MD-102 Manage and maintain devices Practice Question
A company manages Windows 10 and Windows 11 devices using Microsoft Intune. They need to ensure that devices that have not checked in with Intune for more than 30 days are automatically marked as inactive and excluded from compliance policies. Which configuration should be used?
⚠ Common exam trap
Watch out — candidates often confuse the device cleanup rule with compliance policy settings or conditional access, thinking that marking a device non-compliant or blocking access is equivalent to excluding it from compliance policies, but only the cleanup rule actually removes the device from evaluation.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure the Intune device cleanup rule to delete devices inactive for 30 days
The Intune device cleanup rule is specifically designed to automatically remove or mark devices as inactive when they have not checked in for a configurable number of days (default 30). Once a device is deleted by this rule, it is excluded from compliance policies and no longer evaluated. This directly meets the requirement to mark devices inactive after 30 days of no check-in and exclude them from compliance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure a compliance policy with a grace period of 30 days
Why it's wrong here
Compliance policies enforce settings but do not automatically clean up devices.
- ✗
Create a conditional access policy blocking devices inactive for 30 days
Why it's wrong here
Conditional access policies control access based on conditions, not device lifecycle.
- ✗
Set the device compliance status to 'not compliant' after 30 days of inactivity
Why it's wrong here
This marks devices as non-compliant but does not automatically remove them from management.
- ✓
Configure the Intune device cleanup rule to delete devices inactive for 30 days
Why this is correct
The device cleanup rule automatically removes devices that haven't checked in for the configured number of days.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
General Data Protection Regulation
A European Union law that gives individuals control over their personal data and sets strict rules for how organizations collect, store, and process that data.
About these practice questions
One of 942 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.