Endpoint Administrator (MD-102) practice questions

Domain coverage 5 domains

• Prepare infrastructure for devices (20–25%)
• Manage and maintain devices (25–30%)
• Protect devices (15–20%)
• Manage and secure applications (15–20%)
• Optimize endpoint operations by using automation, monitoring, and reporting (10–15%)

Sample questions 10 of 92 shown

1. Q1 Prepare infrastructure for devices (25-30%)

   You have a Microsoft 365 subscription that contains 100 devices enrolled in Microsoft Intune. You need to review the startup processes and how often each device restarts. What should you use?

   1. Endpoint analytics
   2. Intune Data Warehouse
   3. Azure Monitor
   4. Device Management

   Endpoint analytics in Microsoft Endpoint Manager provides insights into device startup performance, including startup processes and restart frequency. It measures boot time and identifies processes that slow down startup. Intune Data Warehouse provides reporting data, but Endpoint Analytics specifically provides the startup performance metrics requested.
2. Q2 Prepare infrastructure for devices (25-30%)

   You have a Microsoft 365 E5 subscription that contains 100 Windows 10 devices enrolled in Microsoft Intune. You plan to use Endpoint analytics. You need to create baseline metrics. What should you do first?

   1. Create an Azure Monitor workbook
   2. Onboard 10 devices to Endpoint analytics
   3. Create a Log Analytics workspace
   4. Modify the Baseline regression threshold

   To use Endpoint analytics, you must first onboard devices. Microsoft recommends onboarding at least 10 devices to establish baseline metrics. Endpoint analytics collects performance data from onboarded Windows devices and provides startup performance insights and recommendations. After onboarding, baseline metrics are automatically calculated.
3. Q3 Prepare infrastructure for devices (25-30%)

   You need to download a report listing all devices that are NOT enrolled in Microsoft Intune but are assigned an app protection policy. Where should you look in the Microsoft Endpoint Manager admin center?

   1. Apps, and then App protection policies
   2. Apps, and then Monitor
   3. Devices, and then Monitor
   4. Reports, and then Device compliance

   In the Microsoft Endpoint Manager admin center, you navigate to Apps > App protection policies to find reports about devices that have app protection policies applied but are not enrolled in Intune. This report shows devices that are managed at the app level (through MAM) without device enrollment.
4. Q4 Prepare infrastructure for devices (25-30%)

   You need to add devices to Microsoft Entra ID. You have users who bring their personal Windows devices. Which join type should you recommend for these personal devices?

   1. Microsoft Entra registered
   2. Microsoft Entra joined
   3. Microsoft Entra hybrid joined
   4. Workplace joined

   Microsoft Entra registered devices (formerly Workplace joined) are designed for BYOD scenarios. These devices have a Microsoft Entra account registered but are not joined to the directory. Users sign in with their organizational account to access resources while the device remains personally owned. Microsoft Entra joined is for organization-owned devices, and hybrid join is for domain-joined devices.
5. Q5 Prepare infrastructure for devices (25-30%)

   You need to configure automatic enrollment for Windows devices in Microsoft Intune. What must be configured first?

   1. Microsoft Entra ID for automatic MDM enrollment
   2. Intune tenant with enrollment restrictions
   3. Windows Autopilot deployment profile
   4. Group Policy for MDM enrollment

   For automatic Intune enrollment of Windows devices, you must first configure Microsoft Entra ID to enable automatic MDM enrollment. This is done in the Microsoft Entra admin center under Mobility (MDM and MAM) > Microsoft Intune. After configuring the MDM discovery URL and terms, Windows devices joined to Microsoft Entra ID will be automatically enrolled.
6. Q6 Prepare infrastructure for devices (25-30%)

   You need to configure enrollment for corporate-owned Android devices that will be used by employees in a kiosk scenario. Which Android enrollment type should you use?

   1. Android Enterprise dedicated devices
   2. Android Enterprise fully managed
   3. Android Enterprise work profile
   4. Android device administrator

   Android Enterprise dedicated devices enrollment is designed for kiosk, digital signage, and single-purpose devices. These devices are fully managed by the organization and are locked to a single app or set of apps. Fully managed devices are for corporate-owned with multi-user scenarios, work profile is for BYOD, and device administrator is a legacy method.
7. Q7 Prepare infrastructure for devices (25-30%)

   You need to implement compliance policies for iOS/iPadOS devices in Intune. The policy must require a minimum operating system version. Which category in the compliance policy should you configure?

   1. Device Health
   2. Device Properties
   3. System Security
   4. Microsoft Defender for Endpoint

   In an Intune compliance policy for iOS/iPadOS, the Device Properties category contains settings for minimum and maximum operating system versions. Device Health covers jailbreak detection, System Security covers password policies, and Defender for Endpoint covers endpoint detection and response requirements.
8. Q8 Prepare infrastructure for devices (25-30%)

   You have a Microsoft 365 E5 subscription. You need to implement Conditional Access policies that require devices to be marked as compliant before accessing corporate resources. Where should you configure the compliance requirement?

   1. In the Conditional Access policy, under Grant, select Require device to be marked as compliant
   2. In the Intune compliance policy, under Actions for noncompliance
   3. In the Microsoft Entra admin center, under Device settings
   4. In the Microsoft 365 Defender portal, under Policies

   To require compliant devices for accessing corporate resources, you configure the Conditional Access policy in the Microsoft Entra admin center. Under Grant controls, you select "Require device to be marked as compliant." This works together with Intune compliance policies - Intune evaluates compliance, and Conditional Access enforces access controls based on that status.
9. Q9 Prepare infrastructure for devices (25-30%)

   You need to configure Windows Hello for Business for all Windows 10 devices enrolled in Intune. Where should you configure this?

   1. Intune device enrollment > Windows enrollment > Windows Hello for Business
   2. Microsoft Entra admin center > Devices > Device settings
   3. Group Policy > Windows Hello for Business
   4. Windows Settings > Accounts > Sign-in options

   Windows Hello for Business configuration for Intune-enrolled devices is managed in the Microsoft Endpoint Manager admin center under Devices > Enrollment > Windows enrollment > Windows Hello for Business. This setting applies to all Windows devices enrolled in Intune and controls whether Windows Hello is enabled.
10. Q10 Prepare infrastructure for devices (25-30%)

    You need to manage the membership of local groups on Windows devices by using Intune. Which profile type should you use?

    1. Administrative Templates
    2. Device restrictions
    3. Account protection
    4. Endpoint protection

    Account protection profiles in Intune (under Endpoint security) include settings for managing local group membership on Windows devices. You can add or remove members from local groups such as Administrators, Remote Desktop Users, or create custom group management policies. This is part of the Account protection category within Endpoint security policies.

Answer all 92 questions with instant feedback →

Reader reviews 137 ratings

• This MD-102 practice test is no joke — questions are challenging but fair. If you can pass these, you’ll pass the real exam.

  ★★★★★★ William C.

• I let my coworker borrow my MD-102 account to study — he passed too. These questions are legit.

  ★★★★★★ Grayson P.

• Solid prep material for MD-102. The questions feel like they were written by someone who actually teaches this stuff.

  ★★★★★★ Brooklyn T.

• I liked how the MD-102 questions are tied to specific domains from the official exam guide. Made studying much more structured.

  ★★★★★★ Joseph L.

• Quick shipping? LOL jk — instant access was great. Started studying MD-102 questions right after purchase, no delays.

  ★★★★★★ Colton W.

• The MD-102 explanations are where this really stands out. Not just which answer is right but WHY the others are wrong.

  ★★★★★★ Aria H.

Frequently asked questions

Free study resources

Community-verified analysis of 81 questions from real test-taker discussions — 20 deep analyses and 0 FAQs.

More Microsoft exams