MD-102 Endpoint Administrator

600 MD-102 practice test questions built on the July 2026 objectives, including the new automation domain. Explanations teach the concept. 70% to pass.

600 practice questions across all five MD-102 objective domains, including the automation, monitoring and reporting domain added in July 2026. Every explanation teaches the topic rather than restating the answer.

MD-102 is the exam behind the Microsoft 365 Certified: Endpoint Administrator Associate credential. It covers managing devices and client applications in a Microsoft 365 tenant using Microsoft Intune, Windows Autopilot, Microsoft Entra ID, Defender for Endpoint, PowerShell and Microsoft Graph. This practice exam holds 600 questions written against the objectives as they were revised on 24 July 2026, with every question mapped to the objective it tests.

What is covered:

  1. Prepare infrastructure for devices - 138 questions. Join types and device registration, dynamic groups, enrollment restrictions and automatic enrollment, Apple Business Manager and automated device enrollment, Android Enterprise modes, Samsung Knox Mobile Enrollment and zero touch, roles and scope tags, multi admin approval, compliance policies and Conditional Access, Windows Hello for Business, Windows LAPS and local group membership.
  2. Manage and maintain devices - 168 questions. Windows Autopilot and device preparation policies, deployment modes, the Enrollment Status Page, device name templates, Windows 11 upgrades, Windows 365 Cloud PCs, configuration profiles and the settings catalog, imported ADMX and Group Policy analytics, Endpoint Privilege Management, the Enterprise App Catalog, Remote Help, Microsoft Cloud PKI, Microsoft Tunnel for MAM, remote actions, BitLocker key rotation and device query with KQL.
  3. Protect devices - 108 questions. Antivirus and disk encryption policies, firewall policy, attack surface reduction, security baselines, Defender for Endpoint integration and EDR, App Control for Business, update rings, feature and expedited quality updates, Windows Autopatch and Hotpatch, Apple update policies, Android firmware over the air, Delivery Optimization and update monitoring.
  4. Manage and secure applications - 108 questions. Win32 app packaging, detection and requirement rules, supersedence and dependencies, Quiet Time, Microsoft 365 Apps deployment and Cloud Policy, the Office Deployment Tool, the Microsoft 365 Apps admin center, Apple volume purchasing and managed Google Play, app deployment monitoring, app protection policies for managed and unmanaged devices, Conditional Access for app protection, and app configuration policies.
  5. Optimize endpoint operations by using automation, monitoring, and reporting - 78 questions. PowerShell and Microsoft Graph automation, custom compliance with discovery scripts, proactive remediations, reporting and export, endpoint analytics and its scores, tenant health and service communications, alerts and notifications, and the Security Copilot agents in Intune.

Written as a decisions exam, not a settings exam:

MD-102 practice test rarely asks what a checkbox is called. It describes a situation and asks which mechanism fits it: which join type, which Android enrollment mode, whether the answer is a compliance policy or a configuration profile, whether a filter or a group is the right tool. Preparation that memorizes menu paths does badly on it. The questions here are written the same way, so practicing on them is practice at the actual decision.

Explanations that teach the topic:

Every explanation explains the mechanism, the constraint that decides the answer, and what else in the estate the choice touches. None of them restates the correct option back at you. That means an explanation is still worth reading after you already know which option was right, and it is the difference between recognizing an answer and understanding a topic.

Security Copilot agents in Intune:

Three of the five automation objectives added in July 2026 concern the agents that now sit inside the Intune admin center: the Vulnerability Remediation Agent, the Change Review Agent, the Device Offboarding Agent and the Policy Configuration Agent. What they gather, what they only recommend, what an administrator still has to approve, and where the agentic identity and its delegated permissions come from. Material written before the revision does not cover any of it.

Troubleshooting questions, not only configuration questions:

194 of the 600 questions start from something that has gone wrong: a profile that will not apply, an application reporting success while doing nothing, a device that is compliant with no policy assigned, an enrollment that silently skipped a population. That is the shape of the work and it is the shape of the harder questions on the paper.

Exam Coach AI, beside every question:

Exam Coach AI answers concept questions while the clock is running, without ever telling you which option to pick. Ask it what a scope tag is, when to use app protection instead of enrolling a device, or why a configuration profile might not be applying, and it explains the idea so you can work the question out yourself. It never touches your exam state, and it will say it does not know rather than invent something.

Coming from AZ-104?

AZ-104 and MD-102 share more than the associate tier. Microsoft Entra ID device identity, dynamic groups, role based access control and Conditional Access appear in both, and Windows 365 Cloud PCs sit on Azure networking. If you already hold AZ-104, the identity and access material here will feel familiar and the device, application and update material will be new. If you are taking both, the AZ-104 practice exam is the natural companion to this one.

How it is marked:

The pass mark is 70% of the questions you are given, which is the plain percentage this product scores. Each sitting draws 60 questions from the pool of 600, weighted to the published objective domains:

  1. 23% preparing infrastructure
  2. 28% managing and maintaining devices
  3. 18% protecting devices
  4. 18% applications
  5. 13% operations.

Your result breaks down by domain, so a weak area is a named domain rather than a feeling.

Free preview:

40 questions are free and they span all five domains, so the preview covers the new automation material as well as the established ones. No card is needed to try them.

Explore PrepifyLabs

Certification practice exams

Insights and case studies

The most advanced examination and certification readiness platform available. Train autonomously, pass effortlessly.

Prepifylabs LLC, 5900 Balcones Drive STE 38508, Austin, TX 78731, United States