MD-102 Manage and maintain devices Practice Question
Your organization requires that all Windows 11 devices encrypt their drives with BitLocker. You have configured a BitLocker policy in Intune, but some devices show as 'Not evaluated' for the encryption status. What is the most likely reason?
⚠ Common exam trap
Candidates often confuse 'Not evaluated' with a compliance failure or policy misassignment, but the key is that 'Not evaluated' specifically indicates the device could not even begin the assessment, often due to missing prerequisites like TPM.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The devices do not have a TPM chip.
The 'Not evaluated' status in Intune indicates that the device has not yet checked in or the policy has not been applied, but the most common root cause for BitLocker policy evaluation failure is the absence of a TPM chip. BitLocker requires a TPM (Trusted Platform Module) version 1.2 or 2.0 for its default encryption method, and without it, the policy cannot be assessed, resulting in a 'Not evaluated' state rather than a compliance failure.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The devices do not have a TPM chip.
Why this is correct
TPM is required for BitLocker, and without it the policy cannot be evaluated.
- ✗
The policy is not assigned to the correct group.
Why it's wrong here
Assignment issues would show as 'Not applicable' or 'Error', not 'Not evaluated'.
- ✗
The devices have a conflicting Group Policy.
Why it's wrong here
Conflicting policies would still show an evaluation status, not 'Not evaluated'.
- ✗
Secure Boot is disabled on the devices.
Why it's wrong here
Secure Boot is recommended but not required for BitLocker evaluation.
Go deeper
Related to this question
Learn chapter
Enrolling Devices with Microsoft Intune
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
BitLocker
BitLocker is a full-disk encryption feature built into Windows that protects data by encrypting the entire drive so that unauthorized users cannot access files without the correct recovery key.
About these practice questions
This MD-102 question is part of Courseiva's 942-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.