Exam MD-102 topic 1 question 340 discussion

I think is YYN Enrollment through the Company Portal is most commonly associated with personally owned devices (BYOD). However, it isn’t strictly limited to personal devices. 1. “User2 can enroll Device1 by using the Company Portal app.” User2 is in Group2 → Restriction1 does not apply. Restriction2 allows personal devices if Windows is at least 10.0.22000 (Windows 11). Answer: Yes 2. “User1 can enroll Device2 by using automatic enrollment.” User1 is in Group1 → Restriction1 apply first, with no minimum OS required and which blocks personal devices. Since automatic enrollment is used for corporate devices, the “Block personally owned devices” setting does not affect this scenario. Answer: Yes 3. “User1 can enroll Device3 by using the Company Portal app.” User1 is in Group1 → Restriction1 blocks all personal devices. Even though Device3 is Windows 11 (>= 10.0.22000), Restriction1 (higher priority) still blocks. Answer: No

So I agree with the given answers. The only one that's a bit tricky for me is if User1 can enroll Device2 by using automatic enrollment. User1 is part of Group1 which is affected by Restriction1 and 2. Restriction1 has a higher priority so that would mean that User1 would never be affected by Restriction2? The devices are all in a tenant, so not personally owned. There is no minimum version of Windows. So I don't see what is blocking User1 from enrolling Device2.

1. “User2 can enroll Device1 by using the Company Portal app.” User2 is in Group2, so Restriction1 does not apply. Restriction2 allows personal devices if Windows is at least 10.0.22000. Device1 is Windows 11 → OS version ≥ 10.0.22000 → Allowed. Answer: Yes 2. “User1 can enroll Device2 by using automatic enrollment.” User1 is in Group1 → hits Restriction1 first, which blocks personal devices outright. Even if Device2 is Windows 10, the user never reaches Restriction2’s logic if the device is personal. Answer: No 3. “User1 can enroll Device3 by using the Company Portal app.” Again, User1 is in Group1 → Restriction1 blocks all personal devices. Even though Device3 is Windows 11 (>= 10.0.22000), Restriction1 (higher priority) still blocks. Answer: No

I think it is YYN: 1) Yes, Restrictions2 allows personal enrollments of Windows 11 (min version). 2) Yes, Restrictions1 (higher priority) allows corporate enrollment, no min version configured. 3) No, Restriction1 blocks personal enrollments.