MD-102 Protect devices Practice Question
An Intune administrator needs to ensure that Windows 10 devices are compliant with security requirements. Which TWO options are valid compliance settings for Windows 10?
⚠ Common exam trap
It's easy for candidates to confuse device-level compliance settings (like OS version and BitLocker) with enrollment properties (device category, enrollment type) or app-level policies (app protection policy), which are managed in different policy types within Intune.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Require BitLocker
Option C (Require BitLocker) is correct because BitLocker drive encryption is a native Windows 10 compliance setting in Intune under Device Health, allowing the admin to require that encryption is enabled on the device. Option D (Minimum OS version) is correct because Intune's Device Properties compliance settings for Windows 10 let you specify a minimum OS version (for example, 10.0.19041.0) that devices must meet to be marked compliant. Option A is not a compliance setting; device category is an attribute used for grouping and reporting, not a compliance rule. Option B is not valid because enrollment type is not a configurable compliance condition in Intune. Option E is not a Windows 10 device compliance setting; app protection policies are separate MAM policies applied to apps, not device compliance rules.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Device category must be 'Corporate'
Why it's wrong here
Device category is an organisational label used for grouping and reporting, not a compliance rule; it cannot evaluate security posture. It is tempting because admins assign categories during enrolment, but compliance settings for Windows 10 cover BitLocker, Secure Boot, firewall and Defender states instead.
- ✗
Device enrollment type must be 'Corporate'
Why it's wrong here
Enrolment type (corporate versus personal) is metadata recorded at registration, not a configurable compliance setting. It is tempting because corporate-owned devices often need stricter rules, but compliance policies evaluate OS-level security controls such as encryption, antivirus and minimum OS version.
- ✓
Require BitLocker
Why this is correct
Requiring BitLocker is a valid Windows 10 compliance setting in Intune, enforcing full-disk encryption via the device encryption policy. It directly satisfies the stem's security requirement by verifying drive encryption status, and is configurable under Device Compliance > Windows 10/11 compliance policy alongside firewall and antivirus settings.
- ✓
Minimum OS version
Why this is correct
Minimum OS version is a valid Windows 10 compliance setting in Intune, enforcing the security requirement that devices run at least a specified build. It satisfies the stem's constraint by directly blocking outdated, unpatched devices from being marked compliant, alongside other settings such as BitLocker and Defender.
- ✗
Require app protection policy
Why it's wrong here
App protection policy is not a compliance setting; it's a MAM policy.
Go deeper
Related to this question
Learn chapter
Implementing BitLocker and Device Encryption
Key term
General Data Protection Regulation
A European Union law that gives individuals control over their personal data and sets strict rules for how organizations collect, store, and process that data.
Key term
Encryption
Encryption is the process of converting readable data into a secret code to prevent unauthorized access.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.