nerdexam
Microsoft

MD-102 · Question #526

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets…

The correct answer is A. Yes. To enable a user to rotate BitLocker recovery keys via Intune, that user must be assigned an Intune role with the specific 'Rotate BitLocker keys' permission.

Submitted by packet_pusher· Apr 18, 2026Protect devices

Question

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. You have a Microsoft 365 E5 subscription. The subscription contains devices that are Microsoft Entra joined and enrolled in Microsoft Intune. You create a user named User1. You need to ensure that User1 can rotate BitLocker recovery keys by using Intune. Solution: From the Microsoft Intune admin center, you assign the Help Desk Operator role to User1. Does this meet the goal?

Options

  • AYes
  • BNo

How the community answered

(38 responses)
  • A
    74% (28)
  • B
    26% (10)

Why each option

To enable a user to rotate BitLocker recovery keys via Intune, that user must be assigned an Intune role with the specific 'Rotate BitLocker keys' permission.

AYesCorrect

By assigning User1 an Intune role that includes the 'Rotate BitLocker keys' permission (found under 'Managed devices > Remote tasks' in Intune Role-based access control), User1 will be able to initiate the rotation of BitLocker recovery keys for managed devices directly from the Microsoft Intune admin center. This grants the necessary delegated administrative capability.

BNo

The proposed solution, if it involves assigning the correct permissions, will meet the goal.

Concept tested: Intune RBAC for BitLocker key rotation

Source: https://learn.microsoft.com/en-us/mem/intune/fundamentals/role-based-access-control#permissions-for-intune-roles

Topics

#BitLocker recovery keys#Intune RBAC#Help Desk Operator#Entra joined

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice