Manage compliance and endpoint protection settings - Managing Enterprise Devices and Apps - page 197

Thought experiment
Compliance Monitoring at Fabrikam

You are using Configuration Manager's compliance functionality to monitor compli-
ance across multiple device collections at your organization. A specific baseline,
which includes a large number of configuration items, reports a large percentage of
noncompliant clients. You're interested in determining whether a large number of
configuration items or just one or two items are causing the noncompliant result.
With this information in mind, answer the following questions:

1. Which report would you use to determine the specific configuration items in a
baseline that are triggering noncompliance when applied to a collection?

2. Which report would you view to determine the compliance trend for a configu-
ration baseline?

Objective summary
■ A configuration baseline is a group of configuration items, software updates, and other
configuration baselines.
■ You can group configuration items into configuration baselines.
■ You deploy configuration baselines to client systems to evaluate compliance and
(potentially) perform remediation.
■ You can use the evaluation results of the configuration baseline to create a collection.
■ Configuration packs are predefined configuration items or configuration baselines that
Microsoft and other developers provide to organizations.

Objective review
Answer the following questions to test your knowledge of the information in this objective.
You can find the answers to these questions and explanations of why each answer choice is
correct or incorrect in the “Answers” section at the end of the chapter.
1. Which of the following can you include in a configuration baseline? (Choose two. Each
correct answer provides a complete solution.)
a. Configuration item
B. Antimalware policy

Windows Firewall policy C.

Software updates D.