Your organization has a Conditional Access policy that requires devices to be compliant. You have a group of users who are testing a new compliance policy. The new policy has a setting that is not yet supported on all devices. You need to ensure that the test users are not blocked from accessing corporate resources while the policy is being validated. What should you do?

Create a separate Conditional Access policy that requires compliant devices only for the test users.

Create a Conditional Access policy that excludes the test users from the compliance requirement.

Assign the new compliance policy to the test users and wait for the devices to become compliant.

Use a scope tag to exclude the test users from the compliance policy.

What is the primary purpose of an Intune compliance policy?

To manage application installation on devices

To enforce device configuration settings

To define the conditions under which a device is considered compliant

To control access to corporate resources

A company uses Intune to manage Windows 11 devices. They have a compliance policy that requires Windows Hello for Business to be enabled. They also have a conditional access policy that requires devices to be compliant. Some users report that they cannot access Microsoft 365 apps even though they have enabled Windows Hello for Business. You need to troubleshoot the issue. What is the most likely cause?

The Windows Hello for Business policy is not assigned to the affected devices.

The conditional access policy is configured to require multi-factor authentication.

The compliance policy is set to require a device passcode, but the user has not set one.

The device is not enrolled in Intune.

An organization has multiple Intune administrators who manage devices for different departments. The administrators should only see and manage devices belonging to their own department. Which Intune feature should be used to achieve this?

Role-based access control (RBAC) with custom roles

Microsoft 365 Certified:Endpoint Administrator Associate

Domain 1Objective 3

Implement Identity and Compliance MD-102 Practice Questions (Page 3)

Part of the Prepare infrastructure for devices domain, which accounts for 20–25% of the MD-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 3–5 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

8concepts

20–25%of the exam

Questions 11–15

11expert · hard
Your organization has a Conditional Access policy that requires devices to be compliant. You have a group of users who are testing a new compliance policy. The new policy has a setting that is not yet supported on all devices. You need to ensure that the test users are not blocked from accessing corporate resources while the policy is being validated. What should you do?
Select an answer first
12foundation · easy
In Microsoft Intune, which built-in role is designed to grant a user full control over all Intune settings and functions?
Select an answer first
13foundation · easy
What is the primary purpose of an Intune compliance policy?
Select an answer first
14expert · hard
A company uses Intune to manage Windows 11 devices. They have a compliance policy that requires Windows Hello for Business to be enabled. They also have a conditional access policy that requires devices to be compliant. Some users report that they cannot access Microsoft 365 apps even though they have enabled Windows Hello for Business. You need to troubleshoot the issue. What is the most likely cause?
Select an answer first
15foundation · easy
An organization has multiple Intune administrators who manage devices for different departments. The administrators should only see and manage devices belonging to their own department. Which Intune feature should be used to achieve this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MD-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MD-102” is a trademark of its owner, used for identification only.

Implement Identity and Compliance MD-102 Practice Questions (Page 3)

Questions 11–15

In Microsoft Intune, which built-in role is designed to grant a user full control over all Intune settings and functions?

What is the primary purpose of an Intune compliance policy?

An organization has multiple Intune administrators who manage devices for different departments. The administrators should only see and manage devices belonging to their own department. Which Intune feature should be used to achieve this?

Keep studying — Prepare infrastructure for devices