Weekend Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: exams65

ExamsBrite Dumps

Endpoint Administrator Question and Answers

Endpoint Administrator

Last Update Sep 20, 2025
Total Questions : 346

We are offering FREE MD-102 Microsoft exam questions. All you do is to just go and sign up. Give your details, prepare MD-102 free exam questions and then go for complete pool of Endpoint Administrator test questions that will help you more.

MD-102 pdf

MD-102 PDF

$40.25  $114.99
MD-102 Engine

MD-102 Testing Engine

$47.25  $134.99
MD-102 PDF + Engine

MD-102 PDF + Testing Engine

$61.25  $174.99
Questions 1

What is the maximum number of devices that User1 and User2 can enroll in Intune? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 2

You need to meet the technical requirements for the LEG department computers.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Options:

Discussion 0
Questions 3

You need to meet the technical requirements for the IT department.

What should you do first?

Options:

A.  

From the Azure Active Directory blade in the Azure portal, enable Seamless single sign-on.

B.  

From the Configuration Manager console, add an Intune subscription.

C.  

From the Azure Active Directory blade in the Azure portal, configure the Mobility (MDM and MAM) settings.

D.  

From the Microsoft Intune blade in the Azure portal, configure the Windows enrollment settings.

Discussion 0
Questions 4

You need to recommend a solution to meet the device management requirements.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 5

You need to prepare for the deployment of the Phoenix office computers.

What should you do first?

Options:

A.  

Extract the hardware ID information of each computer to a CSV file and upload the file from the Devices settings in Microsoft Store for Business.

B.  

Generalize the computers and configure the Mobility (MDM and MAM) settings from the Azure ActiveDirectory blade in the Azure portal.

C.  

Generalize the computers and configure the Device settings from the Azure Active Directory blade in the Azure portal.

D.  

Extract the hardware ID information of each computer to an XLSX file and upload the file from the Devices settings in Microsoft Store for Business.

Discussion 0
Questions 6

What should you use to meet the technical requirements for Azure DevOps?

Options:

A.  

An app protection policy

B.  

Windows Information Protection (WIP)

C.  

Conditional access

D.  

A device configuration profile

Discussion 0
Questions 7

You need to meet the requirements for the MKG department users.

What should you do?

Options:

A.  

Assign the MKG department users the Purchaser role in Microsoft Store for Business

B.  

Download the APPX file for App1 from Microsoft Store for Business

C.  

Add App1 to the private store

D.  

Assign the MKG department users the Basic Purchaser role in Microsoft Store for Business

E.  

Acquire App1 from Microsoft Store for Business

Discussion 0
Questions 8

You need to meet the OOBE requirements for Windows AutoPilot.

Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate settings in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 9

What should you configure to meet the technical requirements for the Azure AD-joined computers?

Options:

A.  

Windows Hello for Business from the Microsoft Intune blade in the Azure portal.

B.  

The Accounts options in an endpoint protection profile.

C.  

The Password Policy settings in a Group Policy object (GPO).

D.  

A password policy from the Microsoft Office 365 portal.

Discussion 0
Questions 10

You need to capture the required information for the sales department computers to meet the technical

requirements.

Which Windows PowerShell command should you run first?

Options:

A.  

Install-Module WindowsAutoPilotIntune

B.  

Install-Script Get-WindowsAutoPilotInfo

C.  

Import-AutoPilotCSV

D.  

Get-WindowsAutoPilotInfo

Discussion 0
Questions 11

You need to meet the technical requirements for Windows AutoPilot.

Which two settings should you configure from the Azure Active Directory blade? To answer, select the appropriate settings in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 12

You need to resolve the performance issues in the Los Angeles office.

How should you configure the update settings? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 13

What should you upgrade before you can configure the environment to support co-management?

Options:

A.  

the domain functional level

B.  

Configuration Manager

C.  

the domain controllers

D.  

Windows Server Update Services (WSUS)

Discussion 0
Questions 14

Which users can purchase and assign App1?

Options:

A.  

User3 only

B.  

User1 and User3 only

C.  

User1, User2, User3, and User4

D.  

User1, User3, and User4 only

E.  

User3 and User4 only

Discussion 0
Questions 15

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 16

You need to meet the device management requirements for the developers.

What should you implement?

Options:

A.  

folder redirection

B.  

Enterprise State Roaming

C.  

home folders

D.  

known folder redirection in Microsoft OneDrive

Discussion 0
Questions 17

User1 and User2 plan to use Sync your settings.

On which devices can the users use Sync your settings? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 18

Which user can enroll Device6 in Intune?

Options:

A.  

User4 and User2 only

B.  

User4 and User 1 only

C.  

User1, User2, User3, and User4

D.  

User4. User Land User2 only

Discussion 0
Questions 19

Which devices are registered by using the Windows Autopilot deployment service?

Options:

A.  

Device1 only

B.  

Device3 only

C.  

Device1 and Device3 only

D.  

Device1, Device2, and Device3

Discussion 0
Questions 20

You implement the planned changes for Connection1 and Connection2

How many VPN connections will there be for User1 when the user signs in to Device 1 and Devke2? To answer select the appropriate options in the answer area.

NOTE; Each correct selection is worth one point.

Options:

Discussion 0
Questions 21

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 22

You need a new conditional access policy that has an assignment for Office 365 Exchange Online.

You need to configure the policy to meet the technical requirements for Group4.

Which two settings should you configure in the policy? To answer, select the appropriate settings in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 23

To which devices do Policy1 and Policy2 apply? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 24

You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

You have devices enrolled in Microsoft Intune as shown in the following table.

From Intune, you create and send a custom notification named Notification1 to Group1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 25

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 26

You implement Boundary1 based on the planned changes.

Which devices have a network boundary of 192.168.1.0/24 applied?

Options:

A.  

Device2 only

B.  

Device3 only

C.  

Device 1. Device2. and Device5 only

D.  

Device 1, Device2, Device3, and Device4 only

Discussion 0
Questions 27

You have a Microsoft Deployment Toolkit (MDT) deployment share.

From the Deployment Workbench, you open the New Task Sequence Wizard and select the Standard Client Upgrade Task Sequence task sequence template.

You discover that there are no operating system images listed on the Select OS page as shown in the following exhibit.

You need to be able to select an operating system image to perform a Windows 11 in-place upgrade.

What should you do?

Options:

A.  

Enable monitoring for the deployment share.

B.  

Import a full set of source files.

C.  

Import a custom image file.

D.  

Run the Update Deployment Share Wizard

Discussion 0
Questions 28

You have a Microsoft 365 E5 subscription.

You use Microsoft Intune to manage all Windows 11 devices.

You create an attack surface reduction (ASR) policy named Profile1 based on the Attack Surface Reduction Rules profile and assign Profile! to all the devices.

A user reports that an Adobe Reader plug-in is now blocked.

You need to ensure that the plug-in is unblocked.

What should you do?

Options:

A.  

Create an Endpoint Privilege Management policy and assign the policy to all the devices.

B.  

Add a scope tag to Profile1.

C.  

Configure ASR Only Per Rule Exclusions in Profile1.

D.  

Create a device compliance policy and assign the policy to all the devices.

Discussion 0
Questions 29

You have a Microsoft Entra tenant that contains the devices shown in the following table.

The tenant contains the groups shown in the following table.

You create a Windows Autopilot deployment profile as shown in the Deployment Profile exhibit (Click the Deployment Profile tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 30

You have a Microsoft 365 E5 subscription and 100 computers that run Windows 10.

You need to deploy Microsoft Office Professional Plus 2019 to the computers by using Microsoft Office Deployment Tool (ODT).

What should you use to create a customization file for ODT?

Options:

A.  

the Microsoft 365 admin center

B.  

the Microsoft Intune admin center

C.  

the Microsoft Purview compliance portal

D.  

the Microsoft 365 Apps admin center

Discussion 0
Questions 31

Your company standardizes on Windows 10 Enterprise for all users.

Some users purchase their own computer from a retail store. The computers run Windows 10 Pro.

You need to recommend a solution to upgrade the computers to Windows 10 Enterprise, join the computers to Azure AD, and install several Microsoft Store apps. The solution must meet the following

requirements:

• Ensure that any applications installed by the users are retained.

• Minimize user intervention.

What is the best recommendation to achieve the goal?

More than one answer choice may achieve the goal.

Select the BEST answer.

Options:

A.  

Windows Autopilot

B.  

Microsoft Deployment Toolkit (MDT)

C.  

a Windows Configuration Designer provisioning package

D.  

Windows Deployment Services (WDS)

Discussion 0
Questions 32

You have a Microsoft 365 subscription.

You use Microsoft Intune to manage Windows 11 devices.

You need to implement Windows Local Administrator Password Solution (Windows LAPS).

What should you configure?

Options:

A.  

a device compliance policy

B.  

an app protection policy

C.  

an account protection policy

D.  

a configuration profile

Discussion 0
Questions 33

You have a Microsoft 365 subscription that includes Microsoft Intune.

You plan to use Windows Autopilot to deploy Windows 11 devices.

You need to meet the following requirements during Autopilot provisioning:

• Display the app and profile configuration progress.

• Block users from using the devices until all apps and profiles are installed

What should you configure?

Options:

A.  

an app configuration policy

B.  

an app protection policy

C.  

an enrollment device platform restriction

D.  

an enrollment status page

Discussion 0
Questions 34

You have a Microsoft Entra tenant.

You are creating a dynamic device group named Group1.

Group1 will include only Windows devices that are Microsoft Entra registered.

How should you configure the dynamic membership rule for Group1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 35

You need to ensure that computer objects can be created as part of the Windows Autopilot deployment. The solution must meet the technical requirements.

To what should you grant the right to create the computer objects?

Options:

A.  

Server2

B.  

Server1

C.  

GroupA

D.  

DC1

Discussion 0
Questions 36

-

You manage a Microsoft Deployment Toolkit (MDT) deployment share named DS1. DS1 contains an Out-of-Box Drivers folder named Windows 11 x64 that has subfolders in the format of {make name}\{model name}.

You need to modify a deployment task sequence to ensure that all the drivers in the folder that match the make and model of the computers are installed without using PnP detection or selection profiles.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 37

You have a Microsoft 365 ES subscription that uses Microsoft Intune.

Devices are enrolled in Intune as shown in the following table.

The devices are the members of groups as shown in the following table.

You create an JOS/iPadOS update profile as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 38

You have the device configuration profile shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 39

You have a Microsoft 365 subscription that contains 5,000 Windows devices enrolled in Microsoft Intune.

You plan to use the Sync and Collect diagnostics bulk device actions.

What is the maximum number of devices you can include in each action? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 40

You have a Microsoft 365 subscription that contains two users named User1 and User2. You need to ensure that the users can perform the following tasks:

• User1 must be able to create groups and manage users.

• User2 must be able to reset passwords for no administrative users.

The solution must use the principle of least privilege.

Which role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 41

You have a Microsoft 365 E5 subscription and use Microsoft Intune Suite.

You plan to use Intune to run remediation script packages.

What should you do first in the Microsoft Intune admin center?

Options:

A.  

Enable Windows diagnostic data in processor configuration.

B.  

Upload a Windows enterprise certificate.

C.  

Enable Windows license verification.

D.  

Configure the Derived Credential settings.

Discussion 0
Questions 42

You need to implement mobile device management (MDM) for personal devices that run Windows 11. The solution must meet the following requirements:

• Ensure that you can manage the personal devices by using Microsoft Intune.

• Ensure that users can access company data seamlessly from their personal devices.

• Ensure that users can only sign in to their personal devices by using their personal account.

What should you use to add the devices to Azure AD?

Options:

A.  

Azure AD registered Most Voted

B.  

hybrid Azure AD join

C.  

Azure AD joined

Discussion 0
Questions 43

You have a Microsoft 365 subscription that contains the following devices enrolled in Microsoft Intune:

• A corporate-owned Windows device named Device1

• A personally-owned Android device named Device2

You need to use a remote action on each device.

The solution must meet the following requirements:

• Repurpose Device1 by returning the device to the factory default settings.

• Remove only corporate data from Device2 and remove the device from Intune when the device checks in.

Which remote action should you use on each device? To answer, drag the appropriate remote actions to the correct devices. Each remote action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 44

You have 100 computers that run Windows 10.

You plan to deploy Windows 11 to the computers by performing a wipe and load installation.

You need to recommend a method to retain the user settings and the user data.

Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to th e answer area and arrange them in the correct order.

Options:

Discussion 0
Questions 45

You have a Microsoft 365 Business Standard subscription and 100 Windows 10 Pro devices.

You purchase a Microsoft 365 E5 subscription.

You need to upgrade the Windows 10 Pro devices to Windows 10 Enterprise. The solution must minimize administrative effort.

Which upgrade method should you use?

Options:

A.  

Windows Autopilot

B.  

a Microsoft Deployment Toolkit (MDT) lite-touch deployment

C.  

Subscription Activation

D.  

an in-place upgrade by using Windows installation media

Discussion 0
Questions 46

You have a Microsoft 365 E5 tenant that contains Windows devices enrolled in Microsoft Intune as shown in the following table.

You create an Endpoint Privilege Management (EPM) elevation settings policy named ElevationSettmgsl that has the following settings:

• Endpoint Privilege Management: Enabled

o Default elevation response: Require user confirmation

o Validation: Business justification

• Assignments: Group1 Each device contains a file named File1.exe that can be run only by an administrator. You create an EPM elevation rules policy named ElevattonRules1 that has the following settings:

• Rule name: Rule1

o Elevation type: Automatic

o File name: Filel.exe

o File hash:

• Assignments: Group2

For each of the following statements, select Yes if the statement is true. Otherwise, select

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 47

You have a Microsoft 365 E5 subscription.

You create a new update rings policy named Policy1 as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point,

Options:

Discussion 0
Questions 48

Your company uses Microsoft Defender for Endpoint Microsoft Defender for Endpoint includes the device groups shown in the following table.

You onboard a computer to Microsoft Defender for Endpoint as shown in the following exhibit.

What is the effect of the Microsoft Defender for Endpoint configuration? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 49

You have a Microsoft Deployment Toolkit (MDT) solution that is used to manage Windows 11 deployment tasks.

MDT contains the operating system images shown in the following table.

You need to perform a Windows 11 in-place upgrade on several computers that run Windows 10.

From the Deployment Workbench, you open the New Task Sequence Wizard.

You need to identify which task sequence template and which operating system image to use for the task sequence. The solution must minimize administrative effort.

What should you identify? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 50

Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure AD tenant. The tenant contains the users shown in the following table.

You assign Windows 10/11 Enterprise E5 licenses to Gtoup1 and Uset2.

You deploy the devices shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 51

You have a Microsoft 365 subscription and use Microsoft Intune Suite.

The subscription contains devices enrolled in Intune as shown in the following table.

Which devices support Device query?

Options:

A.  

Device1 only

B.  

Device2 only

C.  

Device1 and Device2 only

D.  

Device1, Device2, Device3, and Device4

Discussion 0
Questions 52

You have a Microsoft Deployment Toolkit (MDT) server named MDT1.

When computers start from the LiteTouchPE_x64.lso image and connect to MDT1. the welcome screen appears as shown In the following exhibit.

You need to prevent the welcome screen from appearing when the computers connect to MDT1.

Which three actions should you perform in sequence? To answer move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Options:

Discussion 0