Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Microsoft
  5. MD-102

Microsoft MD-102 Exam Questions
Endpoint Administrator (Page 7 )

Updated On: 16-Apr-2026
Page 7 of 53
PDF with 409 Questions

You have a Microsoft 365 subscription that uses Microsoft Intune.

You have five new Windows 11 Pro devices.

You need to prepare the devices for corporate use. The solution must meet the following requirements:
Install Windows 11 Enterprise on each device.



Install a Windows Installer (MSI) package named App1 on each device.



Add a certificate named Certificate1 that is required by App1.



Join each device to Microsoft Entra.



Which three provisioning options can you use? Each correct answer presents a complete solution.

Note: Each correct selection is worth one point.

  1. subscription activation
  2. a custom Windows image
  3. an in-place upgrade
  4. Windows Autopilot
  5. provisioning packages

Answer(s): B,D,E

Explanation:

D: Windows Autopilot can provide a pre-provisioning service that helps partners or IT staff pre-provision a fully configured and business-ready Windows PC. From the end user's perspective, the Windows Autopilot user- driven experience is unchanged, but getting their device to a fully provisioned state is faster.
With Windows Autopilot for pre-provisioned deployment, the provisioning process is split. The time-consuming portions are done by IT, partners, or OEMs. The end user simply completes a few necessary settings and policies and then they can begin using their device.



The pre-provisioning process applies all device-targeted policies from Intune. Those policies include certificates, security templates, settings, apps, and more - anything targeting the device. Additionally, any Win32 or LOB apps are installed if they meet the following conditions:
Configured to install in the device context.
Assigned to either the device or to the user preassigned to the Autopilot device.
E: Join new Windows devices to Azure Active Directory and Intune. To bulk enroll devices for your Azure AD tenant, you create a provisioning package with the Windows Configuration Designer (WCD) app. Applying the provisioning package to corporate-owned devices joins the devices to your Azure AD tenant and enrolls them for Intune management. Once the package is applied, it's ready for your Azure AD users to sign in.
Note: Configuration Designer wizards
The following table describes settings that you can configure using the wizards in Windows Configuration Designer to create provisioning packages.


Reference:

https://learn.microsoft.com/en-us/mem/autopilot/pre-provision https://learn.microsoft.com/en-us/mem/intune/enrollment/windows-bulk-enroll https://learn.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-packages



You have a Microsoft 365 subscription.

You plan to use Windows Autopilot to provision 25 Windows 11 devices.

You need to configure the Out-of-box experience (OOBE) settings.

What should you create in the Microsoft Intune admin center?

  1. an enrollment status page (ESP)
  2. a deployment profile
  3. a compliance policy
  4. a PowerShell script
  5. a configuration profile

Answer(s): B

Explanation:

Use Windows Autopilot profiles on new devices to customize a customer's out-of-box experience In Partner Center, you can create Windows Autopilot deployment profiles and apply them to devices.
Note:

Create a new Autopilot profile
To create a new Autopilot profile, use the following steps:
1. Sign in to Partner Center and select Customers.
2. On the Customer List, select a customer.
3. On the customer's detail page, select Devices.
4. Under Windows Autopilot profiles, select Add new profile.
5. Enter the profile's name and description and then configure the OOBE settings. Choose from:
Skip privacy settings in setup
Disable local admin account in setup
Automatically skip pages in setup
(Includes Automatically select setup for work or school and Skip Cortana, OneDrive, and OEM registration setup pages)
Skip end user license agreement (EULA)
6. Select Submit when finished.


Reference:

https://learn.microsoft.com/en-us/partner-center/autopilot



You have a Microsoft Entra tenant that contains the devices shown in the following table.



You purchase Windows 11 Enterprise E5 licenses.

Which devices can use Subscription Activation to upgrade to Windows 11 Enterprise?

  1. Device1 only
  2. Device1 and Device2 only
  3. Device1 and Device3 only
  4. Device1, Device2, Device3, and Device4

Answer(s): A



You have computers that run Windows 11 Pro. The computers are joined to Microsoft Entra and enrolled in Microsoft Intune.

You need to upgrade the computers to Windows 11 Enterprise.

What should you configure in Intune?

  1. a device compliance policy
  2. a device cleanup rule
  3. a device enrollment policy
  4. a device configuration profile

Answer(s): D

Explanation:

Intune: Upgrade Windows Pro to Enterprise.
1)First, create a Microsoft Intune configuration policy. In the Azure Portal navigate to Microsoft Intune -> Device Configuration -> Profiles. Click Create Profile.
2)Next, create a new Windows 10 and later profile, with a type of Edition Upgrade. Click Settings
3)Etc.


Reference:

https://blogs.technet.microsoft.com/skypehybridguy/2018/09/21/intune-upgrade-windows-from-pro-to- enterprise-automatically/



You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

You use Microsoft Intune to manage devices.

Auto-enrollment in Intune is configured.

You have 100 Windows 11 devices in a workgroup.

You need to connect the devices to the corporate wireless network and enroll 100 new Windows 11 devices in Intune.

What should you use?

  1. a provisioning package
  2. a Group Policy Object (GPO)
  3. mobile device management (MDM) automatic enrollment
  4. a device configuration policy

Answer(s): A



HOTSPOT (Drag and Drop is not supported)

You have a Microsoft 365 tenant that uses Microsoft Intune to manage personal and corporate devices. The tenant contains Windows 10 devices as shown in the following exhibit.



How will Intune classify each device after the devices are enrolled in Intune automatically? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: LON-CL2 only

Box 2: LON-CL4 only


Reference:

https://docs.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-join https://docs.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-register



HOTSPOT (Drag and Drop is not supported)

You have a Microsoft 365 subscription that contains 1,000 iOS devices. The devices are enrolled in Microsoft Intune as follows:
Two hundred devices are enrolled by using the Intune Company Portal.



Eight hundred devices are enrolled by using Apple Automated Device Enrollment (ADE).



You create an iOS/iPadOS software updates policy named Policy1 that is configured to install iOS/iPadOS 15.5.

How many iOS devices will Policy1 update, and what should you configure to ensure that only iOS/iPadOS 15.5 is installed? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: 800

Manage iOS/iPadOS software update policies in Intune
You can use Microsoft Intune device configuration profiles to manage software updates for iOS/iPad devices that enrolled as supervised devices.

Supervised devices are devices that enroll through one of Apple's Automated Device Enrollment (ADE) options. Devices enrolled through ADE support management control through a mobile device management solution like Intune.

Box 2: Device restriction policy
With policies for iOS software updates, you can:

* Choose to deploy the latest update that's available, or choose to deploy an older update, based on the update version number.

* When deploying an older update, you must also deploy a device restrictions profile to restrict visibility of software updates. This is because update profiles don't prevent users from updating the OS manually. Users can be prevented from updating the OS manually with a device configuration policy that restricts visibility of software updates.

Incorrect:
* Compliance policy
Create compliance rules
Use compliance policies to define the rules and conditions that users and devices should meet to access your organization's protected resources.

* Conditional Access policy
You can also create Conditional Access policies, which work alongside your device compliance results to block access to resources from noncompliant devices.


Reference:

https://learn.microsoft.com/en-us/mem/intune/protect/software-updates-ios https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-program-enroll-ios



You have the Windows 10 devices shown in the following table.



You plan to upgrade the devices to Windows 11 Enterprise.

On which devices can you perform a direct in-place upgrade to Windows 11 Enterprise?

  1. Device3 only
  2. Device3 and Device 4 only
  3. Device2, Device3, and Device4 only
  4. Device1, Device3, and Device4 only
  5. Device1, Device2, Device3, and Device4 only

Answer(s): B



Viewing page 7 of 53
Viewing questions 49 - 56 out of 409 questions



Post your Comments and Discuss Microsoft MD-102 exam dumps with other Community members:

MD-102 Exam Discussions & Posts

AI Tutor AI Tutor 👋 I’m here to help!