MD-102 Prepare infrastructure for devices Practice Question
You are an endpoint administrator for a company that uses Microsoft Intune. The company has a Microsoft Entra ID tenant with Intune configured. You need to ensure that when new Windows 10 devices are set up by users, they are automatically enrolled in Intune and receive company policies. The devices are purchased from a reseller and are not domain-joined. You want to minimize user interaction during setup. What should you configure?
⚠ Common exam trap
Watch out — candidates often confuse enrollment restrictions with enrollment automation; restrictions only control who can enroll, not how devices are provisioned.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Windows Autopilot deployment profile
Windows Autopilot deployment profiles allow you to configure the OOBE so that devices automatically enroll in Intune and receive policies with minimal user interaction. The device must first be registered with Autopilot, which can be done by the reseller or by capturing a hardware hash. Once registered, the profile ensures that when the user turns on the device, it connects to Intune and applies the desired configuration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Conditional Access policy
Why it's wrong here
Conditional Access policies control access to cloud apps based on conditions such as device compliance or user location. They do not enroll devices in Intune or configure the OOBE. While they can require a device to be compliant, they do not initiate enrollment. They are used after enrollment to enforce access controls, not to automate the setup process.
- ✓
Windows Autopilot deployment profile
Why this is correct
Windows Autopilot deployment profiles are used to configure the out-of-box experience (OOBE) for new devices. When a device is registered with Autopilot, the profile can automatically enroll the device in Intune, apply policies, and skip certain OOBE screens. This meets the requirement of minimal user interaction and automatic enrollment for non-domain-joined devices.
- ✗
Device enrollment restrictions
Why it's wrong here
Device enrollment restrictions control which devices and operating systems are allowed to enroll in Intune. They do not automate the enrollment process or configure the OOBE. While they can block certain devices, they do not provide the automatic enrollment and policy application required in this scenario. They are a security control, not a provisioning mechanism.
- ✗
Microsoft Intune enrollment policy for Windows
Why it's wrong here
There is no separate 'Microsoft Intune enrollment policy for Windows' that automatically enrolls devices. Enrollment is typically triggered by user sign-in to the Company Portal or by Autopilot. While automatic enrollment can be configured in Intune, it requires the user to sign in with a work account during OOBE. It does not provide the zero-touch experience that Autopilot offers.
Go deeper
Related to this question
Learn chapter
Managing Device Configuration Profiles
Key term
Windows Autopilot
Windows Autopilot is a cloud-based deployment technology that automates the setup and configuration of new Windows devices, reducing the need for IT staff to manually image or touch each machine.
Key term
Autopilot
Autopilot is a Microsoft cloud-based deployment technology that automates the setup and configuration of new Windows devices, reducing manual IT effort and enabling users to be productive from the first boot.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.