MD-102 Protect devices Practice Question
Exhibit
Refer to the exhibit.
Exhibit (Intune JSON policy snippet):
{
"@odata.type": "#microsoft.graph.windows10CompliancePolicy",
"description": "Company compliance policy",
"passwordRequired": true,
"passwordMinimumLength": 8,
"passwordRequiredType": "deviceDefault",
"passwordMinutesOfInactivityBeforeLock": 15,
"passwordExpirationDays": 90,
"passwordPreviousPasswordBlockCount": 5,
"requireHealthyUntrustedEndorsementCertificate": false,
"requireHealthyTrustedEndorsementCertificate": false,
"tpmRequired": false,
"secureBootEnabled": true,
"codeIntegrityEnabled": true,
"earlyLaunchAntiMalwareDriverEnabled": true,
"deviceThreatProtectionEnabled": false,
"deviceThreatProtectionRequiredSecurityLevel": "unavailable",
"configurationManagerComplianceRequired": false
}Refer to the exhibit. You deploy this compliance policy to Windows 10 devices. A device reports as compliant, but you suspect it may have a weak password policy because the password type is 'deviceDefault'. What is the effect of 'deviceDefault' on the password requirement?
⚠ Common exam trap
Candidates often assume 'deviceDefault' means the Intune policy enforces a default Microsoft-defined password type (like alphanumeric), when in fact it simply passes control to the device's local policy, which may be weaker or stronger.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It uses the password type configured in the device's local policy
When the password type is set to 'deviceDefault' in a Microsoft Intune compliance policy for Windows 10, the policy does not enforce a specific password type (e.g., alphanumeric or numeric). Instead, it defers to the password type already configured in the device's local security policy (via Local Group Policy or the SAM registry). This means the device can still be compliant even if the local policy requires only a simple PIN or no complexity, as long as the local password type meets the minimum length and other requirements defined in the compliance policy.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It requires a password that meets the minimum length but no complexity
Why it's wrong here
Complexity is not defined by 'deviceDefault'.
- ✓
It uses the password type configured in the device's local policy
Why this is correct
'deviceDefault' defers to the device's own settings.
- ✗
It does not require a password at all
Why it's wrong here
PasswordRequired is true, so a password is required, but the type is deviceDefault.
- ✗
It requires a password that contains at least one number and one letter
Why it's wrong here
That would be 'alphanumeric', not 'deviceDefault'.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Security policy
A security policy is a formal set of rules and guidelines that an organization establishes to protect its information assets and technology resources.
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
About these practice questions
One of 942 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.