Cascade Regional Airlines equips its check-in kiosks with company-owned tablets that must be automatically enrolled in mobile device management and fully controlled by IT, with no personal Microsoft account ever touching them. Which Microsoft Entra device state matches this scenario?
Select an answer to reveal the explanation.
Short Explanation
Entra joined is the company-owned, cloud-only path: think of it as IT handing out a device that's tied to the organization from the box, not to any one person's personal login. That's exactly the kiosk scenario — corporate hardware, full IT control, no personal account involved.
Full Explanation
Microsoft Entra joined devices are owned by the organization, registered directly with Microsoft Entra ID (with no dependency on an on-premises Active Directory domain), and are fully manageable through mobile device management policies — which fits a fleet of company-owned kiosk tablets that need automatic MDM enrollment and centralized control. Microsoft Entra registered describes personally owned or BYOD devices where a user adds their work or school account alongside a personal one for access to some resources; that directly contradicts the requirement that no personal account ever touches the kiosks. Hybrid Microsoft Entra joined applies to devices joined to an on-premises Active Directory domain and then also registered with Entra ID, which assumes an on-prem AD dependency the kiosks don't have — this is the pattern for domain-joined corporate PCs, not new kiosk tablets provisioned cloud-first. Leaving the devices unmanaged and outside Entra ID entirely fails the requirement for automatic enrollment and full IT control, and leaves the kiosks without any centrally enforced security baseline. An exam caveat: Entra join is typically paired with automatic enrollment policies so devices land in MDM the moment they're joined. An operational check is confirming a freshly joined kiosk appears in the Devices blade with a join type of Microsoft Entra joined and receives its assigned compliance policy.