Expect scenarios and tight timing.
A recent passer describes a mostly scenario-based exam with barely enough time to review marked answers. Non-native English speakers can request 30 extra minutes if the exam is not offered in their language.
Microsoft 365 Certified: Endpoint Administrator Associate (MD-102) Exam Guide
Validates knowledge of managing devices with Microsoft Intune, including enrollment, Autopilot, device and app protection, updates and monitoring.
MD-102 tests whether you can manage devices end to end with Intune, from enrollment and Autopilot to security policies, apps, updates and reporting. Practise each task in a trial tenant with real or virtual devices, then work through scenario questions.
Understand the exam
Syllabus
Prepare infrastructure for devices20–25%
- Add devices to Microsoft Entra ID
- Enroll devices to Microsoft Intune
- Implement identity and compliance
Example scenario: Company-owned iPhones must enroll automatically and stay supervised. Which integration would you set up first?
Manage and maintain devices25–30%
- Deploy and upgrade Windows clients by using cloud-based tools
- Plan and implement device configuration profiles
- Implement Intune Suite add-on capabilities
- Perform remote actions on devices
Example scenario: New laptops ship straight to remote staff and must be ready for work after the user signs in. Which Autopilot mode fits?
Protect devices15–20%
- Configure endpoint security
- Manage device updates
Example scenario: A finance team needs Windows quality updates within two days, while everyone else gets them after a week. How would you set up the rings?
Manage and secure applications15–20%
- Deploy and update apps
- Plan and implement app protection and app configuration policies
Example scenario: Staff use personal phones for Outlook. Company data must not be copied into personal apps. What would you apply without enrolling the phones?
Optimize endpoint operations by using automation, monitoring, and reporting10–15%
- Automate management tasks
- Monitor and optimize health
Example scenario: Many devices report slow startups after a new app rollout. Which Intune tools would show the cause and fix it at scale?
Official MD-102 study guide · Skills measured as of October 27, 2026
Format
- Questions
- 40–60
- Duration
- 100 min
- Passing score
- 700 / 1000
- Delivery
- Test centre or online
- Languages
- English, Chinese (Simplified), German, Spanish, French, Japanese, Portuguese
Question types
Choose the best answer from the options, or the stated number of answers when a question asks for more than one.
CertUp example
Company-owned Windows laptops must be ready for work after the user signs in, without IT touching them. Which technology should you use?
Show answer
A. Windows Autopilot registers the device and configures it over the internet at first sign-in.
Move items from a list into the correct places, such as matching items to targets or putting steps in order.
CertUp example
Drag each need to the Intune feature that meets it.
Show answer
Mark devices as not compliant → compliance policy; stop copying into personal apps → app protection policy; Wi-Fi profile and wallpaper → device configuration profile.
Choose the correct option for each part of an exhibit or statement list, often Yes or No for each statement.
CertUp example
For each statement, select Yes or No.
Show answer
Yes, Yes, No. Removing the assignment removes the profile; no wipe is needed.
Read one scenario with its background, requirements and exhibits, then answer several questions about it.
CertUp example
Case study: A company manages 500 Windows 11 PCs in Intune. Requirement: feature updates reach a pilot group first and everyone else two weeks later. Question 1 of 3: What should you configure?
Show answer
A. Feature update policies control which Windows version devices get and when, so staged assignment gives a pilot first.
Eligibility and booking
Sign in to Microsoft Learn with a personal Microsoft account, then schedule MD-102 with Pearson VUE from the certification page.
Make a study plan
Read the skills list and take the free practice assessment. Then work through one course while you build each policy in a trial tenant.
Most candidates spend 30–70 hours. Plan for the low end if you already manage devices with Intune; add time if Intune is new to you or your background is mainly on-premises.
- 1Understand the examRead the syllabus and format, check you’re eligible and pick a target date.2 h
- 3Learn the core conceptsWork through one main course or book, topic by topic.24 h
- 4Practice with mock examsTake timed practice tests and review every mistake.12 h
- 5Prepare for exam dayBook the exam and check the ID and delivery rules.2 h
Learn the core concepts
Use one course for coverage and do the labs yourself. Most questions describe a device scenario and ask for the right policy.
Best free courseMD-102 course on Microsoft Learn
Best paid courseMD-102 Endpoint Administrator Associate course with SIMSBest hands-on labsMD-102 lab exercisesUse a trial tenant. Intune Suite and Windows 365 features need extra licences. Use trial licences and test virtual machines, and remove them when you finish.
Practice with mock exams
Take Microsoft's free practice assessment first, then a fuller question bank. Look up the Learn page for each miss so you can find it quickly in the exam.
MD-102 Practice Assessment
Microsoft Practice Test MD-102MD-102: M365 Endpoint Administrator Practice Tests 2026Are you ready?
- You can choose the right enrollment method for each device platform and ownership type.
- You can tell which policy wins when two policies conflict.
- You can choose between app protection and device compliance for a personal device.
Prepare for exam day
Choose the checklist for your test-centre or online appointment.
Before going to the test centre
Before testing from home
- Bring a current government-issued ID whose name matches your certification profile.
- Arrive about 15 minutes early for check-in.
- Store your belongings as instructed.
- Run the OnVUE system test on the same computer, network and room.
- Use a private room with the door closed and a clear desk. Unplug extra monitors.
- Check in from 30 minutes before your appointment. Check-in takes about 15 minutes.
- Keep your phone out of reach but nearby for check-in photos.
- Leave time to review marked questions. Pass reports describe the time as tight.
- Use Microsoft Learn to confirm a detail, not to learn a topic. The clock keeps running.
Advice from exam takers
Practise in a tenant.
Passers say enrolling devices and building policies yourself helped more than watching videos.
Study policy conflicts in depth.
One candidate found a popular course too light on conflicting-policy scenarios, which the exam tests.