MD-102 cheat sheet
A one-page reference for the Microsoft 365 Endpoint Administrator exam: the format, how the domains are weighted, and the glossary terms for this exam.
Exam at a glance
Vendor
Microsoft
Level
Associate
Questions
60
Time
100 min
Mock pass mark
70%
Domains
5
Practice Qs
117
Code
MD-102
Domain weightings
How much of the exam each domain covers. Spend your study time in proportion — the heavier the domain, the more questions you'll see.
Key terms
- Microsoft Intune
- Microsoft Intune is the cloud service for endpoint management — enrolling, configuring, protecting, and monitoring devices and apps. MD-102 centers on managing endpoints at scale with Intune.
- Windows Autopilot
- Windows Autopilot is a set of technologies for zero-touch provisioning of new Windows devices directly to a managed, ready-to-use state. MD-102 covers Autopilot deployment profiles and modes (user-driven, pre-provisioning, self-deploying).
- Enrollment Status Page
- The Enrollment Status Page (ESP) shows provisioning progress and blocks device use until required apps and policies are applied during Autopilot. MD-102 covers creating an ESP.
- Microsoft Entra join
- Microsoft Entra join is a device join type that registers a device directly with Microsoft Entra ID for cloud management. MD-102 covers choosing device join types and joining or registering devices.
- Compliance policy
- A compliance policy is an Intune policy that evaluates whether a device meets security requirements such as encryption and OS version. MD-102 covers compliance policies and Conditional Access that requires a compliant status.
- Conditional access
- Conditional access is a Microsoft Entra policy engine that grants or blocks access based on signals including device compliance. MD-102 covers Conditional Access policies that require a compliance status.
- Configuration profile
- A configuration profile is an Intune policy that pushes device settings to Windows, Android, iOS/iPadOS, macOS, and specialty devices. MD-102 covers creating and assigning configuration profiles.
- Settings Catalog
- The Settings Catalog is an Intune surface listing all available device settings for building configuration and update policies. MD-102 covers managing iOS/iPadOS and macOS updates via the Settings Catalog.
- Windows Autopatch
- Windows Autopatch is a managed service that automates the deployment of Windows, Microsoft 365 Apps, driver, and firmware updates. MD-102 covers implementing Autopatch and Hotpatch policies.
- Update ring
- An update ring is an Intune policy that controls how and when Windows feature and quality updates are deployed to groups of devices. MD-102 covers creating and managing update rings.
- App protection policy
- An app protection policy (APP) applies data-protection controls to managed apps on managed and unmanaged (BYOD) devices, such as encryption and copy/paste limits. MD-102 covers planning and implementing app protection policies.
- Win32 app
- A Win32 app is a traditional Windows desktop application packaged (as .intunewin) for deployment through Intune. MD-102 covers deploying Win32, LOB, and Microsoft Store apps.
- BitLocker
- BitLocker is the Windows full-volume encryption feature managed through Intune disk-encryption policies. MD-102 covers configuring disk encryption and rotating BitLocker recovery keys.
- Endpoint Analytics
- Endpoint Analytics is an Intune reporting capability that scores device health, startup performance, and user experience, and drives proactive remediations. MD-102 covers monitoring and optimizing endpoint health with it.