Practice Test Geeks(MS-102) Microsoft 365 Administrator Expert Practice Test
← All MS-102 Flashcard Decks

Microsoft 365 Administrator Expert Managing Intune and Device Compliance Flashcards

7 cards from real MS-102 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Microsoft 365 Administrator Expert Managing Intune and Device Compliance flashcards as text

  1. Which enrollment method allows Windows 10/11 devices to be joined to Azure AD and automatically enrolled in Intune during the out-of-box experience (OOBE)?

    Answer: Windows Autopilot

    Windows Autopilot enables zero-touch deployment by joining devices to Azure AD and enrolling them in Intune automatically during the OOBE without IT needing to image the device.

  2. What is the default maximum number of devices a single user can enroll in Microsoft Intune?

    Answer: 5

    By default, each user is allowed to enroll up to 5 devices in Microsoft Intune, though this limit can be adjusted via enrollment restrictions.

  3. Which enrollment method is used for iOS/iPadOS corporate-owned devices purchased through Apple Business Manager to enable supervised, zero-touch enrollment in Intune?

    Answer: Automated Device Enrollment (ADE)

    Apple's Automated Device Enrollment (ADE), formerly Device Enrollment Program (DEP), integrates with Apple Business Manager to enable supervised, zero-touch Intune enrollment for corporate iOS/iPadOS devices.

  4. An organization wants to ensure only compliant devices can access Exchange Online. Which Intune feature, combined with Conditional Access, enforces this requirement?

    Answer: Device compliance policies

    Device compliance policies define the security rules a device must meet, and when paired with Conditional Access, Intune marks non-compliant devices as blocked from accessing Exchange Online.

  5. What happens to a device's compliance status in Intune when the device fails to check in before the configured compliance grace period expires?

    Answer: The device is marked as Not compliant

    When a device exceeds the grace period without checking in, Intune marks it as Not compliant, which can trigger Conditional Access to block resource access.

  6. Which Android Enterprise enrollment mode in Intune provides the highest level of corporate management, including full device wipe, and is designed for corporate-owned devices used exclusively for work?

    Answer: Fully managed (COBO)

    Android Enterprise fully managed (COBO — Corporate Owned, Business Only) provides complete device control, including full wipe, and is designed for devices used solely for corporate purposes.

  7. What information must be collected from a device and uploaded to Intune or the Microsoft 365 admin center in order to register it for Windows Autopilot?

    Answer: Device serial number and hardware hash

    Autopilot registration requires the device's hardware hash (which includes the serial number) to be uploaded so Azure AD can identify the device during the OOBE.