MD-102 Windows Hello for Business Practice Question
Which TWO settings must be configured to enable Windows Hello for Business in an Intune policy?
⚠ Common exam trap
The trap is that candidates often think biometrics is required, but in Intune, enabling WHfB only requires the master toggle and a minimum PIN length. Biometrics configuration is optional. Additionally, 'Enable Windows Hello for Business provisioning' is not a valid setting; the correct setting is 'Use Windows Hello for Business'.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use Windows Hello for Business.
To enable Windows Hello for Business in an Intune policy, you must configure two settings: 'Use Windows Hello for Business' acts as the master toggle to enable WHfB, and 'Minimum PIN length' establishes a mandatory PIN security baseline. Biometrics (facial recognition or fingerprint) is optional and not required to enable Windows Hello for Business.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable Windows Hello for Business provisioning.
Why it's wrong here
Incorrect. 'Enable Windows Hello for Business provisioning' is not a setting in Intune; the correct toggle is 'Use Windows Hello for Business'.
- ✓
Use Windows Hello for Business.
Why this is correct
Correct. This is the primary setting that enables WHfB in an Intune device configuration profile. Without it enabled, no other WHfB settings take effect.
- ✗
Configure biometrics (facial recognition or fingerprint).
Why it's wrong here
Incorrect. While biometrics can be configured for user convenience, it is optional and not a required setting to enable WHfB.
- ✗
Certificate enrollment policy.
Why it's wrong here
Incorrect. A certificate enrollment policy is not mandatory for WHfB. WHfB can use either certificate-based or key-based authentication, but enrollment policy is not a required setting.
- ✓
Minimum PIN length.
Why this is correct
Correct. A minimum PIN length must be configured as a security baseline when enabling WHfB. It is a required setting in the policy.
Go deeper
Related to this question
Learn chapter
Enrolling Devices with Microsoft Intune
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
About these practice questions
This MD-102 question is part of Courseiva's 942-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.