Microsoft Practice Test MD-102: Managing and Securing Microsoft 365 Endpoints by using Intune
Digital Badge Included
The MD-102: Managing and Securing Microsoft 365 Endpoints by using Intune practice test trains you in deploying, configuring, securing, and monitoring Windows and non-Windows endpoints in a Microsoft 365 tenant by using Microsoft Intune, the Microsoft Intune Suite, Windows Autopilot, Microsoft Entra ID, Windows 365, and Microsoft Defender for Endpoint.
Why should I use the MD-102 Practice Test to prepare for the official exam?
The MD-102 certification is a perfect fit for endpoint administrators who manage devices and client applications at scale and want to validate their skills against the updated exam. Passing the MD-102 exam will allow you to demonstrate your knowledge of the full endpoint lifecycle, including Microsoft Entra device join and registration, Intune enrollment for Windows, macOS, iOS/iPadOS and Android, compliance policies and Conditional Access, Windows Autopilot deployment and device preparation policies, device configuration profiles, Intune Suite capabilities such as Endpoint Privilege Management, Microsoft Cloud PKI and Remote Help, endpoint security and update management, app deployment and app protection policies, and the new domain on optimizing endpoint operations with automation, Endpoint Analytics, and Security Copilot agents in Intune. Once certified, you can continue building your Microsoft 365 career with certifications such as MS-102 or the Microsoft security portfolio.
All Practice Tests, Up to 60% Off!
Choose the subscription plan that best fits your needs and enjoy full access to our entire practice tests catalog.
Start Now!
Full access to the Practice Test catalog
Get a Subscription Plan from $21.
Buying for your team?
Buy More. Save More
Explore Our Business Solutions.
Learn More
Full access to the Practice Test catalog
Get a Subscription Plan from $21.
Release Date: 08/2023 (Last Update: 09/2026)
Job Role: Administrator
Language: English
The MD-102 practice test contains 197 questions and covers the following objectives:
Prepare infrastructure for devices - 42 questions
Add devices to Microsoft Entra ID
- Choose an appropriate device join type, including considerations such as device registration and Microsoft Entra join
- Join devices to Microsoft Entra ID
- Register devices to Microsoft Entra ID
- Plan and implement groups for devices in Microsoft Entra ID, including dynamic group membership rules
Enroll devices to Microsoft Intune
- Configure enrollment settings in Microsoft Intune
- Configure automatic enrollment for Windows
- Configure personal enrollment for macOS, iOS, iPadOS
- Configure enrollment profiles for Android devices, including fully managed, dedicated, corporate owned, work profile, enrollment restrictions and troubleshooting enrollment failures
- Configure corporate enrollment for macOS and iOS devices by integrating Intune with Apple Business Manager
- Configure enrollment for Android devices by integrating Intune with Samsung Knox Mobile Enrollment or Google Zero Touch
Implement identity and compliance
- Manage built-in and custom roles for Intune and Windows 365, including role assignments
- Configure scope tags and scoped administration for multi-admin environments
- Implement and manage multi-admin approval
- Implement compliance policies for all supported device platforms by using Intune
- Implement Microsoft Entra Conditional Access policies that require a compliance status
- Configure Windows Hello for Business by using Intune
- Implement and manage Windows Local Administrator Password Solution (Windows LAPS) by using Microsoft Intune and Microsoft Entra ID
- Manage the membership of local groups on Windows devices by using Intune
Manage and maintain devices - 57 questions
Deploy and upgrade Windows clients by using cloud-based tools
- Choose between Windows Autopilot deployment profiles and device preparation policies
- Choose between Windows Autopilot deployment modes, including user-driven, pre-provisioning, and self-deploying
- Apply a device name template by using Windows Autopilot
- Implement Windows client deployment by using Windows Autopilot
- Create an Enrollment Status Page (ESP)
- Plan and implement device upgrades for Windows 11 by using Intune
- Provision and configure Windows 365 Cloud PCs by using Intune, including provisioning policies, network connections, and image management
- Implement Windows Backup and Restore by using Intune
Plan and implement device configuration profiles
- Create device configuration profiles for Windows devices, including importing ADMX files and using Group Policy analytics
- Create device configuration profiles for Android devices
- Create device configuration profiles for iOS/iPadOS devices
- Create device configuration profiles for macOS devices
- Create device configuration profiles for specialty devices, including Teams Rooms, HoloLens 2, and Zebra
- Target a profile by using assignment filters and enrollment time grouping
Implement Intune Suite add-on capabilities
- Configure Endpoint Privilege Management including configuring elevation policies, monitoring elevated actions, and adjusting EPM settings
- Manage applications by using the Enterprise App Catalog
- Configure Microsoft Intune Remote Help
- Plan and implement Microsoft Cloud PKI, including setting up cloud-based PKI, automating certificate issuance, and monitoring certificate health
- Implement Microsoft Tunnel for Mobile Application Management, including configuring Tunnel Gateway, extending support to MAM devices, and monitoring tunnel connections
- Implement Microsoft Intune Advanced Analytics, including anomaly detection, proactive insights, and risk-based policy recommendations
Perform remote actions on devices
- Sync, restart, retire, or wipe devices
- Perform bulk remote actions
- Update Microsoft Defender Antivirus security intelligence
- Rotate BitLocker recovery keys
- Rotate local administrator passwords
- Run a device query by using KQL
- Collect device diagnostics and logs by using Microsoft Intune, including using the Troubleshooting blade for user-based diagnostics
Protect devices - 31 questions
Configure endpoint security
- Create antivirus policies by using Microsoft Intune
- Create and manage disk encryption policies by using Microsoft Intune, including managing BitLocker recovery keys, configuring user self-service recovery, and monitoring encryption compliance status
- Create firewall policies by using Microsoft Intune
- Configure Attack surface reduction policies by using Microsoft Intune, including applying Zero Trust principles for endpoint protection
- Plan and implement security baselines by using Microsoft Intune
- Integrate Intune with Microsoft Defender for Endpoint, including configuring Endpoint Detection and Response (EDR) policies, investigating endpoint threats, and triaging incidents
- Onboard devices into Microsoft Defender for Endpoint
- Configure App Control for Business policies by using Microsoft Intune
Manage device updates
- Plan for device updates by using Intune
- Create and manage update rings, feature updates, and quality updates for Windows devices by using Intune
- Implement Windows Autopatch and configure Hotpatch policies
- Create and manage update policies for iOS/iPadOS and macOS devices by using the Settings Catalog in Microsoft Intune
- Manage Android updates by using configuration profiles or firmware-over-the-air (FOTA) deployments
- Configure Windows client Delivery Optimization by using Intune
- Monitor device updates by using Intune
Manage and secure applications - 42 questions
Deploy and update apps
- Prepare applications for deployment by using Intune
- Deploy apps by using Intune, including Win32 apps, line-of-business (LOB) apps, and Microsoft Store apps
- Configure Quiet Time policies for Android and iOS apps
- Deploy Microsoft 365 Apps by using Intune
- Configure policies for Office apps by using Microsoft Intune or the Microsoft 365 Apps admin center
- Deploy Microsoft 365 Apps as part of a Windows Autopilot deployment, including using the Office Deployment Tool (ODT) or Microsoft Intune
- Manage Microsoft 365 Apps by using the Microsoft 365 Apps admin center
- Deploy apps from platform-specific app stores by using Intune, including Apple Volume Purchase Program and Google Play
- Monitor app deployment status and troubleshoot installation failures by using Microsoft Intune
Plan and implement app protection and app configuration policies
- Plan and implement app protection policies for managed and unmanaged (BYOD) devices by using Microsoft Intune
- Implement Microsoft Entra Conditional Access policies for app protection policies
- Plan and implement app configuration policies for managed apps and managed devices
Optimize endpoint operations by using automation, monitoring, and reporting - 25 questions
Automate management tasks
- Automate Intune management tasks by using PowerShell and Microsoft Graph
- Investigate threats identified by Security Copilot agents in Intune
- Analyze device performance by using Security Copilot agents in Intune
- Review and respond to Security Copilot agent recommendations to make management decisions
- Extend device compliance by using PowerShell
Monitor and optimize health
- Implement reporting and data visibility in Microsoft Intune, including customizing reports and filters, using workbooks and dashboards, and exporting reporting data
- Monitor endpoint performance by using Endpoint Analytics, including proactive remediations, device health scores, and app startup performance
- Configure and manage proactive remediation scripts, including detecting and fixing common device issues, and scheduling remediation runs
- Analyze endpoint reliability and user experience scores, including startup performance, restart frequency, and application reliability metrics
- Monitor tenant health and Intune service communications, including reviewing service health dashboards, message center notifications, and establishing operational baselines
- Configure alerts and notifications for policy and compliance changes, including setting up alert rules for compliance drift, enrollment failures, and configuration conflicts
System Requirements
A practice test simulates the actual test and aims to provide you with optimal preparation for what to expect on the real exam. A MeasureUp practice test includes around 150 questions covering the exam objective domains. There are two possible test-taking modes to prepare students for their certification: Certification Mode and Practice Mode.
- Practice Mode allows users to highly customize their testing environment. They may select how many questions to include, the maximum time to finish, randomize question order, and choose how and which questions are shown.
- Certification Mode simulates the actual testing environment. It is timed and does not permit users to view answers or explanations until after the test.
How does it work?
Check out our video to see exactly how MeasureUp's practice tests work.
Why should you trust MeasureUp over free learning material?
| MeasureUp | Free learning material |
|---|---|
|
|
Will studying with a MeasureUp practice test improve my chances of passing at the first attempt?
Yes. MeasureUp's practice tests are designed to help you save time and pass on your first attempt. The test is fully customizable, allowing you to focus on your weak areas. Since the style, objectives, question types, and difficulty match the official exam, passing the practice test twice consecutively in Certification Mode means you're exam ready.
What can I expect to earn if I pass the MD-102 exam?
On passing the MD-102 exam and obtaining a job as an Endpoint Administrator, you can expect to earn a salary in the United States of approximately $103,050 per year.
Source: Glassdoor
Continue growing with MeasureUp’s learning material. Explore the AI Business Solutions learning path.
Fundamentals:
PL-900: Power Platform Fundamentals
Role-Based:
AB-100: Agentic AI Business Solutions Architect
MD-102: Managing and Securing Microsoft 365 Endpoints by using Intune
MS-102: Microsoft 365 Administrator
MS-721: Collaboration Communications Systems Engineer
MS-700: Managing Microsoft Teams
MB-230: Microsoft Dynamics 365 Customer Service Functional Consultant
MB-310: Dynamics 365 Finance Functional Consultant
MB-330: Dynamics 365 Supply Chain Management Functional Consultant
MB-500: Dynamics 365 Finance and Operations Apps Developer
MB-800: Dynamics 365 Business Central Functional Consultant
PL-400: Power Platform Developer
Business:
Microsoft MD-102 Managing and Securing Microsoft 365 Endpoints by using Intune PRACTICE TEST
Why should you use our Microsoft MD-102 Managing and Securing Microsoft 365 Endpoints by using Intune practice test?
The MeasureUp MD-102 practice test is written, reviewed, and edited by endpoint management experts, and it is aligned with the exam objectives published by Microsoft on 24 July 2026, including the new domain on optimizing endpoint operations by using automation, monitoring, and reporting. It gives you 197 questions across all five skill areas, from Microsoft Entra device join types and Intune enrollment to Windows Autopilot, endpoint security, app protection policies, and Endpoint Analytics. It is backed by the MeasureUp Test Pass Guarantee, so you can sit the exam knowing your preparation matches what Microsoft actually measures.
Why should you trust the MD-102 Practice Test from MeasureUp over free learning material?
Free question sets are usually small, rarely updated, and seldom explain why an answer is wrong. The MeasureUp MD-102 practice test offers a much larger question bank with detailed explanations and online references for both correct and incorrect options, and it reproduces the question types you will meet in the real exam. It also covers the areas candidates most often underestimate, such as Intune Suite capabilities like Endpoint Privilege Management and Microsoft Cloud PKI, Windows Autopatch and Hotpatch policies, and Security Copilot agents in Intune.
How to use the Microsoft MD-102 Managing and Securing Microsoft 365 Endpoints by using Intune Practice Test?
You can use the MD-102 practice test in two different modes: certification and practice mode. The former allows you to assess your knowledge and discover your weak areas, while the latter helps you focus on those areas, ensuring you spend your time wisely.
We recommend starting with certification mode. After completing the test, review the generated report to identify areas that need improvement. Then, switch to practice mode to work on those areas. Once you feel confident, retake the test in certification mode. If you pass twice consecutively with a score of 90% or higher, you're ready for the real exam!
Microsoft MD-102 Managing and Securing Microsoft 365 Endpoints by using Intune EXAM
What is the Microsoft MD-102 Managing and Securing Microsoft 365 Endpoints by using Intune certification?
MD-102 is the single exam required for the Microsoft 365 Certified: Endpoint Administrator Associate certification. It validates that you can manage devices and client applications in a Microsoft 365 tenant by using Microsoft Intune, the Microsoft Intune Suite, Windows Autopilot, Microsoft Entra ID, Microsoft Defender for Endpoint, Windows 365, PowerShell, and Microsoft Graph. The exam measures five skill areas: preparing infrastructure for devices, managing and maintaining devices, protecting devices, managing and securing applications, and optimizing endpoint operations through automation, monitoring, and reporting.
Is the Microsoft MD-102 Managing and Securing Microsoft 365 Endpoints by using Intune exam hard?
MD-102 is an associate-level exam, so it assumes you already work with Microsoft Entra ID and Microsoft 365 technologies and have hands-on experience deploying, configuring, and maintaining Windows client and non-Windows devices. There are no formal prerequisites, but candidates who have never configured enrollment profiles, compliance policies, Conditional Access, Autopilot deployment profiles, or Intune security baselines tend to struggle. The July 2026 update raised the bar further by adding Microsoft Intune Advanced Analytics, Windows Autopatch with Hotpatch policies, device queries with KQL, and Security Copilot agents in Intune.
How can I pass the Microsoft MD-102 Managing and Securing Microsoft 365 Endpoints by using Intune certification exam?
Combine the official Microsoft Learn training for MD-102 with hands-on practice in a real Intune tenant, where you can enroll devices, build configuration profiles, and test policy conflicts for yourself. Give extra time to the two heaviest skill areas, managing and maintaining devices and preparing infrastructure for devices, which together account for up to 55% of the exam. Then use the MeasureUp MD-102 practice test to find your weak areas and confirm you are ready before you book the exam.
How many questions does the Microsoft MD-102 Managing and Securing Microsoft 365 Endpoints by using Intune exam have?
Microsoft does not publish a fixed number of questions for the MD-102 exam, and the count varies between deliveries; candidates typically report between 40 and 60 questions. The MeasureUp MD-102 practice test contains 197 questions.
Is the Microsoft MD-102 Managing and Securing Microsoft 365 Endpoints by using Intune certification worth it?
MD-102 is the credential employers look for when hiring endpoint administrators, modern workplace engineers, and Microsoft 365 administrators responsible for device fleets. It proves you can run enrollment, compliance, security, and application management at scale in Intune rather than device by device, a skill set that keeps growing as organizations retire on-premises management. In the United States, an Endpoint Administrator earns approximately $103,050 per year according to Glassdoor.
-
Assessment MD-102: Managing and Securing Microsoft 365 Endpoints by using Intune
Regular Price $19.95 As low as $9.98 -
MeasureUp Subscription 1 Year Plan
Regular Price $199.00 As low as $129.35
