What is the MD-102 exam?

Exam MD-102: Endpoint Administrator is the exam for the Microsoft 365 Certified: Endpoint Administrator Associate certification. It tests deploying, managing, protecting and monitoring devices and client apps in a Microsoft 365 tenant with Microsoft Intune. A score of 700 or greater is required to pass.

What is on the MD-102 exam?

Five domains from July 24, 2026: prepare infrastructure for devices (20 to 25 percent), manage and maintain devices (25 to 30 percent, the biggest), protect devices (15 to 20 percent), manage and secure applications (15 to 20 percent), and the new optimize endpoint operations domain (10 to 15 percent).

How hard is the MD-102 exam?

The difficulty is platform breadth. The outline covers Windows, macOS, iOS/iPadOS and Android enrollment, Autopilot deployment modes, the paid Intune Suite add-ons like Endpoint Privilege Management and Cloud PKI, Defender for Endpoint integration, and now Security Copilot agents and Endpoint Analytics. Admins who only manage Windows PCs underestimate it.

Is the MD-102 certification worth it?

For device administrators, yes. It earns the Endpoint Administrator Associate badge, and it is one of only three associate certifications that qualify you for the Microsoft 365 Administrator Expert certification alongside passing MS-102. Intune appears 47 times in the exam outline, and Intune skills sit at the center of the modern device management job.

How many questions are on the MD-102 exam?

Microsoft does not publish an official question count for MD-102. It does publish a passing score of 700, the exam page allots 100 minutes for the assessment, and there is a free official practice assessment on Microsoft Learn. Treat any site quoting an exact question count as unofficial.

What did the MD-102 exam replace?

MD-102 consolidated Microsoft's earlier two-exam Modern Desktop Administrator path, MD-100 Windows Client and MD-101 Managing Modern Desktops, into a single Endpoint Administrator exam when it launched in 2023. Both older exams are retired; MD-102 is the only current exam for the certification.

MD-102 practice test

MD-102 Practice Test: Endpoint Administrator Practice Exam Questions

Upload your Intune notes, and the AI writes unlimited MD-102 practice questions with an answer key in seconds. Weighted to the July 24, 2026 outline, the one that adds a brand-new automation and monitoring domain built around Security Copilot agents.

Your study files are processed securely and deleted automatically after your practice questions are built.

Upload your Intune notes and generate your first question set

Click to upload or drag and drop

PDF, DOCX, PPTX, TXT, JPG, JPEG, PNG, HEIC, ODP, ODT, BMP, or TIFF

up to 20MB

Please wait, your quiz is being created...

Uploading...

Exam MD-102: Endpoint Administrator is the exam for the Microsoft 365 Certified: Endpoint Administrator Associate certification, with a published passing score of 700 and a free official practice assessment on Microsoft Learn. A new skills outline takes effect July 24, 2026: the exam grows from four domains to five, adding optimize endpoint operations by using automation, monitoring, and reporting at 10 to 15 percent. The new domain names Security Copilot agents in Intune, Endpoint Analytics and proactive remediation scripts, and the audience profile now says you manage endpoints "by using Microsoft Intune and agentic tools and workflows." If you test before July 24, 2026, the previous four-domain outline still applies.

Last updated July 2026

What the MD-102 exam tests from July 24, 2026

We read the official skills-measured outline on Microsoft Learn the way we do for every certification page on this site. In the roughly 1,500-word outline, Intune appears 47 times, monitor 13 times and Entra 10 times. Whatever the question topic, the answer path runs through the Intune admin center.

Domain	What is actually in it	Weight
Manage and maintain devices	The biggest domain. Autopilot deployment profiles vs device preparation policies, user-driven vs pre-provisioning vs self-deploying modes, Enrollment Status Pages, Windows 365 Cloud PC provisioning, configuration profiles for Windows, Android, iOS/iPadOS, macOS and specialty devices (Teams Rooms, HoloLens 2, Zebra), the Intune Suite add-ons, and remote actions including KQL device queries and BitLocker key rotation.	25 to 30%
Prepare infrastructure for devices	Weight increased in this revision. Entra join vs registration decisions, dynamic device groups, enrollment for every platform including Apple Business Manager, Samsung Knox Mobile Enrollment and Google Zero Touch, plus compliance policies, Conditional Access, Windows Hello for Business and Windows LAPS.	20 to 25%
Protect devices	Antivirus, disk encryption and firewall policies, Attack surface reduction with Zero Trust principles, security baselines, Defender for Endpoint integration with EDR policies, App Control for Business, and the update stack: rings, feature updates, Autopatch and Hotpatch, Delivery Optimization.	15 to 20%
Manage and secure applications	Renamed from manage applications. Win32, LOB and Store app deployment, Microsoft 365 Apps via the Office Deployment Tool or Intune, Apple VPP and Google Play, plus app protection and app configuration policies for BYOD.	15 to 20%
Optimize endpoint operations by using automation, monitoring, and reporting	Brand new in July 2026. Automating Intune tasks with PowerShell and Microsoft Graph, investigating threats and analyzing device performance with Security Copilot agents in Intune, Endpoint Analytics with proactive remediation scripts, device health scores, and alert rules for compliance drift and enrollment failures.	10 to 15%

If your study material never mentions Security Copilot agents, Endpoint Analytics or device preparation policies, it was written for the old outline. Build questions from the current study guide instead: generate practice questions from your own endpoint notes and weight them to the five real domains.

New outline effective: Jul 24, 2026
Passing score: 700
Intune in the outline: 47 mentions
Practice questions: Unlimited

The July 24, 2026 rewrite: what actually changed

Microsoft's official change log for this revision is unusually busy. Beyond the new fifth domain, four objective groups are graded Major: enrolling devices to Intune, deploying and upgrading Windows clients with cloud-based tools, performing remote actions on devices, and configuring endpoint security. Two domain weights moved: prepare infrastructure for devices increased to 20 to 25 percent, and manage and maintain devices decreased to 25 to 30 percent while staying the biggest.

Security Copilot agents arrive

Three of the new domain's objectives are about Security Copilot agents in Intune: investigating threats they identify, analyzing device performance with them, and reviewing and responding to their recommendations. The audience profile now says admins work with "agentic tools and workflows."

Autopilot gets a fork

The deployment objectives now ask you to choose between Autopilot deployment profiles and device preparation policies, and between user-driven, pre-provisioning and self-deploying modes. Knowing one Autopilot path is no longer enough.

Intune Suite is fair game

The paid add-ons have their own objective group: Endpoint Privilege Management elevation policies, the Enterprise App Catalog, Remote Help, Cloud PKI certificate automation, Microsoft Tunnel for MAM, and Advanced Analytics with anomaly detection.

Booking matters here. Sit the exam before July 24, 2026 and you get the previous four-domain outline; sit it on or after and the fifth domain is live. Either way the free official practice assessment on Microsoft Learn is worth a pass, then drill your weak domains with generated questions until the gaps close.

Why working device admins still fail MD-102

The exam assumes a cloud-native, multi-platform estate. Compare what routine Windows administration teaches against what the outline asks.

What you know from day-to-day admin work	What the exam also expects
You image Windows PCs and join them to the domain	Autopilot profiles vs device preparation policies, self-deploying mode, Enrollment Status Pages, and Windows 365 Cloud PC provisioning policies
You manage settings with Group Policy	Configuration profiles with imported ADMX files, Group Policy analytics for migration, and assignment filters with enrollment time grouping
Your fleet is Windows only	Enrollment for macOS and iOS via Apple Business Manager, Android via Samsung Knox or Google Zero Touch, and update policies for every platform including FOTA
Antivirus is on and the console is green	Attack surface reduction policies, security baselines, EDR policies through the Defender for Endpoint integration, and App Control for Business
You fix devices when users open tickets	Endpoint Analytics health scores, proactive remediation scripts on a schedule, Security Copilot agent recommendations, and alert rules for compliance drift

Every right-hand cell is a named objective on the July 2026 outline. Generated question drills are the cheapest way to find out which of those you can only half-explain, before the proctored clock is running.

How to build MD-102 practice questions that match the real blueprint

Study to the weights: devices first, infrastructure second, protection and apps next, then the new automation domain, small but unfamiliar to almost everyone.

1 Upload current material: The MD-102 study guide, Microsoft Learn modules, or your own notes. If it never mentions Security Copilot agents, device preparation policies or Hotpatch, it predates the July 2026 outline.
2 Drill Autopilot decisions: Profiles vs device preparation policies, user-driven vs pre-provisioning vs self-deploying. Generate scenario questions until you can pick the right deployment path for any fleet description.
3 Cover every platform: Windows admins lose marks on Apple Business Manager, Knox and Zero Touch enrollment. Drill the non-Windows enrollment flows and the platform-specific update paths until they stop feeling foreign.
4 Finish with the official mock: MD-102 has a free official practice assessment on Microsoft Learn. Use generated questions to close gaps domain by domain, then confirm readiness on the official mock before booking.

MD-102 exam questions, answered

What is the MD-102 exam?: Exam MD-102: Endpoint Administrator is the exam for the Microsoft 365 Certified: Endpoint Administrator Associate certification. It tests deploying, managing, protecting and monitoring devices and client applications in a Microsoft 365 tenant with Microsoft Intune, across Windows, macOS, iOS/iPadOS and Android. A score of 700 or greater is required to pass, and the study guide is published on Microsoft Learn.
Is the MD-102 exam changing in 2026?: Yes. A new skills outline takes effect July 24, 2026. The exam grows from four domains to five with the addition of optimize endpoint operations by using automation, monitoring, and reporting at 10 to 15 percent, and the change log grades four existing objective groups Major: Intune enrollment, cloud-based Windows deployment, remote actions, and endpoint security. If you test before that date, the previous outline applies.
What is on the MD-102 exam?: Five domains from July 24, 2026: prepare infrastructure for devices (20 to 25 percent), manage and maintain devices (25 to 30 percent, the biggest), protect devices (15 to 20 percent), manage and secure applications (15 to 20 percent), and optimize endpoint operations by using automation, monitoring, and reporting (10 to 15 percent). The outline names Autopilot, Windows 365, Windows LAPS, Autopatch, Endpoint Privilege Management, Cloud PKI and Security Copilot agents verbatim.
How hard is the MD-102 exam?: The difficulty is platform breadth, not any single hard topic. One outline covers four operating systems, three Android enrollment programs, the paid Intune Suite add-ons, Defender for Endpoint integration and now agent-driven automation. Admins whose estate is Windows-only and Group Policy-driven consistently underestimate the macOS, iOS and Android objectives.
Is the MD-102 certification worth it?: For device administrators it is the core credential of the role, and it carries strategic weight: Endpoint Administrator Associate is one of only three associate certifications that qualify you for the Microsoft 365 Administrator Expert certification alongside passing MS-102. If the Expert badge is your goal, MD-102 plus the MS-102 practice exam is a natural sequence.
How many questions are on the MD-102 exam?: Microsoft does not publish an official question count for MD-102. It does publish a passing score of 700, the exam page allots 100 minutes for the assessment, and a free official practice assessment is available on Microsoft Learn. Treat any site quoting an exact question count as unofficial, and confirm details on the exam page when you schedule.
What did the MD-102 exam replace?: MD-102 consolidated the earlier two-exam Modern Desktop Administrator path, MD-100 Windows Client and MD-101 Managing Modern Desktops, into a single exam when it launched in 2023. Both older exams are retired. Since then the exam has been revised repeatedly, and the July 24, 2026 revision is the largest yet thanks to the new automation and monitoring domain.

PDFQuiz is not affiliated with, endorsed by, or sponsored by Microsoft. Microsoft 365, Intune, Entra, Defender and Windows are trademarks of Microsoft Corporation. This generator builds practice questions from material you upload and is a study aid, not a substitute for official learning paths. Always confirm the current skills-measured document before you book.

Related study tools

MD-102 sits in the Microsoft 365 track: the MS-102 practice exam covers the Expert-tier exam that Endpoint Administrator Associate qualifies you for, and the SC-300 practice test covers the identity administrator path whose Conditional Access skills overlap the compliance objectives here. The MS-700 practice test covers the Teams administrator associate that qualifies for the same Expert tier. On the virtual side of the same end-user computing job, the AZ-140 practice test covers Azure Virtual Desktop, where FSLogix profiles replace the physical-device management this exam tests. Any study guide works with the certification exam generator.

Build your first MD-102 practice set

Upload your endpoint notes and generate exam-style questions with an answer key in under a minute, weighted toward the five domains of the July 2026 outline.

Start Creating Practice Questions

Z tej samej rodziny narzędzi