MD-102 Manage and maintain devices Practice Question
You need to deploy Windows updates to a group of devices using Microsoft Intune. Which TWO policies should you configure to ensure updates are applied within a maintenance window?
⚠ Common exam trap
It's easy for candidates to confuse 'Windows 10 and later quality update' (a non-existent policy) with the actual quality update settings within an update ring, or assume that a device compliance policy can enforce update timing, when in fact only update rings provide the maintenance window configuration.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Windows 10 and later update ring
(Windows 10 and later update ring) is correct because update rings in Microsoft Intune allow you to configure a maintenance window by setting the 'Active hours start' and 'Active hours end' values, which define a period during which updates are deferred and applied outside of those hours. This ensures updates are installed only during the specified maintenance window, aligning with the requirement to control update timing.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Assignment filter
Why it's wrong here
Assignment filters scope policies to devices but do not control update deployment.
- ✗
Device compliance policy
Why it's wrong here
Compliance policies evaluate device configuration but do not deploy updates.
- ✓
Windows 10 and later update ring
Why this is correct
Update rings manage update deferral, deadline, and maintenance windows.
- ✗
Windows 10 and later quality update
Why it's wrong here
Quality updates are managed via update rings, not as a separate policy.
- ✓
Windows 10 and later feature update
Why this is correct
Feature update policies deploy specific feature updates and can be scheduled.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Update ring
An Update ring is a policy-based group in Windows 10/11 deployment that controls the timing, pace, and scope of feature updates and quality updates pushed to devices across an organization.
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
About these practice questions
Courseiva writes every MD-102 question from scratch — 942 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.