Microsoft MD-102 Übungsprüfungen
Zuletzt aktualisiert am 02.02.2026- Prüfungscode: MD-102
- Prüfungsname: Endpoint Administrator
- Zertifizierungsanbieter: Microsoft
- Zuletzt aktualisiert am: 02.02.2026
You have a Microsoft 365 subscription.
You need to provide a user the ability Security defaults and create Conditional Access policies. The solution must use the principle of least privilege.
Which role should you assign to the user?
- A . Global Administrator
- B . Conditional Access Administrator
- C . Security Administrator
- D . Intune Administrator
You have a Microsoft 365 subscription.
You need to provide a user the ability Security defaults and create Conditional Access policies. The solution must use the principle of least privilege.
Which role should you assign to the user?
- A . Global Administrator
- B . Conditional Access Administrator
- C . Security Administrator
- D . Intune Administrator
HOTSPOT
You have a Microsoft 365 subscription.
You need to enable passwordless authentication for all users. The solution must meet the following requirements:
Users in the research department cannot use mobile devices and must authenticate from unmanaged Linux devices by using an alternative method.
![]()
To access services, users in the sales department must authenticate by using their mobile phone.
![]()
Administrative effort must be minimized.
![]()
Which authentication method should you use for each department? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Hot Area:

HOTSPOT
You have a Microsoft 365 subscription.
You need to enable passwordless authentication for all users. The solution must meet the following requirements:
Users in the research department cannot use mobile devices and must authenticate from unmanaged Linux devices by using an alternative method.
![]()
To access services, users in the sales department must authenticate by using their mobile phone.
![]()
Administrative effort must be minimized.
![]()
Which authentication method should you use for each department? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Hot Area:

HOTSPOT
You have a Microsoft 365 subscription.
You need to enable passwordless authentication for all users. The solution must meet the following requirements:
Users in the research department cannot use mobile devices and must authenticate from unmanaged Linux devices by using an alternative method.
![]()
To access services, users in the sales department must authenticate by using their mobile phone.
![]()
Administrative effort must be minimized.
![]()
Which authentication method should you use for each department? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Hot Area:

HOTSPOT
You have a Microsoft 365 subscription.
You need to enable passwordless authentication for all users. The solution must meet the following requirements:
Users in the research department cannot use mobile devices and must authenticate from unmanaged Linux devices by using an alternative method.
![]()
To access services, users in the sales department must authenticate by using their mobile phone.
![]()
Administrative effort must be minimized.
![]()
Which authentication method should you use for each department? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Hot Area:

HOTSPOT
Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant.
You have a Microsoft 365 subscription.
You plan to use Windows Autopilot to deploy new Windows devices.
You plan to create a deployment profile.
You need to ensure that the deployment meets the following requirements:
Devices must be joined to AD DS regardless of their current working location.
![]()
Users in the marketing department must have a line-of-business (LOB) app installed during the deployment.
![]()
The solution must minimize administrative effort.
What should you do for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Hot Area:

HOTSPOT
Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant.
You have a Microsoft 365 subscription.
You plan to use Windows Autopilot to deploy new Windows devices.
You plan to create a deployment profile.
You need to ensure that the deployment meets the following requirements:
Devices must be joined to AD DS regardless of their current working location.
![]()
Users in the marketing department must have a line-of-business (LOB) app installed during the deployment.
![]()
The solution must minimize administrative effort.
What should you do for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Hot Area:

You have a Microsoft 365 subscription that includes Microsoft Intune.
You have an update ring named UpdateRing1 that contains the following settings:
Automatic update behavior: Auto install and restart at a scheduled time
![]()
Automatic behavior frequency: First week of the month
![]()
Scheduled install day: Tuesday
![]()
Scheduled install time: 3 AM
![]()
From the Microsoft Intune admin center, you select Uninstall for the feature updates of UpdateRing1. When will devices start to remove the feature updates?
* when a user approves the uninstall
* as soon as the policy is received
* next Tuesday
* the first Tuesday of the next month
You have a Microsoft 365 subscription that includes Microsoft Intune.
You have an update ring named UpdateRing1 that contains the following settings:
Automatic update behavior: Auto install and restart at a scheduled time
![]()
Automatic behavior frequency: First week of the month
![]()
Scheduled install day: Tuesday
![]()
Scheduled install time: 3 AM
![]()
From the Microsoft Intune admin center, you select Uninstall for the feature updates of UpdateRing1. When will devices start to remove the feature updates?
* when a user approves the uninstall
* as soon as the policy is received
* next Tuesday
* the first Tuesday of the next month
