Practice Test GeeksMD-101 - Managing Modern Desktops Practice Test
← All MD-101 Flashcard Decks

Conditional Access and Compliance Policies Flashcards

6 cards from real MD-101 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Conditional Access and Compliance Policies flashcards as text

  1. Which Intune compliance setting verifies that Windows devices have Microsoft Defender Antivirus real-time protection enabled?

    Answer: Microsoft Defender Antivirus — Require real-time protection

    The 'Require real-time protection' setting in Intune compliance policies checks that Microsoft Defender Antivirus real-time protection is active.

  2. What is the purpose of a Conditional Access Named Location in access policies?

    Answer: To define trusted IP ranges or countries for use in access conditions

    Named Locations define trusted IP address ranges or geographic regions that can be used as conditions in Conditional Access policies.

  3. An administrator wants to require Intune-enrolled devices for access to SharePoint but allow personal devices with MFA only. Which Conditional Access grant configuration achieves this?

    Answer: Require compliant device OR require MFA

    Using 'Require one of the selected controls' with both 'Require compliant device' and 'Require MFA' allows either condition to satisfy the grant requirement.

  4. Which Azure AD Conditional Access signal can assess device risk using Microsoft Defender for Endpoint threat intelligence?

    Answer: Device risk via Microsoft Defender for Endpoint integration

    Conditional Access can use the device risk score from Microsoft Defender for Endpoint as a condition, blocking access when device threat level is too high.

  5. What happens to a device's compliance status if it has been offline and has not checked in with Intune beyond the configured inactivity period?

    Answer: It is marked Not compliant

    Intune marks devices as Not compliant if they exceed the configured 'Days without checking in' threshold, which administrators set in compliance policy settings.

  6. Which report in Intune provides a consolidated view of device compliance status across all platforms?

    Answer: Compliance — Monitor > Device compliance report

    The Device compliance report under Compliance > Monitor in Intune shows aggregate and per-device compliance status across all enrolled platforms.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. learn.microsoft.com — Retake policy, passing score, fees, time limit, exam information · verified Oct 2026
  2. home.pearsonvue.com — Test delivery · verified Oct 2026