Exam MD-102: Endpoint Administrator
Proctored role-based exam that may include interactive components.
- Type
- Written
- Duration
- 100 min
Exam sections
Prepare infrastructure for devices
This section covers deploying Windows 10/11 devices using Windows Autopilot, Microsoft Intune, and Microsoft Entra ID (formerly Azure AD). It includes configuring hybrid Entra join, planning and implementing device enrollment, provisioning, configuration profiles, compliance policies, and conditional access.
Question notes
Weight: 20-25%. Covers infrastructure preparation including Entra ID and Intune setup for device management.
Manage and maintain devices
Focuses on device lifecycle management, including provisioning, updating, and retiring devices. It covers managing Windows updates, update rings, and monitoring device health. It also includes troubleshooting connectivity issues and implementing remote actions like wipe, reset, and lock via Intune.
Question notes
Weight: 20-25%. Focuses on the ongoing maintenance and lifecycle management of endpoint devices.
Manage applications
This domain involves deploying and updating Win32, Microsoft Store, and web apps. It includes configuring app protection policies, managing app inventory, and implementing app configuration policies using scripts, CSPs, and custom settings. It uses Microsoft Intune to assign apps to users.
Question notes
Weight: 20-25%. Covers the deployment, protection, and configuration of applications across managed devices.
Protect devices
Covers configuring security baselines, endpoint protection, and Microsoft Defender for Endpoint. It includes implementing BitLocker encryption and Windows Hello for Business, enforcing compliance and conditional access, and monitoring security alerts to remediate threats.
Question notes
Weight: 20-25%. Focuses on endpoint security, including encryption, identity protection, and threat remediation.
