Quick Answer
The correct answer is to configure a compliance grace period of 30 days on the policy. This works because a compliance grace period allows a device that fails a policy check, such as requiring a minimum OS version of 15.0, to remain non-compliant for a set number of days without immediately blocking access to company resources like email. In this scenario, the iPad running iOS 14.8 cannot update further due to hardware limitations, so the grace period provides temporary access while the device is still marked non-compliant, balancing security with usability. On the MD-102 exam, this tests your understanding of Intune compliance policies and how to handle legacy devices that cannot meet OS requirements—a common trap is to mistakenly create an exemption or lower the minimum OS, which weakens security. Remember the memory tip: “Grace gives time, not a pass,” meaning the device stays non-compliant but retains access during the grace window.
This MD-102 practice question tests your understanding of manage, maintain, and protect devices. The scenario asks you to isolate a root cause — eliminate options that address a different problem before choosing. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A company uses Microsoft Intune to manage iOS/iPadOS devices. The compliance policy requires a minimum OS version of 15.0. A user reports that their iPad running iOS 14.8 cannot access company email and shows as non-compliant. However, the device is up to date with the latest available OS for that hardware. What should you do to allow the device to access email while maintaining security?
Clue words in this question
Noticing these words before you look at the options changes how you read each choice.
Clue: "minimum / minimize"
Why it matters: Asks for the least resource use — fewest addresses, smallest subnet, lowest overhead. Eliminate over-provisioned options even if they would technically work.
Configure a compliance grace period of 30 days on the policy.
A grace period allows temporary access while the user updates.
Change the minimum OS version to 14.8 in the policy.
Why wrong: This lowers the security baseline.
Delete the compliance policy that requires iOS 15.0.
Why wrong: This removes the security requirement entirely.
Request the user to update the iPad to iOS 15.0.
Why wrong: The hardware does not support iOS 15.0.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Configure a compliance grace period of 30 days on the policy.
Option A is correct because a compliance grace period allows the device to remain non-compliant for a specified duration (e.g., 30 days) without immediately blocking access to company resources. This gives the user time to update the OS if possible, but since the iPad hardware cannot go beyond iOS 14.8, the grace period still permits email access while the device is marked non-compliant, maintaining security by not permanently exempting the device.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Configure a compliance grace period of 30 days on the policy.
Why this is correct
A grace period allows temporary access while the user updates.
Clue confirmation
The clue word "minimum / minimize" in the question point toward this answer.
Related concept
Read the scenario before looking for a memorised answer.
Change the minimum OS version to 14.8 in the policy.
Why it's wrong here
This lowers the security baseline.
Delete the compliance policy that requires iOS 15.0.
Why it's wrong here
This removes the security requirement entirely.
Request the user to update the iPad to iOS 15.0.
Why it's wrong here
The hardware does not support iOS 15.0.
Common exam traps
The trap here is that candidates often choose to lower the OS version requirement (Option B) or delete the policy (Option C) as a quick fix, failing to recognize that a grace period is the designed Intune feature to handle temporary or hardware-limited non-compliance without compromising the overall security baseline.
Detailed technical explanation
In Microsoft Intune, compliance policies evaluate device attributes like OS version against defined rules. When a device is non-compliant, conditional access policies in Azure AD block access to resources like Exchange Online. A grace period temporarily overrides this block, allowing the device to access email while still being flagged as non-compliant. This is particularly useful for legacy hardware that cannot meet newer OS requirements, as it avoids a hard block while the admin evaluates alternative actions like app protection policies.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
A company's IT admin needs to give a contractor read-only access to production logs without sharing account credentials. Using role-based access control (RBAC) and temporary scoped permissions — not a permanent shared password — is the correct pattern. Questions like this test whether you can apply least-privilege access across cloud identity services.
What to study next
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Manage, maintain, and protect devices — study guide chapter
Learn the concepts, then practise the questions
Manage, maintain, and protect devices practice questions
Targeted practice on this topic area only
All MD-102 questions
991 questions across all exam domains
Microsoft 365 Endpoint Administrator MD-102 study guide
Full concept coverage aligned to exam objectives
MD-102 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Practise MD-102 questions linked to Prepare infrastructure for devices.
Practise MD-102 questions linked to Manage and maintain devices.
Practise MD-102 questions linked to Manage applications.
Practise MD-102 questions linked to Protect devices.
Practise MD-102 questions linked to Deploy Windows client.
Practise MD-102 questions linked to Manage identity and compliance.
Practise MD-102 questions linked to Manage, maintain, and protect devices.
Practise MD-102 questions linked to MD-102 fundamentals.
Practise MD-102 questions linked to MD-102 scenario.
Practise MD-102 questions linked to MD-102 troubleshooting.
Practice this exam
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Manage, maintain, and protect devices — This question tests Manage, maintain, and protect devices — Read the scenario before looking for a memorised answer..
The correct answer is: Configure a compliance grace period of 30 days on the policy. — Option A is correct because a compliance grace period allows the device to remain non-compliant for a specified duration (e.g., 30 days) without immediately blocking access to company resources. This gives the user time to update the OS if possible, but since the iPad hardware cannot go beyond iOS 14.8, the grace period still permits email access while the device is marked non-compliant, maintaining security by not permanently exempting the device.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Yes — watch for: "minimum / minimize". Asks for the least resource use — fewest addresses, smallest subnet, lowest overhead. Eliminate over-provisioned options even if they would technically work.
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jun 11, 2026
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.