Which Two Update Types Does Intune macOS Policy1 Install?

MD-102 By islever Editorial Last updated

Short answer

BE Policy1's 'All other updates (OS, built-in apps)' setting downloads and installs macOS OS updates and built-in app updates.

Question

You have a Microsoft 365 E5 subscription that includes Microsoft Intune. For macOS devices, you create an update policy named Policy1 that has the following settings: • All other updates (OS, built-in apps): Download and install • Assignments: • Included groups: All Devices Which two types of updates can be downloaded and installed by using Policy1? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
  1. configuration file
  2. macOS Correct Answer
  3. firmware
  4. critical
  5. built-in app Correct Answer

Key Takeaways

Tests the exact update categories of an Intune macOS update policy; the trap is treating critical or firmware updates as part of the catch-all 'All other updates' setting.

In Microsoft Intune, the macOS update policy setting 'All other updates (OS, built-in apps)' governs which updates Policy1 can download and install. This page establishes that macOS and built-in app are the two eligible update types, while critical, firmware, and configuration file updates belong to separate categories.

Common mistake: Selecting critical updates because they sound essential, even though Intune exposes critical updates as a separate macOS update category outside Policy1's configured setting.

Expert Analysis

Why the Answer Is Correct

Intune's macOS software update policy exposes distinct categories: critical updates, firmware updates, configuration file updates, and 'All other updates (OS, built-in apps).' Policy1 configures only the last category to Download and install, so the eligible updates are macOS OS updates and built-in app updates. Microsoft Learn documentation and the option labels in the question confirm this one-to-one mapping. Therefore B (macOS) and E (built-in app) are the two correct choices.

Why the Other Options Are Wrong

A configuration file is a separate update category and is not covered by the 'All other updates' setting. C firmware is likewise an independent macOS update category. D critical updates form their own category; they sound important but Policy1 does not configure them. Selecting any of A, C, or D would require an additional policy category setting that is absent from the scenario.

Community Comment Notes

pavic initially had doubts but reasoned from Microsoft Learn that the answer should be macOS and built-in app, pointing out that critical is separate. oopspruu lists the four Intune macOS update options and confirms that "All Other Updated (OS, built in apps)" maps to OS and built-in apps. chafe notes that the documentation screenshot shows "critical is it's own category" and says the answer is in the question. jdr002 argued for configuration file and critical, but that assertion conflicts with the named category in Policy1 and with the Microsoft Learn reference cited by multiple learners. The vote distribution strongly agrees with B and E.

Official Reference

https://learn.microsoft.com/en-us/mem/intune/protect/software-updates-macos

This link opens the official vendor documentation in a new tab.

Exam Strategy

Read the policy setting literally: 'All other updates (OS, built-in apps)' maps one-to-one to macOS and built-in app. Do not overthink that firmware or critical updates are also installed unless a separate policy category is configured.

Frequently Asked Questions

Why doesn't Policy1 install critical updates?

Critical updates are a separate category in the Intune macOS update policy; 'All other updates (OS, built-in apps)' excludes them.

Does the 'All other updates' setting include firmware updates?

No. Firmware is its own update category in macOS software update policies and requires separate configuration.

More MD-102 FAQ →

Community Votes

BE
100%

100% of anonymous learners picked answer BE. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 7 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 7

  1. pavic 👍 7
    not quite sure but according to MS Learn shouldn't it be macOS and built-in app? Critical is a separate option https://learn.microsoft.com/en-us/mem/intune/protect/software-updates-macos#:~:text=Configuration%20file%20update-,All%20other%20updates%20(OS%2C%20built%2Din%20apps),-Specify%20a%20schedule
  2. chafe 👍 3
    https://learn.microsoft.com/en-us/mem/intune/protect/software-updates-macos Check screenshot in configure policy section, critical is it's own category. Answer is literally in the question for this (OS, Built-in apps).
  3. oopspruu 👍 3
    macOS Update Policy has these options: 1. Critical 2. Firmware 3. Configuration Files 4. All Other Updated (OS, built in apps) Hopefully now you know why BE are correct answers.
  4. jdr002 👍 2
    Answer should be CD https://learn.microsoft.com/en-us/mem/intune/protect/software-updates-macos
  5. batang_aratan 👍 1
    the answer is in the question, good grief.
Show 2 more comments
  1. rcristiano 👍 2
    A resposta esta na pergunta
  2. AleFCI1908 👍 1 Answered B
    i want this in the exam

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Assigning Intune and Cloud PC Roles with Least Privilege

S-grade

SCEP Root Certificate Location for Intune

S-grade

How Many Intune Profiles Are Needed for Cloud PKI User Certificates?

S-grade

What Must Be Purchased First for Intune Device Query at Minimum Cost?

S-grade

Practice All MD-102 Questions

Access 92 questions with complete answers and detailed explanations.

View Full MD-102 Practice Test →

← Back to MD-102 Study Guide