Match each Microsoft Entra ID (Azure AD) join type to its description.
Drag a concept onto its matching description — or click a concept then click the description.
Personal devices with work account access
Devices owned by organization, cloud-only
Devices joined to on-premises AD and Azure AD
Hybrid join with automatic device enrollment
Hybrid join using federation services
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Azure AD Join: Devices are joined directly to Azure AD, no on-premises AD required
Azure AD Join is cloud-only; Hybrid Azure AD Join requires on-premises AD with sync; Azure AD Registered is for personal or bring-your-own devices.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Azure AD Join: Devices are joined directly to Azure AD, no on-premises AD required
Why this is correct
Azure AD Join allows devices to be managed via Intune without on-premises dependencies.
Azure AD Registered: Devices are registered with Azure AD, typically personal devices
Why this is correct
Azure AD Registration provides single sign-on to cloud resources without joining the device to a domain.
Hybrid Azure AD Join: Devices joined to on-premises AD and also registered with Azure AD, require AD sync
Why this is correct
Hybrid Azure AD Join extends on-premises identities to Azure AD for conditional access.
Azure AD Join: Devices are joined to on-premises AD and automatically registered with Azure AD
Why it's wrong here
This describes Hybrid Azure AD Join, not Azure AD Join.
Azure AD Registered: Devices require on-premises AD infrastructure
Why it's wrong here
Azure AD Registered devices do not require on-premises AD; this describes Hybrid Azure AD Join.
Go deeper
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
Key term
Hybrid Azure AD join
Hybrid Azure AD join is a Microsoft identity configuration that registers on-premises domain-joined devices with Azure Active Directory (Azure AD) to enable single sign-on and access to both on-premises and cloud resources.
About these practice questions
This MD-102 question is part of Courseiva's 942-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.