Microsoft 365 Certified Endpoint Administrator (MD-102) Practice Test

Which setting should be configured to enable automatic enrollment of devices into Intune upon joining Azure AD?

1. Automatic enrollment

2. Conditional access

3. Device compliance policies

4. Mobile device management authority

The correct answer is: Automatic enrollment

To enable automatic enrollment of devices into Intune when they join Azure Active Directory (Azure AD), the setting that needs to be configured is automatic enrollment. This feature facilitates the seamless integration of devices into the Intune management framework, allowing organizations to manage their devices efficiently right from the startup process when a user first logs into their device with their Azure AD credentials. When automatic enrollment is configured, it triggers the enrollment process automatically for compliant devices, thus ensuring that they are registered with Intune without requiring additional user intervention. This is particularly beneficial for organizations looking to streamline their device management processes, as it allows IT administrators to maintain control over devices, enforce compliance policies, and deploy applications and updates seamlessly. In contrast, the other options serve different purposes within the ecosystem: conditional access defines the policies regarding how users can access resources based on compliance with security requirements but does not relate directly to device enrollment. Device compliance policies outline the security measures that devices must adhere to within Intune but do not facilitate automatic enrollment. Lastly, mobile device management authority determines whether Intune or a different MDM solution is responsible for device management but does not handle the enrollment process itself.