HOTSPOT You have three devices enrolled in Microsoft Endpoint Manager as shown in the following table. 
The device compliance policies in Endpoint Manager are configured as shown in the following table. 
The device compliance policies have the assignments shown in the following table. 
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. 
Yeah, it's NO, NO, YES here. Devices have to satisfy all their assigned compliance policies, not just the easiest one. Device2 is the classic trap because some think if it meets one policy it's fine, but 'require BitLocker' from Policy1 makes it non-compliant if BitLocker is off. Seen this logic pop up in MS practice sets. Anyone see a reason it'd be different?
Easy to follow table setup here, really clear.
NO, NO, YES works here since devices need to meet all assigned compliance policies. Device2 fails because BitLocker is required but not enabled. Pretty sure that's how Intune enforces it, unless there's some exception I'm missing.
