Exam MD-102 topic 1 question 321 discussion

Group1: Joined (AzureAD) & Windows -> Device2. Group2: Registred (Wrokplace) -> Device3. Device1: ServerAD -> Not in Group1 or Group2. Based on the above: NNY

N - It does not fulfill the -eq "AzureAD" because the device is Microsoft Entra Hybrid Joined. N - Because the device is has Windows OS type and DeviceTrusttype of AzureAD (Microsoft Entra Joined) but not workplace joined Y - Device is Entra registered which is equal to Workplace.

Device1 is a member of Group1 only: - Device1 Details:- Platform: Windows 11 - Join Type: Microsoft Entra hybrid joined (Not AzureAD) - Evaluation: It does NOT match Group1’s rule (requires AzureAD), nor does it match Group2’s rule. - Answer: No. 2. Device2 is a member of Group1 and Group2: - Device2 Details:- Platform: Windows 11 - Join Type: Microsoft Entra joined (Equals AzureAD) - Evaluation:- Matches Group1: Yes (AzureAD-joined + Windows). - Does NOT match Group2: Microsoft Entra joined ≠ Workplace. - Answer: No. (It’s only part of Group1). 3. Device3 is a member of Group2 only: - Device3 Details:- Platform: iOS - Join Type: Microsoft Entra registered (Equals Workplace). - Evaluation: It matches Group2’s rule (Workplace-joined). However, it does NOT meet Group1’s rule (must be AzureAD-joined + Windows). - Answer: Yes.

N - Y - N first 2 are gimmies, but last one is tricky, check this out... "...(device.deviceTrustType -in ["Hybrid Azure AD joined","Azure AD joined"]) This property applies to: Windows 11 Windows 10" https://learn.microsoft.com/en-us/mem/intune/fundamentals/filters-device-properties

NNN https://learn.microsoft.com/en-us/graph/api/resources/device?view=graph-rest-1.0 Type of trust for the joined device. Read-only. Possible values: Workplace (indicates bring your own personal devices), AzureAd (Cloud-only joined devices), ServerAd (on-premises domain joined devices joined to Microsoft Entra ID). Registered = Personal device

When using deviceTrustType to create dynamic membership groups for devices, you need to set the value equal to AzureAD to represent Microsoft Entra joined devices, ServerAD to represent Microsoft Entra hybrid joined devices or Workplace to represent Microsoft Entra registered devices. Da <https://learn.microsoft.com/en-us/entra/identity/users/groups-dynamic-membership>

fo me... device 1, 2 and 3 are device.deviceTrustType -eq "AzureAD" ...registered or joined., but AzureAD. So no one of this can be a group 2 member device 1 and 2 are member of group 1 (win + azureAD) device 3 no group (no win but ios +AZureAD) so i think Y N N completely the opposite of the provided answers

IMO 1:NO 2:NO 3:NO deviceTrustType (Microsoft Entra join type): Create a filter rule based on the device's Microsoft Entra join type. Choose between Azure AD joined, Azure AD registered, Hybrid Azure AD joined, or Unknown values (with -eq, -ne, -in, -notIn operators). Examples: (device.deviceTrustType -eq "Azure AD joined") (device.deviceTrustType -ne "Azure AD registered") (device.deviceTrustType -in ["Hybrid Azure AD joined","Azure AD joined"]) This property applies to: Windows 11 Windows 10

sorry correct device2 member group1 only

why device 2 is member of group 2 match “workplace”？

device 2 - member group 1 only. Device 2 is Entra joined Azure AD Registered (Workplace Joined). so can't be in group2

device1 memeber GRP2 device2 member GRP1 GRP2 device3 member GRP2