MS-102 Microsoft 365 Administrator Expert Managing Intune and Device Compliance

Question 1

Which enrollment method allows Windows 10/11 devices to be joined to Azure AD and automatically enrolled in Intune during the out-of-box experience (OOBE)?

Accepted Answer

Windows Autopilot

Answer

Microsoft Endpoint Configuration Manager co-management

Answer

Group Policy-based enrollment

Answer

Apple Business Manager

Question 2

What is the default maximum number of devices a single user can enroll in Microsoft Intune?

Accepted Answer

5

Answer

3

Answer

10

Answer

15

Question 3

Which enrollment method is used for iOS/iPadOS corporate-owned devices purchased through Apple Business Manager to enable supervised, zero-touch enrollment in Intune?

Accepted Answer

Automated Device Enrollment (ADE)

Answer

User enrollment (BYOD)

Answer

Apple Configurator enrollment

Answer

Android Enterprise enrollment

Question 4

An organization wants to ensure only compliant devices can access Exchange Online. Which Intune feature, combined with Conditional Access, enforces this requirement?

Accepted Answer

Device compliance policies

Answer

App protection policies

Answer

Device configuration profiles

Answer

Endpoint security policies

Question 5

What happens to a device's compliance status in Intune when the device fails to check in before the configured compliance grace period expires?

Accepted Answer

The device is marked as Not compliant

Answer

The device is automatically removed from Intune

Answer

The device retains its last known compliance status indefinitely

Answer

The device is placed in quarantine pending manual review

Question 6

Which Android Enterprise enrollment mode in Intune provides the highest level of corporate management, including full device wipe, and is designed for corporate-owned devices used exclusively for work?

Accepted Answer

Fully managed (COBO)

Answer

Personally-owned work profile

Answer

Corporate-owned work profile

Answer

Android device administrator (legacy)

Question 7

What information must be collected from a device and uploaded to Intune or the Microsoft 365 admin center in order to register it for Windows Autopilot?

Accepted Answer

Device serial number and hardware hash

Answer

Device MAC address and IP address

Answer

Device IMEI number and Azure AD object ID

Answer

Device hostname and domain join credentials