MD-102 Prepare infrastructure for devices Practice Question
Your organization is deploying Windows 10 devices using Windows Autopilot. You need to ensure that during the out-of-box experience (OOBE), users are required to set up Windows Hello for Business. Which TWO configurations should you apply?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a Windows Hello for Business enrollment policy in Intune.
Option D is correct. Configuring a Windows Hello for Business enrollment policy in Intune is sufficient to require users to set up Windows Hello during OOBE. Option C (device configuration policy) is not necessary for OOBE; it enforces settings after enrollment. Option A is incorrect because Autopilot deployment profiles do not directly enforce Windows Hello; they only configure the OOBE experience. Option B (Azure AD device registration) is a prerequisite but not sufficient alone. Option E (custom script) is not a standard or recommended configuration for OOBE.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure a Windows Autopilot deployment profile to require Windows Hello for Business.
Why it's wrong here
Autopilot deployment profiles configure OOBE settings but do not enforce Windows Hello for Business.
- ✗
Enable Azure AD device registration.
Why it's wrong here
Azure AD device registration is required but does not directly force Windows Hello setup during OOBE.
- ✗
Configure a Windows Hello for Business policy in Intune device configuration.
Why it's wrong here
Device configuration policies enforce Windows Hello settings post-enrollment and are not required for OOBE requirement.
- ✓
Configure a Windows Hello for Business enrollment policy in Intune.
Why this is correct
The enrollment policy in Intune directly controls whether users must set up Windows Hello during OOBE.
- ✗
Deploy a custom script that enables Windows Hello.
Why it's wrong here
Custom scripts are not recommended and do not integrate with Autopilot OOBE for Windows Hello.
Go deeper
Related to this question
Learn chapter
Planning Deployment and Architecture
Key term
Device configuration
Device configuration is the process of setting up and customizing the operating system, security policies, applications, and network settings on a device so it can securely connect to and function within an organization's IT environment.
Key term
Device registration
Device registration is the process of linking a device to a management system, such as Microsoft Entra ID, to enable controlled access to organizational resources.
About these practice questions
One of 942 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.