Manage OS Updates for Android Enterprise Intune

MD-102 By islever Editorial Last updated

Manage device updates

Short answer

D Use a configuration profile to manage OS updates for Android Enterprise devices with a Microsoft 365 E5 subscription.

Question

You have a Microsoft 365 E5 subscription. You need to manage operating system updates for corporate-owned Android Enterprise devices enrolled in Microsoft Intune. What should you use?
  1. a compliance policy
  2. an Android FOTA deployment
  3. an Endpoint security policy
  4. a configuration profile Correct Answer

Key Takeaways

This question tests managing Android OS updates in Intune and highlights the licensing trap where Android FOTA requires Intune Plan 2, which is not included in Microsoft 365 E5.

To manage operating system updates for corporate-owned Android Enterprise devices in Microsoft Intune with a Microsoft 365 E5 subscription, you must use a device configuration profile. This approach uses the System update setting within a device restrictions profile, which is universally supported across OEMs.

Common mistake: Choosing Android FOTA deployment because it seems purpose-built for OS updates, ignoring that it requires the Intune Suite add-on license not present in a standard Microsoft 365 E5 subscription.

Expert Analysis

Why the Answer Is Correct

A device configuration profile (specifically a device restrictions profile) includes the "System update" setting, which allows administrators to manage OS update behavior for corporate-owned Android Enterprise devices. This method is supported by the standard Intune licensing included with Microsoft 365 E5 and works across all OEMs, making it the correct choice for this subscription tier.

Why the Other Options Are Wrong

A compliance policy only evaluates whether a device meets required configurations but does not actually deploy or manage the OS updates. An Endpoint security policy is used for managing security features like antivirus and encryption, not operating system updates. An Android FOTA deployment is designed for OS updates but requires Microsoft Intune Plan 2 or the Intune Suite add-on, which are not included in a Microsoft 365 E5 subscription.

Community Comment Notes

Commenters correctly pointed out the licensing limitation for FOTA, as Alex_UC noted that "For FOTA Microsoft Intune Plan 2 or Microsoft Intune Suite license is required". Another user highlighted the fallback configuration, stating "If FOTA isn't available you can use Device restrictions profiles". JayHall provided the exact path to the setting within the configuration profile.

Official Reference

https://learn.microsoft.com/en-us/mem/intune/protect/software-updates-guide-android

This link opens the official vendor documentation in a new tab.

Exam Strategy

Always check the licensing tier specified in the question before selecting advanced features like Android FOTA. If the subscription is Microsoft 365 E5, default to standard Intune capabilities like device configuration profiles for update management.

Community Votes

D
100%

100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 5 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 5

  1. 1c67a2c 👍 4 Answered D
    FOTA is not available for all Android Devices https://learn.microsoft.com/en-us/mem/intune/protect/fota-updates-android
  2. Alex_UC 👍 3 Answered D
    For FOTA Microsoft Intune Plan 2 or Microsoft Intune Suite license is required. Since there are no other specification about licensing i wuold stay with D, here from the doc: "If FOTA isn't available you can use Device restrictions profiles, which work for all OEMs" https://learn.microsoft.com/en-us/mem/intune/protect/fota-updates-android
  3. JayHall 👍 2
    Manage OS updates using the System update setting in an Intune device configuration profile (Devices > Manage devices > Configuration > Create > Device restrictions > General). https://learn.microsoft.com/en-us/mem/intune/protect/software-updates-guide-android
  4. Meek_Learner 👍 1
    Option B. an Android FOTA deployment Android FOTA (Firmware Over-The-Air) is the mechanism specifically designed for managing operating system updates on Android devices. Intune supports managing FOTA updates for corporate-owned Android Enterprise devices. This allows you to control and deploy OS updates.
  5. SrKhaz 👍 3 Answered D
    Only 70!!!!

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Assigning Intune and Cloud PC Roles with Least Privilege

S-grade

SCEP Root Certificate Location for Intune

S-grade

How Many Intune Profiles Are Needed for Cloud PKI User Certificates?

S-grade

What Must Be Purchased First for Intune Device Query at Minimum Cost?

S-grade

Practice All MD-102 Questions

Access 92 questions with complete answers and detailed explanations.

View Full MD-102 Practice Test →

← Back to MD-102 Study Guide