Implement Identity and Compliance MD-102 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company wants to enable passwordless sign-in for its Windows 11 devices using Windows Hello for Business. The security team requires that the Windows Hello for Business deployment be managed through Intune and that devices must have a TPM 2.0. You need to configure this. What should you do?

   • ACreate a device configuration profile that enables BitLocker and assign it to the Windows 11 devices.
   • BCreate a Windows Hello for Business policy in Intune and assign it to the Windows 11 devices, ensuring the policy requires TPM 2.0.
   • CEnable Windows Hello for Business in Microsoft Entra ID and rely on the default device settings.
   • DUse a compliance policy that requires Windows Hello for Business to be enabled on the device.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the primary purpose of Windows Hello for Business?

   • ATo enforce compliance policies on devices
   • BTo provide single sign-on to cloud applications
   • CTo manage device encryption settings
   • DTo replace passwords with strong multi-factor authentication using biometrics or PIN
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   Your organization uses Intune to manage Windows 10/11, iOS/iPadOS, and Android devices. You need to create compliance policies that enforce a minimum OS version and require device encryption on all platforms. You also need to ensure that only compliant devices can access corporate email. What should you do?

   • ACreate a separate compliance policy for each platform, assign them to the appropriate groups, and create a Conditional Access policy that requires compliant devices.
   • BCreate a compliance policy for Windows only and rely on the built-in security baselines for iOS and Android.
   • CCreate compliance policies for each platform and assign them to devices, then use an app protection policy to block access to email.
   • DCreate a single compliance policy that applies to all platforms, assign it to all users, and create a Conditional Access policy that requires compliant devices.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Where can the local administrator password managed by Windows LAPS be stored?

   • AIn Microsoft Entra ID or Active Directory
   • BIn the user's profile
   • CIn a local file on the device
   • DIn the device's registry
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   Your organization has a Conditional Access policy that requires devices to be compliant. You notice that some users on personal Android devices are unable to access corporate resources even after they have enrolled and become compliant. You need to troubleshoot the issue. What should you check first?

   • AAsk the users to uninstall and reinstall the Company Portal app.
   • BCheck if the users have the correct license for Microsoft Entra ID P1 or P2.
   • CVerify that the compliance policy is assigned to the user group and that the device has checked in with Intune.
   • DVerify that the users have been assigned the Intune license.
   Reveal Solution Discussion Select an answer first