MD-102 Prepare infrastructure for devices Practice Question
Your organization uses Microsoft Intune to manage devices. You need to ensure that all Windows 11 devices automatically install critical and security updates from Windows Update. Which policy should you configure?
⚠ Common exam trap
Candidates often confuse device configuration profiles (which are for settings like BitLocker or Wi-Fi) with update rings, or they mistakenly think compliance policies can enforce update installation, when in fact only update rings control the automatic update behavior.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create an update ring for Windows 10 and later, and set the 'Automatic update behavior' to 'Auto install and reboot' and assign it to all devices.
Update rings are the primary policy in Microsoft Intune for controlling how and when Windows 10 and later devices receive updates from Windows Update. Setting 'Automatic update behavior' to 'Auto install and reboot' ensures that critical and security updates are automatically downloaded and installed without user intervention, meeting the requirement for all Windows 11 devices.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure a device configuration profile with 'Windows Update for Business' settings.
Why it's wrong here
Windows Update for Business settings in a device configuration profile control deferral, deadlines and update rings, but they do not themselves schedule or install updates automatically. It is tempting because it governs update behaviour, yet the requirement is automatic installation, which update rings configured for that purpose deliver.
- ✗
Deploy a feature update policy to install the latest quality updates.
Why it's wrong here
Feature update policies target Windows version upgrades, controlling which Windows 11 build devices move to, not monthly quality or security patches. It is tempting because 'latest updates' sounds similar, but quality updates are delivered through update rings, which is the mechanism the scenario requires.
- ✓
Create an update ring for Windows 10 and later, and set the 'Automatic update behavior' to 'Auto install and reboot' and assign it to all devices.
Why this is correct
An update ring for Windows 10 and later satisfies the automatic installation requirement by setting 'Automatic update behavior' to 'Auto install and reboot', which forces critical and security updates to download and install without user intervention. Assigning it to all devices ensures every Windows 11 endpoint receives the policy, meeting the stem's automatic-update constraint.
- ✗
Create a device compliance policy that requires devices to have the latest updates.
Why it's wrong here
A compliance policy only evaluates and reports whether devices meet conditions such as a minimum update level; it marks devices non-compliant and can trigger conditional access, but never installs updates. It is tempting because it references the latest updates, yet it assesses state rather than deploying anything.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.