A company is deploying a new Windows 11 security baseline using Intune. The baseline includes antivirus and firewall settings. The security team wants to ensure that the baseline settings are not overridden by other policies. What should you do?

Create a custom OMA-URI policy that sets all baseline settings manually.

Use the 'Security Baselines' node in Intune and assign the baseline to the device groups; ensure no other policy sets the same settings.

Export the baseline as a JSON file and import it into Configuration Manager for deployment.

Assign the baseline to a test group first, review the settings, and then assign to all devices.

A company has deployed BitLocker encryption to all Windows devices. The security team wants to monitor the encryption status and identify devices that are not compliant. They also want to see which devices have not backed up their recovery keys. What should you use?

The Intune encryption report in the Microsoft Endpoint Manager admin center.

The Microsoft 365 Defender portal's device inventory.

The Azure AD device settings blade.

The compliance policies report in Intune.

You want users to be able to recover their own BitLocker-encrypted devices without contacting IT. Which Intune setting should you enable?

Allow standard users to enable encryption during Autopilot

Allow users to retrieve BitLocker recovery keys for their own devices

Enable BitLocker recovery information to be stored in Microsoft Entra ID

Enable pre-boot recovery message and URL

Which profile is used in an Intune firewall policy to configure Windows Defender Firewall settings?

Endpoint detection and response

Microsoft 365 Certified:Endpoint Administrator Associate

Domain 3Objective 1

Configure Endpoint Security MD-102 Practice Questions (Page 1)

Part of the Protect devices domain, which accounts for 15–20% of the MD-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 3–7 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

14concepts

15–20%of the exam

Questions 1–5

1application · medium
A company is deploying a new Windows 11 security baseline using Intune. The baseline includes antivirus and firewall settings. The security team wants to ensure that the baseline settings are not overridden by other policies. What should you do?
Select an answer first
2application · medium
A company has deployed BitLocker encryption to all Windows devices. The security team wants to monitor the encryption status and identify devices that are not compliant. They also want to see which devices have not backed up their recovery keys. What should you use?
Select an answer first
3foundation · easy
You want users to be able to recover their own BitLocker-encrypted devices without contacting IT. Which Intune setting should you enable?
Select an answer first
4foundation · easy
Which profile is used in an Intune firewall policy to configure Windows Defender Firewall settings?
Select an answer first
5foundation · easy
Which Intune policy type is used to configure attack surface reduction rules?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MD-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MD-102” is a trademark of its owner, used for identification only.