MD-102: Microsoft 365 Endpoint Administrator Practice Test
Build your confidence for MD-102: Microsoft 365 Endpoint Administrator. Practice the concepts, understand the answers, and strengthen your knowledge one question at a time.
Try a sample questionExam overview and details
The MD-102: Microsoft 365 Endpoint Administrator certification validates the expertise required to deploy, configure, secure, manage, and monitor devices and client applications in an enterprise Microsoft 365 environment. This certification focuses on the modern endpoint management lifecycle, emphasizing cloud-native services like Microsoft Intune and Windows Autopilot over traditional on-premises tools. Successful candidates demonstrate proficiency in implementing and managing comprehensive solutions for identity, security, compliance, and application delivery across a diverse device ecosystem. Earning this credential signals to employers a deep, practical understanding of how to leverage the Microsoft 365 stack to empower a secure, productive, and modern workforce, making it a critical qualification for IT professionals responsible for the digital workplace. It bridges the gap between legacy device management and the future of unified endpoint management (UEM), positioning holders as key assets in organizational digital transformation initiatives.
Sample Questions
Choose an answer and explore the explanation to see how practice works.
Your organization's WUfB ring assigns 'Pilot' users to receive features 7 days after release and 'Production' users 30 days after. You need to immediately stop all updates across both rings due to a critical regression. Which action is fastest in Intune?
An organization currently uses Configuration Manager and wants to remove the need for an on-premises imaging server. They plan to use Configuration Manager to capture hardware hashes and trigger Autopilot enrollment on existing wiped Windows 10 devices. Which feature accomplishes this?
An organization will issue Windows 11 24H2 devices that contractors may keep at the end of their assignment, but they must be corporately managed during the engagement. Which Autopilot identity model balances corporate management with potential personal handoff while keeping management cost low?
You publish a new version of a Win32 line-of-business app to Intune. Existing devices should automatically upgrade from the older version. Which Win32 feature do you configure?
Which Intune feature lets administrators deploy a customized Start menu and taskbar layout to Windows 11 devices?
Career Opportunities & Salary
Exam insights and study advice
In today's hybrid and cloud-first IT landscape, expertise in modern endpoint management is not just valuable-it's essential. The MD-102 certification provides industry-recognized validation of your skills in the core Microsoft 365 technologies that organizations are actively deploying. It directly correlates with in-demand roles such as Endpoint Administrator, Modern Desktop Administrator, and Intune Engineer. Achieving this certification demonstrates a commitment to mastering current best practices, significantly enhances your professional credibility, and opens doors to advanced career opportunities and higher earning potential. It is a tangible differentiator that proves you can design and execute strategies that protect corporate data while enabling user productivity from anywhere.
What this exam covers
Use the published domain weights to plan your study. Practice results do not predict your certification exam score.
01Manage and maintain devices
Topics
- Deploy and upgrade Windows clients by using cloud-based tools
Learning objectives
- Deploy and upgrade Windows clients by using cloud-based tools: Choose between Windows Autopilot and provisioning packages; Choose a Windows Autopilot deployment mode; Apply a device name template; Implement Windows client deployment by using Windows Autopilot; Create an Enrollment Status Page (ESP); Plan and implement provisioning packages; Plan and implement device upgrades for Windows 11; Implement a Windows 365 Cloud PC deployment; Plan and implement device configuration profiles; Create device configuration profiles for Windows devices, including importing ADMX files; Create device configuration profiles for Android devices; Create device configuration profiles for iOS/iPadOS devices; Create device configuration profiles for macOS devices; Create device configuration profiles for Windows 11 Enterprise multi-session devices; Target a profile by using filters; Implement Intune Suite add-on capabilities; Configure Endpoint Privilege Management; Manage applications by using the Enterprise App Catalog; Implement Microsoft Intune Advanced Analytics; Configure Microsoft Intune Remote Help; Identify use cases for Microsoft Cloud PKI; Implement Microsoft Tunnel for Mobile Application Management; Perform remote actions on devices; Sync, restart, retire, or wipe devices; Perform bulk remote actions; Update Microsoft Defender Antivirus security intelligence; Rotate BitLocker recovery keys; Run a device query by using KQL
02Prepare infrastructure for devices
Topics
- Add devices to Microsoft Entra ID
- Enroll devices to Microsoft Intune
- Implement identity and compliance
Learning objectives
- Add devices to Microsoft Entra ID: Choose an appropriate device join type; Join devices to Microsoft Entra ID; Register devices to Microsoft Entra ID; Plan and implement groups for devices in Microsoft Entra ID
- Enroll devices to Microsoft Intune: Configure enrollment settings; Configure automatic enrollment for Windows and bulk enrollment for iOS/iPadOS and Android; Configure enrollment profiles for Android devices, including fully managed, dedicated, corporate owned, and work profile
- Implement identity and compliance: Manage roles in Intune; Implement compliance policies for all supported device platforms by using Intune; Implement Microsoft Entra Conditional Access policies that require a compliance status; Configure Windows Hello for Business; Implement and manage Windows Local Administrator Password Solution (Windows LAPS); Manage the membership of local groups on Windows devices by using Intune
03Manage applications
Topics
- Deploy and update apps
Learning objectives
- Deploy and update apps: Prepare applications for deployment by using Intune; Deploy apps by using Intune; Deploy Microsoft 365 Apps by using Intune; Configure policies for Office apps; Deploy Microsoft 365 Apps as part of a Windows Autopilot deployment by using the Office Deployment Tool (ODT) or Office Customization Tool (OCT); Manage Microsoft 365 Apps by using the Microsoft 365 Apps admin center; Deploy apps from platform-specific app stores by using Intune; Plan and implement app protection and app configuration policies; Plan and implement app protection policies; Implement Microsoft Entra Conditional Access policies for app protection policies; Plan and implement app configuration policies for managed apps and managed devices
04Protect devices
Topics
- Configure endpoint security
Learning objectives
- Configure endpoint security: Create antivirus policies; Create disk encryption policies; Create firewall policies; Configure Attack surface reduction policies; Plan and implement security baselines; Integrate Intune with Microsoft Defender for Endpoint; Onboard devices into Microsoft Defender for Endpoint; Manage device updates by using Intune; Plan for device updates; Create and manage update rings by using Intune; Create and manage update policies by using Intune, including iOS/iPadOS and macOS; Manage Android updates by using configuration profiles or firmware-over-the-air (FOTA) deployments; Configure Windows client Delivery Optimization by using Intune; Monitor updates