Crucial Exams

Microsoft 365 Administrator Expert MS-102 Practice Question

Contoso manages 5,000 Windows 10/11 Enterprise computers with Intune and has licensed Microsoft Defender for Endpoint Plan 2. The security team must stop users from writing data to any removable storage device, but they must continue to allow smart-card readers and company-issued encrypted USB drives identified by their hardware IDs. They want to enforce the setting centrally through Intune. Which type of Intune policy should you create?

  • An Endpoint security Attack surface reduction policy that uses the Device control profile

  • A device compliance policy that requires BitLocker encryption on removable drives

  • An Endpoint security Antivirus policy that uses the Microsoft Defender Antivirus profile

  • A Configuration profile created with the Settings catalog to configure the RemovableStorage CSP

Microsoft 365 Administrator Expert MS-102
Manage security and threats by using Microsoft Defender XDR
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot