What's changed: Created MD-102 Chapter 3 (domain: Protect devices). Endpoint security (antivirus/disk encryption BitLocker/firewall/Attack surface reduction/security baselines, Microsoft Defender for Endpoint integration EDR/onboard/threat investigation/incident triage, App Control for Business) and device updates (update rings, feature updates vs quality updates, Windows Autopatch, Hotpatch, Settings Catalog, Delivery Optimization, update monitoring).
3.2Manage device updates
Understand update rings, feature updates vs quality updates, Windows Autopatch and Hotpatch, iOS/macOS updates via the Settings Catalog, Delivery Optimization, and update monitoring.
Roll out updates in stages to reduce risk, and optimize bandwidth and automation. Distinguishing update types is key.
3.2.1Update rings and types
Update rings split devices into staged rings (pilot→broad) to roll out updates sequentially and catch issues early. Windows has two update kinds: feature updates (new versions, ~annual) and quality updates (security/bug fixes, ~monthly). Windows Autopatch auto-manages updates; Hotpatch applies eligible updates without a restart. Manage iOS/macOS updates with Settings Catalog policies, and Android with configuration profiles or FOTA.
3.2.2Bandwidth optimization and monitoring
Delivery Optimization sources update download traffic from nearby peer devices to save WAN bandwidth (useful for large updates at sites). Monitor rollout status and success/failure in Intune to isolate stalls or failures.
Cues: "roll out updates in stages" = update rings. "new version/feature update (annual)" = feature updates. "security/bug fixes (monthly)" = quality updates. "auto-manage updates" = Windows Autopatch. "apply without restart" = Hotpatch. "source from peers to save WAN bandwidth" = Delivery Optimization. iOS/macOS via Settings Catalog.
Watch the mix-ups: (1) Feature updates (feature/new version) vs quality updates (security/bug fixes). (2) Update rings (staged rollout) vs Windows Autopatch (auto-management). (3) Hotpatch (no-restart apply) optimizes the update experience. (4) Delivery Optimization (peer delivery for bandwidth) is separate from update content.
3.2.3Section summary
- Update rings for staged rollout; feature updates (feature) vs quality updates (quality)
- Windows Autopatch auto-manages; Hotpatch applies without restart
- Delivery Optimization peer-delivers to save WAN bandwidth; iOS/macOS via Settings Catalog
Sign in to track progress — Log in.
Quick check
(just a quick review)Q1. You want to roll out updates in stages (pilot→broad) rather than all at once, to catch issues early. Best?
Q2. You want to manage Windows monthly security/bug-fix updates. What are these called?
Q3. You want to offload and automate Windows update management to Microsoft to reduce ops load. Best?
Q4. For large updates to many site devices, you want to source downloads from nearby devices to save WAN bandwidth. Best?
Q5. You want to apply eligible Windows quality updates without a user restart to reduce disruption. Best?