nerdexam
Microsoft

MD-102 · Question #519

You have a Microsoft Entra tenant named contoso.com that contains a Windows 11 device named Device1 and a user named User1. User1 registers Device1 in contoso.com. Which capability is available to…

The correct answer is A. authenticating to cloud resources by using single sign-on (SSO). A Microsoft Entra registered device allows users to authenticate to cloud resources using single sign-on (SSO) with their work or school account.

Submitted by eva_at· Apr 18, 2026Prepare infrastructure for devices

Question

You have a Microsoft Entra tenant named contoso.com that contains a Windows 11 device named Device1 and a user named User1. User1 registers Device1 in contoso.com. Which capability is available to Device1 after registering in contoso.com?

Options

  • Aauthenticating to cloud resources by using single sign-on (SSO)
  • Benforcing compliance policies
  • Cenforcing software updates
  • Denforcing hard drive encryption

How the community answered

(43 responses)
  • A
    93% (40)
  • B
    5% (2)
  • D
    2% (1)

Why each option

A Microsoft Entra registered device allows users to authenticate to cloud resources using single sign-on (SSO) with their work or school account.

Aauthenticating to cloud resources by using single sign-on (SSO)Correct

When a device is Microsoft Entra registered, it gains an identity in the Microsoft Entra tenant, enabling users to access cloud resources such as Microsoft 365 applications with seamless single sign-on (SSO) using their corporate credentials.

Benforcing compliance policies

Enforcing compliance policies typically requires the device to be Microsoft Entra joined or Hybrid Microsoft Entra joined and managed by an MDM solution like Intune, not merely registered.

Cenforcing software updates

Enforcing software updates is a device management capability provided by MDM solutions or other management systems, which goes beyond simple device registration.

Denforcing hard drive encryption

Enforcing hard drive encryption like BitLocker is a device management function, usually handled by MDM policies or Group Policy, and is not an inherent feature of basic device registration.

Concept tested: Microsoft Entra registered device capabilities

Source: https://learn.microsoft.com/en-us/entra/identity/devices/concept-directory-role#azure-ad-registered

Topics

#Entra device registration#Single sign-on#Cloud authentication#Windows 11

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice