nerdexam
Microsoft

MS-102 · Question #107

You have a Microsoft 365 E5 subscription that has Microsoft Defender for Endpoint integrated with Microsoft Intune. Devices are onboarded by using Microsoft Defender for Endpoint. You plan to block…

The correct answer is B. a device compliance policy. https://learn.microsoft.com/en-us/microsoft-365/solutions/manage-devices-with-intune-monitor- risk?view=o365-worldwide#monitor-device-risk-as-a-condition-for-access

Submitted by jordan8· Apr 18, 2026Implement and manage Microsoft Entra identity and access

Question

You have a Microsoft 365 E5 subscription that has Microsoft Defender for Endpoint integrated with Microsoft Intune. Devices are onboarded by using Microsoft Defender for Endpoint. You plan to block devices based on the results of the machine risk score calculated by Microsoft Defender for Endpoint. What should you create first?

Options

  • Aa device configuration policy
  • Ba device compliance policy
  • Ca conditional access policy
  • Dan endpoint detection and response policy

How the community answered

(45 responses)
  • A
    7% (3)
  • B
    73% (33)
  • C
    4% (2)
  • D
    16% (7)

Explanation

https://learn.microsoft.com/en-us/microsoft-365/solutions/manage-devices-with-intune-monitor- risk?view=o365-worldwide#monitor-device-risk-as-a-condition-for-access

Topics

#Device compliance#Microsoft Intune#Microsoft Defender for Endpoint#Risk-based access

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full MS-102 Practice