Microsoft Endpoint Administrator
Updated 28-Apr-2026
HOTSPOT (Drag and Drop is not supported)You have a Microsoft Deployment Toolkit (MDT) deployment share named Share1.You add Windows 10 images to Share1 as shown in the following table.Which images can be used in the Standard Client Task Sequence, and which images can be used in the Standard Client Upgrade Task Sequence?Note: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: Image1, Image2, Image3, Image4, and Image5.All images.Standard Client Task SequenceStandard Client task sequence. The most frequently used task sequence. Used for creating reference images and for deploying clients in production.Box 2: Image1, Image2, Image3, and Image4 only.Exclude image5 with applications.Standard Client Upgrade Task SequenceStandard Client Upgrade task sequence. A simple task sequence template used to perform an in-place upgrade from Windows 7, Windows 8, or Windows 8.1 directly to Windows 10, automatically preserving existing data, settings, applications, and drivers.
https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft- deployment-toolkit
Your company has a Remote Desktop Gateway (RD Gateway).You have a server named Server1 that is accessible by using Remote Desktop Services (RDS) through the RD Gateway.You need to configure a Remote Desktop connection to connect through the gateway.Which setting should you configure?
How to test your Remote Desktop Gateway connection:The simplest way to test your Remote Desktop Gateway connection is to configure your Remote Desktop Client to go through the Gateway server.The Remote Desktop Gateway (RD Gateway) is a secure link between the client computer and the host computer. This allows for a secure connection between the two, where the client and the server are both protected.If you have your host computer and Remote Desktop Gateway ready, do the following.1. Launch the Remote Desktop Connection app (Start, type "rdp", launch Remote Desktop Connection).2. Select the Advanced tab. (You might have to click Show Options first.)3. In the Connect from anywhere section, click Settings.4. Select Use these RD Gateway server settings, enter your hostname or IP, and click OK.5. Select the General tab and click Connect.6. Provide your RD Gateway Server credentials, and after you get authenticated onto the Gateway server, provide your credentials to get authenticated onto the Remote Desktop server.7. Congratulations. You remote desktoped in through your Gateway server.
https://rublon.com/blog/how-to-set-up-remote-desktop-gateway/
You have a Microsoft Deployment Toolkit (MDT) deployment share.You plan to deploy Windows 11 by using the Standard Client Task Sequence template.You need to modify the task sequence to perform the following actions:Format disks to support Unified Extensible Firmware Interface (UEFI).Create a recovery partition.Which phase of the task sequence should you modify?
Create Extra Partition in MDTWe will create a new task sequence for a machine that doesn't have an extra partition.1. On the Select Template page, click the drop-down and select Standard Client Task Sequence. Complete the remaining steps.2. Edit the task sequence and click the New Computer only step. Within that step, click Format and Partition Disk(BIOS) step and edit it.Etc.
https://www.prajwaldesai.com/create-extra-partition-in-mdt/
DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)Your network contains an Active Directory domain.You install the Microsoft Deployment Toolkit (MDT) on a server.You have a custom image of Windows 11.You need to deploy the image to 100 devices by using MDT.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Select and Place:
Step 1: Create a deployment share.Set up the MDT production deployment share.Step 2: Add the Windows 11 image.Add a custom image.The next step is to add a reference image into the deployment share with the setup files required to successfully deploy Windows 11.Step 3: Create a task sequence.Create the deployment task sequence.
https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using- mdt
You have the Microsoft Deployment Toolkit (MDT) installed.You install and customize Windows 11 on a reference computer.You need to capture an image of the reference computer and ensure that the image can be deployed to multiple computers.Which command should you run before you capture the image?
Answer(s): C
Sysprep (System Preparation) prepares a Windows client or Windows Server installation for imaging. Sysprep can remove PC-specific information from a Windows installation (generalizing) so it can be installed on different PCs.
https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/sysprep--system-preparation-- overview
Your network contains an on-premises Active Directory domain. The domain contains two computers named Computer1 and Computer2 that run Windows 10.You install Windows Admin Center on Computer1.You need to manage Computer2 from Computer1 by using Windows Admin Center.What should you do on Computer2?
HOTSPOT (Drag and Drop is not supported)You have a hybrid Microsoft Entra tenant.You configure a Windows Autopilot deployment profile as shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.Hot Area:
Box 1: import a CSV file into Windows AutopilotYou can perform Windows Autopilot device registration within your organization by manually collecting the hardware identity of devices (hardware hashes) and uploading this information in a comma-separated-values (CSV) file.Box 2: joined to Microsoft Entra onlyAs per exhibit (Microsoft Entra joined).
https://docs.microsoft.com/en-us/mem/autopilot/add-deviceshttps://docs.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-join-hybrid
HOTSPOT (Drag and Drop is not supported)You have a Microsoft 365 subscription that uses Microsoft Intune Suite.You use Microsoft Intune to manage devices.You plan to create Windows 11 device builds for the marketing and research departments. The solution must meet the requirements:Marketing department devices must support Windows Update for Business.Research department devices must have support for feature update versions for up to 36 months fromrelease.What is the minimum Windows 11 edition required for each department? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Box 1: Windows 11 EnterpriseMarketing department devices must support Windows Update for Business.LicensingWindows Update for Business deployment service requires users of the devices to have one of the following licenses:Windows Enterprise E3 or E5 (included in Microsoft 365 F3, E3, or E5) Windows Education A3 or A5 (included in Microsoft 365 A3 or A5) Windows Virtual Desktop Access E3 or E5Microsoft 365 Business PremiumBox 2: Windows 11 EnterpriseResearch department devices must have support for feature update versions for up to 36 months from release.Feature updates for Windows 10 and later policy in IntuneIn addition to a license for Intune, your organization must have one of the following subscriptions that include a license for Windows Update for Business deployment service:Windows Enterprise E3 or E5 (included in Microsoft 365 F3, E3, or E5) Windows Education A3 or A5 (included in Microsoft 365 A3 or A5) Windows Virtual Desktop Access E3 or E5Microsoft 365 Business Premium
https://learn.microsoft.com/en-us/windows/deployment/update/deployment-service-prerequisites https://learn.microsoft.com/en-us/mem/intune/protect/windows-10-feature-updates
Share your comments for Microsoft MD-102 exam with other users:
AI Tutor Explanation 4/29/2026 5:25:25 AM
Question 1: Correct answer: C. Extract the hardware ID information of each computer to a CSV file and upload the file from the Microsoft Intune admin center. Why this is correct
AI Tutor Explanation 4/29/2026 5:23:14 AM
Question 5: Correct answer: A. User4 and User1 only Why this is correct: - The Automatic Enrollment setting in Intune has MDM user scope: GroupA. Only users in GroupA can enroll devices via MDM auto-enrollment. - Device6 will be enrolled via Windows Autopilot and Intune, so enrollment is allowed only for users in GroupA. - Based on the group memberships in the scenario, User4 and User1 are in GroupA, while User2 and User3 are not. Therefore only User4 and User1 can enroll Device6. Quick tip for the exam: - Remember: MDM user scope determines who can auto-enroll devices; MAM scope controls app protection enrollment. When a new Autopilot device is enrolled, the signing-in user must be in the MDM scope.
AI Tutor Explanation 4/29/2026 5:17:10 AM
Why this is correct Correct answer: C. Extract the hardware ID information of each computer to a CSV file and upload the file from the Microsoft Intune admin center. Why this is correct: - Windows Autopilot requires devices to be registered by their hardware IDs (hash) before Autopilot can deploy Windows 10 Enterprise. - Collect the hardware IDs from the new Phoenix machines, save them in a CSV, and upload that CSV in the Intune/Windows Autopilot area. This maps each device to an Autopilot deployment profile. - After registration, you can assign Autopilot profiles (Windows 10 Enterprise, etc.). Other options (serial number CSV, generalizing, or Mobility settings) are not the initial Autopilot registration steps.