MD-102 Prepare infrastructure for devices Practice Question
You are the endpoint administrator for a company that uses Microsoft Intune. The security team requires that all Windows 11 devices automatically receive an Intune device configuration profile that enforces a minimum PIN length of 8 for Windows Hello for Business. You need to ensure the profile is applied without user interaction. What should you do?
⚠ Common exam trap
Watch out — candidates often confuse compliance policies with configuration profiles; compliance policies do not enforce settings, they only evaluate them.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a device configuration profile with the Windows Hello for Business template, configure the minimum PIN length setting, and assign the profile to all Windows 11 devices.
A device configuration profile with the Windows Hello for Business template is the correct Intune-native method to enforce PIN requirements. Assigning it to all Windows 11 devices ensures automatic application without user action. Compliance policies only assess, GPOs are for domain-joined devices, and scripts are not the preferred method for this policy.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a compliance policy that requires a minimum PIN length of 8, and assign it to all Windows 11 devices.
Why it's wrong here
A compliance policy evaluates device state but does not configure settings. It can mark a device non-compliant if the PIN is too short, but it does not enforce the PIN length proactively. The requirement is to automatically apply the setting, which compliance policies cannot do; they only report and conditionally restrict access.
- ✗
Create a Group Policy Object (GPO) in on-premises Active Directory and link it to the domain, then sync devices with Intune.
Why it's wrong here
Group Policy Objects apply only to domain-joined devices and require the device to be connected to the corporate network or VPN. For cloud-managed Windows 11 devices enrolled in Intune, GPOs are not the native method and would not automatically apply without additional infrastructure. The scenario calls for Intune-native management.
- ✗
Deploy a PowerShell script through Intune that modifies the registry to set the minimum PIN length.
Why it's wrong here
While a PowerShell script can modify registry settings, it is not the recommended or supported method for configuring Windows Hello for Business PIN policies. Scripts run once or on a schedule and may not enforce the setting continuously. The built-in Windows Hello for Business template in Intune is designed for this purpose and ensures proper policy application.
- ✓
Create a device configuration profile with the Windows Hello for Business template, configure the minimum PIN length setting, and assign the profile to all Windows 11 devices.
Why this is correct
This is correct because a device configuration profile using the Windows Hello for Business template in Intune allows you to centrally configure PIN requirements. Assigning the profile to all Windows 11 devices ensures that the settings are applied automatically to each device, meeting the requirement for no user interaction and enforcing the minimum PIN length.
Go deeper
Related to this question
Learn chapter
Implementing App Protection Policies (MAM)
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
About these practice questions
Courseiva writes every MD-102 question from scratch — 556 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.