You manage 500 Windows 11 computers in Intune and must deploy monthly security updates with these requirements: deploy to a test group for QA, then automatically deploy to all devices 15 days after QA. Which object should you create in the Intune admin center to meet these requirements?

An update ring is the correct choice because it allows you to define a deployment schedule for Windows updates, including the ability to create rings for testing (like your QA group) and then a broader deployment ring with a specified deferral period (like your 15-day delay). This directly addresses the requirement for phased deployment. A device configuration profile is for settings and features, not update deployment. A feature update policy is specifically for major Windows version upgrades, not monthly security updates. A security baseline applies pre-configured security settings, not update deployment schedules.