MD-102 · Question #103
You have 500 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune. You plan to distribute certificates to the compute
The correct answer is C. Server3. In a SCEP certificate deployment workflow with Intune, the SCEP profile must point to the URL of the server running the Network Device Enrollment Service (NDES). NDES acts as the SCEP proxy: it receives SCEP requests from managed devices via the Intune Certificate Connector, forw
Question
You have 500 computers that run Windows 10. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune. You plan to distribute certificates to the computers by using Simple Certificate Enrollment Protocol (SCEP). You have the servers shown in the following table. NDES issues certificates from the subordinate CA. You are configuring a device profile as shown in the exhibit. (Click the Exhibit tab.) You need to complete the SCEP profile.
Exhibits
Options
- AServer1
- BServer2
- CServer3
- DServer4
How the community answered
(33 responses)- A3% (1)
- B12% (4)
- C76% (25)
- D9% (3)
Explanation
In a SCEP certificate deployment workflow with Intune, the SCEP profile must point to the URL of the server running the Network Device Enrollment Service (NDES). NDES acts as the SCEP proxy: it receives SCEP requests from managed devices via the Intune Certificate Connector, forwards them to the subordinate CA, and returns the signed certificates. Based on the server table and exhibit context in this question, Server3 is the NDES server. The SCEP profile's 'SCEP Server URLs' field must reference the NDES server (Server3) so Intune-managed devices know where to submit certificate requests.
Topics
Community Discussion
No community discussion yet for this question.