HomeMicrosoftMicrosoft 365 Certified: Endpoint Administrator AssociateMicrosoft MD-102 Dumps (V18.02): 30+ Free Demo Questions (Part 1, Q1-Q39) for Certification Prep
July 11, 2026

Microsoft MD-102 Dumps (V18.02): 30+ Free Demo Questions (Part 1, Q1-Q39) for Certification Prep

To prepare for your Endpoint Administrator (MD-102) exam and pass successfully, you can have Microsoft MD-102 dumps (V18.02) from DumpsBase. The most updated materials contain 361 practice questions and verified answers. By learning these MS-102 updated practice questions, you can evaluate your current knowledge level, pinpoint weak areas, and familiarize yourself.

Why Is MD-102 Still Popular in 2026?

MD-102 Endpoint Administrator exam remains popular because endpoint management is still essential for modern organizations. While Microsoft’s new AI certifications, for example, AB-620, AI-103, and AI-901, focus on building and using AI solutions, MD-102 validates practical skills in Microsoft Intune, device compliance, application deployment, identity protection, and endpoint security. As AI becomes more integrated into Microsoft 365, companies need qualified administrators to keep employee devices secure, compliant, and reliable, making MD-102 valuable for careers in endpoint management, modern workplace support, and Microsoft 365 administration.

Check the Quality with Free Demo Questions

DumpsBase MD-102 updated questions in V18.02 are carefully designed to reflect real Endpoint Administrator exam conditions, helping you practice effectively without unnecessary pressure. We offer free MD-102 dumps online, including demo questions, so you can check the quality before downloading the full version. Today, we’re sharing free demo questions (Part 1, Q1–Q39), including 30+ questions.

1. You have a Microsoft 365 E5 subscription that contains 100 iOS devices enrolled in Microsoft Intune.

You need to deploy a custom line-of-business (LOB) app to the devices by using Intune.

Which extension should you select for the app package file?
2. You have a Microsoft 365 E5 subscription that contains 10 Android Enterprise devices. Each device has a corporate-owned work profile and is enrolled in Microsoft Intune.

You need to configure the devices to run a single app in kiosk mode.

Which Configuration settings should you modify in the device restrictions profile?
3. Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10.

You have the groups shown in the following table.





Which groups can you add to Group4?
4. HOTSPOT

You have an Azure AD tenant named contoso.com that contains the users shown in the following table.


You have a computer named Computer1 that runs Windows 10.

Computer1 is in a workgroup and has the local users shown in the following table.


UserA joins Computer1 to Azure AD by using [email protected].

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.


5. DRAG DROP

You have a Microsoft 365 subscription. The subscription contains computers that run Windows 11 and are enrolled in Microsoft Intune.

You need to create a compliance policy that meets the following requirements:

• Requires BitLocker Drive Encryption (BitLocker) on each device

• Requires a minimum operating system version

Which setting of the compliance policy should you configure for each requirement? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point,


6. HOTSPOT

You have a Microsoft 365 E5 subscription that contains a user named User1.

You need to perform the following tasks for User1:

Set the Usage location to Canada.

Configure the Phone and Email authentication contact info for self-service password reset (SSPR).

Which two settings should you configure in the Azure Active Directory admin center? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.


7. You have a Microsoft 365 E5 subscription that contains 500 macOS devices enrolled in Microsoft Intune.

You need to ensure that you can apply Microsoft Defender for Endpoint antivirus policies to the macOS devices. The solution must minimize administrative effort.

What should you do?
8. You have a Microsoft 365 E5 subscription. The subscription contains 25 computers that run Windows 11 and are enrolled in Microsoft Intune. You need to onboard the devices to Microsoft Defender for Endpoint.

What should you create in the Microsoft Intune admin center?
9. DRAG DROP

You have a computer that runs Windows 10 and contains two local users named User! and User2.

You need to ensure that the users can perform the following anions:

• User 1 must be able to adjust the date and time.

• User2 must be able to clear Windows logs.

The solution must use the principle of least privilege. To which group should you add each user? To answer, drag the appropriate groups to the correct users. Each group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.


10. You have a Microsoft Deployment Toolkit (MDT) deployment share named DS1.

in the Out-of-Box Drivers node, you create folders that contain drivers for different hardware models.

You need to configure the Inject Drivers MDT task to use PnP detection to install the drivers for one of the hardware models.

What should you do first?
11. You have a Microsoft 365 E5 subscription that contains the groups shown in the following table.





You create a Conditional Access policy named CAPolicy1 that will block access to Microsoft Exchange Online from iOS devices. You assign CAPolicy1 to Group1.

You discover that User1 can still connect to Exchange Online from an iOS device.

You need to ensure that CAPolicy1 is enforced.

What should you do?
12. You have a computer named Computer! that runs Windows 11.

A user named User1 plans to use Remote Desktop to connect to Computer1.

You need to ensure that the device of User1 is authenticated before the Remote Desktop connection is established and the sign in page appears.

What should you do on Computer1?
13. HOTSPOT

You have a Microsoft 365 E5 subscription that uses Microsoft Intune.

You have the Windows 11 devices shown in the following table.


You deploy the device compliance policy shown in the exhibit. (Click the Exhibit tab.)


For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.


14. You use Windows Admin Center to remotely administer computers that run Windows 10.

When connecting to Windows Admin Center, you receive the message shown in the following exhibit.





You need to prevent the message from appearing when you connect to Windows Admin Center.

To which certificate store should you import the certificate?
15. DRAG DROP

You have a Microsoft Deployment Toolkit (MDT) server named MDT1.

When computers start from the LiteTouchPE_x64.lso image and connect to MDT1. the welcome screen appears as shown In the following exhibit.


You need to prevent the welcome screen from appearing when the computers connect to MDT1.

Which three actions should you perform in sequence? To answer move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.


16. HOTSPOT

You have a Microsoft 365 tenant and an internal certification authority (CA).

You need to use Microsoft Intune to deploy the root CA certificate to managed devices.

Which type of Intune policy and profile should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


17. HOTSPOT

You have a Microsoft 365 E5 subscription.

You create a new update rings policy named Policy1 as shown in the following exhibit.


Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point,


18. You have a Microsoft 365 subscription that contains a user named User1 and uses Microsoft Intune Suite.

You use Microsoft Intune to manage devices that run Windows 11.

User1 provides remote support for 75 devices in the marketing department.

You need to add User1 to the Remote Desktop Users group on each marketing department device.

What should you configure?
19. You have a Microsoft 365 tenant that contains the objects shown in the following table.

You are creating a compliance policy named Compliance1.

Which objects can you specify in Compliance1 as additional recipients of noncompliance notifications?
20. You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

You use Microsoft Intune to manage devices.

You plan to deploy two apps named App1 and App2 to all Windows devices. App1 must be installed before App2.

From the Intune admin center, you create and deploy two Windows app (Win32) apps.

You need to ensure that App1 is installed before App2 on every device.

What should you configure?
21. HOTSPOT

You have an Azure AD tenant that contains the users shown in the following table.


You have the devices shown in the following table.


You have a Conditional Access policy named CAPolicy1 that has the following settings:

• Assignments

o Users or workload identities: User 1. User1

o Cloud apps or actions: Office 365 Exchange Online

o Conditions: Device platforms: Windows, iOS

• Access controls

o Grant Require multi-factor authentication

You have a Conditional Access policy named CAPolicy2 that has the following settings: Assignments

o Users or workload identities: Used, User2

o Cloud apps or actions: Office 365 Exch

o Conditions

■ Device platforms: Android, iOS

■ Filter for devices

■ Device matching the rule: Exclude filtered devices from policy

■ Rule syntax: device. display Name- contains "1"

■ Access controls

■ Grant Block access

For each of the following statements, select Yes if the statement is true. Otherwise, select No.


22. Your company has devices enrolled in Microsoft Intune as shown in the following table.





In Microsoft Endpoint Manager, you define the company's network as a location named Location1.

Which devices can use network location-based compliance policies?
23. HOTSPOT

You have 100 computers that run Windows 10. You have no servers. All the computers are joined to Microsoft Azure Active Directory (Azure AD).

The computers have different update settings, and some computers are configured for manual updates.

You need to configure Windows Update.

The solution must meet the following requirements:

• The configuration must be managed from a central location.

• Internet traffic must be minimized.

• Costs must be minimized.

How should you configure Windows Update? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


24. HOTSPOT

Your network contains an Active Directory domain. The domain contains 1.000 computers that run Windows 11.

You need to configure the Remote Desktop settings of all the computers.

The solution must meet the following requirements:

• Prevent the sharing of clipboard contents.

• Ensure that users authenticate by using Network Level Authentication (NLA).

Which two nodes of the Group Policy Management Editor should you use? To answer, select the appropriate nodes in the answer area. NOTE: Each correct selection is worth one point.


25. You have a Microsoft 365 E5 subscription.

You need to download a report that lists all the devices that are NOT enrolled in Microsoft Intune and are assigned an app protection policy.

What should you select in the Microsoft Endpoint Manager admin center?
26. Your network contains an Active Directory domain. The domain contains a user named Admin1. All computers run Windows 10.

You enable Windows PowerShell remoting on the computers.

You need to ensure that Admin1 can establish remote PowerShell connections to the computers. The solution must use the principle of least privilege.

To which group should you add Admin1?
27. You have a Windows 11 capable device named Device1 that runs the 64-bit version of Windows 10 Enterprise and has Microsoft Office 2019 installed.

You have the Windows 11 Enterprise images shown in the following table.





Which images can be used to perform an in-place upgrade of Device1?
28. You have a Microsoft 365 subscription that uses Microsoft Intune Suite.

You use Microsoft Intune to manage devices.

You use Windows Autopilot to deploy Windows 11 to devices.

A support engineer reports that when a deployment fails, they cannot collect deployment logs from failed device.

You need to ensure that when a deployment fails, the deployment logs can be collected.

What should you configure?
29. DRAG DROP

You have a Microsoft 365 subscription that contains the devices shown in the following table.


You need to ensure that only devices running trusted firmware or operating system builds can access network resources.

Which compliance policy setting should you configure for each device? To answer, drag the appropriate settings to the correct devices. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.


30. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 8.1.

Computer1 has apps that are compatible with Windows 10.

You need to perform a Windows 10 in-place upgrade on Computer1.

Solution: You copy the Windows 10 installation media to a Microsoft Deployment Toolkit (MDT) deployment share. You create a task sequence, and then you run the MDT deployment wizard on Computer1.

Does this meet the goal?
31. You have a Microsoft 365 E5 subscription and 25 Apple iPads.

You need to enroll the iPads in Microsoft Intune by using the Apple Configurator enrollment method.

What should you do first?
32. You have a Microsoft 365 E5 subscription that contains a user named User! and a web app named Appl.

App1 must only accept modern authentication requests.

You plan to create a Conditional Access policy named CAPolicy1 that will have the following settings:

• Assignments

° Users or workload identities: User1

° Cloud apps or actions: App1

• Access controls

° Grant: Block access

You need to block only legacy authentication requests to Appl.

Which condition should you add to CAPolicy1?
33. Your company has an Azure AD tenant named contoso.com that contains several Windows 10 devices.

When you join new Windows 10 devices to contoso.com, users are prompted to set up a four-digit pin.

You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 10 devices to contoso.com.

Solution: From the Microsoft Entra admin center, you configure automatic mobile device management (MDM) enrollment. From the Microsoft Intune admin center, you configure the Windows Hello for Business enrollment options.

Does this meet the goal?
34. You have computer that run Windows 10 and connect to an Azure Log Analytics workspace. The workspace is configured to collect all available events from Windows event logs.

The computers have the logged events shown in the following table.





Which events are collected in the Log Analytics workspace?
35. HOTSPOT

You have a server named Server1 and computers that run Windows 8.1. Server1 has the Microsoft Deployment Toolkit (MDT) installed.

You plan to upgrade the Windows 8.1 computers to Windows 10 by using the MDT deployment wizard.

You need to create a deployment share on Server1.

What should you do on Server1, and what are the minimum components you should add to the MDT deployment share? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


36. HOTSPOT

In Microsoft Intune, you have the device compliance policies shown in the following table.


The Intune compliance policy settings are configured as shown in the following exhibit.


On June 1, you enroll Windows 10 devices in Intune as shown in the following table.


For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.


37. Your company has an Azure AD tenant named contoso.com that contains several Windows 10 devices.

When you join new Windows 10 devices to contoso.com, users are prompted to set up a four-digit pin.

You need to ensure that the users are prompted to set up a six-digit pin when they join the Windows 10 devices to contoso.com.

Solution: From the Microsoft Entra admin center, you modify the User settings and the Device settings.

Does this meet the goal?
38. HOTSPOT

You have the on-premises servers shown in the following table.


You have a Microsoft 365 E5 subscription that contains Android and iOS devices. All the devices are managed by using Microsoft Intune.

You need to implement Microsoft Tunnel for Intune. The solution must minimize the number of open firewall ports.

To which server can you deploy a Tunnel Gateway server, and which inbound ports should be allowed on the server to support Microsoft Tunnel connections? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


39. You have an Azure AD tenant and 100 Windows 10 devices that are Azure AD joined and managed by using Microsoft Intune.

You need to configure Microsoft Defender Firewall and Microsoft Defender Antivirus on the devices.

The solution must minimize administrative effort.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

 

A Smarter Approach to Your Microsoft 365 Exam Preparation

DumpsBase proudly offers the most updated Microsoft MD-102 dumps (V18.02), meticulously organized according to the official exam objectives so you can laser-focus on specific Endpoint Administrator subject areas. To maximize your chances of a first-try pass and boost your study efficiency, DumpsBase includes several powerful features:

  • Continuous Material Updates: MD-102 dumps from DumpsBase are constantly refreshed to reflect the absolute latest Microsoft 365 exam questions.
  • Free Dumps: Explore the MD-102 free dumps, a list of free dmeo questions, before making any purchase commitment.
  • One Year of Free Updates: If the Endpoint Administrator syllabus changes post-purchase, you receive one year of free updates to keep you on track.

GH-900 Updated Exam Dumps (V9.02): Master the Microsoft GitHub Foundations Exam 2026
Tags:,

Related Posts

About The Author

dumps

From our dumpsbase platform you could search what exams you need then test or practice online by yourself. Download the PDF file if you need directly. Any other questions you can mail [email protected]