MD-102 Manage and maintain devices Practice Question
You use Microsoft Intune to manage Windows 11 devices. You configure a Windows Update ring policy to defer quality updates by 7 days and feature updates by 60 days. A critical security update is released that must be installed immediately on all devices, bypassing the deferral. What should you configure?
⚠ Common exam trap
The trap here is assuming that changing a deferral or setting a deadline will force immediate installation, when only expedited updates bypass deferrals.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use expedited updates in Microsoft Intune to deploy the specific security update to all devices.
Expedited updates in Microsoft Intune are specifically designed to deploy a particular Windows quality update immediately, overriding deferrals and other update ring settings. This is the correct approach for critical security updates that cannot wait. Other methods either do not bypass deferrals or affect all updates rather than the specific one.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Deploy a PowerShell script that runs the Windows Update client to install all available updates.
Why it's wrong here
A PowerShell script running the Windows Update client might trigger installation, but it does not bypass Intune update ring deferrals. The Windows Update for Business settings still apply, so deferred updates would not be installed. This method is also less reliable and does not provide the centralized control and reporting of expedited updates.
- ✗
Create a new Windows Update ring policy with a deadline of 0 days and assign it to all devices.
Why it's wrong here
Deadlines enforce installation after a specified time but do not bypass existing deferrals. The deferral still applies, so the update would not install immediately. A deadline of 0 days may cause immediate installation after the deferral period, but it does not override the 7-day or 60-day deferral settings already in place.
- ✓
Use expedited updates in Microsoft Intune to deploy the specific security update to all devices.
Why this is correct
Expedited updates allow administrators to deploy a specific Windows quality update immediately, bypassing deferrals and other update ring settings. This feature is designed for critical security updates that must be installed without delay. It targets devices directly and ensures the update is installed as soon as possible, meeting the requirement.
- ✗
Modify the existing Windows Update ring policy to set the quality update deferral to 0 days.
Why it's wrong here
Changing the deferral to 0 days would apply to all future quality updates, not just the critical one. It also does not guarantee immediate installation because the policy change must propagate and the device must scan for updates. This approach lacks the targeted, immediate deployment that expedited updates provide.
Go deeper
Related to this question
Learn chapter
Implementing Windows Autopilot
Key term
Security update
A security update is a software patch released to fix a vulnerability that could be exploited by attackers to compromise a system.
Key term
Quality update
A quality update is a type of software patch from Microsoft that focuses on fixing security vulnerabilities, bugs, and improving system stability for Windows operating systems.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.