mediumMultiple SelectObjective-mapped
MD-102 Practice Question: Configuring Microsoft Intune to manage Windows 10…
You are configuring Microsoft Intune to manage Windows 10 devices. Which TWO actions are required to enable BitLocker encryption on devices?
⚠ Common exam trap
Watch out — candidates often confuse a compliance policy (which only reports/remediates) with a configuration profile (which actually applies settings), and they may also mistakenly think a TPM requirement is an administrative action rather than a device prerequisite.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a device configuration profile for endpoint protection and enable BitLocker settings.
BitLocker settings are configured via a device configuration profile for endpoint protection in Microsoft Intune. This profile includes policies such as requiring TPM startup PIN or startup key, encryption method, and OS drive encryption. Without this profile, BitLocker cannot be enforced or configured on managed Windows 10 devices.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create a device configuration profile for endpoint protection and enable BitLocker settings.
Why this is correct
This profile configures BitLocker on devices.
- ✗
Create a compliance policy that requires BitLocker.
Why it's wrong here
Compliance policy evaluates but does not enable BitLocker.
- ✓
Ensure the device has a TPM version 2.0 chip.
Why this is correct
TPM is required for BitLocker hardware-based encryption.
- ✗
Configure a device cleanup rule.
Why it's wrong here
Device cleanup rules remove inactive devices, unrelated to BitLocker.
- ✗
Deploy a Windows 10 update ring.
Why it's wrong here
Update rings manage updates, not BitLocker.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
TPM
TPM (Trusted Platform Module) is a dedicated hardware chip on a computer's motherboard that stores cryptographic keys, passwords, and certificates to secure the system against unauthorized access and tampering.
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
About these practice questions
Courseiva writes every MD-102 question from scratch — 942 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.