How should I use these Prepare infrastructure for devices practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

MD-102 · topic practice

Prepare infrastructure for devices practice questions

Q: Can I practise just Prepare infrastructure for devices questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Prepare infrastructure for devices domain.

This domain covers the groundwork for managing endpoints in Microsoft 365: getting devices enrolled and compliant so they can be targeted by policy. Expect questions on Intune enrollment prerequisites, Windows Autopilot hardware hash collection, Conditional Access for device compliance, and deploying Win32 apps that need elevated install rights.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Editorial oversight:Johnson Ajibi· MSc IT Security, IEEE Senior Member

20 questionsDomain: Prepare infrastructure for devices

Practice 10 questions Browse domain →

What the exam tests

What to know about Prepare infrastructure for devices

Be able to prepare devices for management: confirm licensing and MDM authority, enroll devices, capture Autopilot hardware hashes, and build Conditional Access policies that gate access on compliance. The key is knowing which prerequisite or setting actually enables each step.

Intune enrollment prerequisites including licensing, MDM authority, and automatic enrollment scope

Windows Autopilot hardware hash capture via PowerShell script or OEM/partner registration

Conditional Access policies requiring compliant or Microsoft Entra hybrid joined devices

Win32 app deployment using Intune Management Extension with system-context install commands

Watch out for

Common Prepare infrastructure for devices exam traps

▸Assuming the hardware hash is auto-collected; it must be captured and uploaded before Autopilot deployment works.
▸Setting Conditional Access to require MFA instead of requiring a compliant or hybrid joined device.
▸Forgetting the Intune Management Extension is required for Win32 (.intunewin) apps and PowerShell scripts.

Practice set

Prepare infrastructure for devices questions

20 questions · select your answer, then reveal the explanation

Question 1mediummultiple choice

Read the full Prepare infrastructure for devices explanation →

Your organization has Windows 11 devices used by remote employees. You need to ensure that only devices compliant with your security policies can access corporate email via Microsoft Outlook for Windows. What should you configure?

Trap 1: Set up a device compliance policy in Microsoft Purview to block…

Microsoft Purview governs data classification and labelling, not device access enforcement. Conditional Access in Microsoft Entra ID evaluates Intune compliance state before granting Outlook access. Purview compliance policies would be the right tool for auditing or protecting sensitive content, not for gating email sign-in by device health.

Trap 2: Configure a device filter in Exchange Online to block devices that…

Exchange Online device filters act on ActiveSync device attributes for mobile mailbox access, not on Intune-managed Windows 11 compliance signals. Conditional Access is what enforces device compliance for Outlook. Exchange device rules would be correct for blocking specific phone models or unmanaged ActiveSync clients.

Trap 3: Deploy an email security policy via Intune to block access from…

An Intune email security policy controls mail flow, attachments and encryption settings; it does not evaluate device compliance or block Outlook access. Such policies suit data-loss prevention within email. Conditional Access enforces compliance before granting access to Exchange Online.

Study all Prepare infrastructure for devices common traps →

A
Set up a device compliance policy in Microsoft Purview to block non-compliant devices.
Why it fails: Microsoft Purview governs data classification and labelling, not device access enforcement. Conditional Access in Microsoft Entra ID evaluates Intune compliance state before granting Outlook access. Purview compliance policies would be the right tool for auditing or protecting sensitive content, not for gating email sign-in by device health.
B
Create a Conditional Access policy in Microsoft Entra ID that requires device compliance, and assign the policy to the cloud app 'Office 365 Exchange Online'.
Conditional Access evaluates sign-in signals and, with a device compliance grant control, blocks non-compliant Windows 11 devices from Office 365 Exchange Online. Assigning the policy to that cloud app restricts Outlook access specifically, meeting the compliance requirement.
C
Configure a device filter in Exchange Online to block devices that are not managed by Intune.
Why it fails: Exchange Online device filters act on ActiveSync device attributes for mobile mailbox access, not on Intune-managed Windows 11 compliance signals. Conditional Access is what enforces device compliance for Outlook. Exchange device rules would be correct for blocking specific phone models or unmanaged ActiveSync clients.
D
Deploy an email security policy via Intune to block access from non-compliant devices.
Why it fails: An Intune email security policy controls mail flow, attachments and encryption settings; it does not evaluate device compliance or block Outlook access. Such policies suit data-loss prevention within email. Conditional Access enforces compliance before granting access to Exchange Online.

Prepare infrastructure for devices practice questions

What to know about Prepare infrastructure for devices

Common Prepare infrastructure for devices exam traps

Prepare infrastructure for devices questions

Your organization has Windows 11 devices used by remote employees. You need to ensure that only devices compliant with your security policies can access corporate email via Microsoft Outlook for Windows. What should you configure?

You are deploying Windows 10 to 500 new devices using a task sequence in Microsoft Configuration Manager. The devices need to be joined to Microsoft Entra ID and enrolled in Intune automatically during OSD. Which method should you use?

You need to configure device compliance for devices that are not running Windows. The devices include iOS, iPadOS, Android, and macOS. Which compliance settings are common across all platforms?

Your organization uses Microsoft Intune to manage devices. You have a compliance policy that requires devices to have a password of at least 6 characters. Some users report that their devices are marked as non-compliant even though they have a password set. What is the most likely cause?

You need to deploy a line-of-business (LOB) app to 100 Windows 10 devices managed by Intune. The app is packaged as an .msi file. Which app type should you choose in Intune?

Your organization uses Microsoft Intune to manage Windows 11 devices. You need to configure a policy that prevents users from installing apps from outside the Microsoft Store. Which TWO settings can you use?

Refer to the exhibit. An administrator runs the PowerShell cmdlet shown on a new Windows 11 device. The cmdlet completes successfully, but the device does not appear in Intune under Windows Autopilot devices. What is the most likely cause?

Exhibit

You manage devices with Microsoft Intune. Users report that enrollment fails on Android Enterprise personally-owned work profiles. After reviewing enrollment restrictions, you verify that Android Enterprise is allowed. What should you check next?

You need to ensure that only corporate-owned devices can access Microsoft 365 apps. You plan to use Conditional Access in Microsoft Entra ID. What should you configure as the grant control?

During Windows Autopilot deployment, devices fail to enroll in Intune with error code 0x80180014. You confirm the device is registered in Autopilot and has internet connectivity. What is the most likely cause?

Users have iOS/iPadOS devices enrolled in Intune. You need to ensure that corporate data in managed apps is encrypted at rest. What should you configure?

Which TWO prerequisites are required for Windows Autopilot self-deploying mode?

Which THREE actions can be taken from the Intune admin center when a device is retired?

Which TWO are valid methods to enroll iOS/iPadOS devices into Microsoft Intune?

Your organization plans to use Windows Autopilot for device provisioning. You need to ensure devices are automatically registered in Microsoft Entra ID when they are powered on for the first time. Which prerequisite must be met?

You manage devices with Microsoft Intune. Users report that after a recent policy update, they cannot access company SharePoint sites on their Android devices. The devices show as compliant in Intune. What is the most likely cause?

You are configuring Microsoft Intune for a school that provides iPads to students. You want students to be able to use their personal Apple IDs to install apps, but you need to ensure that the devices are enrolled in Intune and managed. Which Apple enrollment method should you use?

Your organization uses Microsoft Intune for device management. You have a compliance policy that requires Windows devices to have BitLocker enabled. A user reports that their device is marked as non-compliant even though BitLocker is turned on. What is the most likely cause?

Your organization is implementing Windows Autopilot. Which TWO prerequisites must be met before you can use Autopilot?

Refer to the exhibit. You are configuring a device compliance policy in Microsoft Intune for Windows devices. Based on the JSON configuration, what will happen if a device does not have a password set?

Exhibit

Track your progress over time

Start a Prepare infrastructure for devices only practice session

Related MD-102 topic practice pages

Prepare infrastructure for devices practice questions

Protect devices practice questions

Manage and maintain devices practice questions

Manage applications practice questions

MD-102 fundamentals practice questions

MD-102 scenario practice questions

MD-102 troubleshooting practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid