Your company uses Microsoft Intune.
More than 500 Android and iOS devices are enrolled in the Intune tenant.
You plan to deploy new Intune policies. Different policies will apply depending on the version of Android or iOS installed on the device.
You need to ensure that the policies can target the devices based on their version of Android or iOS.
What should you configure first?
To ensure that policies can target devices based on their version of Android or iOS in Microsoft Intune, you should first configure groups that have dynamic membership rules in Azure AD. Dynamic membership rules allow you to create groups where membership is automatically updated based on device attributes such as operating system version. This approach ensures that devices are correctly grouped according to their specific characteristics, enabling you to apply different policies to different versions of Android or iOS.
I think there is a misconception of Device Categories, from what I understand, categories are created, then the users themselves have to select what category their device belongs to. I don't think device categories are correct for the purpose of this question
Correct. Device categories is strictly a MANUAL category assignment to a device, either by the end user or an admin in the portal. Creating a categories literally only generates a list of all the created categories that can then be manually selected to apply to enrolled devices, but it does not query or determine device characteristics and then "tag" the device the category based on it's query. A dynamic group does query device characteristics then add them to a group based on those characteristics. Example: you can create a device category called "iOS devices" and then create a dynamic group called "iOS devices" and configure the rules to include only devices who match the device category "iOS devices" but the problem is that Android users could have selected that category for their device so this would NOT ensure specific platforms or versions are selected correctly.
https://learn.microsoft.com/en-us/mem/intune/enrollment/device-group-mapping "Regardless of platform, any device user can sign in to portal.manage.microsoft.com at anytime and go to My devices to select a category."
Answer is A
A - https://www.examtopics.com/discussions/microsoft/view/5327-exam-md-101-topic-3-question-4-discussion/
Answer and discussion in MD101 goes with Dynamic groups https://www.examtopics.com/discussions/microsoft/view/5327-exam-md-101-topic-3-question-4-discussion/
B. Device categories in Intune Device categories in Intune allow you to organize devices based on specific criteria such as device type, platform (Android or iOS), or version. By configuring device categories, you can group devices with similar characteristics together, making it easier to apply policies based on their version of Android or iOS. A. Groups that have dynamic membership rules in Azure AD: While Azure AD groups with dynamic membership rules can be useful for dynamically grouping users or devices based on attributes, they may not directly address the need to target policies based on the version of Android or iOS installed on the devices.
Device category needs to use dynamic group based on device.osVersion Confusing but answer would be A since B without dynamic group can not do that. It says what would you do FIRST
B, because: Device categories allow you to group devices based on criteria such as device platform (e.g., Android, iOS) or other properties. By defining device categories for Android and iOS devices, you can apply policies selectively to each category based on the version of Android or iOS installed. Not A, because: Groups with dynamic membership rules in Azure AD are used for creating Azure AD security groups with dynamic membership based on user or device attributes. While these can be used for targeting policies, they are more focused on user attributes and may not directly address the need to target based on device platform and version.
correct
To target devices based on their version of Android or iOS using Microsoft Intune, you should first configure groups that have dynamic membership rules in Azure AD (Option A).
A is correct You can configure Android or iOS version to a Dynamic Group. Which then adds the device to the dynamic group based on the devices version. With Device Categories you can't. https://learn.microsoft.com/en-us/archive/blogs/pauljones/dynamic-group-membership-in-azure-active-directory-part-2
A. Groups that have dynamic membership rules in Azure AD Ref 1: https://learn.microsoft.com/en-us/mem/intune/enrollment/device-group-mapping#:~:text=Device%20categories%20allow,Entra%20security%20groups. Ref 2: https://techcommunity.microsoft.com/t5/microsoft-intune/targeting-different-intune-policies-to-different-devices-for-the/m-p/341172 .
B. Device categories in Intune https://learn.microsoft.com/en-us/mem/intune/fundamentals/manage-os-versions#operating-system-version-control-using-intune-mobile-device-management-enrollment-restrictions
One thing I have learn in Azure Intune, "Groups" are very important to associate rules or any other things like polices .. Thus I will go with A
I am with A, in a Dynamic Groups you use query expressions to group models etc...
In dynamic groups you can query the devices by OS versions.
agree with virtualJP
Question is what should we configure first?!!
Device categories didn’t mention anything related to device version though. Whereas under the dynamic device group, there is a function of that
You must create the categories first and use them in the dynamic group.