MS-102 Question 198

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 4

  Devices that can be onboarded to Microsoft Defender for Endpoint: Device1, Device2, Device3, and Device4 (Windows 10, Windows 11, iOS, and Android are all supported platforms, and can be integrated with Intune and Defender for Endpoint). Endpoint security policies that must be configured: Device configuration profile, device compliance policy, and conditional access policy (device compliance uses Defender for Endpoint risk levels, and Conditional Access then blocks noncompliant devices from accessing corporate resources). https://learn.microsoft.com/en-us/defender-endpoint/configure-conditional-access

• 4

  according to GPT 5.1: ✅ Devices that can be onboarded and can be used for risk-based compliance-: 👉 Device1 and Device2 only (Windows 10/11) ✅ Required policies: 👉 **Device configuration profile device compliance policy conditional access policy** the question is not only alone that "Which devices can be onboarded to Defender for Endpoint?” - if this would be the only question that yes, iOS and Android can be onboarded as well but the truth is that there is another question (2nd one) and the key sentence in the scenario is: "You plan to use risk levels in Microsoft Defender for Endpoint to identify whether a device is compliant. Noncompliant devices must be blocked from accessing corporate resources." this is not a normal onboarding but it is: Defender for Endpoint risk > Intune device compliance > Conditional Access > Access block

• 1

  Box1: All devices Box2: A conditional access policy only