Microsoft MD-102 Exam
Endpoint Administrator (Page 31 )

Updated On: 7-Feb-2026

HOTSPOT (Drag and Drop is not supported)
Case study
Overview
Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York.
Contoso has the users and computers shown in the following table.
The company has IT, human resources (HR), legal (LEG), marketing (MKG), and finance (FIN) departments.
Contoso recently purchased a Microsoft 365 subscription.
The company is opening a new branch office in Phoenix. Most of the users in the Phoenix office will work from home.
Existing Environment
The network contains an Active Directory domain named contoso.com that is synced to Azure AD.
All member servers run Windows Server 2016. All laptops and desktop computers run Windows 10 Enterprise.
The computers are managed by using Microsoft Configuration Manager. The mobile devices are managed by using Microsoft Intune.
The naming convention for the computers is the department acronym, followed by a hyphen, and then four numbers, for example FIN-6785. All the computers are joined to the on-premises Active Directory domain.
Each department has an organizational unit (OU) that contains a child OU named Computers. Each computer account is in the Computers OU of its respective department.
Intune Configuration
The domain has the users shown in the following table.
User2 is a device enrollment manager (DEM) in Intune.
The devices enrolled in Intune are shown in the following table.
The device compliance policies in Intune are configured as shown in the following table.
The device compliance policies have the assignments shown in the following table.
The device limit restrictions in Intune are configured as shown in the following table.
Requirements
Planned changes
Contoso plans to implement the following changes:
• Provide new computers to the Phoenix office users. The new computers have Windows 10 Pro preinstalled and were purchased already.
• Implement co-management for the computers.
Technical Requirements
Contoso must meet the following technical requirements:
• Ensure that the users in a group named Group4 can only access Microsoft Exchange Online from devices that are enrolled in Intune.
• Deploy Windows 10 Enterprise to the computers of the Phoenix office users by using Windows Autopilot.
• Create a provisioning package for new computers in the HR department.
• Block iOS devices from sending diagnostic and usage telemetry data.
• Use the principle of least privilege whenever possible.
• Enable the users in the MKG department to use App1.
• Pilot co-management for the IT department.
To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.






  1. See Explanation section for answer.

Answer(s): A

Explanation:



Your network contains an Active Directory domain named contoso.com. The domain contains two computers named Computer1 and Computer2 that run Windows 10.
On Computer1, you need to run the Invoke-Command cmdlet to execute several PowerShell commands on Computer2.
What should you do first?

  1. On Computer2, run the Enable-PSRemoting cmdlet.
  2. On Computer2, add Computer1 to the Remote Management Users group.
  3. From Active Directory, configure the Trusted for Delegation setting for the computer account of Computer2.
  4. On Computer1, run the New-PSSession cmdlet.

Answer(s): A



You have an Azure AD tenant that contains the devices shown in the following table.
Which devices can be activated by using subscription activation?

  1. Device1 only
  2. Device1 and Device2 only
  3. Device1 and Device3 only
  4. Device1, Device2, Device3, and Device4

Answer(s): C



You have 25 computers that run Windows 10 Pro.
You have a Microsoft 365 E5 subscription that uses Microsoft Intune.
You need to upgrade the computers to Windows 11 Enterprise by using an in-place upgrade. The solution must minimize administrative effort.
What should you use?

  1. Microsoft Deployment Toolkit (MDT) and a default image of Windows 11 Enterprise
  2. Microsoft Configuration Manager and a custom image of Windows 11 Enterprise
  3. Windows Autopilot
  4. Subscription Activation

Answer(s): A



You use the Microsoft Deployment Toolkit (MDT) to manage Windows 11 deployments.
From Deployment Workbench, you modify the WinPE settings and add PowerShell support.
You need to generate a new set of WinPE boot image files that contain the updated settings.
What should you do?

  1. From the Deployment Shares node, update the deployment share.
  2. From the Advanced Configuration node, create new media.
  3. From the Packages node, import a new operating system package.
  4. From the Operating Systems node, import a new operating system.

Answer(s): A






Post your Comments and Discuss Microsoft MD-102 exam prep with other Community members:

Join the MD-102 Discussion