Microsoft · MD-102
Validates expertise in managing devices and client applications in a Microsoft 365 tenant using Microsoft Intune, implementing endpoint deployment and management solutions across various platforms.
Practice Questions
723
≈ 14 practice exams
Duration
100 minutes
Passing Score
700/1000
Difficulty
AssociateLast Updated
Jan 2026
Use this MD-102 practice exam to prepare for Microsoft 365 Certified: Endpoint Administrator Associate (MD-102) with realistic questions, detailed explanations, and focused study modes. The practice bank includes 723 questions for Microsoft MD-102, so you can review the exam steadily instead of relying on one long cram session.
As you practice, pay extra attention to recurring topics such as Microsoft Intune, Windows Autopilot, Microsoft Defender for Endpoint, Microsoft Entra ID, and Azure Virtual Desktop. Start with short sessions to identify weak areas, then move into timed quizzes once your accuracy is consistent.
The explanations are especially useful when you want to connect exam wording to the responsibilities and scenarios described in the official certification guidance. Use the free preview first, then unlock the full question bank when you are ready to build a complete study routine.
The Microsoft 365 Certified: Endpoint Administrator Associate (MD-102) validates expertise in deploying, configuring, and managing devices and client applications within a Microsoft 365 tenant. Certified professionals demonstrate proficiency with Microsoft Intune, Microsoft Intune Suite, Windows Autopilot, Microsoft Defender for Endpoint, Microsoft Entra ID, Azure Virtual Desktop, Windows 365, and Microsoft Copilot for Security. The exam was last updated on January 23, 2026, consolidating endpoint management into four core domains covering infrastructure preparation, device management, application management, and device protection.
The certification reflects the modern enterprise reality of managing distributed, heterogeneous fleets of endpoints—Windows, iOS, Android, and macOS—across hybrid and remote work environments. It validates the ability to implement Zero Trust-aligned security postures through compliance policies, Conditional Access, security baselines, and Microsoft Defender for Endpoint integration, all managed at scale through cloud-native tooling. Candidates are expected to understand both cloud-native and co-managed endpoint strategies and to collaborate cross-functionally with Microsoft 365 administrators, security teams, and enterprise architects.
This certification is designed for IT professionals working as Endpoint Administrators, Modern Desktop Administrators, Intune Administrators, or Device Management Specialists in organizations running Microsoft 365. Ideal candidates have hands-on experience deploying and managing Windows client devices at scale, administering Microsoft Intune policies, and implementing endpoint security controls. Professionals targeting roles such as Systems Administrator, Cloud Infrastructure Engineer, or IT Security Administrator who work primarily with Microsoft 365 environments will also benefit.
Candidates typically have 1–3 years of experience managing enterprise endpoints and are familiar with Windows client operating systems, device enrollment workflows, application lifecycle management, and identity platforms such as Microsoft Entra ID. Those working in hybrid environments or organizations undergoing digital transformation to cloud-first endpoint management are the primary target for this associate-level credential.
Microsoft does not enforce formal prerequisites for MD-102, but recommends that candidates have working experience with Microsoft Entra ID and Microsoft 365 technologies—particularly Microsoft Intune—before attempting the exam. A solid foundation in deploying, configuring, and maintaining Windows client environments is strongly advised, along with familiarity with non-Windows platforms (iOS, Android, macOS) managed through Intune. Understanding of networking fundamentals, Active Directory, and Group Policy is helpful given the exam's co-management and hybrid identity scenarios.
Practical, hands-on experience is the most critical prerequisite. Candidates with at least six months of direct experience administering endpoints through Microsoft Intune, configuring Conditional Access policies in Microsoft Entra ID, and deploying devices via Windows Autopilot are well positioned for success. Microsoft recommends completing the official instructor-led course MD-102T00-A: Microsoft 365 Endpoint Administrator or equivalent self-paced learning paths on Microsoft Learn prior to sitting the exam.
MD-102 is a proctored exam with a 100-minute time limit, delivered through Pearson VUE either at an authorized testing center or via online proctoring. The exam may include interactive lab-style components in addition to standard question formats such as multiple choice, multiple select, drag-and-drop, and scenario-based case studies. The exact number of questions is not published by Microsoft and varies per exam session. A scaled score of 700 or greater on a scale of 100–1000 is required to pass.
The exam is available in English, Chinese (Simplified), German, Spanish, French, Japanese, and Portuguese (Brazil). Candidates who take the exam in a non-English language may request an additional 30 minutes if their language version lags behind the English update cycle. The certification earned upon passing expires after 12 months and must be renewed annually at no cost through a free online renewal assessment on Microsoft Learn. The exam costs $165 USD, though pricing varies by country and region.
The MD-102 certification positions holders for roles including Endpoint Administrator, Modern Desktop Administrator, Intune Administrator, Systems Administrator, and Cloud Infrastructure Engineer in Microsoft 365 environments. With over 45,000 active job openings in the US market as of early 2026 and 78% of enterprises running Microsoft 365, demand for credentialed endpoint management professionals is strong and growing. According to salary aggregators, certified Endpoint Administrators in the US earn between $85,000 and $145,000 annually depending on experience, geography, and scope of responsibility, with mid-level professionals averaging approximately $95,000–$110,000.
Compared to the MS-102 Microsoft 365 Administrator credential, MD-102 is more narrowly focused on device and endpoint management, making it the preferred credential for professionals specializing in Intune, Autopilot, and endpoint security rather than broader Microsoft 365 administration. The certification's annual renewal requirement ensures that certified professionals stay current with the rapidly evolving Microsoft endpoint management stack. Organizations implementing Zero Trust security architectures and hybrid work strategies place high value on MD-102-certified staff who can manage and secure distributed device fleets across Windows, iOS, Android, and macOS platforms.
5 sample questions with answers and explanations. The full bank has 723 questions, enough for 14 full-length practice exams.
Preview — answers shown1. Wide World Importers needs to deploy a new OS to unknown computers using Configuration Manager. Which built-in collection should they use to target these devices?
Explanation
All Unknown Computers collection targets new devices for OS deployment via task sequences and PXE. All Desktop and Server Clients is for installed clients, All Mobile Devices for mobiles, and All Systems is too broad.
2. Litware Inc. wants to create a group in Microsoft Entra ID for managing access to shared resources, ensuring that the group can be used for both email distribution and security purposes. Which group type should they choose?
Explanation
Microsoft 365 groups are enabled for email by default and can manage access to Microsoft 365 services like SharePoint and Teams, serving as both security and distribution groups. Security groups manage access to resources but lack email functionality. Dynamic groups use rules for membership, but their type is separate. Assigned groups refer to manual membership, not a type.
3. Contoso Corp has a large on-premises network with multiple branch offices and is planning a Windows 11 deployment. They need to assess their current environment, including hardware, software, and applications. Which tool can provide detailed reports on device hardware readiness for Windows 11, including reasons why some devices may not be compatible?
Explanation
Endpoint Analytics provides hardware readiness reports for Windows 11, identifying compatible devices and listing reasons for incompatibilities. Microsoft Intune offers asset management and reporting but not specifically hardware readiness for Windows 11. Application Compatibility Toolkit focuses on application compatibility issues. Delivery Optimization manages bandwidth for updates but does not assess hardware readiness.
4. Trey Research is setting up Microsoft Defender for Cloud Apps in their environment. They need to ensure visibility, data security, and threat protection. Which portal consolidates management for Defender for Cloud Apps?
Explanation
The Microsoft 365 Defender Portal consolidates management for Microsoft Defender for Cloud Apps, allowing security admins to handle visibility, data security, and threat protection in one location. Azure Portal is for cloud resources but not specifically for this defender service. Microsoft Intune Admin Center focuses on device management. Windows Security Center is for local endpoint security settings.
5. Fourth Coffee wants to isolate untrusted websites in a container to protect employees browsing on Windows 10 devices. Which feature uses Hyper-V for this purpose?
Explanation
Microsoft Defender Application Guard isolates untrusted sites in a Hyper-V container, protecting the host device from malicious content. Windows Defender Exploit Guard applies mitigation techniques to apps. Windows Information Protection (WIP) separates work and personal data. System Guard ensures secure boot integrity.
Microsoft Dynamics 365 Fundamentals (CRM) (MB-910)
MB-910 · 421 questions
Microsoft Dynamics 365 Supply Chain Management Functional Consultant Expert (MB-335)
MB-335 · 2039 questions
Microsoft Certified: Dynamics 365 Supply Chain Management Functional Consultant Associate (MB-330)
MB-330 · 920 questions
Microsoft Certified: Fabric Data Engineer Associate (DP-700)
DP-700 · 819 questions
GitHub Actions (GH-200)
GH-200 · 310 questions
GitHub Administration (GH-100)
GH-100 · 447 questions
$17.99
One-time access to this exam