MD-102 Protect devices Practice Question
Exhibit
Refer to the exhibit.
{
"@odata.type": "#microsoft.graph.windows10CompliancePolicy",
"description": "Windows 10 compliance policy",
"passwordRequired": true,
"passwordMinimumLength": 8,
"passwordRequiredType": "alphanumeric",
"osMinimumVersion": "10.0.19045.0",
"osMaximumVersion": "10.0.22621.0",
"storageRequireEncryption": true,
"activeFirewallRequired": true,
"defenderEnabled": true
}You review the compliance policy JSON for Windows 10 devices. A device running Windows 10 version 22H2 (build 22621.0) with a numeric-only password of 10 characters, BitLocker enabled, firewall enabled, and Microsoft Defender running reports as non-compliant. What is the most likely reason?
⚠ Common exam trap
Many exam-takers assume a long numeric password (10 characters) meets complexity requirements, but the policy explicitly requires alphanumeric characters, and the exam tests attention to the specific JSON setting rather than general password strength.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The password type is not alphanumeric.
The compliance policy JSON for Windows 10 devices specifies a password type requirement of 'alphanumeric'. The device in question uses a numeric-only password (10 characters), which does not meet the alphanumeric requirement, causing it to be reported as non-compliant. All other conditions—BitLocker enabled, firewall enabled, and Microsoft Defender running—are satisfied, so the password type is the sole issue.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The password type is not alphanumeric.
Why this is correct
A numeric-only password fails the alphanumeric password requirement, so the device reports non-compliant despite meeting the other conditions. Compliance policies in Microsoft Entra ID evaluate password complexity independently of length, meaning a 10-character PIN-style password satisfies length but not the required character-type constraint.
- ✗
The OS version is outside the allowed range.
Why it's wrong here
Build 22621.0 is Windows 10 22H2, which falls inside any typical supported-version range, so the version rule passes. It is tempting because minimum-OS compliance settings do exist, and they would be the cause if the build were genuinely below the configured threshold.
- ✗
Storage encryption is not enabled.
Why it's wrong here
BitLocker is enabled, so storage encryption is satisfied and cannot be the cause of non-compliance. It is tempting because BitLocker is the standard Windows encryption control, and it would be the correct choice if the device reported BitLocker as disabled or not configured.
- ✗
Microsoft Defender is not enabled.
Why it's wrong here
Microsoft Defender is running, so the Defender compliance setting is satisfied and cannot explain the non-compliance. It is tempting because Defender is the primary antimalware control, and it would be the correct choice if the device reported Defender as disabled or out of date.
Go deeper
Related to this question
Learn chapter
Enrolling Devices with Microsoft Intune
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
About these practice questions
This MD-102 question is part of Courseiva's 556-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.