nerdexam
MicrosoftMicrosoft

MD-102 · Question #514

MD-102 Question #514: Real Exam Question with Answer & Explanation

The correct answer is B: Assign the Microsoft Entra Joined Device Local Administrator role to Contoso Help Desk.. The Microsoft Entra Joined Device Local Administrator role grants users local administrator rights on devices that are joined to Microsoft Entra ID. Users assigned to this role are added to the local administrators group on Azure AD-joined devices. This allows them to perform tas

Submitted by neha2k· Apr 18, 2026Manage and maintain devices

Question

You have a Microsoft Entra tenant named contoso.com that contains a group named Contoso Help Desk. You need to ensure that Contoso Help Desk is added to the local Administrators group whenever a Windows device is joined to contoso.com. What should you do?

Options

  • AAssign the Cloud Device Administrator role to Contoso Help Desk.
  • BAssign the Microsoft Entra Joined Device Local Administrator role to Contoso Help Desk.
  • CConfigure the Enterprise State Roaming settings.
  • DEnable Microsoft Entra Local Administrator Password Solution (LAPS) for contoso.com.

Explanation

The Microsoft Entra Joined Device Local Administrator role grants users local administrator rights on devices that are joined to Microsoft Entra ID. Users assigned to this role are added to the local administrators group on Azure AD-joined devices. This allows them to perform tasks requiring administrative privileges, such as installing applications or making system changes. https://learn.microsoft.com/en-us/entra/identity/devices/assign-local-admin

Topics

#Entra Device Admin#Local Admin Assignment#Device RBAC#Device Join

Community Discussion

No community discussion yet for this question.

Full MD-102 PracticeBrowse All MD-102 Questions