Exam MD-101 topic 4 question 24 discussion

Actual exam question from Microsoft's MD-101

Question #: 24
Topic #: 4

DRAG DROP -
You have a Microsoft Intune subscription that is configured to use a PFX certificate connector to an on-premises Enterprise certification authority (CA).
You need to use Intune to configure autoenrollment for Android devices by using public key pair (PKCS) certificates.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Show Suggested Answer

Suggested Answer:

Step 1: Obtain the root certificate.
Export the root certificate from the Enterprise CA.
To authenticate a device with VPN, WiFi, or other resources, a device needs a root or intermediate CA certificate.
Step 2: From the Microsoft Endpoint Manager admin center, create a trusted certificate profile
Create a trusted certificate profile
1. Sign in to the Microsoft Endpoint Manager admin center.
2. Select and go to Devices > Configuration profiles > Create profile.
3. Enter the following properties:
Platform:
Profile: Select Trusted certificate. Or, select Templates > Trusted certificate.
Select Create.
4. Etc.
Step 3: From the Microsoft Endpoint Manager admin center, create a PKCS certificate profile
Create a PKCS certificate profile
1. Sign in to the Microsoft Endpoint Manager admin center.
2. Select and go to Devices > Configuration profiles > Create profile.
3. Enter the following properties:
Platform:
Profile: Select PKCS certificate. Or, select Templates > PKCS certificate.
Select Create.
4. Etc.
Reference:
https://docs.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure

by Bradobrey at June 2, 2021, 11:14 a.m.

Comments

Submit Cancel

Bradobrey

Highly Voted 3 years, 11 months ago

it looks like 1.Obtain 2.Create a trusted certificate profile 3.Create a PKCS certificate profile

upvoted 25 times

Perycles

3 years, 10 months ago

agree with you for answer 3.

upvoted 5 times

...

PiPe

3 years, 2 months ago

Agreed 1) Obtain the root certificate https://docs.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure#export-the-root-certificate-from-the-enterprise-ca 2) From the Microsoft Endpoint Manager admin center, create a trusted certificate configuration profile https://docs.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure#create-a-trusted-certificate-profile 3) From the Microsoft Endpoint Manager admin center, create a PKCS certificate configuration profile https://docs.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure#create-a-pkcs-certificate-profile

upvoted 4 times

...

devilcried

Most Recent 2 years, 4 months ago

According this link: https://learn.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure 1.Obtain the root certificate. 2.From the Microsoft Endpoint Manager admin center, create a trusted certificate profile 3.From the Microsoft Endpoint Manager admin center, create a PKCS certificate profile

upvoted 1 times

...

RodrigoT

3 years ago

On the link provided there is nothing about enrollment restrictions. The steps are: 1-Obtain the root certificate (from the Enterprise CA) 2-From MEM admin center Create a trusted certificate profile 3-From MEM admin center Create a PKCS certificate profile