hardMultiple ChoiceObjective-mapped
MD-102 Practice Question: A company applies the above BitLocker policy to…
Exhibit
Refer to the exhibit.
```json
{
"bitlocker": {
"encryptionMethod": "AES 256",
"requireTpm": true,
"requireStartupPin": true,
"requireStartupKey": false,
"recoveryKeyRotation": "AzureADOnly",
"enableRecoveryInformationSaveToAzureAD": true
}
}
```A company applies the above BitLocker policy to Windows 10 devices via Intune. An administrator discovers that some devices are not encrypting. The administrator checks a device and finds that it has no TPM chip. Which setting in the policy will cause encryption to fail?
⚠ Common exam trap
Many exam-takers think 'requireStartupPin' is the direct cause of failure on a TPM-less device, but the policy's 'requireTpm' setting is evaluated first and will block encryption entirely before any PIN requirement is even considered.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
requireTpm
The 'requireTpm' setting enforces that BitLocker will only start encryption if a Trusted Platform Module (TPM) chip is present on the device. If a device lacks a TPM, this policy setting causes the encryption process to fail outright, as BitLocker cannot meet the mandatory hardware requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
requireTpm
Why this is correct
If requireTpm is true, devices without TPM will not encrypt.
- ✗
recoveryKeyRotation
Why it's wrong here
Recovery key rotation does not affect encryption initiation.
- ✗
encryptionMethod
Why it's wrong here
Encryption method is supported as long as the device supports AES 256.
- ✗
requireStartupPin
Why it's wrong here
Startup PIN is only relevant if TPM is present.
Go deeper
Related to this question
Learn chapter
Enrolling Devices with Microsoft Intune
Key term
Windows 10
Windows 10 is a personal computer operating system developed by Microsoft that combines the familiarity of Windows 7 with the modern features of Windows 8, designed to run on a wide range of devices from desktops to tablets.
Key term
BitLocker policy
A BitLocker policy is a set of configuration rules that IT administrators use to manage how BitLocker Drive Encryption is enabled, enforced, and recovered on Windows devices within an organization.
About these practice questions
This MD-102 question is part of Courseiva's 942-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.