MD-102 Manage and maintain devices Practice Question
Your organization uses Microsoft Intune to manage iOS/iPadOS devices. You need to ensure that only devices with a passcode can access corporate resources. Which THREE configurations should you implement?
⚠ Common exam trap
Candidates often confuse app-level passcode enforcement (Option D) with device-level passcode enforcement, not realizing that Conditional Access and compliance policies require the device itself to be passcode-protected, not just the app.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Device configuration profile with passcode settings
A device configuration profile with passcode settings enforces the passcode requirement directly on the iOS/iPadOS device via the MDM channel, ensuring the device itself is locked. Option C is correct because a Conditional Access policy requiring compliant devices checks the device's compliance status (which includes passcode compliance) before granting access to corporate resources like Exchange Online or SharePoint. Option E is correct because a device compliance policy with a passcode requirement defines the specific passcode rules (e.g., minimum length, complexity) and marks the device as noncompliant if unmet, which then triggers Conditional Access to block access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Device configuration profile with passcode settings
Why this is correct
Configures passcode on devices.
- ✗
Windows Autopilot deployment profile
Why it's wrong here
For Windows devices, not iOS.
- ✓
Conditional Access policy requiring compliant devices
Why this is correct
Enforces compliance for access.
- ✗
App protection policy with passcode for managed apps
Why it's wrong here
Applies to app-level, not device passcode.
- ✓
Device compliance policy with passcode requirement
Why this is correct
Defines passcode rule for compliance.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
Key term
Conditional Access policy
A Conditional Access policy is a set of rules in Microsoft Entra ID that automatically grants or blocks access to cloud apps based on signals like user identity, location, device health, and risk level.
About these practice questions
One of 942 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.