Courseiva
Protect deviceshardMultiple ChoiceObjective-mapped

MD-102 Protect devices Practice Question

Your organization uses Microsoft Intune to manage Windows 10 devices. You need to enforce BitLocker encryption on all devices. Some devices are not encrypting. You check the BitLocker policy and it is assigned correctly. What is the most likely reason?

⚠ Common exam trap

Watch out — candidates often assume the issue is policy assignment or user targeting, but Microsoft Intune's BitLocker policy has a hard dependency on TPM hardware, making the absence of a TPM the most likely root cause when encryption fails on correctly targeted devices.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The device does not have a TPM chip.

BitLocker requires a TPM (Trusted Platform Module) version 1.2 or later to provide hardware-based key storage and integrity verification. If a device lacks a TPM chip, the BitLocker policy will not apply, and encryption will fail silently or remain off, even if the policy is correctly assigned. This is the most common cause of encryption not starting on Windows 10 devices managed by Intune.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The device is running Windows 10 Home edition.

    Why it's wrong here

    Windows 10 Home does not support BitLocker, but this would be a policy requirement issue.

  • The device does not have a TPM chip.

    Why this is correct

    TPM is required for BitLocker.

  • The BitLocker policy is not assigned to the users.

    Why it's wrong here

    It is assigned correctly.

  • The device is non-compliant and encryption is blocked.

    Why it's wrong here

    Device compliance is not mentioned.

About these practice questions

One of 942 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.