MD-102 Manage and maintain devices Practice Question
Exhibit
Get-DeviceManagement_ManagedDevices | Where-Object {$_.complianceState -eq 'noncompliant'} | Select-Object deviceName, lastSyncDateTime, complianceGracePeriodExpirationDateTimeRefer to the exhibit. You run the PowerShell command above to get a list of noncompliant devices. The output shows that some devices have a complianceGracePeriodExpirationDateTime in the past. What does this indicate?
⚠ Common exam trap
Many candidates confuse the complianceGracePeriodExpirationDateTime with the last check-in time or assume a past timestamp means the device is still compliant, when in fact it signals the end of the grace period and triggers blocking actions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The devices have exceeded the grace period and should be blocked from accessing resources.
The complianceGracePeriodExpirationDateTime represents the deadline by which a device must become compliant after initially being marked noncompliant. When this timestamp is in the past, it means the grace period has expired, and the device should be blocked from accessing corporate resources as per the conditional access policy. This is a standard behavior in Microsoft Intune for managing noncompliant devices.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The compliance policy has been removed from these devices.
Why it's wrong here
An elapsed grace period timestamp reflects the compliance policy still being assigned and evaluated; it does not indicate policy removal. Removing a policy would leave the device without that compliance state entirely. The timestamp specifically marks when grace expired, making the device noncompliant and blocked.
- ✗
The devices are still within the grace period and can access resources.
Why it's wrong here
A grace period expiration timestamp in the past means the grace period has already ended, so the device is fully noncompliant and blocked from conditional-access-protected resources. The option is tempting because grace periods do permit access, but only until that timestamp passes, not after.
- ✗
The devices were recently remediated and are now compliant.
Why it's wrong here
A past grace period expiration indicates the device remained noncompliant beyond its grace window, not that remediation succeeded. Recently remediated devices report a compliant state, not an expired grace timestamp. The expired timestamp signals continued noncompliance and blocked access.
- ✓
The devices have exceeded the grace period and should be blocked from accessing resources.
Why this is correct
A past complianceGracePeriodExpirationDateTime means the grace period has already elapsed, so Microsoft Entra ID conditional access policies enforcing compliance will block those devices from accessing resources. This satisfies the stem's constraint: the timestamp predates the current date, confirming the grace window closed without remediation.
Go deeper
Related to this question
Learn chapter
Managing Conditional Access for Devices
Key term
Conditional Access policy
A Conditional Access policy is a set of rules in Microsoft Entra ID that automatically grants or blocks access to cloud apps based on signals like user identity, location, device health, and risk level.
Key term
Conditional access
Conditional access is a security framework that evaluates signals like user location, device health, and risk level to grant or block access to resources in real time.
About these practice questions
This MD-102 question is part of Courseiva's 556-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.