MD-102 Exam - Question 105

Question

HOTSPOT-You have a Microsoft Intune subscription that has the following device compliance policy settings:•	Mark devices with no compliance policy assigned as: Compliant•	Compliance status validity period (days): 14On January1, you enroll Windows 10 devices in Intune as shown in the following table. On January 4, you create the following two device compliance policies:•	Name: Policy1•	Platform: Windows 10 and later•	Require BitLocker: Require•	Mark device noncompliant: 5 days after noncompliance•	Scope (Tags): Tag1•	Name: Policy2•	Platform: Windows 10 and later•	Firewall: Require•	Mark device noncompliant: Immediately•	Scope (Tags): Tag2On January 5, you assign Policy1 and Policy2 to Group1. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Examice · Accepted Answer

.

HawkieEyes · Answer

N - no firewall, policy 2 marks it non compliant immediately
N - see above
Y - will be set to not compliant on the 10th

reapernam · Answer

The answer could be YYY.

Devices are already compliant before having the policies assigned to them. So when the newly added compliancy policies take effect, the devices are still compliant.
1. Yes- Device is still within its 14 day validity of initial compliance, and with 5-day rule, will only be labeled as non-compliant after 5 days, meaning its still compliant.
2. Same as above.
3. Yes, Look at cserra answer

reapernam · Answer

On Second thought, its N N Y.

Like ExamKiller020 says, the Scope Tags have no relevance in Policy or Group assignments. So both Policies are being applied.

ZaFletch · Answer

Scope tags are irrelevant to policy deployment. So both policies apply to both machines on 4th.

Policy 2 marks non-compliance immediately so device 1 is marked non-compliant immediately as it fails the criteria.

Device 2 passes but it will fail on Policy 2. However it's not marked non-compliant until the 9th. So on the 8th it will remain compliant.

NNY

mhmyz · Answer

I think YYY
Y - Device1=Tag1 Policy1 only apply
Y - Device1=Tag1 Policy1 only apply
Y - Device2=Tag2 Policy2 only apply
Scope Tag:
https://learn.microsoft.com/en-us/mem/intune/protect/create-compliance-policy

MR_Eliot · Answer

NNY for sure.

Grg433 · Answer

can someone please explaing why N,N,Y ?

cserra · Answer

I think the answer is YYY

Initialy, all devices are compliant.
1) On jan 7, Policy1 don't mark yet as not compliant because need pass 5 days to apply the "noncompliant". Policy2 dont apply because Device1 is out of his scope (Tag2). Then, is it compliant? YES
2) On jan 8, the case is the same than before. Then YES
3) To Device2, only the Policy2 is applicable (Tag2). The device has the firewall activated. Then, is it compliant? YES

ExamKiller020 · Answer

Just remember: Scope (Tags) are used to determine which objects admins can see.
N,N,Y

RabbitB · Answer

Isn't the answer NNN??
Both devices are assigned a compliance policy, which means they don't mark them as "compliant".
Regardless of the day and devices, all are not marked as "compliant". Am I wrong?

iamforksu · Answer

NNY for the win

Manojkl1206 · Answer

ITs NNN
Because: as both policy are applied
Policy2 says move the device immediately to Non compliant it will not wait for 5 days hence the 3rd answer should be N

Darkfire · Answer

I think NNN
Because both policies will mark devices as non-compliant. Eventhough some variables pass the criteria.

ergacharsk · Answer

According to the Chat GPT correct answer is Y,Y,Y

MD-102 Exam - Question 105

Discussion