MD-102 Prepare infrastructure for devices Practice Question
You are planning the deployment of Microsoft Defender for Endpoint to macOS devices managed by Microsoft Intune. Which TWO prerequisites are required?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Defender for Endpoint license assigned to the user or device
The correct prerequisites are: A and B. For A: Microsoft Defender for Endpoint requires a valid license assigned to the user or device. For B: The macOS device must be enrolled in Microsoft Intune to receive the configuration profile and policies for Defender. Option C is incorrect because the Microsoft Intune management extension is for Windows only, not macOS. Option D is incorrect because onboarding to Microsoft Defender for Cloud is not a prerequisite; Defender for Endpoint can be deployed independently. Option E is incorrect because a VPN connection is not required for Defender for Endpoint to function on macOS.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Defender for Endpoint license assigned to the user or device
Why this is correct
Onboarding macOS devices to Microsoft Defender for Endpoint through Intune requires an assigned Defender for Endpoint licence, whether user-based or device-based, to provision the service and permit portal onboarding. Without this entitlement, Intune cannot deploy the Defender agent or activate protection.
- ✓
macOS device enrollment in Microsoft Intune
Why this is correct
Intune can only deploy Defender for Endpoint configuration and onboarding packages to macOS devices it already manages, so enrolment in Microsoft Intune is a prerequisite. This satisfies the requirement that the device be under MDM control before policy assignment.
- ✗
Microsoft Intune management extension installed on the device
Why it's wrong here
The Intune management extension is a Windows agent used for PowerShell scripts and Win32 apps; macOS devices receive Defender configuration through MDM profiles and shell scripts instead. It is tempting because the extension appears in many Intune deployment guides, but it would be the correct prerequisite only when deploying those Windows-specific workloads.
- ✗
Onboarding to Microsoft Defender for Cloud
Why it's wrong here
Microsoft Defender for Cloud protects cloud workloads and subscriptions, not macOS endpoints; onboarding macOS devices is performed to Microsoft Defender for Endpoint through Intune. It is tempting because both products share Defender branding, but Defender for Cloud would be the correct choice when securing Azure or multicloud resources rather than managed endpoints.
- ✗
A VPN connection to the corporate network
Why it's wrong here
Defender for Endpoint on macOS onboards and reports telemetry over the internet, so no corporate VPN tunnel is required; devices simply need outbound connectivity to Microsoft endpoints. It is tempting because VPNs are common in managed estates, but a VPN would be the correct prerequisite only for resources deliberately restricted to internal network access.
Go deeper
Related to this question
Learn chapter
Updating Devices with Windows Update for Business
Key term
VPN
A VPN (Virtual Private Network) creates a secure, encrypted tunnel between your device and a remote server, protecting your data and hiding your online activity.
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
About these practice questions
Courseiva writes every MD-102 question from scratch — 556 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.