MD-101 Conditional Access and Compliance Policies

Question 1

What is the first thing Intune evaluates when a device checks in for compliance assessment?

Accepted Answer

Whether any compliance policies are assigned to the device or user

Answer

Intune first checks if any compliance policies are assigned; devices with no compliance policy are considered compliant by default unless the tenant setting is changed.

Question 2

Which Azure AD feature integrates with Intune compliance status to block non-compliant devices from accessing corporate resources?

Accepted Answer

Conditional Access requiring a compliant device

Answer

Conditional Access can require 'device marked as compliant' as a grant control, blocking access to apps until the device meets Intune compliance requirements.

Question 3

An Intune compliance policy sets minimum OS version to Windows 10 21H2. A device running 21H1 is enrolled. What is the device's compliance state?

Accepted Answer

Not compliant

Answer

A device running an OS version lower than the required minimum is immediately marked Not compliant by the Intune compliance policy.

Question 4

What does the Intune compliance policy 'grace period' setting control?

Accepted Answer

The number of days a non-compliant device retains access before Conditional Access blocks it

Answer

The grace period gives users a defined number of days to remediate non-compliance before Conditional Access enforces the block, preventing immediate access disruption.

Question 5

Which compliance policy action sends an automatic notification email to users when their device becomes non-compliant?

Accepted Answer

Send email to end user — under Actions for noncompliance

Answer

The 'Send email to end user' action in compliance policy Actions for noncompliance automatically notifies users with configurable message templates.

MD-101 - Managing Modern Desktops Practice Test

MD-101 - Managing Modern Desktops Practice Test

MD-101 Conditional Access and Compliance Policies