SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  1. Set up Intune (configuration of MDM authority, licenses, and basic settings), 2. Create enrollment policies, 3. Create compliance policies, 4. Assign apps, 5. Enroll devices.

  Why this is correct

  This is the correct order because Intune must be set up first to establish the management infrastructure. Then enrollment policies are defined to allow devices to enroll. Compliance policies come next to enforce security requirements. App assignment follows so that necessary applications are available. Finally, devices are enrolled, applying all configurations.

• ✗

  1. Enroll devices, 2. Set up Intune, 3. Create compliance policies, 4. Create enrollment policies, 5. Assign apps.

  Why it's wrong here

  This sequence is incorrect because attempting to enroll devices as the first step is premature and will fail. Intune must first be set up as the Mobile Device Management (MDM) authority, and enrollment policies must be defined to establish the rules and methods for devices to join management. Without a configured Intune service to receive enrollment requests and validate them against established policies, devices cannot successfully enroll.

• ✗

  1. Set up Intune, 2. Create compliance policies, 3. Create enrollment policies, 4. Assign apps, 5. Enroll devices.

  Why it's wrong here

  This option is incorrect due to the improper ordering of policy creation. While setting up Intune is the correct initial step, creating compliance policies before enrollment policies is illogical. Enrollment policies dictate how devices can join Intune management, whereas compliance policies define the security posture and settings devices must maintain *after* they have successfully enrolled. Devices cannot be evaluated for compliance if the mechanism for their enrollment has not yet been established.

• ✗

  1. Enroll devices, 2. Assign apps, 3. Create compliance policies, 4. Create enrollment policies, 5. Set up Intune.

  Why it's wrong here

  This order is fundamentally flawed as it attempts to perform operational tasks like device enrollment and app assignment before the foundational Intune setup and policy creation. Devices cannot enroll without Intune being configured as the MDM authority and specific enrollment policies being defined. Similarly, app assignments rely on Intune's management capabilities and device enrollment to effectively deploy and manage applications, making this sequence unworkable.

Go deeper

Related to this question