Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Microsoft
  5. MD-102

Microsoft MD-102 Exam Questions
Endpoint Administrator (Page 6 )

Updated On: 16-Apr-2026
Page 6 of 53
PDF with 409 Questions

You have a Microsoft 365 subscription that contains a user named User1. User1 is assigned a Windows
Enterprise E3 license.

You use Microsoft Intune Suite to manage devices.

User1 activates the following devices:

Device1: Windows 11 Enterprise



Device2: Windows 10 Enterprise



Device3: Windows 11 Enterprise



How many more devices can User1 activate?

  1. 2
  2. 3
  3. 7
  4. 8

Answer(s): A

Explanation:

When you purchase Windows
Enterprise E3 via a partner, you get the following benefits:
* Deploy on up to five devices. For each user covered by the license, you can deploy Windows 10 Enterprise edition on up to five devices.
* Etc.


Reference:

https://learn.microsoft.com/en-us/windows/deployment/windows-10-enterprise-e3-overview



DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)

Your company has a computer named Computer1 that runs Windows 11.

Computer1 was used by a user who left the company.

You plan to repurpose Computer1 and assign the computer to a new user.

You need to redeploy Computer1 by using Windows Autopilot.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Step 1: Generate a CSV file that contains the computer information You can perform Windows Autopilot device registration within your organization by manually collecting the hardware identity of devices (hardware hashes) and uploading this information in a comma-separated-values (CSV) file.

Step 2: Upload the file by using Microsoft Intune
By default, Intune only applies this profile to Windows Autopilot devices. Yes, to convert all targeted, non-auto pilot devices to Autopilot so that they can receive the profile the next time they perform a factory reset.

Step 3: Reset the computer
Windows Autopilot Reset takes the device back to a business-ready state, allowing the next user to sign in and

get productive quickly and simply. Specifically, Windows Autopilot Reset:
Removes personal files, apps, and settings.
Reapplies a device's original settings.
Sets the region, language, and keyboard to the original values.
Maintains the device's identity connection to Azure AD.
Maintains the device's management connection to Intune.


Reference:

https://docs.microsoft.com/en-us/intune/enrollment-autopilot https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot-reset



You use the Microsoft Deployment Toolkit (MDT) to deploy Windows 11.

You create a new task sequence by using the Standard Client Task Sequence template to deploy Windows 11 Enterprise to new computers. The computers have a single hard disk.

You need to modify the task sequence to create a system volume and a data volume.

Which phase should you modify in the task sequence?

  1. Initialization
  2. State Restore
  3. Preinstall
  4. Postinstall

Answer(s): C

Explanation:

Step 1 Create Extra Partition in MDT
1) First we will look to create extra partition in MDT. We will create a new task sequence for a machine that doesn't have an extra partition. Specify the TS name and comments. Click Next.
2) On the Select Template page, click the drop-down and select Standard Client Task Sequence. Complete the remaining steps.
3) Edit the task sequence and click the New Computer only step. Within that step, click Format and Partition Disk(BIOS) step and edit it.



Etc.


Reference:

https://www.prajwaldesai.com/create-extra-partition-in-mdt/



You have a Microsoft Deployment Toolkit (MDT) deployment share.

From the Deployment Workbench, you open the New Task Sequence Wizard and select the Standard Client Upgrade Task Sequence task sequence template.

You discover that there are no operating system images listed on the Select OS page as shown in the following exhibit.



You need to be able to select an operating system image to perform a Windows 11 in-place upgrade.

What should you do?

  1. Enable monitoring for the deployment share.
  2. Import a full set of source files.
  3. Import a custom image file.
  4. Run the Update Deployment Share Wizard.

Answer(s): B



DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)

You have a Microsoft Intune subscription that is configured to use a PFX certificate connector to an on- premises Enterprise certification authority (CA).

You need to use Intune to configure autoenrollment for Android devices by using public key pair (PKCS) certificates.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Step 1: Obtain the root certificate.
Export the root certificate from the Enterprise CA.
To authenticate a device with VPN, WiFi, or other resources, a device needs a root or intermediate CA certificate.

Step 2: From the Microsoft Endpoint Manager admin center, create a trusted certificate profile Create a trusted certificate profile
1.Sign in to the Microsoft Endpoint Manager admin center.
2.Select and go to Devices > Configuration profiles > Create profile.
3.Enter the following properties:
Platform:
Profile: Select Trusted certificate. Or, select Templates > Trusted certificate.
Select Create.
4.Etc.

Step 3: From the Microsoft Endpoint Manager admin center, create a PKCS certificate profile

Create a PKCS certificate profile

1.Sign in to the Microsoft Endpoint Manager admin center.
2.Select and go to Devices > Configuration profiles > Create profile.
3.Enter the following properties:
Platform:
Profile: Select PKCS certificate. Or, select Templates > PKCS certificate.
Select Create.
4.Etc.


Reference:

https://docs.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure



HOTSPOT (Drag and Drop is not supported)

You create a Windows Autopilot deployment profile.

You need to configure the profile settings to meet the following requirements:

Automatically enroll new devices and provision system apps without requiring end-user authentication



Include the hardware serial number in the computer name.



Which two settings should you configure? To answer, select the appropriate settings in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: Deployment mode User-driven
User-driven: Devices with this profile are associated with the user enrolling the device. User credentials are required to enroll the device.

Change it to: Self-deploying (preview): (requires Windows 10, version 1809 or later) Devices with this profile aren't associated with the user enrolling the device. User credentials aren't required to enroll the device. When a device has no user associated with it, user-based compliance policies don't apply to it. When using self- deploying mode, only compliance policies targeting the device will be applied.

Box 2: Apply device name template
Apply device name template (requires Windows 10, version 1809 or later, and Azure AD join type): Choose Yes to create a template to use when naming a device during enrollment. Names must be 15 characters or less, and can have letters, numbers, and hyphens. Names can't be all numbers. Use the %SERIAL% macro to add a hardware-specific serial number. Or, use the %RAND:x% macro to add a random string of numbers, where x equals the number of digits to add.


Reference:

https://docs.microsoft.com/en-us/mem/autopilot/profiles



HOTSPOT (Drag and Drop is not supported)

Your network contains an Active Directory domain named adatum.com. The domain contains two computers named Computer1 and Computer2 that run Windows 10. Remote Desktop is enabled on Computer2.

The domain contains the user accounts shown in the following table.



Computer2 contains the local groups shown in the following table.



The relevant user rights assignments for Computer2 are shown in the following table.



For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: Yes
User1 is an administrator and has the Allow log on through Remote Desktop Services.

Box 2: No
User2 is a member of Group2 which has the Deny log on through Remote Desktop Services.

Box 3: Yes
User3 is a member of the administrators group and has the Allow log on through Remote Desktop Services.

Note: Deny permissions take precedence over Allow permissions. If a user belongs to two groups, and one of them has a specific permission set to Deny, that user is not able to perform tasks that require that permission even if they belong to a group that has that permission set to Allow.


Reference:

https://docs.microsoft.com/en-us/azure/devops/organizations/security/about-permissions



You have two computers named Computer1 and Computer2 that run Windows 10. Computer2 has Remote Desktop enabled.

From Computer1, you connect to Computer2 by using Remote Desktop Connection.

You need to ensure that you can access the local drives on Computer1 from within the Remote Desktop session.

What should you do?

  1. From Computer2, configure the Remote Desktop settings.
  2. From Windows Defender Firewall on Computer1, allow Remote Desktop.
  3. From Windows Defender Firewall on Computer2, allow File and Printer Sharing.
  4. From Computer1, configure the Remote Desktop Connection settings.

Answer(s): D

Explanation:

How to gain access to local files:
You can gain access to your disk drives on the local computer during a Remote Desktop session. You can redirect the local disk drives, including the hard disk drives, CD-ROM disk drives, floppy disk drives, and mapped network disk drives so that you can transfer files between the local host and the remote computer in the same way that you copy files from a network share. You can use Microsoft Windows Explorer to view the disk drives and files for each redirected disk drive. Alternatively, you can view the files for each redirected disk drive in My Computer. The drives are displayed as "drive_letter on terminal_server_client_name" in both Windows Explorer and My Computer.
To view the disk drives and files for the redirected disk drive:
1.Click Start, point to All Programs (or Programs), point to Accessories, point to Communications, and then click Remote Desktop Connection.
2.Click Options, and then click the
Local Resources tab.
3.Click Disk Drives, and then click
Connect.


Reference:

https://support.microsoft.com/en-us/topic/how-to-gain-access-to-local-files-in-a-remote-desktop-session-to-a- windows-xp-based-or-to-a-windows-server-2003-based-host-computer-021ee183-e6be-4201-809e- c355c47b17f4



Viewing page 6 of 53
Viewing questions 41 - 48 out of 409 questions



Post your Comments and Discuss Microsoft MD-102 exam dumps with other Community members:

MD-102 Exam Discussions & Posts

AI Tutor AI Tutor 👋 I’m here to help!