Endpoint Administrator (MD-102) Exam Practice Questions & Study Guide 2026

Question 1

You have a Microsoft 365 subscription.You have devices enrolled in Microsoft Intune as shown in the following table.To which devices can you deploy apps by using Intune?

A. Device1 only
B. Device1 and Device2 only
C. Device1 and Device3 only
D. Device1, Device2, and Device3 only
E. Device1, Device2, Device3, and Device4

Show Answer

Question 2

You have a computer named Computer! that runs Windows 11.A user named User1 plans to use Remote Desktop to connect to Computer1.You need to ensure that the device of User1 is authenticated before the Remote Desktopconnection is established and the sign in page appears.What should you do on Computer1?

A. Turn on Reputation-based protection.
B. Enable Network Level Authentication (NLA).
C. Turn on Network Discovery. 
D. Configure the Remote Desktop Configuration service.

Show Answer

Question 3

Your company uses Microsoft Intune.More than 500 Android and iOS devices are enrolled in the Intune tenant.You plan to deploy new Intune policies. Different policies will apply depending on the version of Android or iOS installed on the device.You need to ensure that the policies can target the devices based on their version ofAndroid or iOS.What should you configure first?

A. groups that have dynamic membership rules in Azure AD
B. Device categories in Intune
C. Corporate device identifiers in Intune
D. Device settings in Azure AD

Show Answer

Question 4

You have a Microsoft 365 subscription that uses Microsoft Intune Suite.You use Microsoft Intune to manage devices.You have a Windows 11 device named Device1 that is enrolled in Intune. Device1 hasbeen offline for 30 days.You need to remove Device1 from Intune immediately. The solution must ensure that if thedevice checks in again, any apps and data provisioned by Intune are removed. Userinstalled apps, personal data, and OEM-installed apps must be retained.What should you use?

A. a Delete action
B. a Retire action
C. a Fresh Start action
D. an Autopilot Reset action 

Show Answer

Question 5

You have a Windows 10 device named Device! that is joined to Active Directory andenrolled in Microsoft Intune.Device1 is managed by using Group Policy and Intune.You need to ensure that the Intune settings override the Group Policy settings.What should you configure?

A. a device configuration profile
B. a device compliance policy
C. an MDM Security Baseline profile
D. a Group Policy Object (GPO)

Show Answer

Question 6

You have a Microsoft 365 subscription that includes Microsoft Intune.You have an update ring named UpdateRing1 that contains the following settings:• Automatic update behavior: Auto install and restart at a scheduled time• Automatic behavior frequency: First week of the month• Scheduled install day: Tuesday• Scheduled install time: 3 AMFrom the Microsoft Intone admin center, you select Uninstall for the feature updates ofUpdateRing1. When will devices start to remove the feature updates?

A. when a user approves the uninstall
B. as soon as the policy is received
C. next Tuesday
D. the first Tuesday of the next month 

Show Answer

Question 7

You need to implement mobile device management (MDM) for personal devices that runWindows 11. The solution must meet the following requirements:• Ensure that you can manage the personal devices by using Microsoft Intune.• Ensure that users can access company data seamlessly from their personal devices.• Ensure that users can only sign in to their personal devices by using their personalaccount.What should you use to add the devices to Azure AD?

A. Azure AD registered Most Voted
B. hybrid Azure AD join. 
C. Azure AD joined

Show Answer

Question 8

Your network contains an Active Directory domain. The domain contains 10 computers thatrun Windows 10. Users in the finance department use the computers.You have a computer named Computer1 that runs Windows 10.From Computer1, you plan to run a script that executes Windows PowerShell commandson the finance department computers.You need to ensure that you can run the PowerShell commands on the finance departmentcomputers from Computer.What should you do on the finance department computers?

A. From Windows PowerShell, run the Enable-MMAgent cmdlet.
B. From the local Group Policy, enable the Allow Remote Shell Access setting.
C. From Windows PowerShell, run the Enable-PSRemoting cmdlet.
D. From the local Group Policy, enable the Turn on Script Execution setting

Show Answer

Question 9

You have a computer named Computed that has Windows 10 installed.You create a Windows PowerShell script named config.psl.You need to ensure that config.psl runs after feature updates are installed on Computer5.Which file should you modify on Computer5?

A. LiteTouch.wsf
B. SetupConfig.ini
C. Unattendb*
D. Unattend.xml 

Show Answer

Question 10

You use Microsoft Defender for Endpoint to protect computers that run Windows 10.You need to assess the differences between the configuration of Microsoft Defender forEndpoint and the Microsoft-recommended configuration baseline.Which tool should you use?

A. Microsoft Defender for Endpoint Power 81 app
B. Microsoft Secure Score
C. Endpoint Analytics
D. Microsoft 365 Defender portal 

Show Answer