exam questions

Exam MD-102 All Questions

View all questions & answers for the MD-102 exam

Exam MD-102 topic 1 question 209 discussion

Actual exam question from Microsoft's MD-102
Question #: 209
Topic #: 1
[All MD-102 Questions]

HOTSPOT
-

You have a Microsoft 365 tenant that uses Microsoft Intune and contains the devices shown in the following table.



In Microsoft Intune Endpoint security, you need to configure a disk encryption policy for each device.

Which encryption type should you use for each device, and which role-based access control (RBAC) role in Intune should you use to manage the encryption keys? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
IcE
Highly Voted 1 year, 3 months ago
The 3rd question (RBAC Role) should be Help Desk Operator https://learn.microsoft.com/en-us/mem/intune/protect/encrypt-devices-filevault
upvoted 19 times
Cezt
9 months ago
only helpdesk operator and endpoint security manager can manage file filevault and bitlocker keys
upvoted 3 times
...
king001
1 year, 3 months ago
Get FileVault key:Help Desk Operator Rotate FileVault key:Help Desk Operator
upvoted 6 times
...
...
MR_Eliot
Most Recent 1 year, 1 month ago
last box is helpdesk operator.
upvoted 3 times
...
Merrybob
1 year, 3 months ago
Bitlocker FileVault Help Desk Operator Bitlocker Keys Ref: https://learn.microsoft.com/en-us/mem/intune/protect/encrypt-devices#permissions-to-manage-bitlocker:~:text=Rotate%20BitLocker%20Keys,Help%20Desk%20Operator FileVault Keys Ref: https://learn.microsoft.com/en-us/mem/intune/protect/encrypt-devices-filevault#:~:text=grant%20the%20permission%3A-,Get%20FileVault%20key%3A,Help%20Desk%20Operator,-Create%20device%20configuration
upvoted 4 times
...
NoursBear
1 year, 3 months ago
Permissions to manage BitLocker To manage BitLocker in Intune, your account must have the applicable Intune role-based access control (RBAC) permissions. Following are the BitLocker permissions, which are part of the Remote tasks category, and the built-in RBAC roles that grant the permission: Rotate BitLocker Keys Help Desk Operator
upvoted 3 times
...
mp34
1 year, 3 months ago
agree with IcE - https://learn.microsoft.com/en-us/mem/intune/protect/encrypt-devices Helpdesk operator can rotate keys
upvoted 1 times
...
yosry
1 year, 4 months ago
seems correct
upvoted 1 times
...
JN_311
1 year, 4 months ago
the 3rd one, doesn't fall under any of the roles: To view or copy BitLocker keys, you need to be the owner of the device or have one of these roles: Cloud Device Administrator Global Administrator Helpdesk Administrator Intune Service Administrator Security Administrator Security Reader
upvoted 1 times
...
sh123df
1 year, 5 months ago
None the options are correct. The nearest should be Help Desk Administrator https://learn.microsoft.com/en-us/entra/identity/devices/manage-device-identities#enable-or-disable-a-microsoft-entra-device
upvoted 2 times
...
LiamAzure
1 year, 5 months ago
Answers correct
upvoted 1 times
...
h38jhd38k
1 year, 6 months ago
https://learn.microsoft.com/en-us/mem/intune/fundamentals/role-based-access-control#built-in-roles
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago