MD-102 Protect devices Practice Question
An organization uses Microsoft Defender for Endpoint to detect threats on Windows devices. The security team wants Intune to automatically increase the device's risk score when a threat is detected. Which TWO components are required?
⚠ Common exam trap
Watch out — candidates often confuse a device configuration profile with a compliance policy, thinking that a configuration profile can enforce threat-based risk scoring, but only the compliance policy evaluates the threat level from the Defender connector.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Device compliance policy with 'Require device threat level' set to 'Low'
A device compliance policy with 'Require device threat level' set to 'Low' forces Intune to evaluate the threat level reported by Microsoft Defender for Endpoint. When a threat is detected that exceeds the 'Low' threshold, the device is marked as noncompliant, which effectively increases the device's risk score in Intune and can trigger subsequent actions like Conditional Access blocks.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Device compliance policy with 'Require device threat level' set to 'Low'
Why this is correct
Compliance policy uses Defender for Endpoint risk score.
- ✓
Microsoft Defender for Endpoint connector in Intune
Why this is correct
Connector allows Intune to receive threat signals.
- ✗
Device configuration profile
Why it's wrong here
Configuration profiles do not set risk scores.
- ✗
App protection policy
Why it's wrong here
App protection policies are for app-level data protection, not device risk.
- ✗
Conditional Access policy
Why it's wrong here
Conditional Access is not a component of threat detection; it uses compliance results.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
Courseiva writes every MD-102 question from scratch — 942 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.