MD-102 Prepare infrastructure for devices Practice Question
You are configuring Windows Information Protection (WIP) in Microsoft Intune. You want to protect corporate data from being accidentally shared to personal locations while still allowing the user to work productively. Which THREE settings should you configure?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Define network boundaries (corporate IP ranges, DNS suffixes).
Options C, D, and E are correct. To protect corporate data with Windows Information Protection (WIP) in Intune, you must define network boundaries (C) to identify corporate network locations, configure a data recovery agent certificate (D) to allow encrypted data recovery, and add protected apps (E) that are allowed to access corporate data. Option A is incorrect because WIP is enabled through a Windows Information Protection policy, not a device configuration profile. Option B is incorrect because setting 'Share over' to 'Block' would prevent all sharing, which is not productive; WIP uses data transfer policies to allow controlled sharing.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure a device configuration profile to enable WIP.
Why it's wrong here
WIP is configured via a WIP policy, not a configuration profile.
- ✗
Set the 'Share over' data transfer policy to 'Block'.
Why it's wrong here
This is not a WIP setting.
- ✓
Define network boundaries (corporate IP ranges, DNS suffixes).
Why this is correct
Network boundaries help identify corporate data.
- ✓
Configure the data recovery agent certificate.
Why this is correct
Allows recovery of encrypted data if needed.
- ✓
Add protected apps that are allowed to access corporate data.
Why this is correct
Protected apps are trusted to handle corporate data.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Configuration profile
A configuration profile is a set of settings and policies that can be applied remotely to devices to enforce security, compliance, and customization rules.
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
About these practice questions
This MD-102 question is part of Courseiva's 942-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.