MD-102 Device Compliance Policy Practice Question
Your organization uses Microsoft Intune to manage mobile devices. You need to configure compliance policies that trigger conditional access. Which TWO conditions can be used in a device compliance policy?
⚠ Common exam trap
Candidates often confuse compliance policy conditions with app protection policy conditions. Remember that compliance policies focus on device-level settings (OS version, jailbreak status, encryption), while app protection policies manage app-level restrictions like minimum app version or data protection.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Minimum OS version is 14.0.
Correct answers are C and D. Device compliance policies in Microsoft Intune can check for conditions like minimum OS version (C) and whether the device is jailbroken or rooted (D). These conditions can trigger conditional access to enforce compliance. Option A is incorrect because compliance policies do not check the MDM authority; they assume Intune. Option B is incorrect because app version requirements are managed via app protection policies, not compliance policies. Option E is incorrect because SD card encryption is not a standard compliance policy setting; device encryption is checked but not specifically SD cards.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Device is enrolled in a specific MDM authority.
Why it's wrong here
Incorrect. Device compliance policies do not check the MDM authority; they assume the device is managed by Intune.
- ✗
App must have a minimum version.
Why it's wrong here
Incorrect. A minimum app version is a condition for app protection policies, not device compliance policies.
- ✓
Minimum OS version is 14.0.
Why this is correct
Correct. A minimum OS version is a standard condition in device compliance policies.
- ✓
Device is not jailbroken or rooted.
Why this is correct
Correct. Whether a device is jailbroken or rooted is a common compliance condition.
- ✗
SD card encryption is enabled.
Why it's wrong here
Incorrect. SD card encryption is not a compliance policy condition; device encryption is checked but not specifically SD card.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
Key term
Compliance policy
A compliance policy is a set of rules that ensures devices, users, and applications meet an organization's security and regulatory requirements before they can access corporate resources.
About these practice questions
This MD-102 question is part of Courseiva's 942-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.