MD-102 Protect devices Practice Question
Exhibit
Refer to the exhibit.
{
"@odata.type": "#microsoft.graph.windows10CompliancePolicy",
"passwordRequired": true,
"passwordMinimumLength": 6,
"passwordRequiredType": "deviceDefault",
"passwordMinutesOfInactivityBeforeLock": 5,
"passwordExpirationDays": 90,
"passwordPreviousPasswordBlockCount": 5,
"requireHealthyDevice": false,
"osMinimumVersion": "10.0.19041.0",
"osMaximumVersion": "10.0.19043.0",
"mobileOsMinimumVersion": null,
"mobileOsMaximumVersion": null,
"earlyLaunchAntiMalwareDriverEnabled": true,
"bitLockerEnabled": true,
"secureBootEnabled": true,
"codeIntegrityEnabled": true,
"storageRequireEncryption": true,
"activeFirewallRequired": true,
"defenderEnabled": true,
"defenderVersion": "1.1.1800.0",
"signatureOutOfDate": false,
"rtpEnabled": true
}Refer to the exhibit. A Windows 10 device with OS build 10.0.19041.1 is evaluated against this compliance policy. The device meets all settings except one: the OS version is 10.0.19041.1, which is below the minimum 10.0.19041.0? Actually it is above. But wait, the device has BitLocker enabled, Secure Boot enabled, and firewall enabled. Which setting will cause the device to be non-compliant?
⚠ Common exam trap
Watch out — candidates often assume the OS version check is the cause of non-compliance because the version number appears close to the minimum, but the device's OS build 10.0.19041.1 is actually above the minimum 10.0.19041.0, so the only remaining non-compliant setting is the antivirus signature age.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Antivirus signatures are out of date.
The compliance policy requires antivirus signatures to be up to date. Since the device meets all other settings (BitLocker enabled, Secure Boot enabled, firewall enabled, and OS version 10.0.19041.1 is above the minimum 10.0.19041.0), the only remaining setting that can cause non-compliance is outdated antivirus signatures. In Microsoft Intune, the 'Antivirus' compliance rule checks for the presence and recency of signature updates via Windows Defender or a third-party AV, and if signatures are older than the configured threshold, the device is marked non-compliant.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
BitLocker is not enabled on the device.
Why it's wrong here
The exhibit shows bitLockerEnabled: true, and the device has it enabled.
- ✓
Antivirus signatures are out of date.
Why this is correct
The policy requires signatureOutOfDate: false, meaning signatures must be up to date.
- ✗
Secure Boot is not enabled on the device.
Why it's wrong here
The exhibit shows secureBootEnabled: true, and the device has it enabled.
- ✗
The firewall is not enabled on the device.
Why it's wrong here
The exhibit shows activeFirewallRequired: true, and the device has it enabled.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Windows 10
Windows 10 is a personal computer operating system developed by Microsoft that combines the familiarity of Windows 7 with the modern features of Windows 8, designed to run on a wide range of devices from desktops to tablets.
Key term
General Data Protection Regulation
A European Union law that gives individuals control over their personal data and sets strict rules for how organizations collect, store, and process that data.
About these practice questions
Courseiva writes every MD-102 question from scratch — 942 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.