EarnYourCert
Open the app
Exams › MD-102 › Domain 4 of 5
MD-102 · Domain 4 of 5 · 15-20% of the exam

Protect devices

Domain 4 of MD-102 accounts for 15-20% of the exam. EarnYourCert has 145 original questions for this domain, all with explanations: 97 multiple choice, 22 yes/no and 26 completion or ordering items, like the real exam.

Practice domain 4 for free →No sign-up. Choose how many questions you want.

Domain 4 sample questions

8 questions from our 145-question bank for this domain. Try to answer before revealing the solution.

1. You want to create an antivirus policy in Intune for Windows devices that configures Microsoft Defender Antivirus. Where should you create it in the Intune portal?

  1. Devices > Compliance policies
  2. Endpoint security > Antivirus
  3. Device configuration > Profiles
  4. Apps > App configuration policies
Show answer

Correct answer: B. Antivirus policies are created under Endpoint security > Antivirus in the Intune portal. They allow configuring Microsoft Defender Antivirus with specific security options.

2. Which Intune endpoint security policy allows configuring Windows Defender Firewall, including specific inbound and outbound rules for applications and ports?

  1. Antivirus policy > Microsoft Defender Antivirus
  2. Firewall policy in Endpoint security
  3. Device configuration profile > Device restrictions
  4. Windows Security baseline
Show answer

Correct answer: B. Firewall policies in Intune Endpoint security allow configuring Windows Defender Firewall, including enabling by network profile and custom inbound and outbound rules.

3. Which endpoint security policy type in Intune should you create to configure BitLocker encryption on Windows devices and automatically store recovery keys in Microsoft Entra ID?

  1. Antivirus policy in Endpoint security
  2. Disk encryption policy in Endpoint security
  3. Device configuration profile with Endpoint Protection type
  4. Windows Security baseline
Show answer

Correct answer: B. Disk encryption policies in Endpoint security allow configuring BitLocker for Windows with options like encrypt used space only, encryption method, and key backup to Entra ID.

4. What information does Microsoft Secure Score provide in relation to Intune?

  1. The compliance score of Intune-managed devices with detailed status of each applied security policy
  2. A score that measures the organization's security posture with improvement recommendations that include Intune actions
  3. The exact percentage of devices with antivirus updated to the latest available version per Intune compliance reports
  4. The total number of active security incidents detected by Microsoft Defender for Endpoint on Intune-managed devices
Show answer

Correct answer: B. Microsoft Secure Score measures the organization's overall security posture and includes Intune recommendations like 'Enable BitLocker', 'Configure compliance policies', etc., with their score impact.

5. How many device risk levels does the Microsoft Defender for Endpoint integration define for use with Intune compliance policies?

  1. Two: compliant and non-compliant
  2. Three: low, medium, and high
  3. Four: none, low, medium, and high
  4. Five: none, informational, low, medium, and high
Show answer

Correct answer: C. The MDE-Intune integration defines four device risk levels: None (no threats), Low, Medium, and High. In the Intune compliance policy you define the maximum acceptable level.

6. Which Intune feature allows planning and monitoring the status of Windows updates across the organization, including the percentage of updated devices and installation errors?

  1. The Intune compliance dashboard with device update policy status information
  2. Windows update reports in the Intune portal (Reports > Windows updates)
  3. The Microsoft 365 Message Center with Windows security update announcements
  4. The Microsoft Update Catalog with quality update approval history
Show answer

Correct answer: B. The Intune portal includes detailed reports on Windows update status, showing which devices are updated, which have errors, and deployment progress per ring.

7. Which Intune reports allow viewing the percentage of devices successfully updated within each Windows update ring?

  1. Device compliance reports in the Device Compliance section of the Intune portal
  2. Windows Update reports in Intune Reports > Windows Updates
  3. App configuration reports in the applications section of the Intune portal
  4. The Endpoint Analytics portal in the Intune Reports section
Show answer

Correct answer: B. Windows Update reports in Intune (Reports > Windows updates) show device update status, including the percentage updated, errors, and pending devices per ring.

8. Which tool can an administrator use to verify the current status of Delivery Optimization on a Windows device and view P2P vs. CDN download statistics?

  1. Microsoft Intune Reports > Windows Updates > Delivery Optimization, in the portal reports section
  2. The "Delivery Optimization" app in the Windows Control Panel, advanced network section
  3. The PowerShell cmdlet Get-DeliveryOptimizationStatus or the Windows Settings panel > Updates
  4. Microsoft Defender for Endpoint > Network Reports > Delivery Optimization Traffic
Show answer

Correct answer: C. The Get-DeliveryOptimizationStatus PowerShell cmdlet provides detailed DO statistics on the device. The Windows Settings > Updates panel also shows basic DO statistics.

Practice domain 4 for free →

Other MD-102 domains

1Prepare infrastructure for devices20-25% 2Manage and maintain devices25-30% 3Manage and secure applications15-20% 5Optimize endpoint operations by using automation, monitoring, and reporting10-15% MD-102: full practice exam→