Match each Intune configuration profile type to its purpose.
Drag a concept onto its matching description — or click a concept then click the description.
Control settings like password, camera, and Bluetooth
Define rules for device health and security
Deploy custom OMA-URI or Apple Configurator settings
Configure Windows Defender Firewall and BitLocker
Group Policy-like settings for Windows devices
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Device restrictions: Controls device settings and features (e.g., camera, Bluetooth)
Device restrictions manage device features, Endpoint protection handles security settings, Administrative templates use ADMX, and Custom uses OMA-URI. Common confusions involve swapping the first two.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Device restrictions: Controls device settings and features (e.g., camera, Bluetooth)
Why this is correct
Device restrictions profile manages device-level features like camera, Bluetooth, and password policies.
Endpoint protection: Manages security settings like antivirus and firewall
Why this is correct
Endpoint protection profile configures Windows Defender settings, firewall, and other security features.
Administrative templates: Configures policy settings using ADMX templates
Why this is correct
Administrative templates in Intune allow ADMX-based policy settings for Windows devices.
Custom: Allows custom OMA-URI settings
Why this is correct
Custom configuration profile supports OMA-URI settings for non-native or advanced configurations.
Device restrictions: Manages security settings like antivirus and firewall
Why it's wrong here
Incorrect — this describes Endpoint protection, not Device restrictions.
Endpoint protection: Controls device settings and features (e.g., camera, Bluetooth)
Why it's wrong here
Incorrect — this describes Device restrictions, not Endpoint protection.
Go deeper
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
Courseiva writes every MD-102 question from scratch — 942 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.