Microsoft 365 Endpoint Administrator Associate MD-102 Practice Question
You deploy Endpoint Privilege Management (EPM) and assign a settings policy to a group of Windows 11 devices. Help-desk staff ask that a line-of-business executable (C:\Apps\AcmeTool.exe) can be run with elevated rights by standard users for up to two hours, without requiring service-desk approval. What should you configure next in Microsoft Intune to meet the requirement?
Assign the built-in Help Desk Operator Intune role to the users for two hours by using a Privileged Identity Management (PIM) activation.
Create a second Endpoint Privilege Management settings policy that enables User confirmed elevations and assign it to the same device group.
Deploy the Windows security baseline and enable the policy setting 'Enable LAPS and Local Admin Password Rotation'.
Create an Endpoint Privilege Management Elevation rules policy, add an Automatic rule for C:\Apps\AcmeTool.exe, and set the maximum elevation duration to 120 minutes.
EPM elevation settings policies turn on the EPM agent, but elevation behaviour is defined in a separate Elevation rules policy. To allow users to elevate a specific executable automatically, add a rule that targets the file path, choose the Automatic approval mode, and set the Maximum elevation duration to the required value (120 minutes). Creating another settings policy only enables or disables EPM features; role assignments or security baselines do not grant just-in-time local administrator rights through the EPM agent.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Endpoint Privilege Management (EPM) in Microsoft Intune?
Open an interactive chat with Bash
How does an Elevation rules policy differ from an EPM settings policy?
Open an interactive chat with Bash
What does setting a 'Maximum elevation duration' in an Elevation rules policy accomplish?
Open an interactive chat with Bash
Microsoft 365 Endpoint Administrator Associate MD-102
Manage and maintain devices
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .