All Vendors
  1. Home
  2. Microsoft
  3. MD-102

Microsoft MD-102 (page: 4)

Microsoft Endpoint Administrator

Updated 28-Apr-2026

Page 4 of 53 MD-102 PDF — 409 Questions

You have 25 computers that run Windows 10 Pro.

You have a Microsoft 365 E5 subscription that uses Microsoft Intune.

You need to upgrade the computers to Windows 11 Enterprise by using an in-place upgrade. The solution must minimize administrative effort.

What should you use?

  1. Microsoft Deployment Toolkit (MDT) and a default image of Windows 11 Enterprise
  2. Microsoft Configuration Manager and a custom image of Windows 11 Enterprise
  3. Windows Autopilot
  4. Subscription Activation

Answer(s): D



You use the Microsoft Deployment Toolkit (MDT) to manage Windows 11 deployments.

From Deployment Workbench, you modify the WinPE settings and add PowerShell support.

You need to generate a new set of WinPE boot image files that contain the updated settings.

What should you do?

  1. From the Deployment Shares node, update the deployment share.
  2. From the Advanced Configuration node, create new media.
  3. From the Packages node, import a new operating system package.
  4. From the Operating Systems node, import a new operating system.

Answer(s): A

Explanation:

Distribute content to the CM01 (for example) distribution portal.
In Configuration Manager, you can distribute all packages needed by a task sequence in a single task. In this section, you distribute packages that have not yet been distributed to the CM01 distribution point.
On CM01:
1. Open the Deployment Workbench, right-click Deployment Shares and click New Deployment Share. Use the following settings for the New Deployment Share Wizard:
Deployment share path: D:\MDTProduction
Share name: MDTProduction$
Deployment share description: MDT Production
Options: <default settings>
2. Etc.


Reference:

https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-cm/finalize-the-os-configuration-for- windows-10-deployment-with-configuration-manager



You are replacing 100 company-owned Windows devices.

You need to use the Microsoft Deployment Toolkit (MDT) to securely wipe and decommission the devices. The solution must meet the following requirements:

Back up the user state.



Minimize administrative effort.



Which task sequence template should you use?

  1. Standard Client Task Sequence
  2. Standard Client Replace Task Sequence
  3. Litetouch OEM Task Sequence
  4. Sysprep and Capture

Answer(s): B

Explanation:

Standard Client Replace task sequence. Used to run User State Migration Tool (USMT) backup and the optional full Windows Imaging (WIM) backup action. Can also be used to do a secure wipe of a machine that is going to be decommissioned.


Reference:

https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft- deployment-toolkit



Your network contains an Active Directory domain. The domain contains a computer named Computer1 that runs Windows 11.

You need to enable the Windows Remote Management (WinRM) service on Computer1 and perform the following configurations:

For the WinRM service, set Startup type to Automatic.



Create a listener that accepts requests from any IP address.



Enable a firewall exception for WS-Management communications.



Which PowerShell cmdlet should you use?

  1. Connect-WSMan
  2. Enable-PSRemoting
  3. Invoke-WSManAction
  4. Enable-PSSessionConfiguration

Answer(s): B

Explanation:

The Enable-PSRemoting cmdlet configures the computer to receive PowerShell remote commands that are sent by using the WS-Management technology. WS-Management based PowerShell remoting is currently supported only on Windows platform.
The Enable-PSRemoting cmdlet performs the following operations:
* Runs the Set-WSManQuickConfig cmdlet, which performs the following tasks:
Starts the WinRM service.
Sets the startup type on the WinRM service to Automatic.
Creates a listener to accept requests on any IP address.
Enables a firewall exception for WS-Management communications.
Creates the simple and long name session endpoint configurations if needed.
Enables all session configurations.
Changes the security descriptor of all session configurations to allow remote access.
* Restarts the WinRM service to make the preceding changes effective.


Reference:

https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/enable-psremoting



HOTSPOT (Drag and Drop is not supported)

Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant. The tenant contains the users shown in the following table.



You assign Windows
Enterprise E5 licenses to Group1 and User2.

You deploy the devices shown in the following table.



For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Device1 meets the requirements for subscription activation because it runs Windows 11 Pro and is joined to Microsoft Entra ID. User1 receives the Windows
Enterprise E5 license through Group1, so the device upgrades automatically when User1 signs in. Microsoft says supported Windows Pro devices can be upgraded when the user has the license and signs in with a Microsoft Entra account, and the device must be Microsoft Entra joined or hybrid joined.

Device2 does not upgrade automatically because it is joined only to AD DS. Microsoft requires the device to be Microsoft Entra joined or hybrid Microsoft Entra joined for subscription activation. AD DS join by itself is not enough.

Device3 meets the requirements because it runs Windows 10 Pro, is joined to Microsoft Entra ID, and User2 has the E5 license assigned directly. Therefore, it upgrades automatically when User2 signs in.



HOTSPOT (Drag and Drop is not supported)

Your network contains an Active Directory domain named adatum.com, a workgroup, and computers that run Windows 10. The computers are configured as shown in the following table.



The local Administrator accounts on Computer1, Computer2, and Computer3 have the same user name and password.

On Computer1, Windows Defender Firewall is configured as shown in the following exhibit.



The services on Computer1 have the following states.



For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: No
Because the firewall is blocking Remote Volume Management.

Box 2: No
Because the Remote Registry Service is stopped.

Box 3: No
Because the Remote Registry Service is stopped. Perfmon needs both the RPC service and the Remote Registry service to be running.



You have a Hyper-V host that contains the virtual machines shown in the following table.



On which virtual machines can you install Windows 11?

  1. VM1 only
  2. VM3 only
  3. VM1 and VM2 only
  4. VM2 and VM3 only
  5. VM1, VM2, and VM3

Answer(s): B

Explanation:

Windows 11 VM Hyper-V Requirements
Generation 2 VM.
UEFI (System Firmware)
Secure Boot Enabled (Secure Boot can only be enabled with UEFI) TPM 2.0 Enabled.
1 (GHz) or faster CPU with 2 or more cores.
4GM Memory or more.
64GB or more of disk space.


Reference:

https://activedirectorypro.com/install-windows-11-vm-hyper-v/



HOTSPOT (Drag and Drop is not supported)

You have a Microsoft 365 subscription that uses Microsoft Intune and contains the users shown in the following table.



Group2 has been assigned in the Enrollment Status Page.

You have the devices shown in the following table.



You capture and upload the hardware IDs of the devices in the marketing department.

You configure Windows Autopilot.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: No
The hardware ID of Device1 has been uploaded.

Note: To provide needed Azure Active Directory (automatic MDM enrollment and company branding features) and MDM functionality, one of the following subscriptions is required:

Microsoft 365 Business Premium subscription
Microsoft 365 F1 or F3 subscription
Microsoft 365 Academic A1, A3, or A5 subscription
Microsoft 365 Enterprise E3 or E5 subscription, which include all Windows client, Microsoft 365, and EMS features (Azure AD and Intune).
Etc.

Box 2: Yes

Box 3: Yes
User3 is member of Group2.
Group2 has been assigned in the Enrollment Status Page

Note: You can perform Windows Autopilot device registration within your organization by manually collecting the hardware identity of devices (hardware hashes) and uploading this information in a comma-separated-

values (CSV) file. Capturing the hardware hash for manual registration requires booting the device into Windows. So, this process is primarily for testing and evaluation scenarios.

Device owners can only register their devices with a hardware hash. Other methods (PKID, tuple) are available through OEMs or CSP partners.


Reference:

https://learn.microsoft.com/en-us/mem/autopilot/licensing-requirements https://learn.microsoft.com/en-us/mem/autopilot/add-devices



Page 4 of 53

Share your comments for Microsoft MD-102 exam with other users:

AI Tutor Explanation 4/29/2026 5:25:25 AM

Question 1:
  • Correct answer: C. Extract the hardware ID information of each computer to a CSV file and upload the file from the Microsoft Intune admin center.

  • Why this is correct
Durban, South Africa


AI Tutor Explanation 4/29/2026 5:23:14 AM

Question 5:
  • Correct answer: A. User4 and User1 only

  • Why this is correct:
- The Automatic Enrollment setting in Intune has MDM user scope: GroupA. Only users in GroupA can enroll devices via MDM auto-enrollment. - Device6 will be enrolled via Windows Autopilot and Intune, so enrollment is allowed only for users in GroupA. - Based on the group memberships in the scenario, User4 and User1 are in GroupA, while User2 and User3 are not. Therefore only User4 and User1 can enroll Device6.
  • Quick tip for the exam:
- Remember: MDM user scope determines who can auto-enroll devices; MAM scope controls app protection enrollment. When a new Autopilot device is enrolled, the signing-in user must be in the MDM scope.
Durban, South Africa


AI Tutor Explanation 4/29/2026 5:17:10 AM

Why this is correct
  • Correct answer: C. Extract the hardware ID information of each computer to a CSV file and upload the file from the Microsoft Intune admin center.

  • Why this is correct:
- Windows Autopilot requires devices to be registered by their hardware IDs (hash) before Autopilot can deploy Windows 10 Enterprise. - Collect the hardware IDs from the new Phoenix machines, save them in a CSV, and upload that CSV in the Intune/Windows Autopilot area. This maps each device to an Autopilot deployment profile. - After registration, you can assign Autopilot profiles (Windows 10 Enterprise, etc.). Other options (serial number CSV, generalizing, or Mobility settings) are not the initial Autopilot registration steps.
Durban, South Africa


AI Tutor 👋 I’m here to help!