You have a Microsoft 365 E5 subscription that uses Microsoft Intune

HOTSPOT

You have a Microsoft 365 E5 subscription that uses Microsoft Intune.

You have the Windows 11 devices shown in the following table.

You deploy the device compliance policy shown in the exhibit. (Click the Exhibit tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

View Answer

Answer:

Explanation:

Box 1: Yes

Device1 has BitLocker enabled.

Device1 is member of Group1.

We see for Policy1:

Require BitLocker

Included groups: Group1, Group3

Excluded groups: Group2

Box 2: No

Device2 has BitLocker disabled.

Device2 is member of Group1 and Group3.

Box 3: No

Device3 has BitLocker enabled.

Device3 is member of Group1, Group2.

Group1 is included, while Group2 is excluded.

Note: Exclusion takes precedence over inclusion in the following same group type scenarios:

Including user groups and excluding user groups when assigning apps Including device groups and excluding device group when assigning apps

Reference:

https://learn.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started

https://docs.microsoft.com/en-us/intune/apps/apps-inc-exl-assignments