Microsoft 365 Endpoint AdministratorManage devices and apps (55-60%)Hard

A Microsoft 365 Endpoint Administrator needs to ensure that all corporate-owned Windows 11 devices automatically install quality updates as soon as possible, but only after they have been thoroughly tested by a pilot group. The pilot group should receive updates 3 days after release, and the remaining production devices should receive updates 10 days after the pilot group. All devices must have a grace period of 2 days before a mandatory restart and will restart automatically outside of active hours. What is the minimum 'Quality update deferral period' that should be configured for the production device update ring?

  1. A13 days
  2. B15 days
  3. C3 days
  4. D10 days
Show answer & explanation

Correct answer: A. 13 days

If the pilot group receives updates 3 days after release and the production devices receive them 10 days after the pilot group, the total deferral for production devices is 3 (pilot) + 10 (production delay) = 13 days. The grace period and active hours are restart settings, not deferral periods.

Why the other options are wrong

  • B. This includes the grace period, which is for restarts, not for the initial deferral of the update itself.
  • C. This is the deferral for the pilot group, not the production group.
  • D. This is the additional delay after the pilot group, not the total deferral from release.

Intune Quality Update Deferral Calculation

Calculating the total delay for a quality update to be offered to a device group, based on the initial release date and any intermediate pilot group deferrals.

  • Deferral starts from the update's release date.
  • Staged rollouts often involve multiple update rings with increasing deferral periods.
  • Restart grace periods are separate from the update deferral period.

Memory trick: Deferral is adding 'waiting days' from the original release date.

More Manage devices and apps (55-60%) questions