ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MD-102 All Questions

View all questions & answers for the MD-102 exam
Go to Exam

Exam MD-102 topic 1 question 111 discussion

Actual exam question from Microsoft's MD-102
Question #: 111
Topic #: 1
[All MD-102 Questions]

HOTSPOT -

In Microsoft Intune, you have the device compliance policies shown in the following table.



The Intune compliance policy settings are configured as shown in the following exhibit.



On June 1, you enroll Windows 10 devices in Intune as shown in the following table.



For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:
by Casticod at Oct. 3, 2023, 7:23 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
iamforksu
Highly Voted 1 year, 8 months ago
YNY - answer is correct
upvoted 32 times
AleFCI1908
7 months, 2 weeks ago
Y - because of grace period = 5 days N - because is out of the grace period = 5 days Y - because of grace period , most restrictive policy grace period = 10 days
upvoted 5 times
...
665d390
9 months, 3 weeks ago
correcto
upvoted 2 times
...
METAM
9 months, 4 weeks ago
explain please
upvoted 1 times
...
...
Casticod
Highly Voted 1 year, 8 months ago
I think the answer is No, No, Yes. Device 1 is Windows 10 - and policy 1 is for Windows 8. Default compliance for devices without a policy is not compliant so first 2 questions are NO. Then the third device has 2 policies, the first one is compliant and the second policy is not compliant but the device is not marked as non-compliant due to the fact that mark device as non-compliant is set to 10 days. This means that the machine will be compliant until june 10th. Source: Mark device non-compliant: By default, this action is set for each compliance policy and has a schedule of zero (0) days, marking devices as noncompliant immediately. When you change the default schedule, you provide a grace period in which a user can remediate issues or become compliant without being marked as non-compliant. This action is supported on all platforms supported by Intune. https://docs.microsoft.com/en-us/mem/intune/protect/actions-for-noncompliance
upvoted 21 times
02dc19c
2 months, 3 weeks ago
The third device is marked non-compliant immediately: the grace period does not grant compliance to devices that are missing the policy requirements: the grace period allows you to use a non-compliant device until the policy is ENFORCED at the end of the grace period, therefore the device is marked non-compliant on day 1.
upvoted 1 times
...
firefox15
1 year, 8 months ago
Policy 1 is for Windows 8.1 *and later*. It should still apply unless I'm missing something. I feel it should be Y, N, Y.
upvoted 18 times
...
...
02dc19c
Most Recent 2 months, 3 weeks ago
The answer should be No, No, No: the grace period does not mark devices that are missing a policy requirement as compliant: the devices with missing requirements are marked non-compliant immediately and the grace period allows you to resolve the compliance issue until the policy is ENFORCED at the end of the grace period, therefore the last answer should also be a hard NO.
upvoted 2 times
...
Roska
3 months, 2 weeks ago
YYY ============ Device1 = Windows10 Policy1 -> Windows 8.1 -> No policy assigned -> falls back on Compliance Policy Settings - 30 days
upvoted 1 times
...
JayHall
4 months ago
Slighty modifying MR_Eliot's comment for clarity: On June 4, device1 is marked as compliant - YES. Mark device as not compliant after 5 days (which will be June 6). Device is still within non compliance grace period. On June 6, device1 is marked as compliant - NO. Grace period is over. So de device is not compliant. On June 9, device2 is marked as compliant: - YES. Policy3 makes the device not compliant after 10 days (which is Jun 11). Device is within non complaince grace period.
upvoted 2 times
...
GoombaLMAO
4 months, 1 week ago
Grace period is not the same as compliant. N - N - N
upvoted 4 times
...
METAM
9 months, 4 weeks ago
NNY. good
upvoted 1 times
...
Pollosor
10 months, 1 week ago
YES: It does not have BitLocker but will still be marked as compliant because it is within the grace period. NO: It does not have BitLocker and exceeds the grace period. YES: The most restrictive policy applies, in this case, the one with a 10-day grace period.
upvoted 3 times
...
WORKHOLIC
1 year ago
Box 1: No - Policy1 requires encryption, but on June 4 Device1 is configured with No Drive Encryption, so it is not compliant. Box 2: No - Policy1 requires encryption, but on June 6 Device1 is configured with No Drive Encryption, so it is not compliant. Box 3: Yes - Both Policy2 and Policy3 applies to Device2. Policy3, which is the most restrictive applies, which result in Mark device as not compliant = 10 days. Note: If you have deployed multiple compliance policies, Intune uses the most restrictive of these policies. Reference: https://docs.microsoft.com/en-us/mem/intune/protect/actions-for-noncompliance https://docs.microsoft.com/en-us/mem/intune/protect/compliance-policy-monitor#how-intune-resolves-policy-conflicts
upvoted 2 times
HvD
8 months ago
Box 1: Yes, because the device is indeed not compliant, but will be marked as such after 5 days, which is June 6.
upvoted 4 times
...
...
CJL324
1 year, 1 month ago
Summary: On June 4, Device1 is marked as compliant: No On June 6, Device1 is marked as compliant: No On June 9, Device2 is marked as compliant: No
upvoted 5 times
CJL324
1 year, 1 month ago
Device1 Analysis: Assigned Policy: Policy1 Requirements: Encryption (Require) Windows Defender Antimalware (Not applicable) Compliance Marked: 5 days Device1 on June 4: Enrolled on June 1. 5 days from June 1 is June 6. BitLocker (Encryption): No Windows Defender: Enabled (Not applicable for Policy1) On June 4, Device1 has not met the encryption requirement for 5 days yet, so it should not be marked as compliant. Answer: No Device1 on June 6:
upvoted 1 times
CJL324
1 year, 1 month ago
By June 6, it has been 5 days since enrollment. BitLocker (Encryption): No (still not compliant) Windows Defender: Enabled (Not applicable for Policy1) On June 6, Device1 should be marked as not compliant because it has not enabled BitLocker for 5 days. Answer: No Device2 Analysis: Assigned Policy: Policy2 and Policy3 Requirements: Policy2: Windows Defender Antimalware (Require), Mark device as not compliant in 7 days. Policy3: Encryption (Require), Windows Defender Antimalware (Require), Mark device as not compliant in 10 days. Device2 on June 9: Enrolled on June 1. 7 days from June 1 is June 8. 10 days from June 1 is June 11. BitLocker (Encryption): No Windows Defender: Enabled (required by both Policy2 and Policy3) By June 9, Device2 meets the Windows Defender requirement but fails the encryption requirement for both policies. Since Policy3 marks it non-compliant in 10 days and Policy2 in 7 days, by June 9, it should be marked as non-compliant according to Policy2.
upvoted 2 times
...
...
...
[Removed]
1 year, 3 months ago
Answer is D: Manual Process: Open Computer Management. Click the Action menu. Select Connect to Another Computer. Type the Computer Name (e.g., “Computer1”). Click OK. Expand Local Users and Groups. Select Groups. Double-click the Remote Desktop Users group. Click Add. Type the User Name as “User1”. Click OK. Click OK again.
upvoted 1 times
...
MR_Eliot
1 year, 3 months ago
Y, N, Y Device1: Policies: Policy1 Verdict: Not compliant since bitlocker is disabled. Device2: Plicies: Policy2, Policy3 Verdict: Not compliant since bitlocker is not enabled. On june 4, device1 is marked as compliant - Yes. Mark device as not compliant after 5 days. Whihin grace period. On June 6, device 1 is marked as compliant - No. Grace periode is over. So de device is not compliant. On June 9, device2 is marked as compliant: - Yes. Policy3 makes the device not compliant after 10 days. Device is whithin grace period.
upvoted 8 times
...
Krayzr
1 year, 4 months ago
Confused :? https://www.examtopics.com/discussions/microsoft/view/51834-exam-md-101-topic-3-question-25-discussion/
upvoted 1 times
...
NoursBear
1 year, 5 months ago
I think I have just found out something, WIndows 8.1 and later compliance policies do not affect Windows 10/11. It looks like the "later" part means what minimum and maximum sub version of Windows 8.1 it should affect. This is why I could not understand why Device 1 was not compliant in the grace period: https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-create-windows-8-1 So this would mean Policy 1 is not applied and Device 1 has no policy.
upvoted 2 times
gavorgavin
8 months ago
BUT.... (man this is confusing) in the minimum and maximum OS versions you can specify build versions greater than 8.1 for example in minimum OS: 6.3.9600, maximum: 10.0.22631
upvoted 1 times
...
Burkidur
1 year, 3 months ago
Exactly. Otherwise the screenshot with devices with no compliance setting would make no sense in this question.
upvoted 2 times
...
...
Greatone1
1 year, 6 months ago
NNY this question is on MS 101 exam
upvoted 2 times
...
abill
1 year, 6 months ago
NNY for me
upvoted 2 times
...
Kevern
1 year, 6 months ago
Should it not be Y,N,N? Device 1 is within the grace period on June 4 Device 1 is out of grace period on June 6 Device 2 is out of grace period (while having 2 policies assigned) on June 9
upvoted 3 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel