FREE MD-102 Exam Guide 2026: Pass Microsoft Endpoint Administrator (Intune, Autopilot, Windows 11)
Video
You need to add the custom domain contoso.com to a new Microsoft 365 tenant. Which DNS record type does Microsoft 365 require you to publish to verify ownership of the domain?
Tenant Management
Question · Easy
Free 2026 MD-102 study guide: Microsoft Endpoint Administrator exam format, $165 fee, 700/1000 passing score, Intune + Autopilot + Windows 11 deployment + Conditional Access, MD-100/MD-101 replacement, and 8-12 week study plan.
Blog
Which DNS record proves to Microsoft 365 that you own a custom domain you are adding to a tenant?
Deploy and manage a Microsoft 365 tenant
Flashcard
An administrator wants to receive proactive email notifications when a Microsoft 365 service is degraded or in advisory state. Where in the Microsoft 365 admin center is this configured?
Organization's dedicated instance of Microsoft 365, created at sign-up and represented by its own Microsoft Entra ID instance.
Microsoft 365 setup
Guess the Term
Introduction & Exam Overview
1.1 MS-102 Exam Facts & Blueprint
Study guide
Cheat sheet
You need to assign Microsoft 365 E5 licenses to all members of a security group automatically when they join the group. Which Microsoft Entra capability accomplishes this?
Read the clue and guess the term in 6 tries.
Game
FREE MS-102 Exam Guide 2026: Pass Microsoft 365 Administrator (Entra, Defender XDR, Purview)
What initial domain does every new Microsoft 365 tenant receive, and can it be removed?
You must give a regional helpdesk team the ability to reset passwords only for users in the Sales department, without granting tenant-wide rights. Which feature should you use?
Question · Medium
Free 2026 MS-102 study guide: Microsoft 365 Administrator exam format, $165 fee, 700/1000 passing score, Entra ID + Defender XDR + Purview skills, MS-100/MS-101 replacement, and 8-12 week study plan.
Custom name such as contoso.com, not the DNS record or verification step that proves ownership or the whole subscription, that an organization adds before Microsoft 365 uses it for email.
SC-401 Exam Guide 2026: July Blueprint and Study Plan
Which Microsoft Graph PowerShell command creates a new cloud-only user named Maria Lopez with userPrincipalName mlopez@contoso.com and a randomized password?
Current SC-401 guide for the July 28, 2026 blueprint: 100-minute exam, 700 passing score, three 30–35% domains, official resources, labs, and study plan.
In the Microsoft 365 admin center, where do you see current outages versus advance notice of upcoming changes?
Your company plans to use Microsoft 365 Backup. Which workloads can it currently protect?
Entra service that grants administrators time-bound role activation with approval and an audit history, not the just-in-time access model it uses or a sign-in code challenge.
Delegated administration
1.2 Registration, Retake & Renewal
You want to audit Microsoft 365 adoption across Teams, OneDrive, and Exchange to identify low-usage departments. Which admin center area provides this data?
Swap tiles to line up three of the same term.
Term Match
What does Network connectivity insights in the Microsoft 365 admin center measure?
An administrator must convert the existing Microsoft 365 Group 'Marketing' into a shared mailbox while preserving the email address. Which approach is supported?
Question · Hard
Named set of permissions, such as Global Reader, that controls which actions an administrator can take, not a policy rule, a single read action or the access-control model itself.
You need to invite an external partner from fabrikam.com to collaborate in a Microsoft Teams team in your contoso.com tenant. The partner must use their own credentials. What identity model is created in Entra ID?
What does Microsoft 365 Backup protect, and how is it billed?
Which Microsoft Entra role grants the minimum permissions needed to read sign-in logs and audit logs without modifying configuration?
Membership object that gives people a common inbox, calendar and SharePoint site without assigning permissions one by one, not an individual account or the chat workspace that can connect to it.
Users and access
1.3 Study Strategy & Using This Guide
You configured Microsoft Entra Privileged Identity Management to require approval and MFA when activating the Global Administrator role. What is this called?
Flip two cards at a time to find matching terms.
Term Pairs
How long is a deleted Microsoft 365 user recoverable, and what happens after that?
Microsoft 365 Apps for enterprise must be deployed company-wide using a managed channel that receives feature updates twice a year. Which update channel meets the requirement?
Kind of mailbox that several people open from their own accounts, often for support or reception, rather than a public folder or an online archive.
Your tenant has 5,000 users and you need to import them from a CSV file. Which approach is most appropriate?
When does a shared mailbox need its own Exchange Online license?
Where in the Microsoft 365 admin center can an administrator review network performance from Microsoft 365 endpoints to identify VPN or proxy issues affecting users?
Feature that lets an employee recover access through a portal without calling the help desk, not a sign-in code prompt or a role activation tool.
Sign-in recovery
Tenant Setup, Domains & Org Settings
2.1 Creating a Microsoft 365 Tenant
An organization needs different password expiration policies per business unit. Microsoft 365 supports tenant-wide password expiration only. What guidance should the administrator give?
Find five hidden terms in a grid of letters.
Term Search
What is group-based licensing, and what happens when a user leaves the group?
Loading more…
