MD-102 Named Practice Questions
The free MD-102: Endpoint Administrator (beta) questions that deal with named, with answers and explanations. The full bank and the timed practice test cover every topic the exam asks about.
Question #3
You have an Azure AD tenant that contains the users shown in the following table. You have the devices shown in the following table. You have a Conditional Access policy named CAPolicy1 that has the following settings: • Assignments o Users or workload identities: User1 o Cloud apps or actions: Office 365 Exchange Online o Conditions: Device platforms: Windows, iOS • Access controls o Grant: Require multi-factor authentication You have a Conditional Access policy named CAPolicy2 that has the following settings: • Assignments o Users or workload identities: User1, User2 o Cloud apps or actions: Office 365 Exchange Online o Conditions: Device platforms: Android, iOS; Filter for devices: Devices matching the rule: Exclude filtered devices from policy; Rule syntax: device.displayName -contains "1" • Access controls o Grant: Block access For each of the following statements, select Yes if the statement is true. Otherwise, select No.



Answer Yes or No for each statement in the exhibit.
Correct answer: No; Yes; No
Explanation
Device1 (Android, name contains "1") is excluded from CAPolicy2 and CAPolicy1 does not cover Android, so User1 is not prompted; User2 still has per-user MFA enabled so is prompted. Device2 (iOS) matches CAPolicy2 for User2, so access is blocked.
Question #9
You have an Azure AD group named Group1. Group1 contains two Windows 10 Enterprise devices named Device1 and Device2. You create a device configuration profile named Profile1. You assign Profile1 to Group1. You need to ensure that Profile1 applies to Device1 only. What should you modify in Profile1?
Correct answer: D
Explanation
To ensure that Profile1 applies to Device1 only, you need to modify the Applicability Rules in Profile1. You can use applicability rules to filter which devices receive a profile based on criteria such as device model, manufacturer, or operating system version. You can create an applicability rule that matches Device1’s properties and excludes Device2’s properties. References: https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#applicability-rules
Continue with MD-102: Endpoint Administrator (beta)
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in MD-102: Endpoint Administrator (beta), the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
All MD-102: Endpoint Administrator (beta) practice questions →
