Microsoft 365 Endpoint AdministratorManage devices and apps (55-60%)Hard

A Microsoft 365 Endpoint Administrator is configuring Microsoft Intune for a new set of corporate-owned Android Enterprise devices. These devices will be used by field technicians and should have a highly restricted, single-purpose experience, only allowing access to a few pre-approved applications. Users should not be able to access device settings or install other applications. Which Android Enterprise management scenario best fits these requirements?

  1. AAndroid Enterprise personally-owned work profile
  2. BAndroid Enterprise fully managed with work profile
  3. CAndroid Enterprise corporate-owned work profile
  4. DAndroid Enterprise fully managed dedicated devices (kiosk)
Show answer & explanation

Correct answer: D. Android Enterprise fully managed dedicated devices (kiosk)

Android Enterprise fully managed dedicated devices, often configured in kiosk mode, are designed for single-purpose use cases. They provide the highest level of restriction, allowing administrators to lock down the device to only approved applications and prevent access to settings or other installations.

Why the other options are wrong

  • A. This scenario is for personal devices, creating a separate work profile, and does not provide the high level of device restriction needed.
  • B. This scenario allows for a work profile alongside a personal profile on a corporate device, which is too permissive for the 'single-purpose' and 'highly restricted' requirements.
  • C. This scenario provides a work profile on a corporate-owned device but still allows for a more general-purpose device experience outside the work profile, which is not restricted enough.

Android Enterprise Dedicated Devices

A management scenario in Android Enterprise where corporate-owned devices are provisioned for single-purpose use, often in kiosk mode, with highly restricted access to applications and device functions.

  • Corporate-owned devices.
  • Single-purpose use (e.g., kiosk).
  • Highest level of restriction.
  • Users cannot install other apps or access settings.

Memory trick: Dedicated devices are like a locked-down robot, serving one purpose only.

More Manage devices and apps (55-60%) questions