How many Drag and Drop Matching Questions questions are on this page?

This page has 5 Drag and Drop Matching Questions scenario questions for the MD-102 exam, each with detailed explanations and wrong-answer analysis.

How should I approach MD-102 scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to Microsoft 365 Endpoint Administrator MD-102 questions

Scenario-based practice

Drag and Drop Matching Questions

Practise Microsoft 365 Endpoint Administrator MD-102 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

MD-102

exam code

Microsoft

vendor

Scenario guide

How to approach drag and drop matching questions

Matching questions give you two columns — concepts, commands, or protocols on the left, and their definitions or use-cases on the right. You drag each left item to its correct match. These appear on most certification exams and punish superficial memorisation.

Quick answer

Drag and Drop Matching Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1mediummatching

Full question →

Match each Microsoft 365 compliance feature to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Prevent sensitive data from being shared inappropriately

Classify and protect documents and emails with labels

Manage retention and disposal of records

Search and export content for legal investigations

Log and investigate user and admin activities

A
Data Loss Prevention: Helps prevent accidental sharing of sensitive information.
Data Loss Prevention (DLP) is correctly defined as preventing accidental sharing of sensitive information.
B
eDiscovery: Allows legal teams to search for content across Microsoft 365.
eDiscovery is correctly defined as allowing legal teams to search for content across Microsoft 365.
C
Retention Policies: Defines how long content is kept and when it is deleted.
Retention Policies are correctly defined as defining how long content is kept and when it is deleted.
D
Sensitivity Labels: Classifies and protects data based on sensitivity.
Sensitivity Labels are correctly defined as classifying and protecting data based on sensitivity.
E
Data Loss Prevention: Allows legal teams to search for content across Microsoft 365.
Why it fails: Incorrect — this describes eDiscovery, not Data Loss Prevention.
F
Sensitivity Labels: Defines how long content is kept and when it is deleted.
Why it fails: Incorrect — this describes Retention Policies, not Sensitivity Labels.

Full breakdown with real-world context →

Question 2mediummatching

Full question →

Match each Microsoft 365 Defender feature to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Endpoint detection and response (EDR) and antivirus

Protection for email and collaboration tools

Detect and investigate advanced attacks on-premises

Cloud access security broker (CASB) for SaaS apps

Identify and remediate vulnerabilities

A
Microsoft Defender for Endpoint: Provides endpoint detection and response (EDR) and antivirus across devices
Microsoft Defender for Endpoint is designed to protect endpoints with EDR and antivirus capabilities.
B
Microsoft Defender for Office 365: Protects email and collaboration tools from threats like phishing and malware
Microsoft Defender for Office 365 safeguards email and collaboration platforms against phishing and malware.
C
Microsoft Defender for Identity: Identifies and investigates advanced threats on-premises using Active Directory signals
Microsoft Defender for Identity uses AD signals to detect and investigate advanced threats in on-premises environments.
D
Microsoft Defender for Cloud Apps: Provides cloud access security broker (CASB) capabilities for SaaS applications
Microsoft Defender for Cloud Apps acts as a CASB to secure SaaS applications.
E
Microsoft Defender for Endpoint: Protects email and collaboration tools
Why it fails: Incorrect — this describes Microsoft Defender for Office 365, not Defender for Endpoint.
F
Microsoft Defender for Office 365: Provides endpoint detection and response
Why it fails: Incorrect — this describes Microsoft Defender for Endpoint, not Defender for Office 365.

Full breakdown with real-world context →

Question 3mediummatching

Full question →

Match each Microsoft 365 Apps update channel to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Monthly updates with new features first

Monthly security and quality updates

Updates twice a year (January and July)

Early access to upcoming features

Insider builds for testing

A
Current Channel: Provides users with the newest features as soon as they are released by Microsoft.
Correct: Current Channel delivers features immediately upon release.
B
Monthly Enterprise Channel: Provides users with new features on a monthly basis but with a planned release schedule.
Correct: Monthly Enterprise Channel releases features monthly on a scheduled cadence.
C
Semi-Annual Enterprise Channel: Provides users with new features twice a year, typically in January and July.
Correct: Semi-Annual Enterprise Channel updates twice yearly.
D
Current Channel: Provides users with new features twice a year, typically in January and July.
Why it fails: Incorrect: This describes Semi-Annual Enterprise Channel, not Current Channel.
E
Monthly Enterprise Channel: Provides users with the newest features as soon as they are released by Microsoft.
Why it fails: Incorrect: This describes Current Channel, not Monthly Enterprise Channel.

Full breakdown with real-world context →

Question 4mediummatching

Full question →

Match each MDM (Mobile Device Management) enrollment method to its typical scenario.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

User-owned devices enrolled with user affinity

Company-owned devices assigned to a specific user

Shared or kiosk devices not tied to a user

Zero-touch deployment for new Windows devices

Enroll multiple devices using a shared account

A
Apple Business Manager: Used for automated enrollment of corporate-owned iOS devices with supervision.
Apple Business Manager (ABM) enables organizations to automatically enroll corporate-owned iOS devices into MDM with supervision and out-of-box setup.
B
Android Enterprise Work Profile: Used for BYOD Android devices to separate work and personal data.
The Work Profile creates a separate container for work apps and data on personally-owned Android devices, preserving user privacy.
C
Windows Autopilot: Used for enrolling corporate-owned Android devices with Zero Touch enrollment.
Why it fails: Incorrect — Windows Autopilot is designed for Windows devices, not Android. Android Zero Touch is a separate enrollment method.
D
User-Driven Enrollment: Used for automatically enrolling devices without user interaction during setup.
Why it fails: Incorrect — User-Driven Enrollment requires user interaction to initiate enrollment. Automatic enrollment without user interaction describes Apple Business Manager or Windows Autopilot.

Full breakdown with real-world context →

Question 5mediummatching

Full question →

Match each Intune configuration profile type to its purpose.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Control settings like password, camera, and Bluetooth

Define rules for device health and security

Deploy custom OMA-URI or Apple Configurator settings

Configure Windows Defender Firewall and BitLocker

Group Policy-like settings for Windows devices

A
Device restrictions: Controls device settings and features (e.g., camera, Bluetooth)
Device restrictions profile manages device-level features like camera, Bluetooth, and password policies.
B
Endpoint protection: Manages security settings like antivirus and firewall
Endpoint protection profile configures Windows Defender settings, firewall, and other security features.
C
Administrative templates: Configures policy settings using ADMX templates
Administrative templates in Intune allow ADMX-based policy settings for Windows devices.
D
Custom: Allows custom OMA-URI settings
Custom configuration profile supports OMA-URI settings for non-native or advanced configurations.
E
Device restrictions: Manages security settings like antivirus and firewall
Why it fails: Incorrect — this describes Endpoint protection, not Device restrictions.
F
Endpoint protection: Controls device settings and features (e.g., camera, Bluetooth)
Why it fails: Incorrect — this describes Device restrictions, not Endpoint protection.

Full breakdown with real-world context →

These MD-102 practice questions are part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style MD-102 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.

Drag and Drop Matching Questions

How to approach drag and drop matching questions

Quick answer

Related MD-102 topic practice pages

Prepare infrastructure for devices practice questions

Protect devices practice questions

Manage and maintain devices practice questions

Manage applications practice questions

MD-102 fundamentals practice questions

MD-102 scenario practice questions

MD-102 troubleshooting practice questions

Practice scenarios

Match each Microsoft 365 compliance feature to its description.

Match each Microsoft 365 Defender feature to its description.

Match each Microsoft 365 Apps update channel to its description.

Match each MDM (Mobile Device Management) enrollment method to its typical scenario.

Match each Intune configuration profile type to its purpose.