EarnYourCert
ES EN
All exams › MD-102
Microsoft Certified Associate

MD-102 Practice Exam: Endpoint Administrator Associate

Endpoint management with Microsoft Intune and Entra ID: device enrollment, Windows Autopilot, configuration profiles, compliance policies, app protection, endpoint security and update management. 739 original questions with detailed explanations, smart review and progress tracking. Independent prep resource, not affiliated with Microsoft.

Start the free practice exam →
739
Questions
50
Per exam
70%
Pass mark
5
Domains

MD-102 exam domains

Prepare infrastructure for devices
20-25%
Manage and maintain devices
25-30%
Protect devices
15-20%
Manage and secure applications
15-20%
Optimize endpoint operations by using automation, monitoring, and reporting
10-15%

Why practice with EarnYourCert

Detailed explanations on every question, not just the right answer.
Smart spaced-repetition review (SRS) to reinforce what you get wrong.
Progress tracking per domain and over time.
Free to start, no sign-up required.

MD-102 sample questions

Five real questions from our 739-question bank. Try to answer before revealing the solution.

1. You want to create a device group in Microsoft Entra ID that automatically includes all corporate-owned devices. Which dynamic membership rule attribute should you use?

  1. device.operatingSystem -eq 'Windows'
  2. device.deviceOwnership -eq 'Company'
  3. device.isCompliant -eq true
  4. device.managementType -eq 'MDM'
Show answer

Correct answer: B. The device.deviceOwnership attribute with value 'Company' identifies corporate-owned devices, as opposed to 'Personal' for BYOD devices.

2. An administrator wants to configure Always On VPN on Windows devices managed by Intune so users are always connected to the corporate VPN without manually connecting. Which Intune profile type should they create?

  1. Device restrictions profile > Network section with Always On VPN options
  2. Windows device configuration profile of type VPN with Always On option enabled
  3. Endpoint Protection profile > VPN section with split tunnel configuration
  4. Conditional Access policy with corporate VPN requirement for resource access
Show answer

Correct answer: B. VPN profiles for Windows in Intune allow configuring Always On VPN, which keeps the VPN connection active at all times. It supports different VPN clients (Microsoft VPN, IKEv2, etc.).

3. Which Microsoft 365 Apps update channel provides the fastest updates with the latest features but with less pre-release testing?

  1. Current Channel
  2. Monthly Enterprise Channel
  3. Semi-Annual Enterprise Channel
  4. Beta Channel
Show answer

Correct answer: A. Current Channel receives new features as soon as they are ready, typically several times per month. It is the fastest but with less enterprise pre-release testing.

4. You enable App Control for Business but want apps deployed through Intune to keep running without adding each one to the policy. What should you configure?

  1. An attack surface reduction rule that blocks Office macros
  2. A Windows Defender Firewall rule for each installed application
  3. The Intune Management Extension as a managed installer
  4. A security baseline that disables SmartScreen for those apps
Show answer

Correct answer: C. In Endpoint security > App Control for Business, you can set the Intune Management Extension as a managed installer so apps it deploys are trusted automatically by App Control policies.

5. Which Microsoft Graph endpoint version should production automation for Intune generally use?

  1. v1.0, because beta APIs can change without notice
  2. beta, because it is always more stable
  3. Either one; Microsoft guarantees both equally
  4. The legacy Azure AD Graph endpoint
Show answer

Correct answer: A. The v1.0 endpoint is supported for production; beta is subject to breaking changes. Azure AD Graph is retired.

Practice all 739 questions →

Frequently asked questions

How many questions does the MD-102 practice exam have?

The question bank has 739 original questions. Each practice exam draws 50 questions weighted by domain, just like the official exam.

What's the passing score for MD-102?

Microsoft's official MD-102 exam requires a score equivalent to 70% to pass. We use the same threshold in our practice exams so you train under realistic conditions.

What domains does the MD-102 exam cover?

Five domains: prepare infrastructure for devices (20-25%), manage and maintain devices (25-30%), protect devices (15-20%), manage and secure applications (15-20%), and optimize endpoint operations by using automation, monitoring, and reporting (10-15%).

Is the MD-102 practice exam free?

Yes, you can practice for free without signing up. Creating a free account adds progress tracking and smart review (SRS); the Pro tier removes daily question limits.

Are these the official Microsoft exam questions?

No. These are original questions written based on Microsoft's official "Skills measured" guide for MD-102, not extracts from the real exam or "exam dumps".