Practice Free MD-102 Exam Online Questions
HOTSPOT
You have a Microsoft 365 E5 subscription that includes Microsoft Intune.
You need to configure a compliance policy for the iOS/iPadOS platform.
The solution must meet the following requirements:
• Require jailbroken devices to be marked as noncompliant.
• Mark devices without a password lock as noncompliant.
Which compliance policy settings should you configure for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


You have a Microsoft 365 subscription that contains 1.000 Windows 11 devices enrolled in Microsoft Intune. You plan to use Intune to deploy an application named App1 that contains multiple installation files.
What should you do first?
- A . Prepare the contents of App1 by using the Microsoft Win32 Content Prep Tool.
- B . Create an Android application package (APK).
- C . Upload the contents of App1 to Intune.
- D . Install the Microsoft Deployment Toolkit (MDT).
HOTSPOT
User1 and User2 plan to use Sync your settings.
On which devices can the users use Sync your settings? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Explanation:
Reference: https://www.jeffgilb.com/managing-local-administrators-with-azure-ad-and-intune/
You have a Microsoft Intune subscription associated to an Azure AD tenant named contoso.com. Users use one of the following three suffixes when they sign in to the tenant: us.contoso.com, eu.contoso.com, or contoso.com.
You need to ensure that the users are NOT required to specify the mobile device management (MDM) enrollment URL as part of the enrollment process. The solution must minimize the number of changes.
Which DNS records do you need?
- A . three CNAME records
- B . one CNAME record only
- C . three TXT records
- D . one TXT record only
Your network contains an Active Directory domain named contoso.com. The domain contains 25 computers that run Windows 11.
You have a Microsoft 365 subscription
You have an Azure AD tenant that syncs with contoso.com.
You configure hybrid Azure AD join and discover that some of the computers have a registered state of Pending.
You need to ensure that the computers complete the join successfully.
What should you ensure?
- A . that Windows is activated on all the computers
- B . that the users of the computers are assigned Microsoft 365 licenses
- C . that each computer has a line of sight to a domain controller
- D . that the computers contain the latest quality updates
C
Explanation:
https://learn.microsoft.com/en-us/entra/identity/devices/hybrid-join-plan
You have the devices shown in the following table.

You plan to implement Microsoft Defender for Endpoint.
You need to identify which devices can be onboarded to Microsoft Defender for Endpoint.
What should you identify?
- A . Device1 only
- B . Device2 only
- C . Device1, Device2 only
- D . Device1, Device2, and Device3 only
- E . Device1, Device2, Device3, and Device4
D
Explanation:
Here is the list of Windows versions. Win10 and Win11 supported. The sentence "(standalone or as part of other Microsoft 365 plans)" excludes the domain needs. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/minimum-requirements?view=o365-worldwide
Here is the link for Android. No information about the specific version therefore it is supported. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-endpoint-android?view=o365-worldwide
Here is the link for MacOS
System requirements: 14 (Sonoma), 13 (Ventura), 12 (Monterey). MAC OS X is older therefore unsupported.
https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-endpoint-mac?view=o365-worldwide
You manage 1.000 devices by using Microsoft Intune. You review the Device compliance trends report.
For how long will the report display trend data?
- A . 30 days
- B . 60 days
- C . 90 days
- D . 365 days
B
Explanation:
The Device compliance trends report shows the number of devices that are compliant, noncompliant, and not evaluated over time. The report displays trend data for the last 60 days by default, but you can change the time range to view data for the last 7, 14, or 30 days as well. The report does not show data for more than 60 days.
Reference: [Device compliance trends report]
HOTSPOT
You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

All the devices are enrolled in Microsoft Intune.
The devices have apps installed as shown in the following table.


Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.
After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.
You have a Microsoft Entra tenant named contoso.com.
You purchase an Android device named Device1.
You need to register Device1 in contoso.com.
Solution; You use the Microsoft Intune Company Portal app.
Does this meet the goal?
- A . Yes
- B . No
You have a Microsoft Entra tenant named contoso.com that contains a Windows 11 device named Device1 and a user named User1 User! registers Device1 in contoso.com.
Which capability is available to Device1 after registering in contoso.com.
- A . authenticating to cloud resources by using single sign-on (SSO)
- B . enforcing software updates
- C . enforcing hard drive encryption
- D . enforcing compliance policies
