MS-102 · Question #493
You have a Microsoft 365 E5 subscription that contains the devices shown in the following table. You need to implement Windows Information Protection (WIP). The solution must meet the following…
The correct answer is B. 2. Two separate app protection policies are required because enrolled and unenrolled devices use fundamentally different policy types with different enforcement modes. Policy 1 (for MDM-enrolled devices): A WIP policy configured with 'Allow Overrides' mode, which permits users to…
Question
You have a Microsoft 365 E5 subscription that contains the devices shown in the following table. You need to implement Windows Information Protection (WIP). The solution must meet the following requirements:
- Ensure that users on enrolled devices can override the WIP policy
settings.
- Prevent users on unenrolled devices from overriding the WIP policy
settings. What is the minimum number of app protection policies required?
Exhibit
Options
- A1
- B2
- C3
- D4
How the community answered
(48 responses)- A6% (3)
- B77% (37)
- C15% (7)
- D2% (1)
Explanation
Two separate app protection policies are required because enrolled and unenrolled devices use fundamentally different policy types with different enforcement modes. Policy 1 (for MDM-enrolled devices): A WIP policy configured with 'Allow Overrides' mode, which permits users to override protection decisions and log the action. Policy 2 (for unenrolled/MAM devices): A WIP without enrollment (WIP-WE/MAM) policy configured in 'Block' or 'Silent' mode, which prevents users from overriding protection settings. Since the enrollment state and required override behavior differ, these two scenarios cannot be satisfied by a single policy-hence the minimum is 2.
Topics
Community Discussion
No community discussion yet for this question.