MD-102 Prepare infrastructure for devices Practice Question
Exhibit
{
"managementIntent": {
"displayName": "Baseline Security",
"settingsDelta": [
{
"settingDefinitionId": "device_vendor_msft_policy_config_windowsfirewall_publicprofile_enablefirewall",
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"choiceSettingValue": {
"value": "device_vendor_msft_policy_config_windowsfirewall_publicprofile_enablefirewall_1"
}
}
}
]
}
}Refer to the exhibit. You are reviewing an Intune management intent configuration. What does this setting configure on Windows devices?
⚠ Common exam trap
Many candidates confuse the 'Windows Firewall' setting with Microsoft Defender Antivirus real-time protection, or assume the setting disables all profiles when it actually enables a specific profile; the exhibit's focus on a single profile (public) is the key detail to avoid misinterpreting the scope.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enables the Windows Firewall for the public network profile
The setting shown in the exhibit configures the Windows Firewall to enable the firewall for the public network profile. In Intune, the 'Windows Firewall' configuration policy allows administrators to define per-profile firewall states. Enabling the firewall for the public profile is a common security baseline requirement to protect devices on untrusted networks.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Disables the Windows Firewall for all network profiles
Why it's wrong here
Disabling the firewall across all profiles removes protection on domain, private and public networks simultaneously, which no scoped management intent would configure. It is tempting because it sounds comprehensive, and would be correct only if the requirement were to turn off Windows Firewall entirely on the device.
- ✓
Enables the Windows Firewall for the public network profile
Why this is correct
This management intent configures the Windows Defender Firewall's public network profile state, enabling filtering for connections classified as public. It does not govern domain or private profiles, nor does it define inbound or outbound rules.
- ✗
Enables Microsoft Defender Antivirus real-time protection
Why it's wrong here
Real-time protection belongs to Microsoft Defender Antivirus configuration, a separate endpoint security workload, not the firewall management intent shown. It is tempting because both are Defender-related protections, and would be correct if the exhibit configured antivirus policy rather than firewall profile settings.
- ✗
Disables the Windows Firewall for the domain network profile
Why it's wrong here
The domain profile setting only governs firewall behaviour when the device is connected to a domain-authenticated network, leaving private and public profiles untouched. It is tempting because domain profiles are common in corporate estates, and would be correct if the intent targeted only domain-joined network connections rather than every profile.
Go deeper
Related to this question
Learn chapter
Updating Devices with Windows Update for Business
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
Firewall
A firewall is a network security system that monitors and controls incoming and outgoing traffic based on predetermined security rules to protect trusted internal networks from untrusted external networks.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.