MD-102 Manage and maintain devices Practice Question
You need to configure a Microsoft Intune policy to ensure that only devices with a minimum OS version can access corporate email. Which THREE policy types can enforce this requirement?
⚠ Common exam trap
A common mix-up: candidates think Device configuration profiles can enforce security requirements like OS version, but they only configure settings and do not evaluate or block access based on compliance criteria.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Device compliance policy
Device compliance policy (A) is correct because it allows you to define rules such as a minimum OS version requirement. When a device is marked as non-compliant due to an outdated OS, you can combine this with a Conditional Access policy to block access to corporate email. This is the primary mechanism for OS version enforcement on managed devices.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Device compliance policy
Why this is correct
Compliance policy can require minimum OS version.
- ✓
App protection policy
Why this is correct
App protection policy can require minimum app version, indirectly OS version.
- ✗
Enrollment restrictions
Why it's wrong here
Enrollment restrictions control enrollment, not post-enrollment access.
- ✗
Device configuration profile
Why it's wrong here
Configuration profiles set settings but do not enforce access.
- ✓
Conditional access policy
Why this is correct
Conditional access can require compliant devices.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Device compliance
Device compliance is the process of ensuring that a device meets an organization's security and configuration policies before it can access network resources.
About these practice questions
Courseiva writes every MD-102 question from scratch — 942 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.