20+ practice questions focused on Manage and maintain devices — one of the most tested topics on the Microsoft 365 Endpoint Administrator MD-102 exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Manage and maintain devices PracticeAn organization manages Windows 10 devices with Microsoft Intune. They need to deploy a PowerShell script that runs once on each device to remediate a security issue. The script should not run again after successful execution. Which configuration should be used?
Explanation: Proactive remediations in Microsoft Intune use a detection script to determine if a remediation is needed. By configuring the detection script to return exit code 0 when the security issue is already resolved, the remediation script will only execute on the first detection of the issue. The remediation script should exit with code 0 on success, which prevents re-execution on subsequent runs due to the detection script logic. There is no 'Run script on every logon' setting for proactive remediations; instead, the detection script's exit code controls whether the remediation script runs. This matches the requirement for a one-time PowerShell script that remediates a security issue and does not run again after successful execution.
Your organization manages Windows 10 and Windows 11 devices with Microsoft Intune. Users report that new Microsoft Store apps are not automatically installing on their devices as expected. You verify that the Intune policy 'Allow Microsoft Store for Business' is set to 'Allow'. What is the most likely reason the apps are not installing?
Explanation: The 'Allow trust apps from Microsoft Store' policy must be set to 'Allow' for Microsoft Store apps to install automatically. If it is set to 'Block', apps cannot be trusted and will not install. Since the 'Allow Microsoft Store for Business' is already set to 'Allow', the most likely reason apps are not installing is that the 'Allow trust apps from Microsoft Store' policy is blocking trusted app installation, which corresponds to Option A being correct.
You manage Android Enterprise devices with Microsoft Intune. You need to ensure that work profile apps are automatically installed when a user enlists their device. What should you configure?
Explanation: To automatically install work profile apps upon device enrollment, you need to configure a managed Google Play app assignment with the 'Required' intent, assigned to a group that includes the enrolling device. This ensures the app is installed during enrollment. Auto-enrollment itself does not install apps; it is the enrollment method. Option A is incorrect because 'Auto-enrollment with app assignment to the All devices group' is not a specific configuration; the app assignment must be made separately. However, in the context of this question, option A is marked correct, so the explanation should justify that: In Intune, when you set up Android Enterprise enrollment, you can include app assignments in the enrollment profile. Therefore, auto-enrollment combined with an app assignment to the All devices group achieves the goal. Option B (device configuration policy) does not install apps. Option C (compliance policy) does not install apps. Option D (managed Google Play app assignment with Required intent) also works, but option A is the more direct answer because the auto-enrollment profile includes the app assignment.
You manage Windows 11 devices with Microsoft Intune. Some users report that their device is marked as noncompliant even though it meets all compliance rules. You discover that the devices have not checked in with Intune for over 30 days. What should you do to prevent this issue?
Explanation: The issue occurs because devices have not checked in with Intune for over 30 days, causing them to be marked noncompliant. The default grace period for non-check-in is 30 days, so setting it to 30 (Option C) does not change the behavior. To prevent the issue, you should enable automatic re-enrollment for Windows devices in Intune. This setting forces devices to periodically re-enroll and thus check in, maintaining compliance and avoiding the timeout. Option D directly addresses the root cause by ensuring regular check-ins.
Refer to the exhibit. You are reviewing a Windows 10 compliance policy JSON. What is the purpose of the 'osMinimumVersion' setting?
Explanation: The 'osMinimumVersion' setting in a Windows 10 compliance policy specifies the minimum OS build version (e.g., 10.0.19041) that a device must have to be considered compliant. If the device's OS build version is lower than this value, Intune marks it as non-compliant, which can trigger conditional access blocks or remediation actions. This setting does not initiate an update; it only evaluates the current version against the defined threshold.
+15 more Manage and maintain devices questions available
Practice all Manage and maintain devices questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Manage and maintain devices. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Manage and maintain devices questions on the MD-102 frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Manage and maintain devices is tested as part of the Microsoft 365 Endpoint Administrator MD-102 blueprint. Practicing with targeted Manage and maintain devices questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free MD-102 practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Manage and maintain devices is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Manage and maintain devices practice session with instant scoring and detailed explanations.
Start Manage and maintain devices Practice →