Configure Windows Update for Business Deferral Periods in Intune
You need to configure Windows Update for Business policies using Intune. You want to defer feature updates by 60 days and quality updates by 14 days. Which policy setting should you use?
Quick Answer
The answer is the Windows 10 and later update ring policy. This is the correct choice because update rings are specifically designed to manage deferral periods for both feature and quality updates, allowing you to set a 60-day deferral for feature updates and a 14-day deferral for quality updates within a single policy configuration. On the Microsoft 365 Endpoint Administrator MD-102 exam, this question tests your understanding of how Intune’s Update Rings policy centralizes update timing controls, as opposed to the feature updates policy which targets specific versions, or the driver updates policy which handles separate hardware updates. A common trap is confusing deferral periods with compliance policies or version targeting, but remember that deferral delays are always configured within the update ring settings. Memory tip: think of an “update ring” as a scheduling circle that holds both feature and quality delays together.
⚠ Common exam trap
Candidates often confuse the 'Windows feature update policy' (which targets a specific feature update version) with the 'update ring' policy (which controls deferral periods), leading them to select option C instead of B.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Windows 10 and later update ring
The Windows 10 and later update ring policy in Intune is specifically designed to configure Windows Update for Business settings, including deferral periods for feature and quality updates. By setting the 'Feature update deferral period (days)' to 60 and 'Quality update deferral period (days)' to 14, you directly control how long updates are postponed after they are released by Microsoft. This policy applies to devices managed via Intune and leverages the Windows Update for Business service to enforce these deferrals.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Windows compliance policy
Why it's wrong here
Compliance policies evaluate and report device state against conditions; they cannot defer feature or quality updates. It is tempting because compliance policies do reference update-related conditions and can trigger remediation, and would be correct if you needed to flag devices missing required updates.
- ✓
Windows 10 and later update ring
Why this is correct
Update rings for Windows 10 and later hold the deferral settings for feature and quality updates, so a single ring can defer feature updates 60 days and quality updates 14 days. Other Intune update profiles do not expose both deferral values together.
- ✗
Windows feature update policy
Why it's wrong here
Feature update policies defer only feature updates; they expose no setting for the 14-day quality update deferral the scenario also requires. It is tempting because it is the natural place to control feature update timing, and would suffice if only the 60-day feature deferral were needed.
- ✗
Windows driver update policy
Why it's wrong here
Driver update policies govern driver approval and deployment, offering no feature or quality update deferral settings. It is tempting because it is a Windows Update for Business ring-style policy in Intune, and would be correct if the requirement were to control how driver updates reach devices.
Go deeper
Related to this question
Learn chapter
Securing Devices with Endpoint Security Policies
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
Windows 10
Windows 10 is a personal computer operating system developed by Microsoft that combines the familiarity of Windows 7 with the modern features of Windows 8, designed to run on a wide range of devices from desktops to tablets.
About these practice questions
This MD-102 question is part of Courseiva's 556-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on MD-102
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. You are configuring Windows Update for Business policies in Microsoft Intune. You want to ensure that devices receive quality updates (security fixes) as soon as they are released, but defer feature updates for up to 60 days. Which TWO settings should you configure?
easy- ✓ A.Set 'Defer quality updates (days)' to 0.
- B.Set 'Feature update channel' to 'Semi-Annual Channel'.
- C.Set 'Update notification level' to 'Turn off notifications'.
- D.Set 'Defer quality updates (days)' to 60.
- ✓ E.Set 'Defer feature updates (days)' to 60.
Why A: Option A is correct because setting 'Defer quality updates (days)' to 0 means quality updates (security fixes) are offered immediately when released, with no deferral, which matches the requirement to receive them as soon as possible. Option E is correct because setting 'Defer feature updates (days)' to 60 delays feature updates by exactly 60 days, satisfying the requirement to defer feature updates for up to 60 days. Option B is not correct because 'Semi-Annual Channel' is a servicing channel designation, not a deferral setting, and it does not by itself defer feature updates by 60 days. Option C is not correct because 'Update notification level' controls user-facing update notifications, not the timing of quality or feature update delivery. Option D is not correct because deferring quality updates by 60 days would delay security fixes, contradicting the goal of receiving them as soon as they are released.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.