Security Copilot agents have recommended that devices with a specific compliance gap be blocked from accessing corporate resources. You need to implement this recommendation while allowing users to self-remediate. What should you do?

Use a conditional access policy that blocks access for non-compliant devices, and provide users with remediation guidance.

Use Microsoft Graph to revoke access tokens for all users.

Use a PowerShell script to block all devices from accessing corporate resources.

Ignore the recommendation because it is too complex to implement.

Your Intune environment enforces a compliance policy that requires BitLocker to be enabled. Some devices are non-compliant because BitLocker was not enabled during provisioning. You need to remediate these devices without manual intervention. What should you do?

Use Microsoft Graph to directly enable BitLocker on each device.

Ask users to enable BitLocker manually.

Deploy a PowerShell script that enables BitLocker and then triggers a compliance re-evaluation.

Create a new compliance policy that does not require BitLocker.

What should an administrator do after reviewing a recommendation from a Security Copilot agent in Intune?

Escalate to the security team only if the recommendation is critical

Implement the recommendation if it aligns with organizational policies

Automatically apply all recommendations without review

A security analyst at Contoso receives an alert from a Security Copilot agent in Intune indicating that a specific device has been exhibiting suspicious behavior. The analyst needs to determine whether this behavior indicates a real threat and what actions to take. What should the analyst do first?

Immediately wipe the device to prevent further damage

Create a new compliance policy to block the device

Disable the device's user account in Microsoft Entra ID

Review the Security Copilot agent's investigation summary and recommended actions in the Intune portal

An administrator wants to use PowerShell to automate the creation of a device compliance policy in Intune. Which cmdlet should they use?

Set-IntuneDeviceConfigurationPolicy

New-IntuneDeviceCompliancePolicy

Microsoft 365 Certified:Endpoint Administrator Associate

Domain 5Objective 1

Automate Management Tasks MD-102 Practice Questions (Page 4)

Part of the Optimize endpoint operations by using automation, monitoring, and reporting domain, which accounts for 10–15% of the MD-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~4–10 in this domain), expect 2–5 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

6concepts

10–15%of the exam

Questions 16–20

16application · medium
Security Copilot agents have recommended that devices with a specific compliance gap be blocked from accessing corporate resources. You need to implement this recommendation while allowing users to self-remediate. What should you do?
Select an answer first
17application · medium
Your Intune environment enforces a compliance policy that requires BitLocker to be enabled. Some devices are non-compliant because BitLocker was not enabled during provisioning. You need to remediate these devices without manual intervention. What should you do?
Select an answer first
18foundation · easy
What should an administrator do after reviewing a recommendation from a Security Copilot agent in Intune?
Select an answer first
19application · medium
A security analyst at Contoso receives an alert from a Security Copilot agent in Intune indicating that a specific device has been exhibiting suspicious behavior. The analyst needs to determine whether this behavior indicates a real threat and what actions to take. What should the analyst do first?
Select an answer first
20foundation · easy
An administrator wants to use PowerShell to automate the creation of a device compliance policy in Intune. Which cmdlet should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MD-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MD-102” is a trademark of its owner, used for identification only.