MD-102 Managing Identity and Access 3

Question 1

Which Azure AD role has the least privilege to manage Intune device compliance policies?

Accepted Answer

Intune Administrator

Answer

Global Administrator

Answer

Security Administrator

Answer

Compliance Administrator

Question 2

A company needs to allow users to join devices to Azure AD without granting them the ability to manage other users. Which setting controls the maximum number of devices a user can Azure AD join?

Accepted Answer

Device quota per user in Azure AD

Answer

Intune enrollment restriction

Answer

Conditional Access policy

Answer

Device configuration profile

Question 3

Which authentication strength setting in Azure AD Conditional Access enforces phishing-resistant MFA methods only?

Accepted Answer

Phishing-resistant MFA strength

Answer

MFA strength

Answer

Passwordless MFA strength

Answer

Windows Hello strength

Question 4

An admin wants to ensure that when a user's risk level is detected as high, their session is blocked. Which Azure AD feature supports this?

Accepted Answer

Conditional Access – User risk policy

Answer

Conditional Access – Sign-in risk policy

Answer

Identity Protection – User risk policy

Answer

Identity Protection – Sign-in risk policy

Question 5

Which protocol does Windows Hello for Business use for authentication in a key trust deployment?

Accepted Answer

Kerberos

Answer

NTLM

Answer

OAuth 2.0

Answer

SAML

Question 6

A conditional access policy is set to require compliant device. A user signs in from an unmanaged personal device. What happens?

Accepted Answer

Access is blocked

Answer

The user is prompted to enroll the device in Intune

Answer

The user is granted access with limited permissions

Answer

The user is redirected to a web app portal