Your network contains client computers that run Windows 8 Enterprise. The computers are
members of an Active Directory domain.
Your company purchases a subscription to Windows Intune.
Synchronization between Active Directory and Windows Intune is not configured.
You enroll all of the computers in Windows Intune.
You plan to create groups that contain the computers by using dynamic membership.
You need to identify which criteria you can use to populate the groups dynamically.
Which three criteria should you identify? (Each correct answer presents a complete
solution. Choose three.)

A.
organizational unit (OU)

B.
manager

C.
security group

D.
device type

E.
domain

Explanation:
Windows Intune Dynamic membership query criteria include:
Security group
Manager

Organizational unit (OU)
Note:
* A group can have direct members (static membership), dynamic query-based members, or
both. When you create a dynamic membership query, you define the criteria that determines
the query that Windows Intune runs to retrieve the list of group members. The group is
automatically updated with members that meet the criteria whenever changes occur. You
can also create groups that have static membership lists. These are groups that you
manually define by explicitly adding members.
* Windows Intune is a Microsoft cloud-based management solution.
Intune is primarily aimed at small and medium enterprises and service providers who want to
manage up to 500 Microsoft Windows computers. Distribution is through a subscription
system in which a fixed monthly cost is incurred per PC. The minimum subscription duration
is one year. Included in the package is the Windows operating system, currently Windows 8
Enterprise.