Microsoft 365 Endpoint Administrator (MD-102) — Practice Questions and Mock Exam

The MD-102 certification validates skills in deploying, configuring, and managing modern Windows client devices and applications using Microsoft Intune and related services. It covers device enrollment, compliance policies, configuration profiles, application deployment, endpoint security, Windows Autopilot, co-management with Configuration Manager, and update management across diverse operating systems and platforms.

This certification is designed for endpoint administrators who manage devices and client applications in a Microsoft 365 tenant using Microsoft Intune. Candidates should have experience with Windows, iOS, Android, and macOS device management, along with proficiency in configuring security baselines, conditional access, and application protection policies.

Use the Pass-IT question pool to practice for MD-102. Mock exams are set to 50 questions in 100 minutes.

Managing and maintaining devices carries the most weight at 25–30%, covering Windows Autopilot deployment, cloud-based upgrade paths, configuration profiles, and remote actions — the day-to-day work of running a fleet. Preparing infrastructure follows at 20–25%, testing Entra ID enrollment and compliance setup before any device ships. Protecting devices and managing applications tie at 15–20% apiece, while automation, monitoring, and reporting closes the blueprint at 10–15%.

The distribution rewards operational depth over one-time setup: more of the exam sits in Autopilot profiles, update rings, and app protection policies than in initial tenant configuration. Candidates who treat automation and Endpoint Analytics as a minor topic underestimate how much of the reporting domain tests PowerShell and Microsoft Graph scripting rather than portal clicks.

The exam draws 40–60 questions from a mix of multiple-choice, multiple-select, drag-and-drop, hot-area, and case-study formats inside a 100-minute window. Most items are scenario-based: a device management problem, followed by a decision about which Intune policy, profile, or PowerShell command solves it. Expect several questions built specifically around Windows Autopilot profiles and compliance-versus-configuration policy distinctions.

The exam runs through Pearson VUE, either online with a remote proctor or at an authorized testing center, and is offered in English, German, French, Spanish, Portuguese, Japanese, and Chinese. Certification holds for one year, and Microsoft opens a free renewal assessment on Learn starting six months before it expires.