Microsoft · MD-102
Validates the skills to deploy, configure, protect, manage, and monitor endpoints and client applications with Microsoft Intune and related Microsoft 365 services.
Practice Questions
636
≈ 12 practice exams
Duration
100 minutes
Passing Score
700/1000
Difficulty
AssociateLast Updated
Oct 2026
MD-102 now measures endpoint administration as an operating discipline rather than a Windows-only configuration job. The July 24, 2026 blueprint connects identity and enrollment to Intune policy, application protection, Defender integration, updates, automation, monitoring, and reporting across Windows and non-Windows endpoints. Manage and maintain devices is the largest domain at 25-30%.
Microsoft allows 100 minutes and requires a scaled score of 700 or greater, but does not publish a fixed question count. The exam may include interactive components. An English-language objective update is scheduled for October 27, 2026; its five domain weights remain unchanged, so candidates testing on or after that date should compare the dated study-guide versions rather than assuming a new exam code.
Use this 636-question MD-102 practice bank to move between configuration and operational troubleshooting. Begin with 30 free questions, then balance practice across infrastructure, device management, protection, applications, and the newer automation, monitoring, and reporting domain.
MD-102 is the exam shown for Microsoft 365 Certified: Endpoint Administrator Associate. The current July 24, 2026 blueprint treats endpoint administration as an end-to-end discipline: identity and enrollment, Intune policy, application protection, Defender integration, updates, automation, monitoring, and reporting across Windows and non-Windows devices.
The largest domain is Manage and maintain devices at 25-30%. Microsoft has announced an English-language skills update for October 27, 2026; the five domain weights remain unchanged, so candidates testing on or after that date should use the newest version of the official study guide.
Microsoft describes candidates as endpoint administrators who deploy, configure, protect, manage, and monitor devices and client applications in a Microsoft 365 environment. They work with architects, administrators, security engineers, and other workload administrators.
Candidates are expected to have experience with Microsoft Entra ID and Microsoft 365 technologies, including Intune, and to be skilled in deploying and maintaining Windows and non-Windows endpoints. Microsoft also expects familiarity with Security Copilot, Intune agents, and Microsoft Defender XDR.
Microsoft does not list another certification as a prerequisite for MD-102. Preparation should nevertheless be hands-on because the candidate profile expects practical experience with Entra ID, Microsoft 365, Intune, endpoint deployment, configuration, protection, and maintenance.
Microsoft lists the MD-102T00-A course and self-paced Microsoft Learn material as official preparation resources, but completing a course is not a certification prerequisite.
MD-102 is a proctored Pearson VUE exam with 100 minutes of assessment time. Microsoft does not publish a fixed question count for this exam and notes that certification exams may contain interactive components. A scaled score of 700 or greater is required; this should not be interpreted as exactly 70% correct.
The exam page lists English, Chinese Simplified, German, Spanish, French, Japanese, and Portuguese (Brazil). Pricing varies with the country or region where the exam is proctored.
Passing MD-102 fulfills the exam requirement displayed for Microsoft 365 Certified: Endpoint Administrator Associate and demonstrates the endpoint-management skills in Microsoft's current candidate profile. The credential is directly relevant to work centered on Intune, Microsoft 365 endpoint operations, application protection, device security, and fleet monitoring.
The certification has a 12-month renewal frequency. Eligible holders can renew at no cost by passing the online Microsoft Learn renewal assessment during the six months before expiration.
5 sample questions with answers and explanations. The full bank has 636 questions, enough for 12 full-length practice exams.
Preview — answers shown1. Which built-in Intune role includes the permissions needed to create, edit, and assign device configuration profiles? (Select one!)
Explanation
Built-in Intune roles map to job functions: Policy and Profile Manager covers configuration profiles and policies, Application Manager covers app deployment, Endpoint Security Manager covers security baselines and endpoint security policies, and Help Desk Operator is limited to reading device information and running remote actions. Assigning Application Manager or Help Desk Operator would leave the technician unable to manage configuration profiles.
2. As an endpoint administrator, you need to build a custom report from raw Intune data instead of using one of the prebuilt reports. Which report category supports this? (Select one!)
Explanation
Microsoft Intune categorizes reports into Operational (providing near real-time, actionable data), Historical (providing patterns and trends over time), and Specialist (allowing administrators to use raw data to create custom reports). Therefore, the Specialist category supports building custom reports from raw Intune data.
3. As an endpoint administrator, you organize the apps in your Intune tenant into categories so users can filter the Company Portal view. What is the maximum number of app categories Intune supports? (Select one!)
Explanation
Intune allows a maximum of 200 app categories per tenant. Categories exist purely to help end users filter and locate apps in the Company Portal, so they have no effect on deployment targeting or policy assignment. Once the limit is reached, no additional categories can be created until existing ones are removed.
4. Under the macOS software update policy rules in Microsoft Intune, how many times can a user defer a required macOS update before the update is automatically installed? (Select one!)
Explanation
Under the macOS software update policy rules in Intune, a user can defer a required update up to five times; after the fifth deferral the update is force installed. This limit exists so updates cannot be postponed indefinitely while still giving users some control over timing. Three and seven are not the configured threshold, and deferrals are not unlimited, which is why planning communication around the deferral window matters for macOS fleets.
5. As an endpoint administrator, you configure Windows Autopilot device preparation for new devices and plan which applications install during the out-of-box experience. What is the maximum number of applications the profile can deliver during OOBE? (Select one!)
Explanation
Windows Autopilot device preparation allows administrators to deliver device-based configurations during OOBE, including up to 25 essential applications (encompassing Line-of-Business, Win32, Microsoft Store, and Microsoft 365 apps).
No MD-102 retirement has been announced as of October 2, 2026. Microsoft lists an English-language skills update for October 27, 2026, which is an objective refresh rather than a replacement exam.
The July 24, 2026 blueprint covers device infrastructure (20-25%), device management and maintenance (25-30%), device protection (15-20%), application management and security (15-20%), and automation, monitoring, and reporting (10-15%).
Microsoft does not list another certification as a prerequisite. Its candidate profile expects practical experience with Entra ID, Microsoft 365 and Intune, and deploying and maintaining Windows and non-Windows endpoints.
Microsoft allows 100 minutes and requires a scaled score of 700 or greater. A score of 700 should not be interpreted as exactly 70% correct.
Microsoft does not publish a fixed MD-102 question count. The proctored exam may include interactive components, so use the official Exam Sandbox to learn the interface.
Yes. It has a 12-month renewal frequency, and eligible holders can renew free by passing the Microsoft Learn renewal assessment during the six months before expiration.
Microsoft Dynamics 365 Fundamentals (CRM) (MB-910)
MB-910 · 421 questions
Microsoft Dynamics 365 Supply Chain Management Functional Consultant Expert (MB-335)
MB-335 · 2039 questions
Microsoft Certified: Dynamics 365 Supply Chain Management Functional Consultant Associate (MB-330)
MB-330 · 920 questions
Microsoft Certified: Fabric Data Engineer Associate (DP-700)
DP-700 · 819 questions
Microsoft Certified: Identity and Access Administrator Associate (SC-300)
SC-300 · 489 questions
Microsoft Certified: Fabric Analytics Engineer Associate (DP-600)
DP-600 · 792 questions
$17.99
One-time access to this exam