Practice Test Geeks(MS-102) Microsoft 365 Administrator Expert Practice Test
← All MS-102 Flashcard Decks

Microsoft 365 Administrator Expert Managing Intune and Device Compliance Flashcards

7 cards from real MS-102 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Microsoft 365 Administrator Expert Managing Intune and Device Compliance flashcards as text

  1. You manage devices together with Configuration Manager and want Intune to evaluate compliance while Configuration Manager keeps handling Windows updates. What should you do?

    Answer: Move the Compliance policies workload slider to Intune

    Co-management lets you move individual workloads, such as Compliance policies, to Intune while other workloads stay with Configuration Manager.

  2. A user can't enroll a sixth device because the tenant still uses the default device limit restriction. What is the default limit, and what is the maximum?

    Answer: 5 default, 15 maximum

    Intune's default device limit restriction allows 5 devices per user, and you can raise it to 15.

  3. You want to deploy Intune Remediations (detect-and-fix script packages) to Windows devices. Which licensing requirement applies?

    Answer: Windows Enterprise E3/E5 or Education A3/A5 (or Windows VDA)

    Remediations require the user to have Windows Enterprise E3/E5, Education A3/A5, or Windows VDA licensing.

  4. An app protection policy should wipe corporate app data if a user hasn't connected to the service for a long time. Which offline grace period setting does this, and what is its default?

    Answer: Wipe data after 90 days

    The offline grace period has two parts: Block access defaults to 720 minutes, and Wipe data defaults to 90 days.

  5. A compliance policy is assigned to a group, but it should apply only to corporate-owned Windows devices in that group. What is the most efficient way to do this without making new groups?

    Answer: Add an assignment filter that uses the deviceOwnership property

    Assignment filters include or exclude devices by properties such as ownership, OS SKU, or model at the time of assignment.

  6. A Windows compliance policy requires BitLocker and Secure Boot through Device Health Attestation, but newly enrolled devices show as noncompliant even though both are on. What is the most likely reason?

    Answer: The devices need a reboot before health attestation can report the values

    Device Health Attestation settings are measured at boot, so a device needs a restart before Intune gets accurate results.

  7. You're deploying Windows Autopilot for Microsoft Entra hybrid joined devices. Which extra on-premises component is required?

    Answer: Intune Connector for Active Directory

    Hybrid join with Autopilot needs the Intune Connector for Active Directory to create computer objects in on-premises AD.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. learn.microsoft.com — Test dates, test delivery, passing score, score release, renewal, score validity, retake fee, retake policy, exam format, time limit · verified Nov 2026