MD-101 Conditional Access and Compliance Policies 2

Question 1

Which Intune compliance setting verifies that Windows devices have Microsoft Defender Antivirus real-time protection enabled?

Accepted Answer

Microsoft Defender Antivirus — Require real-time protection

Answer

The 'Require real-time protection' setting in Intune compliance policies checks that Microsoft Defender Antivirus real-time protection is active.

Question 2

What is the purpose of a Conditional Access Named Location in access policies?

Accepted Answer

To define trusted IP ranges or countries for use in access conditions

Answer

Named Locations define trusted IP address ranges or geographic regions that can be used as conditions in Conditional Access policies.

Question 3

An administrator wants to require Intune-enrolled devices for access to SharePoint but allow personal devices with MFA only. Which Conditional Access grant configuration achieves this?

Accepted Answer

Require compliant device OR require MFA

Answer

Using 'Require one of the selected controls' with both 'Require compliant device' and 'Require MFA' allows either condition to satisfy the grant requirement.

Question 4

Which Azure AD Conditional Access signal can assess device risk using Microsoft Defender for Endpoint threat intelligence?

Accepted Answer

Device risk via Microsoft Defender for Endpoint integration

Answer

Conditional Access can use the device risk score from Microsoft Defender for Endpoint as a condition, blocking access when device threat level is too high.

Question 5

What happens to a device's compliance status if it has been offline and has not checked in with Intune beyond the configured inactivity period?

Accepted Answer

It is marked Not compliant

Answer

Intune marks devices as Not compliant if they exceed the configured 'Days without checking in' threshold, which administrators set in compliance policy settings.

MD-101 - Managing Modern Desktops Practice Test

MD-101 - Managing Modern Desktops Practice Test

MD-101 Conditional Access and Compliance Policies 2