Exam MD-102 All Questions

View all questions & answers for the MD-102 exam

Exam MD-102 topic 1 question 60 discussion

Actual exam question from Microsoft's MD-102

Question #: 60
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has an Azure AD tenant named contoso.com that contains several Windows 10 devices.
When you join new Windows 10 devices to contoso.com, users are prompted to set up a four-digit pin.
You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 10 devices to contoso.com.
Solution: From the Microsoft Entra admin center, you configure automatic mobile device management (MDM) enrollment. From the Microsoft Intune admin center, you create and assign a device restrictions profile.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by letters1234 at Aug. 22, 2023, 8 a.m.

Comments

Submit Cancel

veliyath

Highly Voted 11 months, 1 week ago

The device restrictions profile in Intune primarily manages password policies and does not include specific settings for PIN configuration. For configuring PIN settings, you need to use Windows Hello for Business policies. Therefore, the correct answer is: B. No

upvoted 6 times

...

MR_Eliot

Highly Voted 1 year, 3 months ago

Selected Answer: B

Answer is NO. In device restriction policy, you can only configure password policy. There is nothing about the pin settings. For pin settins, you will need to configure Windows hello for Business.

upvoted 6 times

...

Merrybob

Most Recent 1 year, 4 months ago

Selected Answer: B

B. No You'd need a Windows Hello for Business config profile. https://learn.microsoft.com/en-us/mem/intune/protect/windows-hello#:~:text=In%20the%20Anniversary%20Update%2C%20these%20two%20PINS%20were%20merged%20into%20one%20single%20device%20PIN.%20Any%20Intune%20configuration%20policies%20you%20set%20to%20control%20the%20device%20PIN%2C%20and%20additionally%2C%20any%20Windows%20Hello%20for%20Business%20policies%20you%20configured%2C%20now%20both%20set%20this%20new%20PIN%20value.

upvoted 3 times

...

yosry

1 year, 6 months ago

Selected Answer: B

No the answer is B

upvoted 1 times

...

iTomi

1 year, 6 months ago

Selected Answer: B

NO! Intune > Devices > Configuration profiles > Create > New Policy > Windows 10 or later > Settings Catalog > Create > Windows Hello for Business.

upvoted 1 times

...

NoursBear

1 year, 6 months ago

I also agree A yes is correct

upvoted 1 times

NoursBear

1 year, 6 months ago

Nope.. the correct way is in question 61. So this is a No now

upvoted 1 times

...

madsa

1 year, 6 months ago

This answer is wrong as to perform this action via Intune you need "Device Configuration Profiles - Identity protection", that is the way I have it setup for the company I work for. So correct answer is No.

upvoted 3 times

frack

1 year, 4 months ago

device configuration profile not restriction profile, correct. I agree, the answer is No.

upvoted 1 times

...

Krayzr

1 year, 6 months ago

Selected Answer: B

This is what Bing AI provided. After further research, I found that to ensure users are prompted to set up a six-digit PIN when they join the Windows 10 devices to contoso.com, you need to configure the PIN complexity settings in the Intune policy1. Here are the steps to do it: Sign in to the Microsoft Intune admin center. Go to Devices > Enroll devices > Windows enrollment > Windows Hello for Business. The Windows Hello for Business pane opens. Select from the following options for Configure Windows Hello for Business: Enabled. Select this setting if you want to configure Windows Hello for Business settings. When you select Enabled, other settings for Windows Hello are visible and can be configured for devices1. The default PIN length is six characters, but you can enforce a minimum length of four characters. The maximum PIN length is 127 characters. So, you can set the minimum length to six characters to ensure a six-digit PIN.

upvoted 1 times

Krayzr

1 year, 6 months ago

Correction, Question says Intune admin center. Answer "A"

upvoted 2 times

...

sbermejor

1 year, 6 months ago

Selected Answer: B

I think answer is B. In device restriction profile you can configure password not pin. You can force the password to be only numbers but it's still a pin as it's not the same. https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-why-pin-is-better-than-password

upvoted 1 times

...

fco168

1 year, 6 months ago

Selected Answer: B

Technically, the answer is B. Because creating a Restrictions Profile does not meet the end. You can create an empty Restrictions profile and assign it or configure it for something else.

upvoted 1 times

...

benpatto

1 year, 7 months ago

MDM Enrollment allows for Intune to then take over, which would allow for device config or even windows enrollment.

upvoted 1 times

...

Suresh_2411

1 year, 8 months ago

Selected Answer: A

should be Yes

upvoted 1 times

...

suresh08

1 year, 8 months ago

Selected Answer: A

Yes, we can achieve it from device restriction.

upvoted 3 times

iTomi

1 year, 6 months ago

NO! Intune > Devices > Configuration profiles > Create > New Policy > Windows 10 or later > Settings Catalog > Create > Windows Hello for Business.

upvoted 1 times

...

letters1234

1 year, 9 months ago

Correct, would need to be Enroll Devices \ Windows Enrollment \ Windows Hello for Business \ Minimum PIN Length. Or possibly a Device Configuration Policy.

upvoted 4 times

Futfuyfyjfj

1 year, 8 months ago

You are right it can be achieved with a WHfB config, but you can do it with a device restriction as well: https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-windows-10#password

upvoted 2 times

BJS78

1 year, 8 months ago

Wrong. You can set PIN for iOS/Android, but for Windows only the password (not the PIN) can be controlled via Device restrictions.

upvoted 1 times

Futfuyfyjfj

1 year, 8 months ago

I guess you didn’t read the article nor you checked Intune itself? Article says: Required password type: Choose the type of password. Your options: Not configured: Intune doesn't change or update this setting. By default, the OS might allow the password to include numbers and letters. Alphanumeric: Password must be a mix of numbers and letters. Numeric: Password must only be numbers. So numeric is a PIN……

upvoted 3 times

sbermejor

1 year, 6 months ago

Password and pin are different, regardless a password contains only numbers it´s still a password. https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-why-pin-is-better-than-password

upvoted 2 times

...