MD-102 Protect devices Practice Question
A user's Android device is enrolled in Microsoft Intune. The device reports as 'Compliant' but the user cannot access corporate resources that require compliant devices. The conditional access policy is configured to require a compliant device. What is the most likely cause?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The conditional access policy requires an approved client app.
Even if the device reports as compliant, the conditional access policy may have additional requirements, such as requiring an approved client app (option C). Option C is correct because the policy might require both a compliant device and an approved client app. Option A is incorrect because the compliance policy not being refreshed would typically cause the device to show as non-compliant, not compliant. Option B is incorrect because the Company Portal app is not required for access; it's used for enrollment and management. Option D is incorrect because the device is reported as compliant, so non-compliance is not the issue.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The compliance policy has not been refreshed on the device.
Why it's wrong here
Incorrect. The device is already compliant, so a compliance policy refresh is not the issue.
- ✗
The user does not have the Company Portal app installed.
Why it's wrong here
Incorrect. The Company Portal app is not required for accessing corporate resources; the issue is more likely an additional conditional access requirement.
- ✓
The conditional access policy requires an approved client app.
Why this is correct
Correct. Even with a compliant device, the conditional access policy may require an approved client app, and if the user is using a non-approved app, access will be denied.
- ✗
The device is not compliant with the compliance policy.
Why it's wrong here
Incorrect. The device reports as compliant, so this cannot be the cause.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
About these practice questions
One of 942 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.