• 60 questions

MD-102 Practice Test

Intune and Windows client questions for exam MD-102, the exam that replaced MD-100 and MD-101.

What is the longest device name a Windows Autopilot device name template can produce?

Pick an answer, then press Check answer. Then you see Correct or Not quite, with the reason. Keys: A to D pick, Enter checks.

Print covers the next 50 questions. Share this set copies a link to the same questions in the same order.

Exam mode: 50 questions, 100 minutes.

More options

Unofficial practice questions, not affiliated with Microsoft Corporation. Bank checked October 10, 2026.

Next step Cloud side: AZ-104 practice testAnother IT certification? Pick it

All 60 questions

Prepare infrastructure for devices 13

  • A Conditional Access policy must admit only devices that pass their Intune compliance policy. Which grant control is selected? Microsoft Learn: How to Require Device Compliance with Conditional Access
  • A device has no compliance policy assigned. With the default compliance policy setting, how does Intune mark it? Microsoft Learn: Device compliance policies in Microsoft Intune
  • A laptop is joined to the on-premises Active Directory and is also registered in Microsoft Entra ID. What does this join type need from time to time? Microsoft Learn: What is a Microsoft Entra hybrid joined device?
  • A regional admin should see only the policies of the Seattle office. Which Intune feature controls which objects an admin can see? Microsoft Learn: Use role-based access control (RBAC) and scope tags for distributed IT
  • A warehouse wants Android scanners locked to one inventory app, with no user tied to each device. Which Android Enterprise enrollment fits? Microsoft Learn: Set up Intune enrollment for Android Enterprise dedicated devices
  • An administrator wants no user to enroll more than three devices. Which kind of enrollment restriction sets this? Microsoft Learn: Overview of enrollment restrictions
Show all 60 questions (54 more)

Prepare infrastructure for devices, continued

  • Besides an Intune subscription, which license does automatic MDM enrollment for Windows require? Microsoft Learn: Enable MDM automatic enrollment for Windows
  • In an Intune role assignment, what does Scope (Groups) define? Microsoft Learn: Role-based access control (RBAC) with Microsoft Intune
  • Staff will reach company email from phones they own. Which device identity is meant for bring-your-own-device scenarios? Microsoft Learn: What are Microsoft Entra registered devices?
  • Under a Multi Admin Approval access policy, an admin edits a protected script. When is the change applied? Microsoft Learn: Use Multi Admin Approval in Intune
  • When does the tenant-wide Windows Hello for Business policy in Intune take effect on a device? Microsoft Learn: Configure a tenant-wide Windows Hello for Business policy with Microsoft Intune
  • Where can an Intune Windows LAPS policy back up the password of a device's local administrator account? Microsoft Learn: Overview of Windows LAPS with Microsoft Intune
  • Which account signs in to a Windows device that is Microsoft Entra joined? Microsoft Learn: What is a Microsoft Entra joined device?

Manage and maintain devices 17

  • A company needs self-deploying mode for shared kiosks. Which solution lists that mode? Microsoft Learn: Compare Windows Autopilot device preparation and Windows Autopilot
  • A help desk worker wants to use Remote Help to assist a user in a partner company's tenant. Is that supported? Microsoft Learn: Use Remote Help to Assist Users Authenticated by your Organization
  • A kiosk PC without TPM 2.0 is proposed for Windows Autopilot self-deploying mode. Will it work? Microsoft Learn: Windows Autopilot self-deploying mode
  • A new policy was assigned ten minutes ago and an admin does not want to wait for the scheduled check-in. Which device action helps? Microsoft Learn: Device Action: Sync
  • A team has years of on-premises Group Policy Objects and wants to know which settings Intune supports. Which Intune tool imports and analyzes them? Microsoft Learn: Use Microsoft Intune to import and analyze group policies
  • A technician read a BitLocker recovery key aloud during a support call. Which Intune action replaces that key remotely? Microsoft Learn: Device Action: BitLocker Key Rotation
  • A technician starts the pre-provisioning flow on a new PC. What is pressed at the first out-of-box screen? Microsoft Learn: Windows Autopilot for pre-provisioned deployment
  • An employee leaves and keeps a personal phone that was enrolled. Which device action removes company data and leaves personal data in place? Microsoft Learn: Device Action: Retire
  • Cloud PCs will be Microsoft Entra joined. What does that kind of Azure network connection not require? Microsoft Learn: Azure network connection overview
  • One policy is assigned to All devices but should apply only to organization-owned devices on a given OS version. Which feature narrows the assignment? Microsoft Learn: Create assignment filters in Microsoft Intune
  • Users must run as standard users, yet a few need to install an approved driver now and then. Which Intune Suite capability allows the elevation? Microsoft Learn: Learn about using Endpoint Privilege Management with Microsoft Intune
  • What can an Enrollment Status Page profile do while required apps are still installing? Microsoft Learn: Set up the Enrollment Status Page in the admin center copy
  • What does enrollment time grouping change about a device's security group membership? Microsoft Learn: Set up enrollment time grouping
  • What does Microsoft Cloud PKI remove the need for when issuing certificates to Intune-managed devices? Microsoft Learn: Microsoft Cloud PKI for Microsoft Intune
  • What is the Enterprise App Catalog in Intune? Microsoft Learn: Add an Enterprise App Catalog App to Microsoft Intune
  • What is the longest device name a Windows Autopilot device name template can produce? Microsoft Learn: Configure Windows Autopilot profiles
  • Which devices does Microsoft Tunnel for Mobile Application Management add support for? Microsoft Learn: Learn about using Microsoft Tunnel with Mobile Application Management

Protect devices 11

  • A branch office has a slow link, and two hundred PCs download the same updates. Which Windows settings, deployed from Intune, reduce the bandwidth used? Microsoft Learn: Windows Delivery Optimization settings in Microsoft Intune
  • A critical security update must reach devices faster than the normal deployment timeline. What can a quality update policy do? Microsoft Learn: Manage Windows quality updates
  • Intune can manage firmware-over-the-air updates for one maker's Android devices through an integrated service. Which service is it? Microsoft Learn: Zebra LifeGuard Over-the-Air Integration with Microsoft Intune
  • Microsoft Defender for Endpoint is integrated with Intune and flags a laptop as high risk. How can Intune then cut the laptop off from company resources? Microsoft Learn: Integrate Microsoft Defender for Endpoint with Intune for Device Compliance
  • Only approved apps may run on a set of managed Windows devices. Which Intune endpoint security policy manages the allowed apps? Microsoft Learn: Manage approved apps for Windows devices with App Control for Business policy and Managed Installers in Microsoft Intune
  • Test, pilot and production groups should each get Windows updates with a different deferral period and deadline. Which policy type holds these settings? Microsoft Learn: Manage Windows Update Ring Policies
  • What does an Intune security baseline give an administrator? Microsoft Learn: Learn about Intune security baselines for Windows devices
  • What must be in use on Windows devices before Intune attack surface reduction policies manage their settings? Microsoft Learn: Manage attack surface reduction settings with Microsoft Intune
  • What sets a hotpatch update apart from a standard monthly security update? Microsoft Learn: Hotpatch updates
  • Which endpoint security policy type onboards devices to Microsoft Defender for Endpoint? Microsoft Learn: Deploy endpoint detection and response policy with Intune
  • Which service automates updates for Windows, Microsoft 365 Apps for enterprise, Microsoft Edge and Microsoft Teams? Microsoft Learn: What is Windows Autopatch?

Manage and secure applications 11

  • A company buys 300 licenses of an iPad app in Apple Business Manager. What does it do in Intune to assign and track them? Microsoft Learn: Manage Apple Volume-Purchased Apps
  • A Conditional Access policy should admit mobile users only from apps under an Intune app protection policy. Which grant control is chosen? Microsoft Learn: How to Configure Grant Controls in Microsoft Entra
  • A Microsoft Store app deployed through Intune gets a new version. What does Intune do? Microsoft Learn: Add Microsoft Store Apps to Microsoft Intune
  • A user signs in to Microsoft 365 Apps on a home PC that is not managed. Which service still applies the organization's policy settings there? Microsoft Learn: Overview of Cloud Policy service for Microsoft 365
  • An app is assigned as "Available for enrolled devices". How does a user get it? Microsoft Learn: Assign Apps to Groups in Microsoft Intune
  • Into which format does the Microsoft Win32 Content Prep Tool convert an app's installation files? Microsoft Learn: Prepare a Win32 App to Be Uploaded to Microsoft Intune
  • Staff read work email on personal phones that are not enrolled. Which Intune policy type protects the company data inside the app? Microsoft Learn: App Protection Policies Overview
  • What does a quiet time policy in Intune do? Microsoft Learn: Create Quiet Time Policies in Microsoft Intune
  • What is Managed Google Play? Microsoft Learn: Add and Assign Managed Google Play Apps to Android Enterprise Devices
  • What is the Office Deployment Tool? Microsoft Learn: Overview of the Office Deployment Tool
  • Which component deploys Win32 apps on a device and is installed automatically when a Win32 app or PowerShell script is assigned? Microsoft Learn: Win32 App Management in Microsoft Intune

Optimize endpoint operations 8

  • A script will read Intune data through Microsoft Graph. Which service handles authentication and access control for those calls? Microsoft Learn: How to Use Microsoft Entra ID to Access Intune APIs in Microsoft Graph
  • Before custom compliance settings can be added to a policy, which two items must be prepared? Microsoft Learn: Use custom compliance settings in Microsoft Intune
  • In Intune Remediations, what does each script package consist of? Microsoft Learn: Use Remediations to Detect and Fix Support Issues
  • In which language is a Device query written in the Intune admin center? Microsoft Learn: Device Query
  • Where does an admin open Microsoft Copilot in Intune? Microsoft Learn: Security Copilot in Intune features overview
  • Where in Intune does an admin see the tenant name and location, the service release version, connector status and service health messages in one place? Microsoft Learn: About the Microsoft Intune tenant status page
  • Which Intune feature reports on battery health, app reliability, startup times and device performance? Microsoft Learn: Endpoint analytics overview
  • Which type of Intune report lets an admin use raw data to build custom reports? Microsoft Learn: Microsoft Intune Reports

How this list was compiled: Own questions, written to the five skill areas and weightings of the study guide Microsoft publishes for Exam MD-102 (the study guide titles it Managing and Securing Microsoft 365 Endpoints by using Intune; the retired exams' pages call it Endpoint Administrator) at https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/md-102 (read 2026-10-10; skills measured as of October 27, 2026), with the exam time from https://learn.microsoft.com/en-us/credentials/certifications/modern-desktop/ (read 2026-10-10). Facts were read on 2026-10-10 in Microsoft's public pages at learn.microsoft.com. Each question names the page it was written from and links to it. Licence: Own work. Every question, wrong choice and explanation was written for this site from the skills listed in the study guide and the public Microsoft Learn pages named in each question. Nothing is copied or reworded from a Microsoft exam, Microsoft's Practice Assessment, a practice product or a question dump.

How it works

This unofficial MD-102 practice test has 60 of our own questions on managing Windows and mobile devices with Intune. It is not affiliated with Microsoft Corporation, and no question comes from the real exam.

Read the full guide

What exam MD-102 measures

The study guide, read on October 10, 2026, prints the skills measured as of October 27, 2026 and marks every change from the earlier list minor: prepare infrastructure for devices 20 to 25 percent, manage and maintain devices 25 to 30, protect devices 15 to 20, manage and secure applications 15 to 20, optimize endpoint operations 10 to 15. The certification page gives 100 minutes.

What this bank leaves out

No question needs a device or a tenant: each asks what a setting, a policy or a device action does. License prices and portal click paths are left out.

  • Retire removes company data and keeps personal data. Wipe is a factory reset.
  • A device with no compliance policy counts as compliant until the tenant setting is changed.
  • Autopilot self-deploying mode needs TPM 2.0.

Questions and answers

Is there still an MD-100 or MD-101 practice test?

Both exams retired on September 30, 2023. Their pages on Microsoft Learn name Exam MD-102: Endpoint Administrator as the replacement, so a practice test for either number now follows the MD-102 study guide, as this one does.

How many questions are on the MD-102 exam?

No number is published for MD-102. Microsoft says most of its certification exams hold 40 to 60 questions and that the count is subject to change. Here, exam mode sets 50 questions against 100 minutes.

What is the passing score for MD-102?

A score of 700 or greater, on Microsoft's scale of 1 to 1,000. That score is scaled, so this page reports percent right by skill area and gives no verdict.

Does the MD-102 certification expire?

Yes. The study guide says Microsoft associate certifications expire annually and can be renewed by passing a free online assessment on Microsoft Learn. The certification page lists a renewal frequency of 12 months.

More tests

Show 7 more

Browse Safety and Trades