MD-102 Manage and maintain devices Practice Question
You need to deploy a custom Windows 11 feature update to a pilot group of 50 devices before rolling out to the entire organization. The devices are managed by Intune and are in a 'Pilot' Microsoft Entra ID group. What is the best approach?
⚠ Common exam trap
Watch out — candidates often confuse feature update profiles with quality update policies or configuration profiles, mistakenly thinking any update-related setting can be applied via a configuration profile or deferral policy.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a feature update profile for Windows 11 and assign to the pilot group
Intune's feature update profiles are specifically designed to deploy Windows 11 feature updates to targeted Microsoft Entra ID groups, such as the 'Pilot' group. This approach allows you to control the exact feature update version (e.g., Windows 11 23H2) and assign it only to the pilot devices, enabling a controlled rollout before expanding to the entire organization.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure a Windows Update for Business deferral policy for all devices
Why it's wrong here
A deferral policy applies to all targeted devices and merely postpones updates; it cannot scope a custom feature update to the 50-device Pilot group. Deferrals are the right choice when you want to delay quality or feature updates organisation-wide, not when delivering a specific build to a subset.
- ✗
Create a custom configuration profile with update settings
Why it's wrong here
A custom configuration profile sets device settings via CSPs; it cannot package or target a feature update build to the Pilot group. Configuration profiles are correct for controlling update rings, delivery optimisation or feature-update deferral behaviour, not for deploying the update payload itself.
- ✓
Create a feature update profile for Windows 11 and assign to the pilot group
Why this is correct
A feature update profile targets specific Windows 11 versions and deploys to assigned Microsoft Entra groups, letting you scope the rollout to the 50-device Pilot group before broadening assignment. This satisfies the staged pilot-then-org requirement without manual installation.
- ✗
Use Group Policy to configure Windows Update settings for the pilot group
Why it's wrong here
Group Policy cannot deliver a custom Windows 11 feature update, and Intune-managed devices do not process on-premises Group Policy for update deployment. It is tempting because Group Policy historically configured Windows Update settings, and it remains valid for domain-joined devices without MDM enrolment.
Go deeper
Related to this question
Learn chapter
Managing Device Configuration Profiles
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
Key term
Windows 11
Windows 11 is Microsoft's latest desktop operating system, offering a redesigned interface, enhanced security features, and improved support for modern hardware.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.