Courseiva
Protect devices →easyMultiple Choice

MD-102 Protect devices Practice Question

Your organization uses Microsoft Intune to manage Windows 10 devices. You need to create a compliance policy that requires devices to have a firewall enabled. Which setting should you configure?

⚠ Common exam trap

Many exam-takers confuse firewall with other security settings like antivirus or BitLocker, which are related but do not enforce firewall enablement.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Firewall

The Firewall setting in a Windows compliance policy specifically evaluates whether Windows Firewall is enabled. Setting it to 'Require' ensures devices without an active firewall are non-compliant, directly satisfying the scenario's requirement.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✓

    Firewall

    Why this is correct

    The Firewall setting in a Windows compliance policy checks whether the Windows Firewall is enabled on the device. Configuring this setting to 'Require' ensures devices with the firewall disabled are marked non-compliant, directly fulfilling the requirement.

  • ✗

    Antivirus

    Why it's wrong here

    The Antivirus setting checks for antivirus protection, such as Windows Defender Antivirus, but does not verify firewall status. It addresses a different security control and would not meet the requirement to ensure the firewall is enabled.

  • ✗

    Require a password to unlock mobile devices

    Why it's wrong here

    This setting enforces a password but does not check firewall status. It is unrelated to the requirement for firewall enablement. Configuring it would not help ensure devices have a firewall enabled, and it might impose unnecessary password policies.

  • ✗

    Require BitLocker

    Why it's wrong here

    Require BitLocker enforces drive encryption but does not check firewall status. It is not relevant to the firewall requirement. Enabling this would add an encryption requirement that is not part of the scenario, potentially causing additional compliance failures.

About these practice questions

This MD-102 question is part of Courseiva's 556-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed September 2026 · checked against the official Microsoft exam blueprint

This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.