LESSON 2 OF 4
Worked four-device triage
Prepare the lab
Use a synthetic device report. No tenant enrollment or live policy changes are required.
Device Enrolled Last check-in Configuration Compliance Resource access
LAB-A yes 10:55 UTC applied compliant allowed
LAB-B yes yesterday pending unknown denied
LAB-C yes 10:58 UTC conflict noncompliant denied
LAB-D no none none unknown denied
Assessment: 2026-10-07 11:00 UTCWork through the evidence
Trace management state
LAB-D is not enrolled in this fixture. A missing policy status is not a delivery bug until the management prerequisites are established.
Inspect freshness
LAB-B has a stale check-in. Determine whether the device is online and whether enrollment is healthy before interpreting pending as a policy contradiction.
Read assignment scope
For each device record platform, ownership, group membership and exclusions. A policy assigned to a different group is not evidence of failed delivery.
Expected baseline result
A passes the stated fixture checks; B needs freshness/delivery investigation; C needs setting conflict analysis; D needs enrollment prerequisites. None calls for blanket exclusions.
Worked four-device triage
A Windows pilot policy targets Group P. Device A is in P and reports the expected setting. B is outside P. C is in P but its last check-in predates the assignment. D is in P and reports a conflicting setting result.
A is a positive sample, not proof for the fleet. Investigate B's intended scope before changing membership. For C, obtain fresh delivery/check-in evidence rather than declaring the setting ineffective. For D, inspect the conflict and competing assignments. Re-enrolling every device would discard useful distinctions and introduce unnecessary disruption.
Evidence laboratory — attempt before reading the solution
Synthetic pilot: D1 enrolled, target policy assigned, latest check-in10:00, compliant at10:02, app access tested10:05 succeeds. D2 enrolled, policy assigned, last check-in yesterday, current compliance unknown, app not tested. D3 enrolled but excluded by an assignment filter, no policy evaluation. D4 compliant at09:00, then loses network connectivity before the10:00 test. Requirement: verify current policy delivery, evaluation and intended access for every pilot device. Classify each device’s evidence gaps.
YOUR NEXT STEP
Keep building your skills
No directly related CogniSkill book is mapped to this course yet. Continue with the free learning, or compare the publishing catalogue by your next goal.
Explore books by topic and goal →Sign in to save lesson completion. Reading position is separate from completion.
Practice notes — your working space
Save predictions, outputs and explanations as you work. Notes stay on this browser, not your account; people sharing this browser can access them. Avoid passwords and sensitive data. Export to keep a portable copy, or clear your notes before leaving a shared device.
How was this lesson?
Help us improve this lesson.