MD-102 Prepare infrastructure for devices Practice Question
You are an Endpoint Administrator for a company that uses Microsoft Intune. The security team requires that Windows 11 devices assigned to the Finance department must use a specific set of DNS servers and must not allow users to modify the DNS settings. You create a device configuration profile using the Settings catalog. Which setting category should you use to enforce the DNS server assignment?
⚠ Common exam trap
The trap here is assuming that DNS server assignment belongs under Network proxy or Wi-Fi settings, when the Settings catalog provides a dedicated DNS category for that purpose.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
DNS
The Settings catalog exposes granular Windows configuration service provider settings, and the DNS category specifically includes settings to define DNS server addresses and prevent modification. Applying a device configuration profile with those settings to the Finance device group enforces the required DNS servers and blocks user changes, directly satisfying the security team's requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
VPN
Why it's wrong here
VPN settings in the Settings catalog configure virtual private network connections, including VPN server addresses, authentication methods, and split tunneling behavior. While VPN profiles can influence name resolution, they do not directly assign DNS server addresses to the physical network adapter or lock the DNS settings, so they do not meet the stated requirement.
- ✗
Wi-Fi
Why it's wrong here
Wi-Fi settings in the Settings catalog configure wireless network profiles, including SSID, authentication, and security types. They can include some network properties but are scoped to wireless connectivity and do not provide a general mechanism to assign and lock DNS server addresses on the device's active network interfaces as required for the Finance devices.
- ✓
DNS
Why this is correct
The DNS category in the Settings catalog contains settings such as DNS server addresses for specific interfaces and DNS suffix search lists. Configuring this category lets you assign the required DNS servers to the Windows 11 devices and, when the profile is assigned, the settings are enforced so users cannot change the DNS configuration on those Finance devices.
- ✗
Network proxy
Why it's wrong here
Network proxy settings in the Settings catalog control how devices route web traffic through a proxy server, including automatic proxy configuration scripts and proxy server addresses. They do not configure DNS server addresses or prevent users from modifying DNS settings, so this category cannot satisfy the requirement to enforce specific DNS servers for the Finance devices.
Go deeper
Related to this question
Learn chapter
Securing Devices with Endpoint Security Policies
Key term
Device configuration
Device configuration is the process of setting up and customizing the operating system, security policies, applications, and network settings on a device so it can securely connect to and function within an organization's IT environment.
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.