Microsoft 365 Endpoint Administrator Associate MD-102 Practice Question

Your organization uses Microsoft Intune. A Windows 10/11 device configuration profile named SecureBaseline is assigned to the Azure AD group All devices. You must ensure the profile is applied only to devices that run Windows 11 and whose model contains Surface, without changing the existing group assignment. What should you do?

  • Add a filter that matches Surface devices and select the Exclude option when applying it to the current assignment.

  • Create an Intune filter with a rule that matches Surface models running Windows 11 and select the Include option when attaching the filter to the existing assignment.

  • Create a dynamic Azure AD device group that contains Surface devices running Windows 11 and assign the profile to that group instead of All devices.

  • Apply a custom scope tag to each Surface device and assign the profile to that scope tag.

Microsoft 365 Endpoint Administrator Associate MD-102
Manage and maintain devices
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot