Free Microsoft Endpoint MD-102 Actual Exam Questions - Question 5 Discussion

Question No. 5Drag & Drop

DRAG DROP - You have a Microsoft 365 subscription that contains two users named User1 and User2. You need to ensure that the users can perform the following tasks: • User1 must be able to create groups and manage users. • User2 must be able to reset passwords for nonadministrative users. The solution must use the principle of least privilege. Which role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. MD-102 practice exam questions

Options
AGlobal Administrator
BHelpdesk Administrator
CSecurity Administrator
DUser Administrator
Drag an item to a target. Click × to remove.
Answer Area
User 1
Drop item here
User 2
Drop item here
US
RX
Ravi X.
2026-02-22

Probably D. Device2, Device3, and Device4 seem to cover the main platforms where app config policies work well—Android, macOS, and iOS. Device1 being Windows 10 might throw some people off, but Intune’s app config policies usually target mobile OSes more than desktop Windows. Also, iOS and macOS have improved support lately, so excluding those doesn’t feel right. So I’d go with D based on broader mobile support across those three devices rather than including Windows 10 here.

0
AY
Ahmed Y.
2026-02-19

B/C? Device2 being Android definitely supports app config policies. Device1 is Windows 10, which also has solid support in Intune for these policies. Device3 and Device4 are macOS and iOS, which can be tricky—unless fully managed or using specific apps, these often don’t support all app config policies. So excluding those two seems safer, making B more likely than D or E. The question probably expects recognition that Windows and Android are the most straightforward targets for app configuration policies right now.

0
TN
Tom N.
2026-02-17

B imo, macOS and iOS app config support is still patchy compared to Android and Windows.

0
JT
James T.
2026-01-21

Maybe D. Device2 is definitely in since it’s Android, which supports app config policies. Device3 and Device4 are macOS and iOS, and while support can be limited, recent updates have improved iOS support for these policies. Device1 is Windows 10 but depending on if it’s fully managed or just enrolled could affect whether app config policies apply. Since the question’s a bit vague, including Device3 and Device4 might be safer than excluding them outright.

0
JT
James T.
2026-01-19

B tbh, since Windows 10 and Android are the main platforms that reliably support app configuration policies in Intune. macOS and iOS still have some limitations, so Device3 and Device4 might not fully qualify.

0
JS
James S.
2026-01-18

B tbh. Device1 is Windows 10, which supports app configuration policies, and Device2 is Android, also supported. Device3 and Device4 are macOS and iOS, but macOS doesn’t fully support these policies yet.

0
JS
James S.
2026-01-15

Probably D, since app configuration policies usually apply to managed Android and iOS devices, so Device2, Device3, and Device4 make the most sense here.

0