MD-102 Practice Test 17 — 15 Questions

Question 1

Refer to the exhibit. You see the following Intune device properties for a Windows device. The device is noncompliant and the grace period expires on 2025-02-20. Today is 2025-02-15. The compliance policy requires a minimum OS version of 10.0.19041 but the device is on 10.0.18363. What will happen if the device does not become compliant before the grace period expires?

Accepted Answer

The device will be retired after the grace period expires. Option D is correct because when a noncompliant device's grace period expires, Intune enforces the compliance policy by retiring the device. Retirement removes the device from Intune management and revokes access to corporate resources, but it does not immediately block access or force an OS update. The grace period allows a window for remediation; after expiration, the device is marked for retirement.

Answer

The device will automatically update to the required OS version

Answer

The device will be blocked from accessing corporate resources

Answer

The device will be retired immediately

Question 2

Your organization uses Microsoft Intune to manage Windows 10 devices. You need to deploy a PowerShell script that runs in the user context on a schedule. Which TWO methods can you use? (Choose two.)

Accepted Answer

Proactive remediation in Microsoft Intune. Proactive remediations in Microsoft Intune allow you to run PowerShell scripts in the user context on a schedule, making option B correct. They are designed for detection and remediation of common support issues, supporting both user and system context execution with configurable schedules.

Answer

Device compliance policy with a custom script

Answer

Line-of-business app deployment package

Answer

PowerShell script deployment from the Intune console

Question 3

Refer to the exhibit. You manage a Windows 11 device that is marked as compliant and has OS version 10.0.22621.0. You need to upgrade the device to Windows 11 version 23H2. Which Intune feature should you use?

Accepted Answer

Windows feature update profile. A Windows feature update profile is the correct Intune feature to upgrade a Windows 11 device from one version to another (e.g., from 10.0.22621.0 to 23H2). Feature update profiles deploy new OS builds that enable feature-level changes, whereas quality updates deliver only security and cumulative fixes. This profile targets the specific version upgrade required for the device.

Answer

Windows quality update profile

Answer

Driver update policy

Answer

Compliance policy

Question 4

Your organization uses Microsoft Intune to manage Windows 10 devices. Users report that after a recent update, some devices are no longer receiving compliance policies. You verify that the devices are enrolled and show as active in Intune. What should you check first?

Accepted Answer

Verify that the compliance policy is assigned to the correct Windows version.. Option B is correct because the compliance policy may not have been updated to target the new Windows version after the update. Option A is wrong because connectivity issues would affect all policies, not just compliance. Option C is wrong because if the device is enrolled and active, the enrollment record is intact. Option D is wrong because compliance policies are not tied to user group membership in this scenario.

Answer

Check if the devices can connect to the Intune service.

Answer

Ensure the users are members of the correct Azure AD group.

Answer

Re-enroll the devices in Intune.

Question 5

A user reports that their Windows 11 device cannot connect to the corporate Wi-Fi network. In Intune, the device shows a status of 'Pending' for the Wi-Fi configuration profile. The profile is assigned to a group that includes the user. What is the most likely cause of the issue?

Accepted Answer

The device has not checked in to Intune within the last 8 hours.. The 'Pending' status in Intune for a Wi-Fi configuration profile indicates that the policy has been assigned but not yet applied to the device. This typically occurs when the device has not performed a recent check-in with the Intune service. By default, devices check in every 8 hours, so if the device has not checked in within that window, the profile remains in a 'Pending' state until the next successful sync.

Answer

The device does not have the required root certificate installed.

Answer

The Wi-Fi profile is not assigned to the user's group.

Answer

The Wi-Fi profile requires user affinity and the device is shared.

Question 6

You are troubleshooting an Intune-managed Windows 10 device that is not receiving a required application. Which THREE steps should you take to diagnose the issue? (Choose three.)

Accepted Answer

Ensure the device has network connectivity. Option A is correct because network connectivity is a prerequisite for Intune-managed devices to communicate with the Microsoft Intune service. Without connectivity, the device cannot check in, download app policies, or retrieve application payloads. You should verify the device can reach endpoints like *.manage.microsoft.com and that the Windows Push Notification Services (WNS) channel is open.

Answer

Verify the device is compliant with compliance policies

Answer

Perform a factory reset on the device

Question 7

You need to ensure that all Windows 10 devices automatically install critical security updates from Windows Update as soon as they are released. Which Windows Update for Business policy setting should you configure?

Accepted Answer

Set 'Quality update deferral period' to 0 days. Option A is correct because the 'Defer feature updates' setting can be set to 0 days, but for quality updates, use 'Quality update deferral period' set to 0. However, for immediate installation, 'Automatic update behavior' set to 'Auto install and restart' is key. Option A is the best answer. Option B is wrong because active hours are for scheduling restarts, not immediate installation. Option C is wrong because pause features delay updates. Option D is wrong because it is not a specific setting name.

Answer

Set 'Update notification level' to 'Display notification'

Answer

Configure active hours to allow automatic updates

Answer

Enable 'Pause feature updates'

Question 8

You are troubleshooting a Windows 11 device that fails to install an Intune-managed update. The device has been offline for two weeks. After reconnecting, the update does not install. In the Intune console, the update shows 'Failed to install' with error code 0x800f0831. What is the most likely cause?

Accepted Answer

The device's Windows component store is corrupted due to missing prerequisites.. Error 0x800f0831 typically indicates a corrupted component store or missing update prerequisites. This often happens when the device is offline for a long time and missing cumulative updates. Option A is incorrect because the device is online now. Option B is incorrect because storage space is not the issue. Option D is incorrect because connectivity is restored.

Answer

The device does not have internet connectivity.

Answer

The device does not have enough disk space.

Answer

The update is superseded and no longer applicable.

Question 9

You need to implement a solution that automatically wipes a company-owned Windows 10 device when it has not connected to Intune for 30 days. Which Intune feature should you configure?

Accepted Answer

Compliance policy with a device health rule for 'Maximum days since last check-in' and a non-compliance action to retire the device.. Option B is correct because a compliance policy can mark a device as non-compliant if it hasn't checked in for a specified period, and then a conditional access policy can block access. However, automatic wipe is not automatic; you can configure a non-compliance action to retire or wipe. Option A is wrong because configuration profiles don't enforce check-in. Option C is wrong because device cleanup is for stale records, not automatic wipe. Option D is wrong because scripts don't run on disconnected devices.

Answer

A PowerShell script that runs on the device to self-destruct after 30 days.

Answer

Device cleanup rules to automatically delete devices after 30 days.

Answer

Device configuration profile with a setting to require periodic check-in.

Question 10

Your organization uses Microsoft Intune to manage iOS devices. You need to prevent users from removing the Intune Company Portal app from their devices. Which setting should you configure?

Accepted Answer

Block app removal in device restrictions. Option B is correct because blocking app removal prevents users from uninstalling the Company Portal. Option A is wrong because blocking jailbreak detection does not prevent app removal. Option C is wrong because blocking screen capture is unrelated. Option D is wrong because requiring PIN is unrelated.

Answer

Block screen capture

Answer

Require PIN for app store purchases

Answer

Block jailbroken devices

Question 11

Your organization uses Microsoft Intune to manage iOS devices. You need to ensure that only approved corporate apps can be installed on these devices. Which restriction profile setting should you configure?

Accepted Answer

Require app store password. Option C is correct because 'Require app store password' ensures that the user must provide the Apple ID password to purchase or download apps. Option A is incorrect; while it prevents installing apps from unknown sources, iOS already blocks that. Option B is incorrect because it manages app data, not installation. Option D is incorrect because it manages automatic app downloads.

Answer

Allow app installation from App Store only

Answer

Allow managed apps to unmanaged accounts

Answer

Allow automatic app downloads

Question 12

You need to ensure that corporate data on lost or stolen iOS devices is protected. Which TWO actions should you configure in Intune?

Accepted Answer

Configure a device passcode policy.. Option A and Option D are correct because remote wipe and passcode reset are standard data protection measures for lost devices. Option B is incorrect because selective wipe only removes corporate data, not the device. Option C is incorrect because device retire removes management but does not protect data immediately. Option E is incorrect because device inventory is not a protective action.

Answer

Enable device inventory reporting.

Answer

Perform a selective wipe to remove corporate data only.

Answer

Retire the device from Intune.

Question 13

You are planning a Windows 11 deployment for 500 new devices using Windows Autopilot. The devices will be shipped directly to users from the manufacturer. You need to ensure that the devices are automatically enrolled in Intune and joined to Microsoft Entra ID. What should you do?

Accepted Answer

Register the device hashes in Intune and assign an Autopilot deployment profile. Option A is correct because Windows Autopilot uses device hashes (hardware IDs) to identify devices in Intune. By registering these hashes and assigning an Autopilot deployment profile, the devices are automatically enrolled in Intune and joined to Microsoft Entra ID during the out-of-box experience (OOBE), without requiring manual intervention or additional infrastructure.

Answer

Pre-install the Intune Management Extension on each device

Answer

Configure a provisioning package and include it with the shipment

Answer

Create a hybrid Azure AD join configuration in Intune

Question 14

You are planning the deployment of Windows 11 using Intune. Which THREE components are required to perform an in-place upgrade from Windows 10?

Accepted Answer

A valid Windows 11 product key.. Option A, Option C, and Option D are correct. A Windows 11 feature update profile is needed to deploy the upgrade. A valid product key for Windows 11 is required. Hardware requirements (TPM 2.0, 4GB RAM, etc.) must be met. Option B is incorrect because a Group Policy is not required; Intune can manage the upgrade. Option E is incorrect because the Intune Management Extension is not required for feature updates.

Answer

A Group Policy to enable Windows Update for Business.

Answer

The Intune Management Extension installed on the device.

Question 15

Which TWO actions can you take to improve the performance of Microsoft Intune management for Windows devices that are geographically distributed and have limited bandwidth?

Accepted Answer

Enable Delivery Optimization to use peer-to-peer sharing within the same network.. Options A and D are correct. Option A reduces data transfer by using delta updates. Option D reduces network load by using delivery optimization. Option B is wrong because more frequent sync increases network usage. Option C is wrong because it does not affect bandwidth. Option E is wrong because Peer Cache uses local peers, not internet.

Answer

Deploy a Configuration Manager site server at each location to act as a peer cache.

Answer

Increase the frequency of device sync intervals to ensure policies are applied quickly.

Answer

Disable Windows Defender real-time scanning on devices.

MD-102 Practice Test 17 — 15 Questions

Exhibit

MD-102 Practice Test 17 — 15 Questions

Exhibit