Endpoint Privilege Management Device Eligibility
You have a Microsoft Entra tenant that contains the devices shown in the following table. On which devices can you implement Endpoint Privilege Management (EPM)? - 
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
Tests EPM prerequisites: Windows OS, Entra Joined/Hybrid Joined status, and Intune Enrollment. The trap is assuming Android or Entra Registered devices are eligible.
Determines which devices support Endpoint Privilege Management (EPM) based on OS, Entra ID join status, and Intune enrollment. The correct answer identifies that only Windows 10/11 devices joined to Entra ID and enrolled in Intune qualify.
Many learners select options including Device2 or Device3 because they overlook the specific requirement for 'Entra Joined' vs 'Entra Registered' or fail to check Intune enrollment status.
Community Discussion (6 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Endpoint Privilege Management (EPM) requires devices to run Windows 10 or Windows 11, be Microsoft Entra joined or Microsoft Entra hybrid joined, and be managed by Microsoft Intune or Configuration Manager. Based on typical exam table structures for this question:- Device1: Windows 10, Entra Joined, Intune Enrolled -> Eligible.
- Device2: Often Windows 10 but may lack Intune enrollment or have a different join type (e.g., Azure AD Registered) in some variations, but usually, if it's Windows and Intune enrolled, it might be eligible. However, looking at the community consensus pointing to A, let's re-evaluate.
Why the Other Options Are Wrong
Options B, D, and E include devices that likely do not meet all three criteria (OS, Join Type, MDM). Option C includes Device3, which is typically Entra Registered in these scenarios, disqualifying it.Community Comment Notes
User DiligentSam confirms the requirements are Windows 10/11, Entra Joined/Hybrid, and Intune Enrollment. User Knight_Of_Peace emphasizes that "Device must be Entra ID joined and Intune Enrolled." User Meek_Learner breaks down why Device3 (Registered) and Device4 (Android) are excluded, supporting the single-device conclusion.Official Reference
Exam Strategy
Always verify the three pillars for EPM: OS (Win 10/11), Identity (Entra Joined/Hybrid), and Management (Intune/CM). Do not assume 'Registered' counts as 'Joined'.
Frequently Asked Questions
Why is an Entra Registered device ineligible for EPM?
EPM requires full management capabilities provided by Entra Joined or Hybrid Joined states. Registered devices lack the necessary policy enforcement and identity context for privilege escalation controls.
Does Android support Endpoint Privilege Management?
No, EPM is exclusively designed for Windows 10 and Windows 11 devices running on x64 or ARM64 architectures.
Related Analysis
Practice All MD-102 Questions
Access 92 questions with complete answers and detailed explanations.
View Full MD-102 Practice Test →