FREE MD-102 Exam Guide 2026: Pass Microsoft Endpoint Administrator (Intune, Autopilot, Windows 11)
Video
A company wants to allow personal Windows 11 devices to access Microsoft 365 resources while keeping corporate data separate. Which Microsoft Entra device join type best fits this scenario?
Prepare Infrastructure For Devices
Question · Easy
Free 2026 MD-102 study guide: Microsoft Endpoint Administrator exam format, $165 fee, 700/1000 passing score, Intune + Autopilot + Windows 11 deployment + Conditional Access, MD-100/MD-101 replacement, and 8-12 week study plan.
Blog
Microsoft Entra joined
Prepare infrastructure for devices
Flashcard
You need every new Windows 11 device that joins Microsoft Entra ID to automatically enroll in Microsoft Intune. Where do you configure this behavior?
Microsoft cloud identity brand that replaced Azure Active Directory and stores device identity objects for registration, directory join, and Conditional Access evaluation.
Device Infrastructure
Guess the Term
Exam Overview and MD-102 Study Strategy
Current Exam Facts
Study guide
Cheat sheet
Which Windows Autopilot deployment mode allows a shared device with no primary user, where each sign-in is treated like a new session?
Manage And Maintain Devices
Question · Medium
Read the clue and guess the term in 6 tries.
Game
FREE MS-102 Exam Guide 2026: Pass Microsoft 365 Administrator (Entra, Defender XDR, Purview)
Hybrid Microsoft Entra joined
You import a hardware hash CSV into Intune > Devices > Enrollment > Windows > Devices but the device does not appear after 15 minutes. Which action should you take first?
Free 2026 MS-102 study guide: Microsoft 365 Administrator exam format, $165 fee, 700/1000 passing score, Entra ID + Defender XDR + Purview skills, MS-100/MS-101 replacement, and 8-12 week study plan.
Cloud-native Microsoft 365 endpoint management service that enrolls, configures, secures, and updates devices and applications across Windows, Apple, Linux, and Android platforms.
What is the minimum Windows 11 edition that supports Microsoft Entra join and Intune MDM enrollment for an organization?
Entra registered vs. joined
Which PowerShell cmdlet captures the hardware hash from a Windows device for Autopilot registration?
Personal hardware scenario supported by Microsoft Entra registered workplace accounts where employees sign in with local credentials such as a personal PIN or biometrics.
Audience Profile and Endpoint Admin Mental Model
You want users to see deployment progress and block them from using the device until required apps and policies finish during Autopilot. Which Intune feature do you configure?
Swap tiles to line up three of the same term.
Term Match
Automatic MDM enrollment requires MDM user scope
A compliance policy marks a Windows 11 device noncompliant when BitLocker is not enabled. Where in Intune do you set how soon after noncompliance the device is marked noncompliant rather than In grace period?
Apple web portal for enterprises that exchanges enrollment tokens and location tokens with Microsoft Intune to synchronize corporate devices and volume-purchased software licenses.
Which Conditional Access grant control ensures only Intune-compliant devices can access Microsoft 365 resources?
Platform enrollment restrictions
You configure Windows Hello for Business for a cloud-only tenant with Microsoft Entra joined devices. Which trust model does Microsoft recommend for new deployments?
Question · Hard
Apple over-the-air provisioning method that enrolls corporate iPhones, iPads, and Macs during initial Setup Assistant startup without an administrator physically handling the hardware.
Domain Map and Weighting Strategy
In Intune, what is the maximum number of compliance policies that can target a single Windows device?
Flip two cards at a time to find matching terms.
Term Pairs
Autopilot user-driven mode
You implement Windows LAPS through Intune. Which Microsoft Entra role can read the recovered local administrator password by default?
Samsung enterprise security and provisioning platform that integrates with Microsoft Intune for bulk Mobile Enrollment of corporate Android hardware and scheduled E-FOTA firmware campaigns.
Which Intune feature lets you manage membership of the local Administrators group on Windows devices using Microsoft Entra users and groups?
Autopilot self-deploying mode
Which Android Enterprise enrollment profile is intended for corporate-owned devices used by a single user with full IT control over the entire device?
Intune permission framework whose built-in or custom roles combine management categories, such as Device configuration, with actions like Read, Write, Update, and Delete to enforce least privilege.
Six-to-Ten-Week Study Plan and Readiness Checklist
What technology must be present on a device for it to be Microsoft Entra hybrid joined automatically through the Microsoft Entra Connect Sync wizard?
Find five hidden terms in a grid of letters.
Term Search
Enrollment Status Page (ESP)
You want to deploy a settings catalog profile that disables BitLocker recovery key printing only to a specific dynamic group. Which assignment option do you use?
Intune tag attribute attached to policies, profiles, and managed devices so regional or distributed IT administrators only view the objects assigned to their administrative unit.
Loading more…
