MD-102 Protect devices Practice Question
A user reports that their Windows 11 device is not receiving compliance policies from Microsoft Intune. The device shows as 'Not evaluated' in the Microsoft Intune admin center. Which step should you take first to resolve the issue?
⚠ Common exam trap
MD-102 often tests the instinct to jump to re-enrollment or policy recreation when the real fix is a simple device sync — candidates overlook the manual sync option under Access work or school.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
On the device, go to Settings > Accounts > Access work or school, select the account, and click Sync.
When a Windows 11 device shows 'Not evaluated' in Intune, it usually means the MDM enrollment is intact but the device hasn't checked in with the Intune service recently. Manually triggering a sync from Settings > Accounts > Access work or school forces the MDM client to pull the latest compliance policies immediately, which is the least disruptive first step.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Disconnect the device from Microsoft Entra ID and rejoin.
Why it's wrong here
Rejoining Microsoft Entra ID does not trigger a compliance evaluation; the device already holds a valid registration, so the 'Not evaluated' state persists. It is tempting because hybrid join or registration faults do block Intune, but the correct first step is forcing an Intune sync or checking the IME service.
- ✓
On the device, go to Settings > Accounts > Access work or school, select the account, and click Sync.
Why this is correct
A 'Not evaluated' status typically means the device has not checked in with the Intune service. Manually triggering a sync from Settings > Accounts > Access work or school forces the MDM enrolment to contact Intune, prompting policy evaluation before investigating deeper causes.
- ✗
Delete and recreate the compliance policy in Microsoft Intune.
Why it's wrong here
Recreating the policy does not address why the device never evaluated it; 'Not evaluated' points to broken device-to-service communication, such as missing enrolment or MDM channel issues. Recreating suits policy configuration errors, not connectivity failures.
- ✗
Re-enroll the device in Microsoft Intune.
Why it's wrong here
Re-enrolment wipes and re-registers the device, destroying existing configuration and user data without addressing why evaluation never ran. It appeals when enrolment is genuinely broken, but 'Not evaluated' typically means the device has not checked in, so a manual sync from Company Portal resolves it first.
Visual reference
Go deeper
Related to this question
Learn chapter
Implementing App Protection Policies (MAM)
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
Key term
Windows 11
Windows 11 is Microsoft's latest desktop operating system, offering a redesigned interface, enhanced security features, and improved support for modern hardware.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.