Exam MS-101 All Questions

View all questions & answers for the MS-101 exam

Exam MS-101 topic 1 question 32 discussion

Actual exam question from Microsoft's MS-101

Question #: 32
Topic #: 1

HOTSPOT -
You have three devices enrolled in Microsoft Endpoint Manager as shown in the following table.

The device compliance policies in Endpoint Manager are configured as shown in the following table.

The device compliance policies have the assignments shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

by ALPHA_DELTA at April 5, 2021, 8:15 p.m.

Comments

Submit Cancel

ALPHA_DELTA

Highly Voted 4 years, 4 months ago

Device1 is compliant: No, because Device 1 is member of group 3 so policy 1 is assigned. Policy 1 requires Bitlocker encryption which device 1 does not have thus is Device 1 marked as non compliant Device2 is compliant: No, because Device 2 is member of group 2 and 3, Device 2 is marked as non compliant by the same reason as Device 1. Device3 is compliant: Yes, Device 3 is member of group 2, Policy 2 applies to Group 2, the policy does not require Bitlocker encryption, thus the device is compliant

upvoted 35 times

...

us3r

Highly Voted 3 years, 9 months ago

NO (policy1) NO (policy1 applied by priority - higher) YES (policy2)

upvoted 8 times

junior6995

3 years, 7 months ago

Most restrictive polices overrides less restrictive policies

upvoted 3 times

...

edzio

3 years, 6 months ago

Does assignment or no policy matter?? Policy 3 is not assigned - device 2 is still not complaint.

upvoted 2 times

mir000

3 years, 6 months ago

policy 3 is not assigned and not even used here, it should be completly ignored in this question

upvoted 4 times

...

Futfuyfyjfj

2 years, 8 months ago

Compliance policies do not have priorities.

upvoted 3 times

...

rrrr5r

Most Recent 2 years, 11 months ago

Valid in 16 Sep 22

upvoted 5 times

...

Domza

4 years ago

There we go: https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-troubleshoot#if-multiple-policies-are-assigned-to-the-same-user-or-device-how-do-i-know-which-settings-gets-applied When two or more policies are assigned to the same user or device, then the setting that's applied happens at the individual setting level: • Compliance policy settings always have precedence over configuration profile settings. • If a compliance policy evaluates against the same setting in another compliance policy, then the most restrictive compliance policy setting applies. • If a configuration policy setting conflicts with a setting in another configuration policy, this conflict is shown in Intune. Manually resolve these conflicts. Thanks for the link " kiketxu "

upvoted 4 times

...

adaniel89

4 years, 1 month ago

So only the most secure policy is chosen ? referring to Device 2

upvoted 1 times

...

GiJoe1987

4 years, 2 months ago

Policy 3 is not assigned so why is device 2 not complaint.

upvoted 1 times

...

Prianishnikov

4 years, 4 months ago

NO-NO-YES or YES-YES-YES ?

upvoted 1 times

Lopsios

4 years, 3 months ago

Why YYY?

upvoted 1 times

...

lucidgreen

4 years, 3 months ago

If the device is marked as non-compliant by one policy, it cannot be marked as compliant by another policy. If one policy marks it as non-compliant it is non-compliant until the discrepancy is resolved. N, N, Y.

upvoted 6 times

...

MSGrady

4 years, 4 months ago

How is device 2 not compliant if it is in group 2 that is "Assigned" but not requiring bitlocker?

upvoted 2 times

barleyhutcher

4 years, 4 months ago

because its also in group 3 which does require bitlocker. When there is more than 1 CA policy assigned, the more secure one takes precedence.

upvoted 6 times

kiketxu

4 years, 4 months ago

Agreed. https://docs.microsoft.com/en-us/mem/intune/configuration/device-profile-troubleshoot#if-multiple-policies-are-assigned-to-the-same-user-or-device-how-do-i-know-which-settings-gets-applied

upvoted 2 times

...