MD-102 Protect devices Practice Question
You have devices enrolled in Microsoft Intune. You need to configure a policy that requires a PIN of at least 6 characters for accessing Microsoft Entra ID resources. Which policy type should you configure?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Conditional Access policy
Conditional Access policies (Option B) can require a PIN for accessing Microsoft Entra ID resources. Option A is incorrect because device compliance policies evaluate device health but do not enforce PIN requirements for resource access. Option C is incorrect because app protection policies manage app-level data protection, not PIN requirements for Entra ID access. Option D is incorrect because device configuration policies manage device settings like email profiles, not access policies.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Device compliance policy
Why it's wrong here
Device compliance policies evaluate device compliance but do not enforce PIN requirements for accessing Entra ID resources.
- ✓
Conditional Access policy
Why this is correct
Conditional Access policies can require a PIN or other authentication methods for accessing Microsoft Entra ID resources.
- ✗
App protection policy
Why it's wrong here
App protection policies apply to mobile apps and can require a PIN for app access, but not for Entra ID resource access directly.
- ✗
Device configuration policy
Why it's wrong here
Device configuration policies manage device settings such as Wi-Fi and email, not access policies for Entra ID.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Device configuration
Device configuration is the process of setting up and customizing the operating system, security policies, applications, and network settings on a device so it can securely connect to and function within an organization's IT environment.
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
About these practice questions
This MD-102 question is part of Courseiva's 942-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.