Microsoft 365 Administrator Expert Managing Intune and Device Compliance Flashcards
7 cards from real MS-102 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Microsoft 365 Administrator Expert Managing Intune and Device Compliance flashcards as text
In which section of an Intune device compliance policy can an administrator specify minimum and maximum allowed operating system versions for enrolled devices?
Answer: Device properties
The Device properties section of an Intune compliance policy contains settings for specifying minimum and maximum OS versions that enrolled devices must meet.
An administrator needs to automatically push Wi-Fi credentials to all managed iOS devices so users do not need to enter them manually. Which Intune feature accomplishes this?
Answer: Configuration profiles
Intune configuration profiles allow administrators to push device settings such as Wi-Fi networks, certificates, and VPN configurations directly to managed iOS/iPadOS devices.
What is the purpose of the Enrollment Status Page (ESP) in a Windows Autopilot deployment?
Answer: To block device access until required apps and policies are fully applied
The Enrollment Status Page prevents users from accessing the desktop until specified apps and configurations have been successfully applied, ensuring the device is in a managed state before first use.
What does the Intune 'Retire' remote action do to a managed device?
Answer: Removes corporate data and unenrolls the device while leaving personal data intact
Retire removes company-managed apps, email profiles, certificates, and Intune enrollment from the device while leaving personal data and apps untouched, making it ideal for BYOD offboarding.
An administrator wants to prevent corporate Windows 11 devices from allowing users to sign in with personal Microsoft accounts. Which Intune configuration profile type contains this setting?
Answer: Device restrictions
Device restriction profiles in Intune include settings to block Microsoft accounts and other consumer features on Windows 10/11 devices, keeping devices focused on corporate identities.
Which Intune feature allows administrators to deploy traditional Win32 applications (.exe or .msi) to Windows 10/11 managed devices?
Answer: Win32 app deployment via the Intune Management Extension (IME)
The Intune Management Extension (IME) agent enables Win32 app packaging and deployment to Intune-managed Windows devices, supporting complex installation scenarios with detection rules.
Which Intune report provides a comprehensive view of all enrolled devices and their current compliance state, including Not compliant, Compliant, In grace period, and Not evaluated?
Answer: Device compliance report
The Device compliance report in Intune shows all enrolled devices and their compliance state across all compliance policies assigned to them.