Try 12 Microsoft Endpoint Administrator (MD-102) sample questions and practice-test preview prompts on device enrollment, identity, compliance policies, app deployment, security baselines, endpoint administration, and troubleshooting scope.
MD-102 is a Microsoft 365 route for administrators deploying, securing, and managing endpoints with Microsoft Intune and related services.
IT Mastery coverage for MD-102 is under review. Use this page to try 12 original sample questions, review the route fit, likely assessed areas, and related live practice pages.
Practice option: Sample questions available
Start with the 12 sample questions on this page. Dedicated practice for MD-102: Endpoint Administrator is not currently included as a full web-app practice page; enter your email to get updates when full practice becomes available or expands for this exam.
Need live practice now? See currently available IT Mastery exam pages.
| Area | Practical focus |
|---|---|
| Tenant and identity basics | Review users, groups, licensing, Microsoft Entra, and admin-center decisions. |
| Collaboration and endpoint operations | Match Teams, endpoint, communications, and Microsoft 365 workloads to scenarios. |
| Copilot administration | Review governance, access, and operational readiness for Copilot and agents. |
| If you need practice now | Start here |
|---|---|
| SC-900 Security Fundamentals | Good Microsoft identity and compliance baseline. |
| GitHub Foundations | Useful collaboration fundamentals adjacent route. |
| IT Exams | Browse current live IT Mastery practice. |
Try these 12 original sample questions for Microsoft MD-102. They are designed for self-assessment and are not official exam questions.
Topic: endpoint enrollment
A company wants Windows devices automatically enrolled and managed when users sign in. What should the admin plan?
Best answer: A
Explanation: MD-102 focuses on endpoint deployment and management. Enrollment strategy drives device control.
What this tests: Planning endpoint enrollment.
Topic: compliance policy
Corporate apps should be available only on encrypted and healthy devices. What should be configured?
Best answer: B
Explanation: Intune compliance can feed Conditional Access so only compliant devices can access protected resources.
What this tests: Using device compliance for access control.
Topic: configuration profiles
A setting must disable removable storage on managed Windows devices. What should the admin use?
Best answer: C
Explanation: Configuration profiles and baselines enforce endpoint settings consistently.
What this tests: Applying endpoint configuration policies.
Topic: application deployment
A required security agent must install on all corporate laptops. What should be configured?
Best answer: D
Explanation: Endpoint administrators deploy apps through managed assignment, detection, and reporting.
What this tests: Managing app deployment.
Topic: update rings
Devices need Windows updates without disrupting all users on the same day. What should be designed?
Best answer: A
Explanation: Update rings help stage rollout and reduce deployment risk.
What this tests: Managing Windows update strategy.
Topic: Autopilot
New laptops should ship directly to users and configure themselves during first sign-in. Which capability fits?
Best answer: B
Explanation: Autopilot supports modern deployment without traditional reimaging for many scenarios.
What this tests: Using Windows Autopilot.
Topic: endpoint security
A baseline should configure firewall, antivirus, and attack-surface reduction settings. What should be used?
Best answer: C
Explanation: Intune endpoint security policies centralize security settings for managed devices.
What this tests: Applying endpoint security baselines.
Topic: device troubleshooting
A device does not receive a policy. What should the admin inspect first?
Best answer: D
Explanation: Policy delivery issues usually involve targeting, enrollment, sync, filters, or conflicts.
What this tests: Troubleshooting Intune policy deployment.
Topic: BYOD protection
Users access email from personal phones. The company wants to protect app data without full device management. What should be considered?
Best answer: A
Explanation: App protection policies can protect corporate data inside managed apps without full device enrollment.
What this tests: Managing BYOD app protection.
Topic: device retirement
An employee leaves and returns a corporate laptop. What should the endpoint admin do?
Best answer: B
Explanation: Offboarding devices requires the right action based on corporate ownership and data risk.
What this tests: Handling endpoint lifecycle actions.
Topic: local admin
Users have local admin rights and install unmanaged software. What should be reviewed?
Best answer: C
Explanation: Endpoint administrators should reduce unnecessary local privilege and control software risk.
What this tests: Reducing endpoint privilege risk.
Topic: route fit
A candidate manages Windows endpoints, Intune, compliance, apps, and device security. Which route is closest?
Best answer: D
Explanation: MD-102 is the Endpoint Administrator route for Microsoft 365 endpoint management.
What this tests: Choosing the endpoint administrator route.
Use this map to connect the sample questions to the Microsoft 365 administration decisions this route usually tests.
flowchart LR
S1["Device enrollment"] --> S2
S2["Configuration policy"] --> S3
S3["Application deployment"] --> S4
S4["Security baseline"] --> S5
S5["Compliance evaluation"] --> S6
S6["Monitor and remediate"]
| Cue | What to remember |
|---|---|
| Enrollment | Match corporate, BYOD, Windows, and mobile enrollment scenarios to the right management path. |
| Configuration | Use profiles, baselines, settings catalog, and update controls intentionally. |
| Applications | Deploy, update, assign, and troubleshoot apps by device and user need. |
| Compliance | Use device compliance with Conditional Access to protect resources. |
| Remediation | Monitor device health, sync issues, policy conflicts, and endpoint security alerts. |
Use this page to review MD-102 sample questions and use the Notify me form for updates. The related pages below help you compare adjacent IT Mastery Microsoft 365 practice options before choosing what to study next.