Exam MD-102 All Questions

View all questions & answers for the MD-102 exam

Exam MD-102 topic 1 question 241 discussion

Actual exam question from Microsoft's MD-102

Question #: 241
Topic #: 1

HOTSPOT
-

You have two Windows 10 devices enrolled in Microsoft Intune as shown in the following table.

The Compliance policy settings are configured as shown in the following exhibit.

On August 1, you create a compliance policy as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by mp34 at Jan. 18, 2024, 1:58 p.m.

Comments

Submit Cancel

mp34

Highly Voted 1 year, 5 months ago

I think it should be N, N, Y Device 1 is not included and marked as non-compliant Device 2 is never compliant Device 2 retired on the 6th day

upvoted 21 times

OyYaGotta

1 year, 2 months ago

Question asked if device 2 i compliant on Aug 2, that is not enough time to mark as non compliant even though it isn't compliant. Once it reaches 6 August it is then retired.

upvoted 3 times

servL

11 months, 2 weeks ago

Device 2 would be InGracePeriod status, not Compliant or NonCompliant according to this: "Specifically, if a device has a NonCompliant status for an assigned compliance policy, and: ...The device has a grace period that's in the future, then the assigned value for the compliance policy is InGracePeriod" https://learn.microsoft.com/en-us/mem/intune/protect/create-compliance-policy#assign-an-ingraceperiod-status

upvoted 6 times

...

Merrybob

Highly Voted 1 year, 4 months ago

NYN Device 1 is part of Group 2 and hence does not receive the policy. It will be marked as non-compliant as per the configuration above. Device 2 is marked as compliant because it is within it's grace period (3 days). After the grace period it would be marked as non-compliant due to Bitlocker being disabled. Device 2 will not be retired on August 6th. It will be marked as non-compliant after the 3rd day and it will be retired after the 5th day (i.e. Aug 7th). (Ref: https://www.vansurksum.com/2021/04/07/designing-and-configuring-compliance-policies-for-your-windows-modern-workplace-using-microsoft-endpoint-manager/#:~:text=You%20can%20decide%20to%20retire,action%20to%20retire%20the%20device.) .

upvoted 7 times

Krayzr

1 year, 4 months ago

Second question, in my experience, a new device doesn't start as "compliant" in intune. It stays in the "evaluating" state till it get marked accordingly.

upvoted 2 times

Merrybob

1 year, 4 months ago

Excellent point. Just read that during the grace period MS states a device will be marked as Noncompliant. I correct my answer to NNN. From Microsoft: "In-grace period: The device is targeted with one or more device compliance policy settings but isn't yet compliant to all of them. Often this is due to users not applying compliant configurations, like meeting password complexity requirements. Devices with this status are noncompliant, but in the grace period defined by the admin." Ref: https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-monitor#:~:text=In%2Dgrace%20period,by%20the%20admin. I enjoy the discussion. Good luck with your learning and exam! .

upvoted 4 times

...

ExamBud

Most Recent 4 months ago

For me it is NNN: 1) Not compliant becasue of general compliance settings (not assigned to policy) 2) Not compliant, it is in grace period. That doesn't make that the device is compliant. 3) It will be retire after 5 days of non-compliance. First it is in grace period, then not compliant (Day 4)+5 days of noncompliance= retire on Day 9.

upvoted 3 times

XylosSW

3 months, 3 weeks ago

Agree with the first two. Third one is also no, but for two reasons. Date is wrong and further action needs to be taken. 1) https://learn.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started#compliance-policy-settings 2) https://learn.microsoft.com/en-us/mem/intune/protect/actions-for-noncompliance#available-actions-for-noncompliance "When you change the default schedule, you provide a grace period in which a user can remediate issues or become compliant without being marked as noncompliant." For me, this seems to indicate that the device is neither compliant nor noncompliant?? 3) Admin has to take an explicit action to retire one or more devices: "Retire devices after they’ve been noncompliant for some time. This action marks a qualifying device as ready to be retired. An admin can then view a list of devices marked for retirement and must take an explicit action to retire one or more devices." So: NO, NO, NO

upvoted 2 times

...

Alex_UC

7 months, 1 week ago

NYY In my opinion. Device1 have no compliance policy assigned so is amrked as not compliant Device2 is in grace period, but not yet marked as not compliant Device2 is retired after 5 days of compliance detected the non-compliance of the device, th "mark device as not compliant" doe not matter https://learn.microsoft.com/en-us/mem/intune/protect/actions-for-noncompliance

upvoted 3 times

5d7abc9

4 months ago

I think Device3 is retired after 8 days (3+5), 5 days after being non compliant. Imagine the situation where non-compliancy is set at 3 days, and retire at 1 day.... The device would be retired even before being marked as non-compliant.

upvoted 1 times

...

PrepaCertif

1 year ago

N Y N device 1 = grp2 = exclude = non compliant device 2 = Bitlocker disabled = grp1 = compliant 08/02 but after 3 days he's no compliant device 2 = 08/04 no compliant, add 5 days before is retired = 08/09

upvoted 4 times

ergacharsk

11 months ago

thanks for the good clarification

upvoted 2 times

bigreg

9 months ago

agree, NYN

upvoted 1 times

...

MR_Eliot

1 year, 3 months ago

n,y,n Mark devices with no compliance policy assigned as This setting determines how Intune treats devices that haven't been assigned a device compliance policy. This setting has two values: >Compliant (default): This security feature is off. Devices that aren’t sent a device compliance policy are considered compliant. >Not compliant: This security feature is on. Devices that haven’t received a device compliance policy are considered noncompliant. >Compliance status validity period (days) Specify a period in which devices must successfully report on all their received compliance policies. If a device fails to report its compliance status for a policy before the validity period expires, the device is treated as noncompliant. By default, the period is set to 30 days. You can configure a period from 1 to 120 days. https://learn.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started#device-compliance-policies

upvoted 5 times

Alex_UC

7 months, 1 week ago

Compliance status validity period (days) is only used for offline devices, if a device is online and in the text is not specified the opposite that setting do not kickin

upvoted 2 times

...

AdamRachel

1 year, 4 months ago

i think in question is forgotten to add on what day policy was apply..?

upvoted 2 times

Krayzr

1 year, 4 months ago

Read before you post On August 1, you create a compliance policy as shown in the following exhibit.

upvoted 1 times

...

LimpyMcDix

1 year, 4 months ago

I believe given answer is correct. Here's what I have deduced : No. Device 1 is not compliant because it is excluded from the compliance policy by group and devices w/o policy are non-compliant. Yes. Device 2 is compliant because although it does not have bitlocker enabled, it does have the compliance policy applied to it making it compliant before the policy catches the non-compliant attribute. No. Device 2 will not be retired on the 6th because it will be retired 5 days after being marked non-compliant which falls on a day after the 6th. Correct me if I'm wrong.

upvoted 5 times

Roska

6 months, 3 weeks ago

Then Device 2 should be retired on 16-th of August, correct?

upvoted 1 times

...

mrwhite

1 year, 5 months ago

Given answers seem correct to me. Device 1 is not included and marked as non-compliant Device 2 is marked non compliant only after 3 days, so not on August 2 Device 3 is retired 5 days after that, so not in August 6

upvoted 1 times

...

NoursBear

1 year, 5 months ago

That was also my guessed answer for the same reasons

upvoted 1 times

...