nerdexam
Microsoft

MD-102 · Question #406

You have a Microsoft 365 tenant. You have devices enrolled in Microsoft Intune. You assign a conditional access policy named Policy1 to a group named Group1. Policy1 restricts devices marked as…

The correct answer is B. From the Azure Active Directory admin center, review the Conditional Access Insights and. The correct answer is B - review Conditional Access Insights and Reporting in the Azure Active Directory admin center. This built-in workbook integrates with Azure AD Sign-in logs to show which sign-in attempts were impacted by which Conditional Access policies, including which…

Submitted by rachelw· Apr 18, 2026Protect devices

Question

You have a Microsoft 365 tenant. You have devices enrolled in Microsoft Intune. You assign a conditional access policy named Policy1 to a group named Group1. Policy1 restricts devices marked as noncompliant from accessing Microsoft OneDrive for Business. You need to identify which noncompliant devices attempt to access OneDrive for Business. What should you do?

Options

  • AFrom the Microsoft Endpoint Manager admin center, review Device compliance report.
  • BFrom the Azure Active Directory admin center, review the Conditional Access Insights and
  • CFrom the Microsoft Endpoint Manager admin center, review the Setting compliance report.
  • DFrom the Microsoft Endpoint Manager admin center, review the Noncompliant devices report.

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    82% (28)
  • C
    6% (2)
  • D
    9% (3)

Explanation

The correct answer is B - review Conditional Access Insights and Reporting in the Azure Active Directory admin center. This built-in workbook integrates with Azure AD Sign-in logs to show which sign-in attempts were impacted by which Conditional Access policies, including which noncompliant devices were blocked from accessing specific apps like OneDrive for Business. Option A (Device compliance report) shows overall compliance status, not access attempts. Option C (Setting compliance report) breaks down individual setting compliance, not sign-in activity. Option D (Noncompliant devices report) lists noncompliant devices but does not correlate them to specific access attempts against OneDrive.

Topics

#Conditional Access#Device Compliance#Azure AD Insights#OneDrive access control

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice