Exam MD-102 All Questions

View all questions & answers for the MD-102 exam

Exam MD-102 topic 1 question 174 discussion

Actual exam question from Microsoft's MD-102

Question #: 174
Topic #: 1

HOTSPOT -

You have devices that are not rooted enrolled in Microsoft Intune as shown in the following table.

The devices are members of a group named Group1.

In Intune, you create a device compliance location that has the following configurations:

• Name: Network1
• IPv4 range: 192.168.0.0/16

In Intune, you create a device compliance policy for the Android platform. The policy has the following configurations:

• Name: Policy1
• Device health: Rooted devices: Block
• Locations: Location: Network1
• Mark device noncompliant: Immediately
• Assigned: Group1

The Intune device compliance policy has the following configurations:

• Mark devices with no compliance policy assigned as: Compliant
• Enhanced jailbreak detection: Enabled
• Compliance status validity period (days): 20

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by VirtualJP at Oct. 17, 2023, 12:27 p.m.

Comments

Submit Cancel

BJS78

Highly Voted 1 year, 8 months ago

Device1: no compliance policy --> compliant Device2: not in fencing --> non-compliant Device3: in fencing --> compliant

upvoted 35 times

Tr619899

6 months, 3 weeks ago

YES, NO, YES

upvoted 5 times

...

VirtualJP

Highly Voted 1 year, 8 months ago

I think YNY

upvoted 11 times

...

theptr

Most Recent 2 months ago

Yes no Yes

upvoted 1 times

...

sorinaccio

4 months ago

YNY D1: compliant because of "mark devices with no compliance policy assigned as compliant" D2: Not compliant because of the IP subnet D3 compliant OS is android and IP subnet is in Network 1 location

upvoted 1 times

...

AleFCI1908

7 months, 2 weeks ago

Y N Y , by network location

upvoted 2 times

...

bigreg

9 months, 1 week ago

Yes No Yes (Because of the IP ranges)

upvoted 3 times

...

oopspruu

11 months ago

I am not able to find any "location device compliance" setting in any Android profile. Purely answering the question by logic would yield YNY as correct answer but I don't know if its technically correct.

upvoted 1 times

...

CJL324

1 year, 1 month ago

Device1 is marked as compliant: Yes Device2 is marked as compliant: No Device3 is marked as compliant: Yes

upvoted 1 times

...

MR_Eliot

1 year, 3 months ago

Answer should be: YES, The policy does not apply. Default policy for devices without compliance policy is Compliant. NO: IP range doesn't match YES: IP range match

upvoted 3 times

...

Merrybob

1 year, 4 months ago

Yes No Yes

upvoted 2 times

...

NoursBear

1 year, 5 months ago

I am seeing a lots of things wrong with the question and I don't know if it's because of big changes in Inune. The only place I can configure a location is under Conditional Access Named Locations, which then can be used in a condition access policy. I am not seeing anything under compliance policies I also do not see an applicability rule which can be set. Under Compliance Policies there should have been "locations" but I do not see this.

upvoted 2 times

NoursBear

1 year, 5 months ago

So now I think YNY instead of my original choice

upvoted 4 times

...

yosry

1 year, 6 months ago

I think people are confusing "device location compliance policy" and "Device comliance location", can't blame them the wording used in the question is very missleading. "Device location cofiguration policy" is used for "fencing" devices, and when you create it you just configure the wanted locations and then the action for non compliance. "device compliance location" i believe it means that it's a location that has been created to be used for the following compliance policy, I came to this conclusion based on two factors: 1- the configuration for the "device compliance location" is that of a simple location in intune, you create a location then give it a name and an ip range. 2- "Network1" has been used in the aplicability rule of the following policy as a location. can someone please confirm or correct me?

upvoted 1 times

yosry

1 year, 6 months ago

so based on my previous comment I believe the answer is YYY: 1- Y: device1 is a windows device so it's not targeted by policy1 2- Y: Device2 is not in the targeted location so policy1 is not applied 3- Y: Device3 is compliant with Policy1

upvoted 12 times

OyYaGotta

1 year ago

yosry is correct. Everyone is saying 2 = N because it's not in the IP location of the policy. Policy is set to no compliance policy = mark as compliant. Therefore y y y

upvoted 4 times

...

yosry

1 year, 6 months ago

After further research, it appears to be YNY: https://learn.microsoft.com/en-us/mem/intune/protect/create-compliance-policy#:~:text=Another%20example%20includes,as%20one%20day.

upvoted 4 times

servL

11 months, 2 weeks ago

The exact text from the link that explains why Device 2 would be Not Compliant. Another example includes the use of Locations where you add at least one location to a compliance policy. In this case, the default action for noncompliance applies when you select at least one location. If the device isn't connected to any of the selected locations, it's considered not compliant. You can configure the schedule to give your users a grace period, such as one day.

upvoted 2 times

...

Softeng

1 year, 4 months ago

Useful reference. I stand with YNY too.

upvoted 2 times

...

NoursBear

1 year, 7 months ago

Took me a while but answers seem correct YYN

upvoted 1 times

NoursBear

1 year, 4 months ago

YNY actually

upvoted 4 times

...

chandravamsi

1 year, 7 months ago

Y,N: because device2 should follow network policy of 192.168.x.x but has 10.x.x.x,Y

upvoted 2 times

...

fco168

1 year, 7 months ago

Device1: Y Device2: N Device3: Y

upvoted 5 times

...

Contactfornitish

1 year, 8 months ago

There is no reason that device 3 would be non-compliant Windows device would not have any policy Device 2 would have policy but not in fencing so non-compliant

upvoted 2 times

...