MD-102 Protect devices Practice Question
You need to ensure that devices enrolled in Microsoft Intune automatically receive Windows quality updates as soon as they are released. Which update ring setting should you configure?
⚠ Common exam trap
The trap is confusing quality updates with feature updates or driver updates — candidates often pick feature update deferral when the question asks about monthly security patches.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Set 'Quality update deferral period (days)' to 0
In Intune Windows update rings, the 'Quality update deferral period (days)' setting controls how long quality updates (security and reliability fixes) are deferred after release. Setting it to 0 means devices receive quality updates as soon as they are released, satisfying the requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Set 'Driver update deferral period (days)' to 0
Why it's wrong here
Driver update deferral controls when hardware driver packages are offered, so setting it to 0 delivers drivers immediately while quality updates remain governed by their own separate deferral setting. It tempts because a zero deferral does mean immediate release, but on the driver axis rather than the quality update axis the scenario names.
- ✓
Set 'Quality update deferral period (days)' to 0
Why this is correct
A quality update deferral of 0 days means devices receive quality updates immediately upon release, with no postponement. This directly satisfies the requirement for automatic, as-soon-as-released delivery through the Windows update ring in Microsoft Intune.
- ✗
Set 'Feature update deferral period (days)' to 0
Why it's wrong here
Feature update deferral governs Windows version upgrades, not quality updates, so setting it to 0 leaves monthly security patches deferred by whatever the quality update deferral specifies. It tempts because deferral values of 0 do mean immediate delivery, but on the feature update axis rather than the quality update one the scenario requires.
- ✗
Set 'Microsoft product updates' to 'Allow'
Why it's wrong here
Microsoft product updates covers updates for other Microsoft products such as Office, not Windows quality updates, so allowing them leaves the quality update deferral untouched. It tempts because it sounds like a broad enable-everything toggle, but it governs a different update category than the Windows quality updates required.
Go deeper
Related to this question
Learn chapter
Updating Devices with Windows Update for Business
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
About these practice questions
Courseiva writes every MD-102 question from scratch — 556 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.