Courseiva
Manage and maintain devicesmediumMultiple ChoiceObjective-mapped

MD-102 Manage and maintain devices Practice Question

Exhibit

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "resources": [
    {
      "type": "Microsoft.Intune/configurationPolicies",
      "apiVersion": "2025-05-01",
      "name": "Win10-Security-Baseline",
      "properties": {
        "templateReference": {
          "templateId": "Microsoft.Windows10.SecurityBaseline"
        },
        "settings": [
          {
            "settingInstance": {
              "choiceSettingValue": {
                "value": "Microsoft.Windows10.SecurityBaseline.BlockUserFromModifyingAccountPolicies"
              }
            }
          }
        ]
      }
    }
  ]
}

Refer to the exhibit. The ARM template snippet attempts to deploy a Windows 10 Security Baseline policy in Intune. The deployment fails. What is the most likely reason?

⚠ Common exam trap

Many exam-takers assume ARM templates can deploy any Azure-adjacent service, but Intune is a Microsoft 365 workload that uses a separate management plane (Microsoft Graph) and is not integrated with Azure Resource Manager for policy deployment.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Intune configuration policies cannot be deployed via ARM templates.

Intune does not support deploying Windows 10 Security Baseline policies via ARM templates because ARM templates are designed for Azure resource management (e.g., Azure VMs, storage accounts) and cannot directly manage Intune workloads. Intune policies, including Security Baselines, must be configured through Microsoft Graph API, PowerShell, or the Intune portal, not through Azure Resource Manager.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Intune configuration policies cannot be deployed via ARM templates.

    Why this is correct

    Intune uses Microsoft Graph, not ARM.

  • The apiVersion is not supported.

    Why it's wrong here

    The apiVersion is valid.

  • The templateId is incorrect.

    Why it's wrong here

    The templateId is valid.

  • The setting value is invalid.

    Why it's wrong here

    The setting value appears valid.

About these practice questions

This MD-102 question is part of Courseiva's 942-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.