A company wants to ensure that only the IT support team is a member of the local Administrators group on all Windows 10 devices. You need to manage the local group membership using Intune. What should you do?

Create a compliance policy that requires the Administrators group to contain only the IT support team.

Assign the IT support team as device administrators in Microsoft Entra ID.

Create a device configuration profile that uses the 'Local users and groups' settings to add the IT support team to the Administrators group.

Use a PowerShell script in Intune to add the IT support team to the local Administrators group.

Which of the following device platforms can be targeted by Intune compliance policies?

Windows, macOS, iOS/iPadOS, and Android

What is the purpose of Windows LAPS (Local Administrator Password Solution)?

To provide single sign-on to domain resources

To enforce multi-factor authentication for local logins

To rotate the local administrator password on Windows devices and store it securely

To manage BitLocker encryption keys

What is the primary purpose of the multi-admin approval feature in Microsoft Intune?

To require a second administrator to approve changes to security-related policies

To allow multiple administrators to manage the same device simultaneously

To automatically assign roles to multiple administrators

To provide a backup administrator in case the primary administrator is unavailable

Your organization has a mix of Windows, iOS, and Android devices. You need to create compliance policies that enforce a minimum OS version and require device encryption. You also need to ensure that only compliant devices can access Microsoft 365 services. You have already created the compliance policies and assigned them to the appropriate groups. What is the next step?

Create a device configuration policy that enforces encryption on all devices.

Create a scope tag for each platform and assign it to the compliance policies.

Create a Conditional Access policy that requires devices to be marked as compliant.

Assign the compliance policies to the devices instead of the user groups.

Microsoft 365 Certified:Endpoint Administrator Associate

Domain 1Objective 3

Implement Identity and Compliance MD-102 Practice Questions (Page 4)

Part of the Prepare infrastructure for devices domain, which accounts for 20–25% of the MD-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 3–5 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

8concepts

20–25%of the exam

Questions 16–20

16application · medium
A company wants to ensure that only the IT support team is a member of the local Administrators group on all Windows 10 devices. You need to manage the local group membership using Intune. What should you do?
Select an answer first
17foundation · easy
Which of the following device platforms can be targeted by Intune compliance policies?
Select an answer first
18foundation · easy
What is the purpose of Windows LAPS (Local Administrator Password Solution)?
Select an answer first
19foundation · easy
What is the primary purpose of the multi-admin approval feature in Microsoft Intune?
Select an answer first
20application · medium
Your organization has a mix of Windows, iOS, and Android devices. You need to create compliance policies that enforce a minimum OS version and require device encryption. You also need to ensure that only compliant devices can access Microsoft 365 services. You have already created the compliance policies and assigned them to the appropriate groups. What is the next step?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MD-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MD-102” is a trademark of its owner, used for identification only.