Microsoft Endpoint Administrator — Question 238

You have a Microsoft Entra tenant named contoso.com that contains a group named Contoso Help Desk.

You need to ensure that Contoso Help Desk is added to the local Administrators group whenever a Windows device is joined to contoso.com.

What should you do?

Answer options

• A. Assign the Cloud Device Administrator role to Contoso Help Desk.
• B. Assign the Microsoft Entra Joined Device Local Administrator role to Contoso Help Desk.
• C. Configure the Enterprise State Roaming settings.
• D. Enable Microsoft Entra Local Administrator Password Solution (LAPS) for contoso.com.

Correct answer: B

Explanation

The correct answer is B because the Microsoft Entra Joined Device Local Administrator role allows the specified group to have local administrative rights on devices that are joined to the domain. Option A does not provide local admin rights, while C and D deal with different functionalities that do not achieve the goal of adding the group to the local Administrators group.