Free MD-102 Practice Test Questions 2026

You have a Microsoft Entra tenant named contoso.com that contains the dynamic membership groups shown in the following table.



You add devices to contoso.com as shown in the following table.



For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

You have computers that run Windows 10 and are managed by using Microsoft Intune.

Users store their files in a folder named D:\Folder1.

You need to ensure that only a trusted list of applications is granted write access to D:\Folder1.

What should you configure in the device configuration profile?

A. Microsoft Defender Exploit Guard

B. Microsoft Defender Application Guard

C. Microsoft Defender SmartScreen

D. Microsoft Defender Application Control

You have a Microsoft 365 subscription. The subscription contains 500 computers that run Windows 11 and are enrolled in Microsoft Intune. You need to manage the deployment of monthly security updates. The solution must meet the following requirements:

• Updates must be deployed to a group of test computers for quality assurance.

• Updates must be deployed automatically 15 days after the quality assurance testing.

What should you create in the Microsoft Intune admin center?

A. a device Configuration profile

B. an update ring

C. a feature update policy

D. a security baseline

You have an Azure AD tenant named contoso.com that contains the devices shown in the following table.



The tenant contains the Azure AD groups shown in the following table.



You add an Autopilot deployment profile as shown in the following exhibit.



You have an Azure AD tenant named contoso.com that contains the devices shown in the following table.



The tenant contains the Azure AD groups shown in the following table.

You have devices enrolled in Microsoft Intune as shown in the following table.



For which devices can you manage updates by using intune?

A. Devic1l only

B. Device1 and Oevice2 only

C. Device 1 and Device3 only

D. Device 1. Device3, and Device4 only

E. Device 1. Device2, Device3, and Device4

You have a Microsoft 365 E5 subscription that contains a computer named Computer1 that runs Windows 11. Computer1 is enrolled in Microsoft Intune.

You need to deploy an app named App1 to Computer1. The App1 installation will use multiple files.

What should you use to package App1, and which file format will be used? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory domain named adatum.com. The domain contains two computers named Computer1 and Computer2 that run Windows 10. Remote Desktop is enabled on Computer2.

The domain contains the user accounts shown in the following table.



Computer2 contains the local groups shown in the following table.



The relevant user rights assignments for Computed are shown in the following table.

You have a Microsoft 365 subscription that contains the devices shown in the following table.



You need to ensure that only devices running trusted firmware or operating system build can access network resources.

Which compliance policy setting should you configure for each device? To answer, drag the appropriate settings to the correct devices. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.



You need to create two dynamic device groups named Group1 and Group2. The solution must meet the following requirements:

• Group1 must contain Device1 and Device2 only.

• Group2 must contain Device1 and Device3 only.

Which device membership rule should you configure for each group? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

You have a Microsoft 365 E5 subscription and use Microsoft Intune Suite. You manage the following types of devices;

• Windows 11

• Android

• iOS

You need to implement Microsoft Tunnel for Mobile Application Management (MAM) to provide the devices with access to on-premises company apps.

What should you deploy first, and which device types can use Tunnel for MAM? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have a Microsoft 365 E5 subscription.

You need to download a report that lists all the devices that are NOT enrolled in Microsoft Intune and are assigned an app protection policy.

What should you select in the Microsoft Endpoint Manager admin center?

A. Apps. and then App protection policies

B. Apps. and then Monitor

C. Devices, and then Monitor

D. Reports, and the Device compliance

Your network contains an Active Directory domain. The domain contains a computer named Computer! that runs Windows 11. You need to enable the Windows Remote Management (WinRM) service on Computer1 and perform the following configurations:

• For the WinRM service, set Startup type to Automatic.

• Create a listener that accepts requests from any IP address.

• Enable a firewall exception for WS-Management communications.

Which PowerShell cmdlet should you use?

A. Connect-WSMan

B. Enable-PSRemoting

C. Invoke-WSManAction

D. Enable-PSSessionConfiguration