Hotspot Question
Your company has a Microsoft Azure Active Directory (Azure AD) tenant and computers that run Windows 10.
The company uses Microsoft Intune to manage the computers.
The Azure AD tenant has the users shown in the following table.

The device type restrictions in Intune are configured as shown in the following table:

User3 is a device enrollment manager (DEM) in Intune.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Box 1: No
User1 is part of Group1 which only allows enrollment of Android, iOS devices (NOT Windows devices) Box 2: Yes User2 is part of Group1 and Group2 but Group2 has Priority 2 which is higher priority than Group
1, so only Policy2 applies. Policy2 allows enrollment of Windows devices Box 3: No User3 is not part of any group and is therefore in "All users" The "All users" Device Restriction Types only allow Android and Windows (MDM) but not iOS.
Reference:
https://docs.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-manager-enroll
https://docs.microsoft.com/en-us/intune-user-help/enroll-your-device-in-intune-android