Design security operations, identity, and compliance capabilities →hardMultiple SelectObjective-mapped
SC-100 Practice Question: Design security operations, identity, and compliance capabilities
Your organization uses Microsoft Intune for mobile device management. You need to configure a compliance policy for iOS devices that requires the device to be jailbreak-detected and have a minimum OS version. Which two settings should you configure in the compliance policy? (Choose two.)
⚠ Common exam trap
Many exam-takers confuse 'jailbreak detection' with 'device encryption' or 'passcode requirements,' but the question explicitly asks for the two settings that directly address jailbreak detection and minimum OS version, not general security settings.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Minimum OS version
B is correct because the compliance policy must specify a minimum OS version to ensure iOS devices meet the required security baseline, preventing outdated devices with known vulnerabilities from accessing corporate resources. D is correct because jailbreak detection is a specific compliance setting that identifies compromised devices, which are a significant security risk as they bypass iOS security controls.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Require passcode
Why it's wrong here
Requiring a passcode mandates that users authenticate with a PIN or password to unlock their device, but this check says nothing about the operating system version or whether the device has been jailbroken. A jailbroken device can still comply with a passcode requirement, so this setting does not address the security risks posed by root privilege escalation or outdated OS builds. In Intune, passcode policies are a baseline device configuration control, not a signal of device integrity or OS patch level.
- ✓
Minimum OS version
Why this is correct
The Minimum OS version setting specifies the lowest operating system version a device must run to be considered compliant, such as iOS 16.0 or Windows 10, version 22H2. This rule directly enforces that devices are on a supported and permitted OS release, but it does not detect jailbreaks or root access—a device can be jailbroken while running a fully up-to-date OS. For the scenario described, this is the correct answer because it is the only option among those listed that explicitly checks the OS version level required by the policy.
- ✗
Device encryption
Why it's wrong here
Device encryption verifies that data stored on the device is unreadable without the correct key, typically using technologies like BitLocker, FileVault, or Android full-disk encryption. This check confirms that data-at-rest is protected, but it does not evaluate the OS version or identify unauthorized root or jailbreak modifications. A jailbroken device can still have encryption enabled, so this setting fails to block devices that have been compromised through privilege escalation.
- ✓
Jailbreak detection
Why this is correct
Jailbreak detection is a dedicated Intune compliance setting that scans for signs of iOS jailbreaking or Android rooting, such as the presence of Cydia, Saurik, or unusual root access flags. This check specifically identifies devices with elevated privileges that bypass OS security controls, which is critical for enforcing a policy that blocks compromised devices. Unlike OS version or encryption checks, jailbreak detection directly addresses the risk of a device being altered outside the manufacturer's intended security model, making it a complementary control to Minimum OS version.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SC-100 question from scratch — 208 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-100 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-100 exam.