MD-102 Protect devices Practice Question
Exhibit
Refer to the exhibit.
Exhibit (Intune JSON policy snippet):
{
"@odata.type": "#microsoft.graph.windows10CompliancePolicy",
"description": "Company compliance policy",
"passwordRequired": true,
"passwordMinimumLength": 8,
"passwordRequiredType": "deviceDefault",
"passwordMinutesOfInactivityBeforeLock": 15,
"passwordExpirationDays": 90,
"passwordPreviousPasswordBlockCount": 5,
"requireHealthyUntrustedEndorsementCertificate": false,
"requireHealthyTrustedEndorsementCertificate": false,
"tpmRequired": false,
"secureBootEnabled": true,
"codeIntegrityEnabled": true,
"earlyLaunchAntiMalwareDriverEnabled": true,
"deviceThreatProtectionEnabled": false,
"deviceThreatProtectionRequiredSecurityLevel": "unavailable",
"configurationManagerComplianceRequired": false
}Refer to the exhibit. You deploy this compliance policy to Windows 10 devices. A device reports as compliant, but you suspect it may have a weak password policy because the password type is 'deviceDefault'. What is the effect of 'deviceDefault' on the password requirement?
⚠ Common exam trap
Candidates often assume 'deviceDefault' means the Intune policy enforces a default Microsoft-defined password type (like alphanumeric), when in fact it simply passes control to the device's local policy, which may be weaker or stronger.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It uses the password type configured in the device's local policy
When the password type is set to 'deviceDefault' in a Microsoft Intune compliance policy for Windows 10, the policy does not enforce a specific password type (e.g., alphanumeric or numeric). Instead, it defers to the password type already configured in the device's local security policy (via Local Group Policy or the SAM registry). This means the device can still be compliant even if the local policy requires only a simple PIN or no complexity, as long as the local password type meets the minimum length and other requirements defined in the compliance policy.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It requires a password that meets the minimum length but no complexity
Why it's wrong here
deviceDefault inherits the platform's own password policy, which on Windows 10 typically enforces length and complexity, so it does not merely impose a minimum length. The option is tempting because some platforms do default to length-only rules, and would be correct where the OS baseline specifies no complexity requirement.
- ✓
It uses the password type configured in the device's local policy
Why this is correct
Selecting deviceDefault for password type defers enforcement to whatever password policy already exists locally on the device, rather than imposing an Intune-defined complexity or length requirement. Compliance therefore reflects the local configuration, which may be weaker than intended.
- ✗
It does not require a password at all
Why it's wrong here
deviceDefault does not waive the password requirement; it defers to the device's existing policy, so a password is still expected. The option is tempting because a permissive default sounds plausible, and would be correct only if the setting were explicitly configured to allow passwordless access.
- ✗
It requires a password that contains at least one number and one letter
Why it's wrong here
deviceDefault inherits whatever the device's own policy enforces rather than mandating a specific character mix, so it does not guarantee letters plus numbers. The option is tempting because complexity rules commonly appear in baselines, and would be correct if the policy explicitly selected a complexity requirement.
Go deeper
Related to this question
Learn chapter
Monitoring Devices with Reports and Alerts
Key term
Security policy
A security policy is a formal set of rules and guidelines that an organization establishes to protect its information assets and technology resources.
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.