Try MD-102 Endpoint Administrator
Get a taste before you commit — no account needed. Then a free account unlocks 25 questions with readiness tracking, no card required.
Get full access to MD-102 Endpoint Administrator
All questions, timed exams, flashcards, PDF study guide download & progress tracking.
This course
$9.99
one-time
Monthly
$12.99
per month · all courses
Takes 30 seconds — create a free account, then straight to checkout. Already have an account? Sign in
Microsoft · Exam reference
About the MD-102 Endpoint Administrator exam
MD-102 covers managing and securing Microsoft 365 endpoints with Intune: enrollment, configuration and compliance policies, app deployment and protection, endpoint security, updates, and the automation and reporting work that keeps a device estate healthy. It leads to the Microsoft 365 Certified: Endpoint Administrator Associate credential. This bank follows the blueprint Microsoft published on 24 July 2026, including the new fifth skill area.
10
Sample questions
100 min
Exam time limit
70%
Passing score
$165
Exam voucher
MD-102 is the exam behind the Microsoft 365 Certified: Endpoint Administrator Associate credential. It tests whether you can run a fleet of devices from Intune: enrolling Windows, macOS, iOS, iPadOS and Android endpoints, shipping configuration and compliance policies to them, deploying and protecting apps, and keeping the whole estate patched and reporting cleanly. Microsoft rewrote the blueprint on 24 July 2026. There are now five skill areas instead of four, and the new one, Optimize endpoint operations by using automation, monitoring, and reporting, is worth 10 to 15 percent on its own. It covers PowerShell and Microsoft Graph automation, Endpoint Analytics, proactive remediation scripts, and the Security Copilot agents that now sit inside Intune. Older MD-102 question banks do not contain a single question on any of it. The exam suits Windows and endpoint administrators who already work in Intune every day. Most candidates who fail do so on the parts of the blueprint their own job never touches. If your tenant is Windows-only, the Android enrollment profiles and the Apple Business Manager integration will hurt. If you have never bought the Intune Suite, then Endpoint Privilege Management, Microsoft Cloud PKI and Microsoft Tunnel for MAM are four objectives you have no muscle memory for. You get 100 minutes and a scaled score out of 1000, with 700 to pass. Expect drag and drop, build list and active screen items alongside multiple choice, plus case studies. Microsoft does not publish a fixed question count; its own guidance puts most role-based exams between 40 and 60 questions.
Exam Domains Covered
Exam Format & Details
100 minutes. Microsoft does not publish a fixed question count for MD-102; its own guidance states that most role-based exams contain 40 to 60 questions. The exam is scored on a scale to 1000, and 700 is required to pass. Expect interactive items alongside multiple choice: drag and drop, build list, active screen and hot area, plus case studies. Booked through Pearson VUE, online or at a test centre. US list price is around 165 USD, and Microsoft prices the exam by the country or region it is proctored in.
Why Practice Questions Matter
The July 2026 blueprint change is the reason to practise on current questions rather than an older bank. A fifth skill area appeared, Perform remote actions on devices and Configure endpoint security were both reworked, and Enroll devices to Microsoft Intune changed enough that Microsoft flagged it as a major revision. Questions written before that date drill you on a version of the exam that no longer exists. The other reason is the shape of the questions. MD-102 rarely asks what a feature is. It gives you a tenant, a requirement and four ways to meet it, and only one of them survives the constraint.
Sample Practice Questions
The following questions are a preview of the type of syllabus-aligned questions you will practise in CertCrush. They reflect the format and reasoning style of the MD-102 Endpoint Administrator exam — not actual exam content.
Q1.How many built-in local groups can the Local user group membership profile target?
- A.Six built-in local groups
- B.Every local group on the device
- C.Only the local Administrators group
- D.Any local group whose name you type manually
Domain: Prepare infrastructure for devices
Q2.Which statement about the number of accounts Windows LAPS manages through Intune is correct?
- A.Exactly one local admin account per device
- B.Every account in the local Administrators group
- C.One account per user who signs in to the device
- D.As many accounts as you list in the policy
Domain: Prepare infrastructure for devices
Q3.An employee at Contoso uses a Windows 11 laptop that she bought herself. She must be able to open work email in Outlook and get single sign-on to Microsoft 365, but the company does not own the laptop and she must keep signing in to Windows with her existing local account. Which device identity state meets the requirement?
- A.Microsoft Entra registered
- B.Microsoft Entra joined
- C.Microsoft Entra hybrid joined
- D.Joined to the on-premises Active Directory domain only
Domain: Prepare infrastructure for devices
Q4.A technician adds a new corporate Windows 11 laptop to the tenant by opening Settings, Accounts, Access work or school, selecting Connect, and typing the user's work email address on the first screen. The laptop later appears in Microsoft Entra ID with a trust type of Microsoft Entra registered instead of Microsoft Entra joined. What should the technician have selected instead?
- A.Choose "Join this device to Microsoft Entra ID" under Alternate actions
- B.Select Connect and sign in with the work email address on the first screen
- C.Sign in to the Company Portal app with the work account
- D.Add a Microsoft account under Family and other users
Domain: Prepare infrastructure for devices
Q5.Fabrikam has 4,000 Windows 11 devices joined to an on-premises Active Directory domain and managed by Group Policy. The company wants Intune management as well, must keep the existing Group Policy Objects working, and cannot reimage the fleet. Which device identity state should you target?
- A.Microsoft Entra hybrid joined
- B.Microsoft Entra joined
- C.Microsoft Entra registered
- D.Domain joined with no Microsoft Entra identity
Domain: Prepare infrastructure for devices
Frequently Asked Questions
What is included in the free MD-102 Endpoint Administrator sample?
The free sample includes 10 syllabus-aligned practice questions, sample flashcards, and a preview chapter from the study guide. No account or payment is required to try the sample.
How many questions are in the full MD-102 Endpoint Administrator course?
The full course includes a comprehensive question bank covering all exam domains. You can see the total question count on the MD-102 Endpoint Administrator course page.
Are these official Microsoft exam questions?
No. CertCrush questions are independently written and syllabus-aligned — they mirror the format, difficulty, and reasoning style of the official exam. We are not affiliated with or endorsed by Microsoft.
Which domains does the MD-102 Endpoint Administrator course cover?
The course covers 5 exam domains: Prepare infrastructure for devices, Manage and maintain devices, Protect devices, Manage and secure applications, Optimize endpoint operations by using automation, monitoring, and reporting.
Can I study on mobile?
Yes. CertCrush is fully responsive and works on phones, tablets, and desktops. The timed exam, flashcards, and study guide all work on mobile without installing an app.
What happens when I create an account?
Creating a free account lets you access full courses, track your weak areas by domain, and resume practice sessions across devices. No credit card is required to register.