SC-300 Certification Practice Question #20

Question

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains computers that run Windows 11.

You have a Microsoft 365 E5 subscription.

You plan to enable hybrid join and enroll the computers in Microsoft Intune.

You need to recommend the software that should be deployed to the domain, and the actions that should be performed in Intune.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

The scenario enables Entra hybrid join for existing AD-joined Windows 11 PCs and enrolls them in Intune — Autopilot is never mentioned. Microsoft Entra Connect is the component that synchronizes on-premises device objects to Entra ID to make hybrid join work (the Entra provisioning agent and Intune Connector for AD don't apply: the provisioning agent doesn't sync devices, and the Intune Connector for AD performs offline domain join during Autopilot, which is out of scope here). For Intune, "Modify the MDM user scope" is the documented action that turns on automatic MDM enrollment so hybrid-joined devices enroll; the WIP user scope governs app/data protection (MAM), not device enrollment. The top Highly-Voted comment (9 👍) and multiple corroborating comments agree. Confidence sits in the strong-HOTSPOT band rather than higher because the file captured no Suggested Answer/vote count and a sizable minority chose "Intune Connector for AD," conflating this hybrid-join scenario with the Autopilot variant.

More SC-300 practice questions