Microsoft MD-102 Exam
Endpoint Administrator (Page 7 )

Updated On: 9-Feb-2026

You have a Microsoft 365 E5 subscription. The subscription contains 25 computers that run Windows 11 and are enrolled in Microsoft Intune.
You need to onboard the devices to Microsoft Defender for Endpoint.
What should you create in the Microsoft Intune admin center?

  1. an attack surface reduction (ASR) policy
  2. a security baseline
  3. an endpoint detection and response (EDR) policy
  4. an account protection policy
  5. an antivirus policy

Answer(s): C



Your company uses Microsoft Intune to manage devices.
You need to ensure that only Android devices that use Android work profiles can enroll in Intune.
Which two configurations should you perform in the device enrollment restrictions? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  1. From Platform Settings, set Android device administrator Personally Owned to Block.
  2. From Platform Settings, set Android Enterprise (work profile) to Allow.
  3. From Platform Settings, set Android device administrator Personally Owned to Allow.
  4. From Platform Settings, set Android device administrator to Block.

Answer(s): B,D



HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)
You have the device configuration profile shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

  1. See Explanation section for answer.

Answer(s): A

Explanation:



HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)
You have 100 Windows 10 devices enrolled in Microsoft Intune.
You need to configure the devices to retrieve Windows updates from the internet and from other computers on a local network.
Which Delivery Optimization setting should you configure, and which type of Intune object should you create? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

  1. See Explanation section for answer.

Answer(s): A

Explanation:



HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)
You have an Azure AD tenant that contains the users shown in the following table.
You have devices enrolled in Microsoft Intune as shown in the following table.
From Intune, you create and send a custom notification named Notification1 to Group1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.


  1. See Explanation section for answer.

Answer(s): A

Explanation:






Post your Comments and Discuss Microsoft MD-102 exam prep with other Community members:

Join the MD-102 Discussion