MD-102 Prepare infrastructure for devices Practice Question
Your organization uses Microsoft Intune to manage Windows 10/11 devices. You need to ensure that devices are enrolled automatically without user interaction and that the enrollment status page (ESP) is configured to block device use until required apps are installed. What should you configure?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure Windows Autopilot self-deploying mode and an Enrollment Status Page profile
Windows Autopilot with self-deploying mode allows zero-touch enrollment, and the Enrollment Status Page (ESP) can be configured to block device use until required apps are installed. Option A is wrong because Group Policy does not provide automatic enrollment into Intune. Option B is wrong because a device enrollment manager (DEM) account is used for bulk enrollment but does not provide automatic zero-touch enrollment. Option D is wrong because co-management with Microsoft Configuration Manager does not provide zero-touch enrollment without additional configuration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure a Group Policy to auto-enroll devices into Intune
Why it's wrong here
Group Policy does not provide automatic enrollment into Intune. Group Policy is a domain-based configuration tool, not an enrollment method.
- ✗
Configure a device enrollment manager (DEM) account
Why it's wrong here
A device enrollment manager (DEM) account is used for bulk enrollment, allowing one user to enroll many devices, but it requires manual intervention during enrollment and does not provide automatic zero-touch enrollment. DEM supports Windows devices as well as other platforms, so it is not limited to Android/iOS.
- ✓
Configure Windows Autopilot self-deploying mode and an Enrollment Status Page profile
Why this is correct
Correct. Windows Autopilot self-deploying mode enables zero-touch enrollment without user interaction. The Enrollment Status Page (ESP) can be configured to block device use until required apps are installed, meeting both requirements.
- ✗
Configure co-management with Microsoft Configuration Manager
Why it's wrong here
Co-management with Configuration Manager does not provide zero-touch enrollment without additional configuration. It requires pre-existing management infrastructure and additional setup.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Group Policy
Group Policy is a Windows-based feature that allows administrators to centrally manage and enforce settings for users and computers across an organization.
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
About these practice questions
This MD-102 question is part of Courseiva's 942-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.