MD-102 Prepare infrastructure for devices Practice Question
Exhibit
New-IntuneCompliancePolicy -DisplayName "Windows 11 Compliance" -Platform Windows10AndLater -PasswordRequired $true -PasswordMinimumLength 8 -PasswordRequiredType DeviceDefault -PasswordMinutesOfInactivityBeforeLock 15 -PasswordExpirationDays 90 -PasswordPreviousPasswordCountToBlock 5 -SecureBootEnabled $true -CodeIntegrityEnabled $true -EarlyLaunchAntimalwareDriverProtectionEnabled $true -BitLockerEnabled $true -BitLockerRecoveryPasswordRotation Disabled -TpmRequired $true
Refer to the exhibit. You run the PowerShell command shown to create a compliance policy. However, when you check the compliance status of a Windows 11 device, it shows as compliant even though the device does not have BitLocker enabled. What is the most likely reason?
⚠ Common exam trap
A common mix-up: candidates assume creating a policy with PowerShell automatically applies it to all devices, but Intune requires explicit assignment to a group before the policy is evaluated.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The policy has not been assigned to the device or its user group.
The most likely reason is that the compliance policy was created but never assigned to the device or its user group. In Microsoft Intune, a compliance policy must be assigned to a security group that contains the device or its user; otherwise, the policy is not evaluated against the device, and the device will default to a compliant status. The PowerShell cmdlet shown only creates the policy object; it does not assign it.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The policy has not been assigned to the device or its user group.
Why this is correct
An unassigned compliance policy applies to no one, so Microsoft Intune never evaluates the device against its BitLocker requirement. The device therefore reports compliant by default, since no policy targets it — matching the stem's symptom of a non-encrypted device showing compliant.
- ✗
The BitLocker setting is not supported on Windows 11.
Why it's wrong here
BitLocker is fully supported on Windows 11, so an unsupported-setting claim cannot explain a compliant result. It is tempting because unsupported settings do surface as non-compliant or error states, but here the policy simply omits the BitLocker requirement rather than rejecting it.
- ✗
The policy was not saved correctly due to a syntax error.
Why it's wrong here
A syntax error would cause the cmdlet to fail outright, so no policy would exist and the device would not report compliant against it. It is tempting because malformed commands do silently create partial policies, but the stem shows the policy was created and evaluated.
- ✗
The device does not have a TPM chip, which is required for BitLocker, but the compliance policy does not check TPM.
Why it's wrong here
A missing TPM prevents BitLocker from encrypting, yet the policy still reports compliant because it never evaluates TPM or encryption state. It is tempting because TPM is genuinely required for BitLocker, but the policy's omission of that check is the actual cause.
Go deeper
Related to this question
Learn chapter
Managing Microsoft 365 Apps and Office Updates
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
Windows 11
Windows 11 is Microsoft's latest desktop operating system, offering a redesigned interface, enhanced security features, and improved support for modern hardware.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.