Windows Update Rings & Intune

Skill-Based Test  |  10 Questions  |  Microsoft Intune / WUfB

Question 1
What happens if you set a non-zero value for Feature Update Deferral Period in an update ring when a separate feature update policy also exists?
Setting a non-zero deferral on the update ring causes Intune to ignore any separate feature update policy. Always set feature update deferral to 0 days in the ring and control versioning via a dedicated feature update policy.
Question 2
Which Microsoft Graph @odata.type value is used to exclude a group from an update ring assignment?
#microsoft.graph.exclusionGroupAssignmentTarget is used to exclude a group. #microsoft.graph.groupAssignmentTarget is used for included groups.
Question 3
Which update ring channel should your Preview ring be assigned to?
The Preview ring should use the Beta channel. The Pilot ring uses Release Preview. Both Broad and VIP rings use the standard Retail channel.
Question 4
What is the recommended Quality Update Deferral period for the VIP ring?
The VIP ring uses a 30-day deferral to give maximum time to test quality updates before they reach mission-critical and executive devices.
Question 5
When automating feature update policies via Graph, which PowerShell cmdlet is used to present available Windows versions in a selectable grid?
Out-GridView -PassThru opens an interactive grid where you can select an item and pipe it forward into a variable. On PowerShell Core (non-Windows), use Out-ConsoleGridView.
Question 6
What does setting "driversExcluded": false mean in the update ring JSON?
This is a double negative — driversExcluded: false means "do NOT exclude drivers," so drivers are allowed through Windows Update. Watch for these in the JSON config.
Question 7
Which Graph API endpoint retrieves available Windows feature update versions for use in a feature update policy?
The correct endpoint is /deviceManagement/windowsUpdateCatalogItems/microsoft.graph.windowsFeatureUpdateCatalogItem. It returns all supported Windows versions currently within their support lifecycle.
Question 8
Why should you avoid adding only IT staff to your Preview and Pilot rings?
IT admins tend to self-resolve issues that standard users cannot. Including some non-IT staff in pilot/preview rings gives you real-world feedback on update impact.
Question 9
What is the maximum time window you can force an update reboot using the Expedited Quality Update option in Intune?
Expedited quality updates have a maximum window of 2 days. Users cannot postpone the reboot — use this only for critical patch situations.
Question 10
When assigning a feature update policy to cover the entire device estate, what is the recommended assignment target?
Assigning to Autopilot Devices captures all managed Windows devices in the estate. This ensures the feature update policy applies broadly without manual group maintenance.