ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MD-102 All Questions

View all questions & answers for the MD-102 exam
Go to Exam

Exam MD-102 topic 1 question 335 discussion

Actual exam question from Microsoft's MD-102
Question #: 335
Topic #: 1
[All MD-102 Questions]

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.

After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.

You have a Microsoft 365 E5 subscription. The subscription contains devices that are Microsoft Entra joined and enrolled in Microsoft Intune.

You create a user named User1.

You need to ensure that User1 can rotate BitLocker recovery keys by using Intune.

Solution: From the Microsoft Intune admin center, you assign the Endpoint Security Manager role to User1.

Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by diazed at Jan. 7, 2025, 1:27 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
DPAJA
3 days, 12 hours ago
Selected Answer: B
its Endpoint Security Administrator
upvoted 1 times
...
Knight_Of_Peace
2 weeks, 2 days ago
Selected Answer: B
Correct answer: No "Role-based access controls to manage BitLocker To manage BitLocker in Intune, an account must be assigned an Intune role-based access control (RBAC) role that includes the Remote tasks permission with the Rotate BitLockerKeys (preview) right set to Yes. You can add this permission and right to your own custom RBAC roles or use one of the following built-in RBAC roles that include this right: Help Desk Operator Endpoint Security Administrator" Ref: https://learn.microsoft.com/en-us/mem/intune/protect/encrypt-devices#:~:text=Windows%20security%20documentation.-,Role%2Dbased%20access%20controls%20to%20manage%20BitLocker,Endpoint%20Security%20Administrator,-Create%20and%20deploy
upvoted 3 times
...
XylosSW
2 weeks, 4 days ago
Selected Answer: A
https://learn.microsoft.com/en-us/mem/intune/fundamentals/role-based-access-control-reference#endpoint-security-manager Remote tasks: Rotate BitLockerKeys (preview) Well: https://learn.microsoft.com/en-us/mem/intune/protect/encrypt-devices#role-based-access-controls-to-manage-bitlocker To manage BitLocker in Intune, an account must be assigned an Intune role-based access control (RBAC) role that includes the Remote tasks permission with the Rotate BitLockerKeys (preview) right set to Yes. You can add this permission and right to your own custom RBAC roles or use one of the following built-in RBAC roles that include this right: Help Desk Operator *Endpoint Security Administrator* Both sources confirm that this role can manage Bitlocker (included bitlocker key rotation) Answer: A
upvoted 1 times
...
ExamBud
2 weeks, 6 days ago
Selected Answer: A
According to this, the Endpoint security Manager can rotate Bitlocker keys (also Help Desk Operator): https://learn.microsoft.com/en-us/mem/intune/fundamentals/role-based-access-control-reference#endpoint-security-manager
upvoted 1 times
...
dddba0a
1 month ago
Selected Answer: A
https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security go to the Manage devices para
upvoted 1 times
...
correction
1 month ago
Selected Answer: A
Permissions granted by the Endpoint Security Manager role: Remote tasks - Rotate BitLockerKeys (Preview) Rotate FileVault key https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security#permissions-granted-by-the-endpoint-security-manager-role
upvoted 2 times
correction
1 month ago
Might be Endpoint Security Administrator and Endpoint Security Manger role are same as: Herer it says ESA https://learn.microsoft.com/en-us/mem/intune/fundamentals/role-based-access-control-reference#endpoint-security-manager But when you check built-in roles, it says ESM https://learn.microsoft.com/en-us/mem/intune/fundamentals/role-based-access-control-reference#endpoint-security-manage
upvoted 1 times
...
...
Meek_Learner
1 month, 1 week ago
Selected Answer: B
The Endpoint Security Manager role in Microsoft Intune provides permissions to manage security policies and settings, but it does not grant permissions specifically to rotate BitLocker recovery keys. To ensure User1 can rotate BitLocker recovery keys, they need to be assigned a role with the appropriate permissions. The "Help Desk Administrator" role in Microsoft Entra ID (formerly Azure AD) or a custom role in Intune with the "Rotate BitLocker Keys" permission would be more appropriate.
upvoted 1 times
...
diazed
2 months ago
Selected Answer: B
Correct Answer is B, The role is Endpoint Security Administrator not Endpoint Security Manager. https://learn.microsoft.com/en-us/mem/intune/protect/encrypt-devices#role-based-access-controls-to-manage-bitlocker
upvoted 2 times
correction
1 month ago
Might be Endpoint Security Administrator and Endpoint Security Manger role are same as: Herer it says ESA https://learn.microsoft.com/en-us/mem/intune/fundamentals/role-based-access-control-reference#endpoint-security-manager But when you check built-in roles, it says ESM https://learn.microsoft.com/en-us/mem/intune/fundamentals/role-based-access-control-reference#endpoint-security-manager
upvoted 1 times
...
5e80f0c
1 month, 3 weeks ago
I think that role actually can: Remote tasks Rotate BitLockerKeys (preview) Remote tasks Rotate filevault key. It's still under preview, ofc, but might just be fully implemented. Question is: Is a preview valid as an answer?
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago