MD-102 Manage and maintain devices Practice Question
Which TWO types of policies can be assigned to user groups in Microsoft Intune?
⚠ Common exam trap
A common mix-up: candidates assume all Intune policies can be assigned to user groups, but Microsoft explicitly restricts enrollment restrictions, device configuration policies, and update rings to device groups only.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Device compliance policy
Device compliance policy (A) can be assigned to user groups to define rules that devices must meet, such as requiring a minimum OS version or BitLocker encryption, and to trigger conditional access. App protection policy (C) can be assigned to user groups to manage how apps access and handle corporate data, even on unenrolled devices, by applying settings like PIN or data transfer restrictions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Device compliance policy
Why this is correct
Compliance policies can be assigned to user groups to evaluate devices of those users.
- ✗
Enrollment restriction
Why it's wrong here
Enrollment restrictions are rules, not policies, and are assigned to user groups but not considered a policy type.
- ✓
App protection policy
Why this is correct
App protection policies target user groups to protect app data on devices.
- ✗
Device configuration policy
Why it's wrong here
Device configuration policies are assigned to device groups, not user groups.
- ✗
Windows update ring
Why it's wrong here
Update rings are assigned to device groups.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
General Data Protection Regulation
A European Union law that gives individuals control over their personal data and sets strict rules for how organizations collect, store, and process that data.
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
About these practice questions
This MD-102 question is part of Courseiva's 942-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.