MD-102 Matching — 10 Questions

Question 1

Match each Microsoft 365 compliance feature to its description.

Accepted Answer

Data Loss Prevention: Helps prevent accidental sharing of sensitive information.. Compliance features are part of the Microsoft 365 security and compliance center, relevant for endpoint administrators.

Answer

Data Loss Prevention: Allows legal teams to search for content across Microsoft 365.

Answer

Sensitivity Labels: Defines how long content is kept and when it is deleted.

Question 2

Match each Microsoft 365 Apps update channel to its description.

Accepted Answer

Current Channel: Provides users with the newest features as soon as they are released by Microsoft.. Update channels control how Microsoft 365 Apps are updated, relevant for MD-102.

Answer

Current Channel: Provides users with new features twice a year, typically in January and July.

Answer

Monthly Enterprise Channel: Provides users with the newest features as soon as they are released by Microsoft.

Question 3

Match each Co-management workload to its management authority when co-managed.

Accepted Answer

Windows Update for Business: Managed by Intune. In co-management, workloads can be assigned to either Configuration Manager or Intune. Common defaults: Windows Update and Endpoint Protection to Intune; Device Configuration and Resource Access to Configuration Manager.

Answer

Windows Update for Business: Managed by Configuration Manager

Answer

Device Configuration: Managed by Intune

Question 4

Match each MDM (Mobile Device Management) enrollment method to its typical scenario.

Accepted Answer

Apple Business Manager: Used for automated enrollment of corporate-owned iOS devices with supervision.. Correct matches: Apple Business Manager automates enrollment of corporate iOS devices; Android Enterprise Work Profile supports BYOD Android with work/personal separation. Common confusions include mistaking Windows Autopilot for Android enrollment and confusing user-driven enrollment with automated methods.

Answer

Windows Autopilot: Used for enrolling corporate-owned Android devices with Zero Touch enrollment.

Answer

User-Driven Enrollment: Used for automatically enrolling devices without user interaction during setup.

Question 5

Match each Intune configuration profile type to its purpose.

Accepted Answer

Device restrictions: Controls device settings and features (e.g., camera, Bluetooth). Device restrictions manage device features, Endpoint protection handles security settings, Administrative templates use ADMX, and Custom uses OMA-URI. Common confusions involve swapping the first two.

Answer

Device restrictions: Manages security settings like antivirus and firewall

Answer

Endpoint protection: Controls device settings and features (e.g., camera, Bluetooth)

Question 6

Match each PowerShell cmdlet to its function in Microsoft 365 management.

Accepted Answer

Get-MgUser: Retrieves all users. PowerShell is used for programmatic management; these cmdlets are from Microsoft Graph PowerShell SDK.

Answer

Get-MgUser: Modifies user properties

Answer

Update-MgUser: Retrieves all users

Question 7

Match each Windows Update for Business deployment service to its capability.

Accepted Answer

Update Rings: Configures deferral periods and deadlines for updates. The correct matches are: Update Rings configures deferral periods and deadlines; Feature Update Policies specify which feature update version is offered; Quality Update Policies control which quality updates are offered. Common confusions arise from mixing the roles of these policies.

Answer

Update Rings: Controls which feature updates are offered to devices

Answer

Feature Update Policies: Configures deferral periods for quality updates

Question 8

Match each Windows 10/11 edition to its applicable Microsoft 365 feature.

Accepted Answer

Windows 10 Pro: Supports Azure AD Join and Intune MDM management. Windows 10 Pro supports Azure AD Join and Intune MDM; Windows 10 Enterprise provides full Defender for Endpoint; Windows 11 Home lacks these enterprise features. Common confusions include thinking Pro supports all security features or that Home supports Autopilot.

Answer

Windows 10 Pro: Supports full Microsoft Defender for Endpoint capabilities

Answer

Windows 11 Home: Supports Windows Autopilot self-deploying mode

Question 9

Match each Microsoft 365 Defender feature to its description.

Accepted Answer

Microsoft Defender for Endpoint: Provides endpoint detection and response (EDR) and antivirus across devices. The correct matches are: Microsoft Defender for Endpoint (endpoint protection), Microsoft Defender for Office 365 (email/collaboration protection), Microsoft Defender for Identity (on-premises threat detection via AD), and Microsoft Defender for Cloud Apps (SaaS security via CASB). The distractors swap the definitions of Endpoint and Office 365.

Answer

Microsoft Defender for Endpoint: Protects email and collaboration tools

Answer

Microsoft Defender for Office 365: Provides endpoint detection and response

Question 10

Match each Microsoft Entra ID (Azure AD) join type to its description.

Accepted Answer

Azure AD Join: Devices are joined directly to Azure AD, no on-premises AD required. Azure AD Join is cloud-only; Hybrid Azure AD Join requires on-premises AD with sync; Azure AD Registered is for personal or bring-your-own devices.

Answer

Azure AD Join: Devices are joined to on-premises AD and automatically registered with Azure AD

Answer

Azure AD Registered: Devices require on-premises AD infrastructure