MD-102 exam domains
The MD-102 exam is weighted across 5 domains. Pick any domain below to drill it — or read the full breakdown in the FAQ.
| Exam domain | Exam weight | Practice |
|---|---|---|
| Prepare infrastructure for devices | 23% | Practice this topic |
| Manage and maintain devices | 28% | Practice this topic |
| Protect devices | 18% | Practice this topic |
| Manage and secure applications | 18% | Practice this topic |
| Optimize endpoint operations by using automation, monitoring, and reporting | 13% | Practice this topic |
Sample MD-102 questions
A sample of the MD-102 questions on this hub. Each links through to the full question, the correct answer, and an explanation of why every other option is wrong.
- Your organization has purchased the Intune Suite. The service desk manager reports that a growing number of devices are experiencing unexplained start…View question
- Contoso is deploying 200 company-owned Android devices to its warehouse. The devices have no user accounts assigned and will be shared across shifts.…View question
- Contoso is issuing new Android smartphones to its field sales team. Each device is company-owned, but management wants employees to be able to install…View question
- Contoso is deploying 200 new company-owned Android devices to warehouse staff. Each device must be fully managed by Intune (device owner mode) with no…View question
- Your organization deploys the Microsoft Outlook app to corporate-owned, Intune-enrolled iOS devices. You need to preconfigure the users' email account…View question
- Your organization wants to allow only trusted applications to run on corporate Windows 11 devices managed by Intune. Security requires that apps deplo…View question
- Your company allows employees to access Outlook and Teams on personal (BYOD) iOS and Android devices that are NOT enrolled in Intune. Security require…View question
- Your company allows employees to access Microsoft 365 email and files from personal (BYOD) iOS and Android devices that are NOT enrolled in Intune. Yo…View question
- Contoso purchases 200 new corporate iPhones through an authorized Apple reseller. The endpoint administrator wants these devices to enroll in Intune a…View question
- Your organization has purchased 200 Mac laptops that are already enrolled in Apple Business Manager (ABM). You have connected the ABM token to Intune…View question
Key MD-102 terms
Start with these terms, then explore the full glossary. Each links to a plain-English definition written for the MD-102 exam.
MD-102 frequently asked questions
What is the MD-102 certification?+
Microsoft positions the Endpoint Administrator as managing devices and client applications in a Microsoft 365 tenant by using Microsoft Intune, across Windows and non-Windows platforms.
It expects experience with Microsoft Entra ID and Microsoft 365 technologies including Intune, plus strong skills deploying, configuring, and maintaining Windows and non-Windows devices.
What topics are on the MD-102 exam?+
The MD-102 exam is organised into five weighted domains. This hub reflects Microsoft’s skills-measured update effective July 24, 2026, which adds the "Optimize endpoint operations" domain; the exam version through July 23, 2026 groups the same content into four areas (Prepare infrastructure, Manage and maintain, Manage applications, Protect devices). The percentages below are the midpoints of Microsoft’s published ranges (for example 25–30%), normalized to total 100, so treat them as a study-time guide. Managing and maintaining devices carries the most weight.
Prepare infrastructure for devices (23%)
Covers adding devices to Microsoft Entra ID (join types, device groups), enrolling devices to Intune across Windows, macOS, iOS/iPadOS, and Android, and implementing identity and compliance (roles, scope tags, compliance policies, Conditional Access, Windows Hello for Business, Windows LAPS).
Manage and maintain devices (28%)
The largest domain. Covers deploying and upgrading Windows clients with Autopilot and Windows 365, device configuration profiles across platforms, Intune Suite add-ons (Endpoint Privilege Management, Remote Help, Cloud PKI, Tunnel), and remote actions.
Protect devices (18%)
Covers endpoint security (antivirus, disk encryption/BitLocker, firewall, attack surface reduction, security baselines, Defender for Endpoint integration, App Control) and managing device updates (update rings, Windows Autopatch, and updates for iOS/iPadOS, macOS, and Android).
Manage and secure applications (18%)
Covers deploying and updating apps (Win32, LOB, Microsoft Store, Microsoft 365 Apps, platform stores) and planning and implementing app protection and app configuration policies for managed and unmanaged (BYOD) devices.
Optimize endpoint operations by using automation, monitoring, and reporting (13%)
Covers automating management tasks (PowerShell, Microsoft Graph, Security Copilot agents in Intune) and monitoring and optimizing health (reporting, Endpoint Analytics, proactive remediations, reliability scores, and alerts).
Is the MD-102 hard?+
MD-102 is an associate exam that expects genuine Intune skill — enrolling and configuring devices across platforms, securing them, and troubleshooting — not just recognition of features.
The difficulty comes from the breadth across Windows and non-Windows platforms and from scenario questions that hinge on the right Autopilot, compliance, or app-protection choice. Practising in an Intune tenant is the key.
How many questions are on the MD-102 exam and how long is it?+
Microsoft does not fix a single public question count for MD-102; it typically presents roughly 40–60 questions in a mix of formats — multiple choice, multiple response, and case studies — and Microsoft allots 100 minutes to complete the assessment.
Our full-length practice mock uses a 60-question, 100-minute session so you can rehearse pacing under realistic time pressure before test day.
What score do you need to pass the MD-102?+
Microsoft scores MD-102 on a scale of 1 to 1,000, and the passing score is 700. That is a scaled score rather than a raw 70%, because Microsoft adjusts for question difficulty, and there is no penalty for wrong answers, so you should never leave a question blank. Our practice mock uses a 70% threshold to give you a comparable target.
How much does the MD-102 exam cost?+
The MD-102 exam fee is set by Microsoft and varies by region — check the Microsoft certification page for current pricing. Microsoft associate certifications are valid for one year and can be renewed for free through an online assessment on Microsoft Learn. Everything on this hub is free.
Who should take the MD-102?+
MD-102 is aimed at endpoint administrators who manage devices and client apps with Intune, and it can serve as a qualifying associate certification toward the Microsoft 365 Certified: Administrator Expert credential.
Microsoft recommends experience with Entra ID and Microsoft 365 including Intune, plus strong Windows and non-Windows device management skills, though there is no formal prerequisite.
What jobs and salaries can the MD-102 lead to?+
MD-102 maps to roles such as endpoint administrator, desktop/device administrator, and modern workplace engineer responsible for managed devices.
How much any certification affects pay depends heavily on geography, seniority, and hands-on experience, so treat any single salary figure with caution. MD-102 is best viewed as validation of endpoint-management skill rather than a guaranteed raise on its own.
How long does it take to study for the MD-102?+
Candidates with device-management experience often need four to eight weeks; those newer to Intune should plan longer. The most efficient path is to study each domain while enrolling and configuring devices in an Intune tenant.
Review every explanation, including for questions you answered correctly, because MD-102 distractors are built from plausible but incorrect Intune choices. Use the per-domain results here to find and shore up your weakest area, then finish with full-length timed mocks.
How should you prepare for the MD-102?+
Study the five domains above, giving the heaviest weight to managing and maintaining devices, then drill scenario questions domain by domain. Every MockAPI question reveals a full explanation and tells you why each wrong answer is wrong — essential for an exam that turns on exact Intune configuration.
When you can answer scenarios comfortably, move to full-length timed mocks alongside hands-on Intune practice. Use the glossary to keep concepts like Autopilot, compliance policies, and app protection policies straight, and aim to score consistently above the pass mark before you book.
Can you take the MD-102 exam online?+
Yes. Microsoft delivers MD-102 through Pearson VUE, so you can test at a physical Pearson VUE centre or online with remote proctoring (OnVUE). The online exam requires a private, quiet room, a clear workspace, a webcam and microphone, a stable connection, and government-issued photo ID, with a proctor monitoring you and a room scan before you start.
If you do not pass, Microsoft requires a 24-hour wait before a second attempt; after that, a 14-day wait applies between further attempts, with a limit of five attempts in a 12-month period, and each attempt needs its own registration.
What certification should you take after the MD-102?+
MD-102 can serve as a qualifying associate certification toward the Microsoft 365 Certified: Administrator Expert credential (with MS-102). Common companions include SC-300 (Identity and Access Administrator) and the security SC-200 role.
For many, the real next step is owning endpoint management in production. Pairing MD-102 with hands-on Intune experience is what turns the certificate into a career.