A company has Intune and Defender for Endpoint integrated. They want to enable EDR for their Windows devices, but they also want to ensure that devices that are not onboarded to MDE are blocked from accessing corporate resources. What is the best approach?

Create a compliance policy that requires MDE to be active, and use it in a Conditional Access policy to require compliant devices.

Onboard all devices to MDE and then create an EDR policy.

Use App Control for Business to block non-onboarded devices.

Create a firewall policy that blocks all traffic from non-onboarded devices.

A company wants to allow only approved applications to run on their Windows 11 devices. They plan to use App Control for Business. Which two steps are essential for a successful deployment?

Use a security baseline that enables App Control for Business.

Create a policy that includes the approved apps and deploy it in audit mode first to identify any missing apps.

Exclude all users from the policy to avoid disruption.

Deploy the policy in enforcement mode immediately to all devices.

What is the primary purpose of Endpoint Detection and Response (EDR) policies?

To enable advanced threat detection and response capabilities on devices

A company is implementing Zero Trust and wants to ensure that devices are healthy before accessing corporate resources. They use Intune and have deployed antivirus and firewall policies. What additional configuration is needed to enforce device health?

Create a compliance policy that requires antivirus and firewall to be enabled, and use it in a Conditional Access policy.

Use a firewall policy that blocks all inbound traffic.

Enable automatic remediation in the antivirus policy.

Deploy a security baseline that enables all security features.

Microsoft 365 Certified:Endpoint Administrator Associate

Domain 3Objective 1

Configure Endpoint Security MD-102 Practice Questions (Page 9)

Part of the Protect devices domain, which accounts for 15–20% of the MD-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 3–7 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

14concepts

15–20%of the exam

Questions 41–45

41foundation · easy
Which Zero Trust principle is directly supported by using Microsoft Intune to enforce device compliance before granting access to resources?
Select an answer first
42expert · hard
A company has Intune and Defender for Endpoint integrated. They want to enable EDR for their Windows devices, but they also want to ensure that devices that are not onboarded to MDE are blocked from accessing corporate resources. What is the best approach?
Select an answer first
43application · medium
A company wants to allow only approved applications to run on their Windows 11 devices. They plan to use App Control for Business. Which two steps are essential for a successful deployment?
Select an answer first
44foundation · easy
What is the primary purpose of Endpoint Detection and Response (EDR) policies?
Select an answer first
45application · medium
A company is implementing Zero Trust and wants to ensure that devices are healthy before accessing corporate resources. They use Intune and have deployed antivirus and firewall policies. What additional configuration is needed to enforce device health?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MD-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MD-102” is a trademark of its owner, used for identification only.