MD-102 Protect devices Practice Question
Exhibit
{
"compliancePolicies": [
{
"@odata.type": "#microsoft.graph.windows10CompliancePolicy",
"passwordRequired": true,
"passwordMinimumLength": 6,
"requireDeviceEncryption": true,
"requireSecureBoot": true,
"requireCodeIntegrity": true
}
]
}Refer to the exhibit. The JSON shows a compliance policy for Windows 10 devices. Devices that do not meet the policy are marked as non-compliant. Which diagnostic step would you take to identify why a specific device is non-compliant despite having BitLocker enabled?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Review the device's hardware security features: Secure Boot and Code Integrity.
The correct diagnostic step is to review the device's hardware security features, specifically Secure Boot and Code Integrity. Even if BitLocker is enabled, these settings might be missing, causing non-compliance. Checking compliance status (option B) only confirms non-compliance, not the underlying reason. Option A verifies policy assignment, which is not the issue. Option D modifies the policy, which is unnecessary for diagnosis.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Verify the compliance policy is assigned to the device's group.
Why it's wrong here
If the device is non-compliant, the policy is likely assigned.
- ✗
Check the device's compliance status in Intune for details.
Why it's wrong here
The status shows non-compliant, but we need specific reasons.
- ✓
Review the device's hardware security features: Secure Boot and Code Integrity.
Why this is correct
These are additional requirements beyond encryption.
- ✗
Modify the policy to remove the requireSecureBoot and requireCodeIntegrity settings.
Why it's wrong here
This would be a change, not a diagnostic step.
Go deeper
Related to this question
Learn chapter
Enrolling Devices with Microsoft Intune
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
BitLocker
BitLocker is a full-disk encryption feature built into Windows that protects data by encrypting the entire drive so that unauthorized users cannot access files without the correct recovery key.
About these practice questions
One of 942 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.