A company has a mix of Windows 10 and Windows 11 devices. Some are corporate-owned and Microsoft Entra joined, some are personal and registered, and some are hybrid Microsoft Entra joined. The security team wants to apply a conditional access policy that requires a compliant device for access to Microsoft 365 apps. The policy should apply to all devices that are managed by Intune, regardless of join type. What should you do?

Create a dynamic device group that includes all devices with a deviceTrustType of 'Microsoft Entra joined' or 'Hybrid Microsoft Entra joined'

Create a conditional access policy targeting all cloud apps and requiring 'Require device to be marked as compliant'

Create a dynamic device group that includes all devices with a deviceOwnership of 'Company'

Create a dynamic device group that includes all devices with a compliance state of 'Compliant'

Your organization has 1,500 Microsoft Entra joined devices. You need to deploy a new application to all devices that have the 'Finance' department set in their device extensionAttribute1. You want the deployment to automatically include new devices as they are added. What should you create?

A dynamic device group with rule: (device.extensionAttribute1 -eq 'Finance')

A static device group and add devices manually

A dynamic user group with rule: (user.department -eq 'Finance')

An administrative unit containing the Finance devices

Microsoft 365 Certified:Endpoint Administrator Associate

Domain 1Objective 1

Add Devices to Microsoft Entra ID MD-102 Practice Questions (Page 4)

Part of the Prepare infrastructure for devices domain, which accounts for 20–25% of the MD-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 3–5 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

5concepts

20–25%of the exam

Questions 16–19

16application · medium
Fabrikam allows employees to use their personal Windows 10 laptops for work. These laptops are not company-owned and should not be fully managed by IT. However, employees need to access corporate resources such as email and SharePoint, and IT wants to enforce conditional access policies that require compliant devices. What should you configure on the personal laptops?
Select an answer first
17expert · medium
A company has a mix of Windows 10 and Windows 11 devices. Some are corporate-owned and Microsoft Entra joined, some are personal and registered, and some are hybrid Microsoft Entra joined. The security team wants to apply a conditional access policy that requires a compliant device for access to Microsoft 365 apps. The policy should apply to all devices that are managed by Intune, regardless of join type. What should you do?
Select an answer first
18foundation · easy
An organization issues Windows 11 laptops to employees. These devices are organization-owned and need to be managed via Microsoft Intune, with users signing in using their Microsoft Entra ID credentials. The devices do not need to be joined to the on-premises Active Directory. Which device join type should be used?
Select an answer first
19application · medium
Your organization has 1,500 Microsoft Entra joined devices. You need to deploy a new application to all devices that have the 'Finance' department set in their device extensionAttribute1. You want the deployment to automatically include new devices as they are added. What should you create?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to MD-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MD-102” is a trademark of its owner, used for identification only.

Add Devices to Microsoft Entra ID MD-102 Practice Questions (Page 4)

Questions 16–19

Your organization has 1,500 Microsoft Entra joined devices. You need to deploy a new application to all devices that have the 'Finance' department set in their device extensionAttribute1. You want the deployment to automatically include new devices as they are added. What should you create?

Keep studying — Prepare infrastructure for devices