MS-102 Microsoft 365 Administrator Expert Managing Intune and Device Compliance 2

Question 1

In which section of an Intune device compliance policy can an administrator specify minimum and maximum allowed operating system versions for enrolled devices?

Accepted Answer

Device properties

Answer

Device health

Answer

System security

Answer

Endpoint protection

Question 2

An administrator needs to automatically push Wi-Fi credentials to all managed iOS devices so users do not need to enter them manually. Which Intune feature accomplishes this?

Accepted Answer

Configuration profiles

Answer

App protection policies

Answer

Compliance policies

Answer

Device enrollment restrictions

Question 3

What is the purpose of the Enrollment Status Page (ESP) in a Windows Autopilot deployment?

Accepted Answer

To block device access until required apps and policies are fully applied

Answer

To display Intune license assignment status during setup

Answer

To show the hardware inventory collected during enrollment

Answer

To authenticate the user with Multi-Factor Authentication before OOBE

Question 4

What does the Intune 'Retire' remote action do to a managed device?

Accepted Answer

Removes corporate data and unenrolls the device while leaving personal data intact

Answer

Wipes the device to factory settings and removes it from Azure AD

Answer

Locks the device remotely until the user enters a PIN

Answer

Removes only the Intune Management Extension from the device

Question 5

An administrator wants to prevent corporate Windows 11 devices from allowing users to sign in with personal Microsoft accounts. Which Intune configuration profile type contains this setting?

Accepted Answer

Device restrictions

Answer

Endpoint protection

Answer

Identity protection

Answer

Custom OMA-URI

Question 6

Which Intune feature allows administrators to deploy traditional Win32 applications (.exe or .msi) to Windows 10/11 managed devices?

Accepted Answer

Win32 app deployment via the Intune Management Extension (IME)

Answer

Microsoft Store for Business app deployment

Answer

Windows Package Manager (winget) integration

Answer

SCCM co-management with workload shift only

Question 7

Which Intune report provides a comprehensive view of all enrolled devices and their current compliance state, including Not compliant, Compliant, In grace period, and Not evaluated?

Accepted Answer

Device compliance report

Answer

Device inventory report

Answer

Endpoint analytics report

Answer

App install status report