A design firm uses macOS workstations for its creative team. The IT department needs to enforce a configuration that requires FileVault encryption and disables the use of iCloud Drive. The settings should apply only to devices in the 'Design' device group. What should you create?

A macOS compliance policy that requires FileVault and blocks iCloud Drive, assigned to the Design group.

A macOS app protection policy that restricts iCloud Drive and requires encryption.

A macOS script that enables FileVault and disables iCloud Drive, run on the Design group.

A macOS device configuration profile with the FileVault and iCloud Drive settings, assigned to the Design group.

A company is enrolling 1,000 new Windows devices into Intune. They need to apply a device configuration profile that sets the device name and installs a specific certificate. The profile must be applied at enrollment time, and the device name must be based on the device's serial number. The company wants to minimize the time between enrollment and profile application. What should you use?

A dynamic device group that includes the serial number and assign the profile to that group.

An assignment filter that checks the serial number and apply it to the All Devices group.

A PowerShell script that runs during enrollment and sets the device name and installs the certificate.

Enrollment time grouping with a device configuration profile that uses a variable for the device name.

A company is enrolling Windows devices via Autopilot. They need to apply a device configuration profile to devices based on the device's serial number. They have a list of serial numbers for devices that should receive the profile. What should you do?

Create an assignment filter for serial number and assign the profile to all devices.

Create an enrollment time grouping rule that adds devices with specific serial numbers to a device group, then assign the profile to that group.

Manually add each device to a device group after enrollment.

Use Group Policy analytics to map serial numbers to profiles.

Microsoft 365 Certified:Endpoint Administrator Associate

Domain 2Objective 2

Plan and Implement Device Configuration Profiles MD-102 Practice Questions (Page 3)

Part of the Manage and maintain devices domain, which accounts for 25–30% of the MD-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

7concepts

25–30%of the exam

Questions 11–15

11foundation · medium
An administrator wants to assign a device configuration profile only to devices that are in a specific organizational unit in Microsoft Entra ID. Which feature should be used to achieve this?
Select an answer first
12application · medium
A design firm uses macOS workstations for its creative team. The IT department needs to enforce a configuration that requires FileVault encryption and disables the use of iCloud Drive. The settings should apply only to devices in the 'Design' device group. What should you create?
Select an answer first
13expert · hard
A company is enrolling 1,000 new Windows devices into Intune. They need to apply a device configuration profile that sets the device name and installs a specific certificate. The profile must be applied at enrollment time, and the device name must be based on the device's serial number. The company wants to minimize the time between enrollment and profile application. What should you use?
Select an answer first
14foundation · medium
An administrator needs to create a device configuration profile for Android devices that enforces a PIN and restricts app installation from unknown sources. Which profile type should the administrator select in Microsoft Intune?
Select an answer first
15application · medium
A company is enrolling Windows devices via Autopilot. They need to apply a device configuration profile to devices based on the device's serial number. They have a list of serial numbers for devices that should receive the profile. What should you do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MD-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MD-102” is a trademark of its owner, used for identification only.

Plan and Implement Device Configuration Profiles MD-102 Practice Questions (Page 3)

Questions 11–15

An administrator wants to assign a device configuration profile only to devices that are in a specific organizational unit in Microsoft Entra ID. Which feature should be used to achieve this?

A design firm uses macOS workstations for its creative team. The IT department needs to enforce a configuration that requires FileVault encryption and disables the use of iCloud Drive. The settings should apply only to devices in the 'Design' device group. What should you create?

An administrator needs to create a device configuration profile for Android devices that enforces a PIN and restricts app installation from unknown sources. Which profile type should the administrator select in Microsoft Intune?

A company is enrolling Windows devices via Autopilot. They need to apply a device configuration profile to devices based on the device's serial number. They have a list of serial numbers for devices that should receive the profile. What should you do?

Keep studying — Manage and maintain devices