Free MD-102 Practice Test – 20 Questions with Explanations

You are planning a low-risk Windows 11 rollout with Intune for managed Windows 10 devices. You want to validate hardware readiness before deployment, stage the upgrade to a pilot group, and then confirm deployment status.
Steps
1. Assign the feature update policy to the pilot group.
2. Review Windows 11 readiness in Endpoint analytics.
3. Create the Windows 11 feature update policy.
4. Monitor feature update reports.
What is the correct order?

Your team is preparing two pilots at the same time. One pilot will use Windows automatic enrollment for corporate and BYOD Windows devices, and the other will bulk enroll Android Enterprise corporate-owned devices.
Which two actions are required to support those pilots? (Select TWO.)

A company created an ESP profile for Windows Autopilot devices. During testing, devices repeatedly time out on ESP while 18 required apps are being installed, and the configured ESP time limit is 15 minutes.
What should you change first?

Your organization is cloud-only and wants the fastest Windows 365 rollout with the least networking overhead.
Which deployment option should you choose? Select only one answer.

A Windows 11 Microsoft Entra joined laptop already has two existing local administrators: LocalAdmin1 and BreakGlassAdmin. You deploy the following Intune profile to that device.
Configuration
Local group Administrators
Group and user action Add (Update)
User selection type Users
Selected user(s) Support-Admins
Target Microsoft Entra joined Windows 11 devices
What is the expected result?

Your organization uses Microsoft Entra hybrid joined Windows 11 devices and still needs access to on-premises file shares. The security team wants a Windows Hello for Business deployment that avoids end-user certificates and minimizes PKI dependency, and the Microsoft Entra Kerberos object has already been deployed.
Which Windows Hello for Business setting should you enable for the target devices?

A support manager wants a least-privilege custom Intune role for junior help desk staff. Those staff members must be able to join Remote Help sessions and see a user’s screen, but they must not take control, handle UAC prompts, or use unattended access.
Which additional Remote Help permission should you assign in that role?

You are preparing a Conditional Access policy that will require devices to be compliant before users can access Exchange Online.
Which two conditions must be true for this design to work as intended? (Select TWO.)

Your security team wants standard users to remain non-admins. For files that do not match any elevation rule, each elevation must be reviewed by an administrator instead of allowing broad self-service elevation.
Which default elevation response should you configure? Select only one answer.

Your organization is onboarding company-owned MacBook devices through Apple Business Manager. The security team wants startup disk encryption managed from Intune and wants recovery information available for support operations.
Which policy should you create first?

You are creating Windows firewall policies for a line-of-business app that should accept inbound traffic on corporate networks but should remain tightly restricted everywhere else.
Which two design choices align with Microsoft guidance? (Select TWO.)

You want to onboard Intune-managed Windows devices so they can send security telemetry to Microsoft Defender for Endpoint.
Which Intune policy type should you create? Select only one answer.

You created one required Microsoft 365 Apps deployment that installed Word, Excel, and PowerPoint. Later, another admin assigned a second required Microsoft 365 Apps deployment to the same devices that included only Excel and PowerPoint. Why did Word disappear from the devices?

Your organization wants to deploy a large desktop application to Windows devices during Windows Autopilot enrollment. The installer contains multiple files and must run silently with detection rules and requirements.
Which Intune app type should you choose?

You are enabling Tunnel for MAM on unenrolled Android BYOD devices that will use Microsoft Edge to reach internal web apps.
Which two managed app configuration policies should you create in addition to the required app protection policy?
(Select TWO.)

A team wants to keep using Windows Update as the source, but it also wants administrators to review and approve hardware driver changes before deployment.
Configuration
Update source Windows Update
Policy in use Update ring
Goal Stage monthly OS updates
New requirement Review driver updates before install
Which additional policy should you plan?

You are reviewing an Autopilot design for Microsoft Entra joined Windows devices.
Which two statements about the device name template feature are correct? (Select TWO.)

Your organization wants strict control over which Apple OS version is installed and exactly when enforcement occurs. The change advisory board also requires a help link for users during the rollout.
Which policy model should you use?
Select only one answer.

Your organization has several branch offices. Devices in the same site are often behind different NATs, and you want Windows clients to share update content with defined enterprise peer groups instead of being limited to same-NAT peers. Which Delivery Optimization download mode should you configure in Intune? Select only one answer.

You deployed a security baseline profile to a pilot device group. The profile shows errors, and you need to identify the exact setting that is failing or conflicting before you change the baseline design.
Which report should you open first? Select only one answer.