MD-102 Real Exam Questions
Endpoint Administrator. Everything you need to prepare, practice, and pass.
347
Questions
4
Exam Domains
Included
Explanations
Ready to practice?
347+ questions with detailed explanations
Start NowFrom $49.99 USD · refund policy applies
Browse all 347 MD-102 questions
Certification Overview
This exam tests mastery of Microsoft's cloud-first endpoint management stack: configuring device enrollment (Windows Autopilot, bulk enrollment), managing device compliance and security policies through Intune, controlling app deployment and updates, and enforcing conditional access controls via Azure AD. Success requires understanding both the technical implementation and the strategic decisions behind moving to cloud-based device management.
What This Certification Proves
The MD-102 validates expertise in deploying, configuring, and managing modern Windows and mobile devices at enterprise scale using Microsoft Intune and Azure AD. This certification demonstrates proficiency in cloud-based device management, endpoint security, and application deployment—essential skills for organizations transitioning to hybrid work and device-as-a-service models.
Who Should Take This Exam
IT professionals with 1-2 years of hands-on experience managing Windows devices, Azure AD, or mobile endpoints. Ideal for system administrators, support specialists, or IT operations staff looking to transition into dedicated endpoint management roles or deepen expertise in modern device administration.
Topic Breakdown
4 domains covering 347 questions
| Domain | Questions | Weight |
|---|---|---|
| Manage And Maintain Devices | 136 | 39% |
| Prepare Infrastructure For Devices | 103 | 30% |
| Protect Devices | 63 | 18% |
| Manage Applications | 45 | 13% |
Study Plans
Choose a study plan that matches your schedule and experience level
30 Days
Intensive Sprint
Week 1-2
- Master fundamentals: Manage And Maintain Devices
- Read Microsoft official documentation
- Complete 12 questions daily
Week 3
- Deep dive: Prepare Infrastructure For Devices
- Review weak areas from results
- Take 2 full-length exams
Week 4
- Review all flagged questions
- Timed exams to build stamina
- Final revision of key concepts
60 Days
Balanced Approach
Week 1-2
- Survey all exam domains
- Set up study environment
- Begin with foundational topics
Week 3-4
- Focus: Manage And Maintain Devices
- Focus: Prepare Infrastructure For Devices
- 6 questions daily
Week 5-6
- Focus: Protect Devices
- Hands-on labs if applicable
- Review explanations for wrong answers
Week 7-8
- Complete all 347 questions
- Identify and eliminate weak areas
- Take 3 full-length timed tests
90 Days
Comprehensive Study
Month 1
- Learn all exam domains at a comfortable pace
- Build strong foundational knowledge
- 4 questions daily
Month 2
- Deep dive into each domain
- Hands-on practice and labs
- Take weekly timed exams
Month 3
- Work through all 347 questions
- Identify and eliminate weak areas
- Take 3 full-length timed exams
MD-102-Specific Tips
- Build a lab environment: Set up a free Microsoft 365 or Intune trial and practice actual device enrollment, Conditional Access policies, and compliance rules—theory alone won't cut it for this exam
- Master Conditional Access policies: These are heavily tested; practice building policies for different scenarios (device compliance, location, risk level, app protection)
- Deep-dive on Windows Autopilot: Understand enrollment flows, device preparation, and troubleshooting; this is a core Endpoint Administrator responsibility
- Get hands-on with Intune app deployment: Practice deploying line-of-business apps, Microsoft Store apps, and web apps through Intune; know the difference between required, available, and uninstall assignments
- Study device compliance and protection: Understand how to configure compliance policies, remediation actions, and integration with Defender for Endpoint
- Focus on real-world scenarios over memorization: The exam rewards understanding *why* you'd choose Intune vs Group Policy, cloud vs on-prem management, and how to troubleshoot enrollment failures
- Practice with Azure AD integration: Understand hybrid join scenarios, device registration, and how Azure AD authentication flows affect Intune enrollment and app access
Relevant Career Roles
Sample Questions
Try 5 free questions from the MD-102 question bank
Your network contains an Active Directory domain. The domain contains 10 computers that run Windows 8.1 and use local user profiles. You deploy 10 new computers that run Windows 10 and join the computers to the domain. You need to migrate the user profiles from the Windows 8.1 computers to the Windows 10 computers. What should you do?
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has several Windows 10 devices that are enrolled in Microsoft Intune. You deploy a new computer named Computer1 that runs Windows 10 and is in a workgroup. You need to enroll Computer1 in Intune. Solution: From the Settings app on Computer1, you use the Connect to work or school account settings. Does this meet the goal?
Your company standardizes on Windows 10 Enterprise for all users. Some users purchase their own computer from a retail store. The computers run Windows 10 Pro. You need to recommend a solution to upgrade the computers to Windows 10 Enterprise, join the computers to Microsoft Azure Active Directory (Azure AD), and install several Microsoft Store apps. The solution must meet the following requirements: - Ensure that any applications installed by the users are retained. - Minimize user intervention. What is the best recommendation to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company uses Windows Update for Business. The research department has several computers that have specialized hardware and software installed. You need to prevent the video drivers from being updated automatically by using Windows Update. Solution: From the Device Installation and Restrictions settings in a Group Policy object (GPO), you enable Prevent installation of devices using drivers that match these device setup classes, and then you enter the device GUID. Does this meet the goal?
You have a public computer named Public1 that runs Windows 10. Users use Public1 to browse the internet by using Microsoft Edge. You need to view events associated with website phishing attacks on Public1. Which Event Viewer log should you view?
Related Certifications
Other Microsoft certifications you might be interested in
AZ-104
Microsoft Azure Administrator
From $49.99
AZ-500
Microsoft Azure Security Technologies
From $49.99
AZ-305
Designing Microsoft Azure Infrastructure Solutions
From $49.99
AZ-900
Microsoft Azure Fundamentals
From $49.99
AZ-400
Microsoft Azure DevOps Solutions
From $49.99
AZ-204
Developing Solutions for Microsoft Azure
From $49.99
MD-102 FAQ
Ready to pass MD-102?
Join thousands of professionals who passed their certification exam with NerdExam.
Get MD-102 Exam Questions