Exam MD-102 All Questions

View all questions & answers for the MD-102 exam

Exam MD-102 topic 1 question 111 discussion

Actual exam question from Microsoft's MD-102

Question #: 111
Topic #: 1

HOTSPOT -

In Microsoft Intune, you have the device compliance policies shown in the following table.

The Intune compliance policy settings are configured as shown in the following exhibit.

On June 1, you enroll Windows 10 devices in Intune as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Casticod at Oct. 3, 2023, 7:23 p.m.

Comments

Submit Cancel

iamforksu

Highly Voted 1 year, 10 months ago

YNY - answer is correct

upvoted 32 times

AleFCI1908

9 months, 2 weeks ago

Y - because of grace period = 5 days N - because is out of the grace period = 5 days Y - because of grace period , most restrictive policy grace period = 10 days

upvoted 6 times

...

665d390

11 months, 3 weeks ago

correcto

upvoted 2 times

...

METAM

11 months, 3 weeks ago

explain please

upvoted 1 times

...

Casticod

Highly Voted 1 year, 10 months ago

I think the answer is No, No, Yes. Device 1 is Windows 10 - and policy 1 is for Windows 8. Default compliance for devices without a policy is not compliant so first 2 questions are NO. Then the third device has 2 policies, the first one is compliant and the second policy is not compliant but the device is not marked as non-compliant due to the fact that mark device as non-compliant is set to 10 days. This means that the machine will be compliant until june 10th. Source: Mark device non-compliant: By default, this action is set for each compliance policy and has a schedule of zero (0) days, marking devices as noncompliant immediately. When you change the default schedule, you provide a grace period in which a user can remediate issues or become compliant without being marked as non-compliant. This action is supported on all platforms supported by Intune. https://docs.microsoft.com/en-us/mem/intune/protect/actions-for-noncompliance

upvoted 21 times

02dc19c

4 months, 3 weeks ago

The third device is marked non-compliant immediately: the grace period does not grant compliance to devices that are missing the policy requirements: the grace period allows you to use a non-compliant device until the policy is ENFORCED at the end of the grace period, therefore the device is marked non-compliant on day 1.

upvoted 1 times

...

firefox15

1 year, 10 months ago

Policy 1 is for Windows 8.1 *and later*. It should still apply unless I'm missing something. I feel it should be Y, N, Y.

upvoted 18 times

...

02dc19c

Most Recent 4 months, 3 weeks ago

The answer should be No, No, No: the grace period does not mark devices that are missing a policy requirement as compliant: the devices with missing requirements are marked non-compliant immediately and the grace period allows you to resolve the compliance issue until the policy is ENFORCED at the end of the grace period, therefore the last answer should also be a hard NO.

upvoted 2 times

...

Roska

5 months, 2 weeks ago

YYY ============ Device1 = Windows10 Policy1 -> Windows 8.1 -> No policy assigned -> falls back on Compliance Policy Settings - 30 days

upvoted 1 times

...

JayHall

6 months ago

Slighty modifying MR_Eliot's comment for clarity: On June 4, device1 is marked as compliant - YES. Mark device as not compliant after 5 days (which will be June 6). Device is still within non compliance grace period. On June 6, device1 is marked as compliant - NO. Grace period is over. So de device is not compliant. On June 9, device2 is marked as compliant: - YES. Policy3 makes the device not compliant after 10 days (which is Jun 11). Device is within non complaince grace period.

upvoted 2 times

...

GoombaLMAO

6 months, 1 week ago

Grace period is not the same as compliant. N - N - N

upvoted 4 times

...

METAM

11 months, 3 weeks ago

NNY. good

upvoted 1 times

...

Pollosor

1 year ago

YES: It does not have BitLocker but will still be marked as compliant because it is within the grace period. NO: It does not have BitLocker and exceeds the grace period. YES: The most restrictive policy applies, in this case, the one with a 10-day grace period.

upvoted 3 times

...

WORKHOLIC

1 year, 2 months ago

Box 1: No - Policy1 requires encryption, but on June 4 Device1 is configured with No Drive Encryption, so it is not compliant. Box 2: No - Policy1 requires encryption, but on June 6 Device1 is configured with No Drive Encryption, so it is not compliant. Box 3: Yes - Both Policy2 and Policy3 applies to Device2. Policy3, which is the most restrictive applies, which result in Mark device as not compliant = 10 days. Note: If you have deployed multiple compliance policies, Intune uses the most restrictive of these policies. Reference: https://docs.microsoft.com/en-us/mem/intune/protect/actions-for-noncompliance https://docs.microsoft.com/en-us/mem/intune/protect/compliance-policy-monitor#how-intune-resolves-policy-conflicts

upvoted 2 times

HvD

9 months, 4 weeks ago

Box 1: Yes, because the device is indeed not compliant, but will be marked as such after 5 days, which is June 6.

upvoted 4 times

...

CJL324

1 year, 3 months ago

Summary: On June 4, Device1 is marked as compliant: No On June 6, Device1 is marked as compliant: No On June 9, Device2 is marked as compliant: No

upvoted 5 times

CJL324

1 year, 3 months ago

Device1 Analysis: Assigned Policy: Policy1 Requirements: Encryption (Require) Windows Defender Antimalware (Not applicable) Compliance Marked: 5 days Device1 on June 4: Enrolled on June 1. 5 days from June 1 is June 6. BitLocker (Encryption): No Windows Defender: Enabled (Not applicable for Policy1) On June 4, Device1 has not met the encryption requirement for 5 days yet, so it should not be marked as compliant. Answer: No Device1 on June 6:

upvoted 1 times

CJL324

1 year, 3 months ago

By June 6, it has been 5 days since enrollment. BitLocker (Encryption): No (still not compliant) Windows Defender: Enabled (Not applicable for Policy1) On June 6, Device1 should be marked as not compliant because it has not enabled BitLocker for 5 days. Answer: No Device2 Analysis: Assigned Policy: Policy2 and Policy3 Requirements: Policy2: Windows Defender Antimalware (Require), Mark device as not compliant in 7 days. Policy3: Encryption (Require), Windows Defender Antimalware (Require), Mark device as not compliant in 10 days. Device2 on June 9: Enrolled on June 1. 7 days from June 1 is June 8. 10 days from June 1 is June 11. BitLocker (Encryption): No Windows Defender: Enabled (required by both Policy2 and Policy3) By June 9, Device2 meets the Windows Defender requirement but fails the encryption requirement for both policies. Since Policy3 marks it non-compliant in 10 days and Policy2 in 7 days, by June 9, it should be marked as non-compliant according to Policy2.

upvoted 2 times

...

MR_Eliot

1 year, 5 months ago

Y, N, Y Device1: Policies: Policy1 Verdict: Not compliant since bitlocker is disabled. Device2: Plicies: Policy2, Policy3 Verdict: Not compliant since bitlocker is not enabled. On june 4, device1 is marked as compliant - Yes. Mark device as not compliant after 5 days. Whihin grace period. On June 6, device 1 is marked as compliant - No. Grace periode is over. So de device is not compliant. On June 9, device2 is marked as compliant: - Yes. Policy3 makes the device not compliant after 10 days. Device is whithin grace period.

upvoted 8 times

...

Krayzr

1 year, 6 months ago

Confused :? https://www.examtopics.com/discussions/microsoft/view/51834-exam-md-101-topic-3-question-25-discussion/

upvoted 1 times

...

NoursBear

1 year, 7 months ago

I think I have just found out something, WIndows 8.1 and later compliance policies do not affect Windows 10/11. It looks like the "later" part means what minimum and maximum sub version of Windows 8.1 it should affect. This is why I could not understand why Device 1 was not compliant in the grace period: https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-create-windows-8-1 So this would mean Policy 1 is not applied and Device 1 has no policy.

upvoted 2 times

gavorgavin

9 months, 4 weeks ago

BUT.... (man this is confusing) in the minimum and maximum OS versions you can specify build versions greater than 8.1 for example in minimum OS: 6.3.9600, maximum: 10.0.22631

upvoted 1 times

...

Burkidur

1 year, 5 months ago

Exactly. Otherwise the screenshot with devices with no compliance setting would make no sense in this question.

upvoted 2 times

...

Greatone1

1 year, 8 months ago

NNY this question is on MS 101 exam

upvoted 2 times

...

abill

1 year, 8 months ago

NNY for me

upvoted 2 times

...

Kevern

1 year, 8 months ago

Should it not be Y,N,N? Device 1 is within the grace period on June 4 Device 1 is out of grace period on June 6 Device 2 is out of grace period (while having 2 policies assigned) on June 9

upvoted 3 times

...

Sonia33

1 year, 8 months ago

For me it should be No, No, No. The third device should be In Grace period.

upvoted 6 times

...

Load full discussion...