20+ practice questions focused on Prepare infrastructure for devices — one of the most tested topics on the Microsoft 365 Endpoint Administrator MD-102 exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Prepare infrastructure for devices PracticeUsers have iOS/iPadOS devices enrolled in Intune. You need to ensure that corporate data in managed apps is encrypted at rest. What should you configure?
Explanation: App protection policies (APP) in Intune provide the ability to encrypt corporate data at rest within managed apps on iOS/iPadOS devices, regardless of whether the device itself is managed or enrolled. This encryption is enforced at the application layer using AES-256, ensuring that data stored by the app is protected even if the device is compromised or unenrolled. Option C is correct because APP policies are the specific mechanism for data-level encryption in managed apps, not device-level settings.
Refer to the exhibit. You are configuring a device compliance policy in Microsoft Intune for Windows devices. Based on the JSON configuration, what will happen if a device does not have a password set?
Explanation: The JSON configuration defines a grace period of 24 hours for non-compliance due to missing password, after which access is blocked, and a 72-hour period after which the device is retired. The device is marked non-compliant immediately when no password is set, but the actions (block access, retire) are scheduled based on these grace periods, not executed instantly.
Refer to the exhibit. A PowerShell command is used to create a device category in Microsoft Intune. After running the command, you want to automatically assign devices to this category based on their Azure AD group membership. How should you configure this?
Explanation: Intune provides a built-in capability to map an Azure AD group to a device category. Once a device category is created (e.g., via PowerShell), you can configure automatic assignment by navigating to Devices > Categories in the Intune console, selecting 'Map Azure AD groups' or similar, and specifying the group. Devices in that group are automatically assigned to the category. This is the direct configuration step, while Option A (creating a dynamic group) is a prerequisite but not the assignment step itself.
You are planning the enrollment of 500 Android Enterprise personally-owned work profile devices. Management requires that users must not be able to remove the work profile from their device. Which enrollment method should you use?
Explanation: To prevent users from removing the work profile, the device must be corporate-owned. Android Enterprise corporate-owned work profile allows IT to manage a work profile on a corporate-owned device while still allowing personal use, and IT can enforce policies that prevent removal of the work profile. Dedicated devices (option A) are for corporate-owned kiosk devices and do not have a work profile; fully managed devices (option C) take over the entire device, not just a work profile; personally-owned work profile (option D) allows the user to remove the work profile.
You are troubleshooting a Windows 10 device that fails to install a required application from Microsoft Intune. The device shows the application as 'Enforced' but never installs. The application is a line-of-business (LOB) app. What should you check first?
Explanation: For a line-of-business (LOB) app in Intune, a valid code signing certificate is required to ensure the app can be trusted and deployed. The most common reason an LOB app fails to install despite being enforced is a missing or invalid code signing certificate. Option A is incorrect because 'Required' intent is for user groups, not device groups; LOB apps can be assigned to device groups with 'Required' intent, so this is not the first check. Option B is incorrect because the Intune Management Extension is used for Win32 apps, not for LOB apps; LOB apps use a different deployment mechanism. Option D is incorrect because LOB apps are uploaded directly to Intune, not from the Microsoft Store for Business.
+15 more Prepare infrastructure for devices questions available
Practice all Prepare infrastructure for devices questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Prepare infrastructure for devices. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Prepare infrastructure for devices questions on the MD-102 frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Prepare infrastructure for devices is tested as part of the Microsoft 365 Endpoint Administrator MD-102 blueprint. Practicing with targeted Prepare infrastructure for devices questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free MD-102 practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Prepare infrastructure for devices is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Prepare infrastructure for devices practice session with instant scoring and detailed explanations.
Start Prepare infrastructure for devices Practice →