Microsoft 365 Endpoint Administrator Associate MD-102 Practice Question
You plan to roll out 500 corporate-owned Windows 11 Enterprise laptops. Company policy requires that the operating system volume is automatically encrypted with BitLocker during Autopilot enrollment, that recovery keys are stored in Azure AD, and that users cannot disable BitLocker. In Microsoft Intune, which type of policy should you create to meet these requirements while adhering to Microsoft best practice?
Create an Endpoint security Disk encryption policy that uses the Windows 10 and later BitLocker profile.
Create an Endpoint security Antivirus policy and enable drive encryption settings.
Create a Device configuration profile that uses the Identity protection template.
Create a Device compliance policy that marks devices noncompliant if BitLocker is disabled.
Endpoint security Disk encryption policies are designed specifically for managing BitLocker and FileVault settings. A Windows (BitLocker) profile automatically enables BitLocker during provisioning, escrows the recovery key to Azure AD, and exposes settings that prevent users from turning BitLocker off. A Device configuration profile created from the Identity protection template can also configure BitLocker, but Microsoft recommends using the more focused Endpoint security policy for new deployments. A Device compliance policy can only report and enforce compliance; it does not configure BitLocker. An Endpoint security Antivirus policy contains antivirus-related settings and cannot manage drive encryption.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is BitLocker and why is it important for security?
Open an interactive chat with Bash
What is Microsoft Intune and how does it help in deploying security policies?
Open an interactive chat with Bash
What is Autopilot enrollment and how does it streamline device provisioning?
Open an interactive chat with Bash
Microsoft 365 Endpoint Administrator Associate MD-102
Protect devices
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .