addresses the requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

Option review:

A: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

B: The Enterprise App Catalog streamlines deployment and updating of supported applications by providing managed catalog metadata and app content. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

C: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

D: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. This directly addresses the requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

E: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

Learning point: Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices

Question 2

Northwind Traders is revising endpoint operations for a remote-work deployment. Administrators need to give a managed mobile application secure access to internal resources without full device enrollment. Which implementation should the desktop engineer select for the pilot ring, rollout wave 1?

Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting

Correct answer: E

Why: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. This directly addresses the requirement: give a managed mobile application secure access to internal resources without full device enrollment.

Option review:

A: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

B: The Enterprise App Catalog streamlines deployment and updating of supported applications by providing managed catalog metadata and app content. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

C: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

D: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

E: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. This directly addresses the requirement: give a managed mobile application secure access to internal resources without full device enrollment.

Learning point: Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting

Question 3

A ticket escalated to the security administrator at Tailspin Toys states one non-negotiable goal: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports. Which choice is the strongest fit for the production ring, rollout wave 1?

Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations
Configure Microsoft Intune Remote Help with the required permissions and session controls

Correct answer: D

Why: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions. This directly addresses the requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

Option review:

A: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

B: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

C: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

D: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions. This directly addresses the requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

E: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

Learning point: Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations

Question 4

For the executive-device cohort, rollout wave 2 at Alpine Ski House, a branch migration can proceed only if the team can issue and manage certificates for Intune-managed devices using a cloud-based PKI service. What should the endpoint administrator configure?

Configure Microsoft Intune Remote Help with the required permissions and session controls
Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations
Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune

Correct answer: D

Option review:

B: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

E: The Enterprise App Catalog streamlines deployment and updating of supported applications by providing managed catalog metadata and app content. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

Learning point: Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices

Question 5

The endpoint architecture review at Wide World Importers focuses on this requirement: give a managed mobile application secure access to internal resources without full device enrollment. Which Microsoft management action is most appropriate for the remote-user cohort, rollout wave 2?

Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Configure Microsoft Intune Remote Help with the required permissions and session controls
Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices

Correct answer: C

Option review:

A: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

B: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

C: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. This directly addresses the requirement: give a managed mobile application secure access to internal resources without full device enrollment.

D: The Enterprise App Catalog streamlines deployment and updating of supported applications by providing managed catalog metadata and app content. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

E: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

Learning point: Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting

Question 6

A change advisory board at Northwind Traders asks how to identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports during a operations review. Which proposed action should the endpoint administrator approve for the shared-device cohort, rollout wave 2?

Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting
Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Configure Microsoft Intune Remote Help with the required permissions and session controls
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations

Correct answer: E

Option review:

A: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

B: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

C: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

D: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

E: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions. This directly addresses the requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

Learning point: Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations

Question 7

Tailspin Toys has already ruled out manual per-device administration. For the field-device cohort, rollout wave 3, the remaining requirement is to issue and manage certificates for Intune-managed devices using a cloud-based PKI service. Which choice best addresses it?

Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Configure Microsoft Intune Remote Help with the required permissions and session controls
Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations
Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting

Correct answer: A

Option review:

A: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. This directly addresses the requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

B: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

C: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

D: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

E: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

Learning point: Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices

Question 8

During post-pilot review at Alpine Ski House, the desktop engineer identifies a gap: the organization still needs to give a managed mobile application secure access to internal resources without full device enrollment. Which action should be added before the developer cohort, rollout wave 3 moves to production?

Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting
Configure Microsoft Intune Remote Help with the required permissions and session controls

Correct answer: D

Option review:

B: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

C: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

D: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. This directly addresses the requirement: give a managed mobile application secure access to internal resources without full device enrollment.

E: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

Learning point: Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting

Question 9

The security administrator at Wide World Importers is comparing several cloud-management options for a device refresh. Which one directly enables the team to identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports for the frontline-user cohort, rollout wave 3?

Configure Microsoft Intune Remote Help with the required permissions and session controls
Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune

Correct answer: C

Option review:

A: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

C: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions. This directly addresses the requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

D: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

E: The Enterprise App Catalog streamlines deployment and updating of supported applications by providing managed catalog metadata and app content. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

Learning point: Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations

Question 10

A security and operations workshop at Northwind Traders defines the desired outcome as follows: issue and manage certificates for Intune-managed devices using a cloud-based PKI service. Which implementation should be chosen for the kiosk cohort, rollout wave 4?

Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Configure Microsoft Intune Remote Help with the required permissions and session controls
Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations

Correct answer: C

Option review:

A: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

C: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. This directly addresses the requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

D: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

Learning point: Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices

Question 11

Which action best matches this technical purpose for the new-hire cohort, rollout wave 4: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment.

Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune
Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations
Configure Microsoft Intune Remote Help with the required permissions and session controls
Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting

Correct answer: E

Why: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. This directly addresses the requirement: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment..

Option review:

A: The Enterprise App Catalog streamlines deployment and updating of supported applications by providing managed catalog metadata and app content. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment..

B: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment..

C: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment..

D: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment..

E: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. This directly addresses the requirement: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment..

Learning point: Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting

Question 12

An administrator at Alpine Ski House describes the needed capability this way: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions. Which option should be associated with that requirement for the contractor cohort, rollout wave 4?

Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting
Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations
Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices

Correct answer: B

Why: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions. This directly addresses the requirement: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions..

Option review:

A: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions..

B: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions. This directly addresses the requirement: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions..

C: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions..

D: The Enterprise App Catalog streamlines deployment and updating of supported applications by providing managed catalog metadata and app content. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions..

E: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions..

Learning point: Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations

Question 13

During a design validation for the lab-device cohort, rollout wave 5, Wide World Importers documents the following behavior: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. Which endpoint-management feature or action is being described?

Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Configure Microsoft Intune Remote Help with the required permissions and session controls
Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations
Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune

Correct answer: A

Why: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. This directly addresses the requirement: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios..

Option review:

A: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. This directly addresses the requirement: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios..

B: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios..

C: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios..

D: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios..

E: The Enterprise App Catalog streamlines deployment and updating of supported applications by providing managed catalog metadata and app content. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios..

Learning point: Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices

Question 14

The desktop engineer must identify the Microsoft endpoint-management capability that provides this function for the pilot ring, rollout wave 5: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. Which choice is correct?

Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations
Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting
Configure Microsoft Intune Remote Help with the required permissions and session controls

Correct answer: D

Why: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. This directly addresses the requirement: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment..

Option review:

A: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment..

B: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment..

D: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. This directly addresses the requirement: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment..

E: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment..

Learning point: Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting

Question 15

A runbook for the production ring, rollout wave 5 contains this description: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions. Which implementation belongs in that runbook?

Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting
Configure Microsoft Intune Remote Help with the required permissions and session controls
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune
Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations

Correct answer: E

Why: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions. This directly addresses the requirement: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions..

Option review:

A: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions..

B: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions..

C: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions..

D: The Enterprise App Catalog streamlines deployment and updating of supported applications by providing managed catalog metadata and app content. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions..

E: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions. This directly addresses the requirement: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions..

Learning point: Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations

Question 16

Alpine Ski House is troubleshooting a branch migration. Evidence shows that the decisive requirement is to issue and manage certificates for Intune-managed devices using a cloud-based PKI service. Which action should the Intune administrator investigate first for the executive-device cohort, rollout wave 6?

Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune
Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting

Correct answer: C

Option review:

A: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

C: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. This directly addresses the requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

D: The Enterprise App Catalog streamlines deployment and updating of supported applications by providing managed catalog metadata and app content. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

Learning point: Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices

Question 17

After eliminating network and licensing causes, the Microsoft 365 administrator at Wide World Importers determines that success depends on the ability to give a managed mobile application secure access to internal resources without full device enrollment. Which endpoint-management action should be checked next for the remote-user cohort, rollout wave 6?

Configure Microsoft Intune Remote Help with the required permissions and session controls
Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune
Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity

Correct answer: B

Option review:

A: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

B: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. This directly addresses the requirement: give a managed mobile application secure access to internal resources without full device enrollment.

E: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

Learning point: Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting

Question 18

A service-desk escalation during a operations review has been narrowed to one management requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports. Which configuration is the most relevant starting point for the shared-device cohort, rollout wave 6?

Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations
Configure Microsoft Intune Remote Help with the required permissions and session controls
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune
Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting
Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity

Correct answer: A

Option review:

A: Advanced Analytics extends endpoint analytics with deeper signals and recommendations that can help prioritize endpoint issues and policy decisions. This directly addresses the requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

B: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

C: The Enterprise App Catalog streamlines deployment and updating of supported applications by providing managed catalog metadata and app content. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

D: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

E: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

Learning point: Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations

Question 19

The failure pattern at Tailspin Toys affects the field-device cohort, rollout wave 7. Before making unrelated policy changes, the service desk lead needs a solution that will issue and manage certificates for Intune-managed devices using a cloud-based PKI service. Which action is most directly relevant?

Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune
Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations
Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity

Correct answer: C

Option review:

A: The Enterprise App Catalog streamlines deployment and updating of supported applications by providing managed catalog metadata and app content. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

B: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

C: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. This directly addresses the requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

E: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

Learning point: Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices

Question 20

While investigating a remote-work deployment, Alpine Ski House confirms the environment must give a managed mobile application secure access to internal resources without full device enrollment. Which Microsoft endpoint-management capability should be validated for the developer cohort, rollout wave 7?

Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune
Configure Microsoft Intune Remote Help with the required permissions and session controls
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting

Correct answer: E

Option review:

B: The Enterprise App Catalog streamlines deployment and updating of supported applications by providing managed catalog metadata and app content. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

C: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

D: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

Learning point: Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting

Question 21

Two teams at Wide World Importers propose different approaches for the frontline-user cohort, rollout wave 7. The selection criterion is simple: the chosen approach must identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports. Which option should win the technical comparison?

Configure Microsoft Intune Remote Help with the required permissions and session controls
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune
Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices

Correct answer: D

Option review:

A: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

B: The Enterprise App Catalog streamlines deployment and updating of supported applications by providing managed catalog metadata and app content. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

C: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

E: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

Learning point: Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations

Question 22

For the kiosk cohort, rollout wave 8, Northwind Traders wants the least indirect solution to this goal: issue and manage certificates for Intune-managed devices using a cloud-based PKI service. Which action aligns most closely with that requirement?

Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Configure Microsoft Intune Remote Help with the required permissions and session controls
Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune
Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations

Correct answer: A

Option review:

B: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

D: The Enterprise App Catalog streamlines deployment and updating of supported applications by providing managed catalog metadata and app content. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

Learning point: Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices

Question 23

A modernization plan at Tailspin Toys includes a application modernization. The Microsoft 365 administrator is asked to choose the control that specifically helps the organization give a managed mobile application secure access to internal resources without full device enrollment. Which choice fits best for the new-hire cohort, rollout wave 8?

Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting
Configure Microsoft Intune Remote Help with the required permissions and session controls
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune

Correct answer: C

Option review:

A: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

D: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

E: The Enterprise App Catalog streamlines deployment and updating of supported applications by providing managed catalog metadata and app content. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: give a managed mobile application secure access to internal resources without full device enrollment.

Learning point: Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting

Question 24

The contractor cohort, rollout wave 8 is moving into a controlled rollout at Alpine Ski House. Which action should be included when the stated management objective is to identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports?

Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices
Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations
Configure Microsoft Intune Remote Help with the required permissions and session controls

Correct answer: D

Option review:

B: The Enterprise App Catalog streamlines deployment and updating of supported applications by providing managed catalog metadata and app content. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

C: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: identify anomalous endpoint behavior and risk-informed optimization opportunities beyond basic reports.

Learning point: Use Intune Advanced Analytics to review anomalies, proactive insights, and risk-based recommendations

Question 25

Wide World Importers is replacing an ad hoc process during a BYOD program. The replacement must reliably issue and manage certificates for Intune-managed devices using a cloud-based PKI service. Which endpoint-management approach should the service desk lead implement for the lab-device cohort, rollout wave 9?

Configure Endpoint Privilege Management elevation settings and policies, then monitor elevation activity
Use the Enterprise App Catalog to discover, package, and maintain supported catalog applications through Intune
Configure Microsoft Intune Remote Help with the required permissions and session controls
Deploy Microsoft Tunnel for Mobile Application Management and configure the tunnel gateway and MAM targeting
Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices

Correct answer: E

Option review:

A: Endpoint Privilege Management lets standard users perform approved elevated tasks while reducing persistent local administrator rights and providing visibility into elevation events. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

C: Remote Help provides organization-controlled remote assistance integrated with Intune identity, RBAC, and reporting. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

D: Microsoft Tunnel for MAM can provide secure app-level access from unenrolled or MAM-managed mobile devices without requiring full device enrollment. It can be valid in another endpoint-management scenario, but it does not most directly address this requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

E: Cloud PKI provides cloud-based certificate authority capabilities and automates certificate issuance to managed endpoints without requiring a traditional on-premises PKI for supported scenarios. This directly addresses the requirement: issue and manage certificates for Intune-managed devices using a cloud-based PKI service.

Learning point: Plan and deploy Microsoft Cloud PKI to issue and manage certificates for Intune-managed devices

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25

Related posts: