nerdexam
Microsoft

MD-102 · Question #26

Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD). You have a Microsoft 365 subscription. You create a conditional access policy for…

The correct answer is D. Device state. The device state condition was used to exclude devices that are hybrid Azure AD joined and/or devices marked as compliant with a Microsoft Intune compliance policy from an organization's Conditional Access policies…

Submitted by noor.lb· Apr 18, 2026Protect devices

Question

Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD). You have a Microsoft 365 subscription. You create a conditional access policy for Microsoft Exchange Online. You need to configure the policy to prevent access to Exchange Online unless is connecting from a device that is hybrid Azure AD-joined. Which settings should you configure?

Options

  • ALocations
  • BDevice platforms
  • CSign-in risk
  • DDevice state

How the community answered

(40 responses)
  • A
    10% (4)
  • B
    5% (2)
  • C
    3% (1)
  • D
    83% (33)

Explanation

The device state condition was used to exclude devices that are hybrid Azure AD joined and/or devices marked as compliant with a Microsoft Intune compliance policy from an organization's Conditional Access policies. https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/conditions#device-

Topics

#Conditional Access#Hybrid Azure AD Join#Exchange Online#Device State

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice