All Vendors
  1. Home
  2. Microsoft
  3. MD-102

Microsoft MD-102 (page: 2)

Microsoft Endpoint Administrator

Updated 28-Apr-2026

Page 2 of 53 MD-102 PDF — 409 Questions

You have a Microsoft 365 E5 subscription and 25 Apple iPads.

You need to enroll the iPads in Microsoft Intune by using the Apple Configurator enrollment method.

What should you do first?

  1. Configure an Apply MDM push certificate.
  2. Add your user account as a device enrollment manager (DEM).
  3. Modify the enrollment restrictions.
  4. Upload a file that has the device identifiers for each iPad.

Answer(s): A

Explanation:

Set up iOS/iPadOS device enrollment with Apple Configurator
Prerequisites
Physical access to iOS/iPadOS devices
Set MDM authority
An Apple MDM push certificate
Device serial numbers (Setup Assistant enrollment only)
USB connection cables
macOS computer running Apple Configurator 2.0
Note:
Upload and renew your Apple MDM push certificates in Microsoft Intune. An Apple MDM Push certificate is required to manage iOS/iPadOS and macOS devices in Microsoft Intune, and enables devices to enroll via:
The Intune Company Portal app.
Apple bulk enrollment methods, such as the Device Enrollment Program, Apple School Manager, and Apple Configurator.
Certificates must be renewed annually.


Reference:

https://learn.microsoft.com/en-us/mem/intune/enrollment/apple-mdm-push-certificate-get



You have a Microsoft 365 E5 subscription that contains 150 hybrid Microsoft Entra joined Windows devices. All the devices are enrolled in Microsoft Intune.

You need to configure Delivery Optimization on the devices to meet the following requirements:

Allow downloads from the internet and from other computers on the local network.



Limit the percentage of used bandwidth to 50.



What should you use?

  1. a configuration profile
  2. a Windows Update for Business Group Policy setting
  3. a Microsoft Peer-to-Peer Networking Services Group Policy setting
  4. an Update ring for Windows 10 and later profile

Answer(s): A



HOTSPOT (Drag and Drop is not supported)

You have a Microsoft Intune subscription.

You are creating a Windows Autopilot deployment profile named Profile1 as shown in the following exhibit.
Profile1 will be deployed to Windows 11 devices.



Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: can modify the desktop settings only for themselves
We see: User account type: Standard (not Administrator)

Incorrect:
* can create additional local users on the device
* can modify the desktop settings for all device users

Box 2: Cortana settings

Incorrect:
* computer name
We see: Hide change account options: Hide

* keyboard layout
We see: Automatically configure keyboard: Yes


Reference:

https://learn.microsoft.com/en-us/mem/autopilot/profiles



HOTSPOT (Drag and Drop is not supported)

You have a server named Server1 and computers that run Windows 10. Server1 has the Microsoft Deployment Toolkit (MDT) installed.

You plan to upgrade the Windows 10 computers to Windows 11 by using the MDT deployment wizard.

You need create a deployment share on Server1.

What should you do on Server1, and what are the minimum components you should add to the MDT deployment share? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: Install the Windows Assessment and Deployment Kit (Windows ADK) Server1

MDT installation requires the following:

The Windows ADK for Windows 10
Windows PowerShell (version 5.1 is recommended; enter $host to check) Microsoft .NET Framework

Box 2: Windows 11 image and task sequence only
Deployment share

Create a deployment share and reference image
A reference image serves as the foundation for Windows 11 devices in your organization.

*Details omitted*

The next step is to create a task sequence to reference the operating system that was imported. To create a task sequence, right-click the Task Sequences node and then select New Task Sequence.

Create a Windows 11 reference image


Reference:

https://learn.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment- with-mdt
https://learn.microsoft.com/en-us/windows/deployment/windows-10-poc-mdt#create-a-deployment-share-and- reference-image



DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)

You have a Microsoft Deployment Toolkit (MDT) server named MDT1.

When computers start from the LiteTouchPE_x64.iso image and connect to MDT1, the welcome screen appears as shown in the following exhibit.



You need to prevent the welcome screen from appearing when the computers connect to MDT1.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Step 1: Modify the CustomSettings.ini file
CustomSettings.ini (CS) may be edited to include information that you wish to take into account prior to beginning the deployment processsuch as data that will exist as variables that can be called upon as needed. This is extremely useful when working with multiple sites or when you want certain settings to apply to desktops, while mobile devices receive a different set of settings.

Example of line included:
SkipBDDWelcome=NO

Step 2: Modify the task sequence
Create the deployment task sequence, example:
1. Using the Deployment Workbench, right-click Task Sequences under the MDT Production node, select New Folder and create a folder with the name: Windows 10.

2. Right-click the Windows 10 folder created in the previous step, and then select New Task Sequence. Use the following settings for the New Task Sequence Wizard:

Task sequence ID: W10-X64-001
Task sequence name: Windows 10 Enterprise x64 Custom Image
Etc.

Step 3: Update the deployment share
Configure the MDT production deployment share, example:

1. On SRV1, open an elevated Windows PowerShell prompt and enter the following commands:

copy-item "C:\Program Files\Microsoft Deployment Toolkit\Templates\Bootstrap.ini" C:\MDTProd\Control \Bootstrap.ini -Force
copy-item "C:\Program Files\Microsoft Deployment Toolkit\Templates\CustomSettings.ini" C:\MDTProd\Control \CustomSettings.ini -Force
In the Deployment Workbench console on SRV1, right-click the MDT Production deployment share and then select Properties.

Select the Rules tab and replace the rules with the following text (don't select OK yet):

[Settings]
Priority=Default

[Default]
_SMSTSORGNAME=Contoso
OSInstall=YES
UserDataLocation=AUTO
*Details omitted*

Incorrect:
* Bootstrap.ini
Bootstrap.ini is the file that controls access to the shared drive that stores the deployment repository.


Reference:

https://learn.microsoft.com/en-us/windows/deployment/windows-10-poc-mdt#create-a-deployment-share-and- reference-image
https://www.techrepublic.com/article/mdt-automating-deployments-using-customsettings-ini/



You use Windows Admin Center to remotely administer computers that run Windows 10.

When connecting to Windows Admin Center, you receive the message shown in the following exhibit.



You need to prevent the message from appearing when you connect to Windows Admin Center.

To which certificate store should you import the certificate?

  1. Client Authentication Issuers
  2. Personal
  3. Trusted Root Certification Authorities

Answer(s): C

Explanation:

"Error Code: DLG_FLAGS_INVALID_CA" while login to Admin Console after enabling HTTPS in PowerCenter.
Solution
To resolve this issue, add the CA-signed certificates to the "Trusted Root Certification Authorities" in the browser. After adding the certificates, restart the browser.


Reference:

https://knowledge.informatica.com/s/article/578585



HOTSPOT (Drag and Drop is not supported)

You have a Microsoft Entra tenant named contoso.com that contains the devices shown in the following table.



Contoso.com contains the Microsoft Entra groups shown in the following table.



You add a Windows Autopilot deployment profile. The profile is configured as shown in the following exhibit.



For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: No
Device1 has no Mobile device Management (MDM) configured.

Note: Device1 is running Windows 8.1, and is registered, but not joined.
Device1 is in Group1.
Profile1 is assigned to Group1.

Box 2: No
Device2 has no Mobile device Management (MDM) configured.

Note: Device2 is running Windows 10, and is joined.
Device2 is in Group2.
Group2 is in Group1.
Profile1 is assigned to Group1.

Box 3: Yes
Device3 has Mobile device Management (MDM) configured.
Device3 is running Windows 10, and is joined
Device1 is in Group1.
Profile1 is assigned to Group1.

Mobile device management (MDM) enrollment: Once your Windows 10 device joins Azure AD, Autopilot ensures your device is automatically enrolled with MDMs such as Microsoft Intune. This program can automatically push configurations, policies and settings to the device, and install Office 365 and other business apps without you having to get IT admins to manually sort the device. Intune can also apply the latest updates from Windows Update for Business.


Reference:

https://xo.xello.com.au/blog/windows-autopilot



DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)

You have 100 computers that run Windows 10.

You plan to deploy Windows 11 to the computers by performing a wipe and load installation.

You need to recommend a method to retain the user settings and the user data.

Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Step 1: Run scanstate.exe
1. Collect files and settings from the source computer.
2. Back up the source computer.
3. Close all applications.
4. Run the ScanState command on the source computer to collect files and settings.
5. Etc.

Step 2: Deploy Windows 11
Prepare the destination computer and restore files and settings.
Install the operating system on the destination computer.
Install all applications that were on the source computer. Although it is not always required, we recommend installing all applications on the destination computer before you restore the user state. This makes sure that migrated settings are preserved.

Step 3: Run loadstate.exe
Run the LoadState command on the destination computer. Specify the same set of .xml files that you specified when you used the ScanState command.


Reference:

https://docs.microsoft.com/en-us/windows/deployment/usmt/getting-started-with-the-user-state-migration-tool



Page 2 of 53

Share your comments for Microsoft MD-102 exam with other users:

AI Tutor Explanation 4/29/2026 5:25:25 AM

Question 1:
  • Correct answer: C. Extract the hardware ID information of each computer to a CSV file and upload the file from the Microsoft Intune admin center.

  • Why this is correct
Durban, South Africa


AI Tutor Explanation 4/29/2026 5:23:14 AM

Question 5:
  • Correct answer: A. User4 and User1 only

  • Why this is correct:
- The Automatic Enrollment setting in Intune has MDM user scope: GroupA. Only users in GroupA can enroll devices via MDM auto-enrollment. - Device6 will be enrolled via Windows Autopilot and Intune, so enrollment is allowed only for users in GroupA. - Based on the group memberships in the scenario, User4 and User1 are in GroupA, while User2 and User3 are not. Therefore only User4 and User1 can enroll Device6.
  • Quick tip for the exam:
- Remember: MDM user scope determines who can auto-enroll devices; MAM scope controls app protection enrollment. When a new Autopilot device is enrolled, the signing-in user must be in the MDM scope.
Durban, South Africa


AI Tutor Explanation 4/29/2026 5:17:10 AM

Why this is correct
  • Correct answer: C. Extract the hardware ID information of each computer to a CSV file and upload the file from the Microsoft Intune admin center.

  • Why this is correct:
- Windows Autopilot requires devices to be registered by their hardware IDs (hash) before Autopilot can deploy Windows 10 Enterprise. - Collect the hardware IDs from the new Phoenix machines, save them in a CSV, and upload that CSV in the Intune/Windows Autopilot area. This maps each device to an Autopilot deployment profile. - After registration, you can assign Autopilot profiles (Windows 10 Enterprise, etc.). Other options (serial number CSV, generalizing, or Mobility settings) are not the initial Autopilot registration steps.
Durban, South Africa


AI Tutor 👋 I’m here to help!