MD-102 Protect devices Practice Question
A user reports that their iOS device is not receiving email on their work account. The device is enrolled in Intune. You verify that the Exchange ActiveSync profile is assigned correctly. What should you check next?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Check the device's compliance status in Intune.
If the device is noncompliant (e.g., due to a noncompliant app or OS version), Conditional Access policies in Intune will block email access even if the Exchange ActiveSync profile is correctly assigned. Option A is incorrect because the MDM authority is already verified by the fact the device is enrolled and the profile is assigned; changing it would not resolve the issue. Option B is incorrect because app protection policies (MAM) are separate from device-level email access via the native mail app—they manage data protection within apps, not connectivity. Option C is incorrect because Device Enrollment Manager (DEM) mode is used for bulk enrollment scenarios, not for individual device email issues.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Ensure the MDM authority is set to Intune.
Why it's wrong here
This is a prerequisite, but if profiles are assigned, it is likely correct.
- ✗
Check if an app protection policy is assigned to the user.
Why it's wrong here
App protection policies manage app-level behavior, not email access via native mail.
- ✗
Verify that the device is enrolled in device enrollment manager mode.
Why it's wrong here
DEM is for bulk enrollment; it does not affect email access.
- ✓
Check the device's compliance status in Intune.
Why this is correct
Noncompliant devices are blocked by Conditional Access from accessing corporate email.
Visual reference
Go deeper
Related to this question
Learn chapter
Enrolling Devices with Microsoft Intune
Key term
Conditional access
Conditional access is a security framework that evaluates signals like user location, device health, and risk level to grant or block access to resources in real time.
Key term
Device enrollment
Device enrollment is the process of registering a device with a management system so that it can receive policies, apps, and security settings under organizational control.
About these practice questions
Courseiva writes every MD-102 question from scratch — 942 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.