MD-102 Question #518: Real Exam Question with Answer & Explanation

The correct answer is A: Device settings. To restrict which users can join devices to Microsoft Entra ID, you must configure the device settings in the Microsoft Entra admin center.

Submitted by certguy· Apr 18, 2026Prepare infrastructure for devices

Question

You have a Microsoft 365 E5 subscription that contains a group named Group1. You need to ensure that only the members of Group1 can join devices to the Microsoft Entra tenant. What should you configure in the Microsoft Entra admin center?

Options

ADevice settings
BMobility
CEnterprise State Roaming
DUser settings

Explanation

To restrict which users can join devices to Microsoft Entra ID, you must configure the device settings in the Microsoft Entra admin center.

Common mistakes.

B. Mobility (MDM and MAM) settings configure automatic enrollment for mobile device management solutions like Intune, not direct permissions for joining devices to Microsoft Entra ID.
C. Enterprise State Roaming synchronizes user settings and application data across Windows devices but does not control device join permissions.
D. User settings in Microsoft Entra ID pertain to general user configurations like profile management and password reset, not device join restrictions.

Concept tested. Microsoft Entra device join restrictions

Reference. https://learn.microsoft.com/en-us/entra/identity/devices/device-management-azure-portal#configure-device-settings

Topics

#Entra device join restrictions#Device settings configuration#Group-based access control#Entra admin center

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice Browse All MD-102 Questions