MD-102 Protect devices Practice Question
You use Microsoft Intune to manage Windows 10 devices. You need to create a compliance policy that requires devices to have a minimum OS version of 10.0.19044. You configure the setting 'Minimum OS version' to '10.0.19044'. Which additional setting must you configure to ensure that devices running a higher version, such as 10.0.19045, are also considered compliant?
⚠ Common exam trap
The trap here is thinking you need to specify a range or maximum to include newer versions, when in fact the minimum setting already permits all higher versions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
No additional setting is required; the minimum OS version setting allows higher versions by default.
The 'Minimum OS version' setting in a Windows compliance policy specifies the lowest acceptable OS build. Any device with an OS version equal to or higher than the specified value is considered compliant. Therefore, devices running 10.0.19045 or later automatically meet the requirement. No additional setting is needed to include higher versions, as the comparison is inclusive and allows any newer build.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Set 'Maximum OS version' to the highest supported build.
Why it's wrong here
Setting a maximum OS version would restrict devices to that version or lower, which is the opposite of what is needed. The requirement is to allow higher versions, so a maximum would incorrectly mark newer devices as noncompliant. The minimum OS version setting alone already allows higher versions; no maximum is required.
- ✗
Configure a device configuration profile to set the OS version.
Why it's wrong here
Device configuration profiles can enforce settings but do not affect how compliance policies evaluate OS versions. The compliance policy already evaluates the OS version correctly; adding a configuration profile would not change the compliance logic. Configuration profiles are for applying settings, not for defining compliance rules.
- ✗
Set 'Valid operating system builds' to include all builds greater than 10.0.19044.
Why it's wrong here
There is no 'Valid operating system builds' setting in Intune compliance policies. The minimum OS version setting is sufficient to enforce a baseline. Attempting to list all valid builds would be impractical and is not a supported feature. The correct approach is to rely on the minimum version setting.
- ✓
No additional setting is required; the minimum OS version setting allows higher versions by default.
Why this is correct
The 'Minimum OS version' setting in Intune compliance policies checks that the device's OS version is greater than or equal to the specified value. Devices running a higher version, such as 10.0.19045, automatically satisfy the requirement. Therefore, no additional configuration is needed to include higher versions; they are inherently compliant.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
About these practice questions
This MD-102 question is part of Courseiva's 556-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.