What should you do?

You have a Microsoft 365 tenant that contains the devices shown in the following table.

The devices are managed by using Microsoft Intune.

You create a compliance policy named Policy1 and assign Policy1 to Group1. Policy1 is configured to mark a device as Compliant only if the device security settings match the settings specified in the policy.

You discover that devices that are not members of Group1 are shown as Compliant.

You need to ensure that only devices that are assigned a compliance policy can be shown as Compliant. All other devices must be shown as Not compliant.

What should you do?
A . From Tenant administration, modify the Diagnostic settings.
B. From Device compliance, configure the Compliance policy settings.
C. From Endpoint security, configure the Conditional access
D. From Policy1, modify the actions for noncompliance.

View Answer

Answer: B

Explanation:

Reference: https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started