Microsoft 365 Endpoint AdministratorManage devices and apps (55-60%)Hard
A Microsoft 365 Endpoint Administrator needs to ensure that all corporate-owned Windows 11 devices automatically install quality updates as soon as possible after release, but with a maximum deferral of 3 days. Feature updates should be deferred for 90 days. Which Intune policy type should be configured to achieve this, and where is the quality update deferral setting located?
- AEndpoint security > Attack surface reduction rules > Block updates
- BDevices > Feature updates for Windows 10 and later > Pause feature updates
- CDevices > Update rings for Windows 10 and later > Quality update deferral period
- DEndpoint security > Quality Update Rings > Pause quality updates
Show answer & explanationAnswer & explanation
Correct answer: C. Devices > Update rings for Windows 10 and later > Quality update deferral period
Windows update management, including deferral periods for both quality and feature updates, is primarily configured through 'Update rings for Windows 10 and later' under the 'Devices' section in Intune. The specific setting for quality update deferral is 'Quality update deferral period'.
Why the other options are wrong
- A. Attack surface reduction rules are security settings and do not manage Windows update deferrals.
- B. This option is for feature updates and pausing, not for configuring the deferral period for quality updates.
- D. 'Pause quality updates' is a temporary action, not a configurable deferral period for ongoing management.
Intune Windows Update Rings
Intune policy settings used to manage the deployment of quality and feature updates for Windows 10/11 devices, including deferral periods, maintenance windows, and user experience settings.
- Configured under 'Devices > Update rings for Windows 10 and later'.
- Allows setting deferral periods for both quality and feature updates.
- Manages update behavior (e.g., automatic install, active hours).
- Crucial for controlled and phased update deployments.
Memory trick: Update Rings orchestrate the flow of Windows updates.