How many Troubleshooting Scenario Questions questions are on this page?

This page has 15 Troubleshooting Scenario Questions scenario questions for the MD-102 exam, each with detailed explanations and wrong-answer analysis.

How should I approach MD-102 scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to Microsoft 365 Endpoint Administrator MD-102 questions

Scenario-based practice

Troubleshooting Scenario Questions

Practise Microsoft 365 Endpoint Administrator MD-102 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

MD-102

exam code

Microsoft

vendor

Scenario guide

How to approach troubleshooting scenario questions

These questions describe a network symptom and ask you to identify the root cause or the correct fix. They appear across all certification exams and reward systematic thinking over memorisation. The best candidates follow a consistent troubleshooting framework even under time pressure.

Quick answer

Troubleshooting Scenario Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1hardmultiple choice

Full question →

You are troubleshooting a Windows 10 device that is enrolled in Microsoft Intune. The device shows as 'Pending' in the Intune console. The user confirms that the device was enrolled using a provisioning package. Which log file should you review to diagnose the enrollment failure?

A
%windir%\temp\MdmEnrollment.log
Why wrong: This logs MDM enrollment but not provisioning package details.
B
%ProgramData%\Microsoft\Provisioning\ProvisioningPackage.log
This log contains provisioning package enrollment details.
C
%windir%\Panther\setupact.log
Why wrong: This logs Windows setup, not provisioning.
D
Event Viewer under Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider
Why wrong: This is a provider, not a single log file.

Full breakdown with real-world context →

Question 2easymultiple choice

Full question →

A technician is troubleshooting a Windows 11 device that is enrolled in Intune. The device reports as 'Not compliant' due to missing required updates. The administrator runs the following command on the device and receives the output shown. What should the administrator do next to resolve the compliance issue?

A
Check for a policy conflict in Intune.
Why wrong: The issue is a pending restart, not a policy conflict.
B
Run a manual sync from the Company Portal app.
Why wrong: Sync will not complete the update installation; a restart is required.
C
Verify network connectivity to Microsoft Update.
Why wrong: Connectivity is not indicated as a problem.
D
Restart the device.
A pending restart is blocking the updates from completing.

Full breakdown with real-world context →

Question 3easymultiple choice

Full question →

You have created the above custom policy but it fails to apply on Windows 10 devices. What is the most likely reason?

Exhibit

Refer to the exhibit.

{
  "@odata.type": "#microsoft.graph.windows10CustomConfiguration",
  "omaSettings": [
    {
      "@odata.type": "#microsoft.graph.omaSettingString",
      "displayName": "Custom ADMX setting",
      "description": "Enables feature XYZ",
      "omaUri": "./Device/Vendor/MSFT/Policy/Config/ADMX_Custom/Policy_XYZ",
      "value": "1"
    }
  ]
}

A
The value must be an integer, not a string.
Why wrong: The setting is defined as a string in the JSON.
B
The OMA-URI targets the user, not the device.
Why wrong: The URI starts with './Device', so it targets the device.
C
Custom configuration policies are not supported on Windows 10.
Why wrong: Custom policies are supported.
D
The OMA-URI path is incorrect for an ADMX-backed policy.
ADMX policies require a specific URI format that includes the category path.

Full breakdown with real-world context →

Question 4mediumdrag order

Full question →

Arrange the steps to troubleshoot a Windows 10 device failing to enroll in Microsoft Intune.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 5mediumdrag order

Full question →

Arrange the steps to troubleshoot a BitLocker recovery key prompt on a Windows 10 device.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 6mediummultiple choice

Full question →

A user reports that their Windows 11 device fails to enroll in Microsoft Intune. The device is Microsoft Entra joined and the user has a valid Intune license. What should you check first?

A
Verify that BitLocker is enabled on the device.
Why wrong: BitLocker does not affect enrollment.
B
Check the Enrollment Status Page (ESP) profile configuration in Intune.
ESP profiles can cause enrollment failures if they are not configured correctly or if they are blocked.
C
Ensure that the device has a local administrator password set.
Why wrong: A local admin password is not required for enrollment.
D
Review the Windows Autopilot deployment profile assigned to the device.
Why wrong: Autopilot profiles are used for initial provisioning, not for enrollment after the device is already joined.

Full breakdown with real-world context →

Question 7hardmultiple choice

Full question →

You are troubleshooting an iPhone that cannot enroll in Microsoft Intune. The user receives an error stating 'This device is already enrolled in another MDM.' What is the most likely cause?

A
The device is already enrolled in Apple Business Manager or another MDM.
Apple devices can only be enrolled in one MDM at a time. The device must be removed from the other MDM first.
B
The device has a VPN configuration installed.
Why wrong: VPN configuration does not block MDM enrollment.
C
The device is not running the latest iOS version.
Why wrong: iOS version does not cause this specific error.
D
The user's license is expired.
Why wrong: License expiration would not produce this specific error.

Full breakdown with real-world context →

Question 8hardmultiple choice

Read the full wireless explanation →

A company uses Microsoft Intune to manage Windows 10 devices. Users report that after a recent update, some devices are unable to connect to the corporate Wi-Fi network. The Wi-Fi profile is deployed via Intune. Which troubleshooting step should you take first?

A
Recreate the Wi-Fi profile in Intune with new settings
Why wrong: May not solve the issue and could be unnecessary.
B
Run the 'netsh wlan show profiles' command on affected devices
Why wrong: Requires physical access and is not the first step.
C
Check the Intune console for Wi-Fi profile assignment and conflict status
Directly shows profile deployment and conflicts.
D
Review Microsoft Entra ID sign-in logs for authentication failures
Why wrong: Wi-Fi profile deployment is separate from authentication.

Full breakdown with real-world context →

Question 9hardmultiple choice

Full question →

You are troubleshooting a Windows 10 device that is not receiving Intune policies. The device is enrolled and shows as 'Active' in the Intune admin center. You run the Get-MgDeviceManagementManagedDevice cmdlet and the device's managementAgent is 'mdm'. Which of the following is the most likely cause of the issue?

A
The device is co-managed and the workload is set to Configuration Manager.
Why wrong: The managementAgent is 'mdm', not 'ccm'.
B
The device's enrollment certificate has expired.
Why wrong: If the certificate expired, the device would show as 'Not enrolled'.
C
The device's last sync time is more than 24 hours ago.
A device that has not synced recently will not receive new policies.
D
The device is retired from Intune.
Why wrong: The device shows as 'Active', not 'Retired'.

Full breakdown with real-world context →

Question 10hardmultiple choice

Full question →

You are troubleshooting an Intune enrollment issue on a Windows 10 device. The device is Microsoft Entra joined, but the enrollment status shows 'Pending'. What is the most likely cause?

A
The device is not compliant with a conditional access policy.
Why wrong: Compliance is checked after enrollment, not during.
B
The device does not have BitLocker enabled.
Why wrong: BitLocker is not a prerequisite for enrollment.
C
The Enrollment Status Page (ESP) profile is not assigned to the device.
ESP profiles can cause the enrollment to hang in 'Pending' if not configured or if there is a timeout.
D
The MDM authority is not set to Intune.
Why wrong: If MDM authority were incorrect, enrollment would likely fail entirely, not show 'Pending'.

Full breakdown with real-world context →

Question 11mediummulti select

Full question →

Which TWO troubleshooting steps should you take when a Windows 11 device fails to enroll in Intune with error code 0x80180014?

A
Ensure that the device is in the correct enrollment profile group.
Why wrong: Enrollment profile is for automatic enrollment, not for this error.
B
Recreate the device compliance policy.
Why wrong: Compliance policy is not related to enrollment.
C
Check if the device is already enrolled in another MDM provider.
Device might be already enrolled elsewhere.
D
Verify that the user has an appropriate Intune license assigned.
User needs an Intune license.
E
Check if the device has TPM 2.0 enabled.
Why wrong: TPM is not related to this error.

Full breakdown with real-world context →

Question 12hardmultiple choice

Full question →

You are troubleshooting a Windows 11 device that fails to receive a PowerShell script deployed via Intune. The script is assigned to a group containing the device. Other policies on the device apply successfully. What should you check first?

A
Ensure the device has internet connectivity.
Why wrong: Network issues would affect all policies.
B
Check the Windows PowerShell execution policy on the device.
PowerShell scripts require the execution policy to be set to allow scripts.
C
Check that the script is digitally signed.
Why wrong: Script signing is required if the execution policy is restricted.
D
Verify that the device is in the correct security group.
Why wrong: Group assignment is correct.

Full breakdown with real-world context →

Question 13mediummulti select

Full question →

You are troubleshooting an Intune-managed Windows 10 device that is not receiving a required application. Which THREE steps should you take to diagnose the issue? (Choose three.)

A
Ensure the device has network connectivity
The device must be able to reach Intune to download the app.
B
Review the app requirement rules (e.g., OS version)
If requirements are not met, the app will not install.
C
Check the app assignment status in the Intune console
Assignment status shows if the app is intended for the device.
D
Verify the device is compliant with compliance policies
Why wrong: Compliance does not block app installation.
E
Perform a factory reset on the device
Why wrong: Reset is not a diagnostic step.

Full breakdown with real-world context →

Question 14hardmultiple choice

Full question →

You are troubleshooting a Windows 11 device that fails to install an Intune-managed update. The device has been offline for two weeks. After reconnecting, the update does not install. In the Intune console, the update shows 'Failed to install' with error code 0x800f0831. What is the most likely cause?

A
The device does not have internet connectivity.
Why wrong: The device is reconnected.
B
The device's Windows component store is corrupted due to missing prerequisites.
Being offline for a long time can cause prerequisite issues, leading to this error.
C
The device does not have enough disk space.
Why wrong: Error code 0x800f0831 is not related to disk space.
D
The update is superseded and no longer applicable.
Why wrong: Superseded updates would not show as 'Failed to install'.

Full breakdown with real-world context →

Question 15mediummulti select

Full question →

You are troubleshooting a Windows 11 device that fails to install a required Win32 app deployed via Intune. Which THREE logs or locations should you review?

A
Windows Update log (C:\Windows\WindowsUpdate.log)
Why wrong: This log is for Windows updates, not Win32 apps.
B
Intune Management Extension logs in %ProgramData%\Microsoft\IntuneManagementExtension\Logs
These logs detail app installation attempts.
C
The IntuneManagementExtension.log file in the agent directory.
This log contains detailed error information.
D
Windows Registry under HKLM\Software\Microsoft\Intune
Why wrong: Registry keys store configuration, not logs.
E
Windows Event Logs under Applications and Services Logs > Microsoft > Windows > AppLocker
AppLocker logs may show blocked executions.

Full breakdown with real-world context →

These MD-102 practice questions are part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style MD-102 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.

Troubleshooting Scenario Questions

How to approach troubleshooting scenario questions

Quick answer

Related MD-102 topic practice pages

Prepare infrastructure for devices practice questions

Manage and maintain devices practice questions

Manage applications practice questions

Protect devices practice questions

Deploy Windows client practice questions

Manage identity and compliance practice questions

Manage, maintain, and protect devices practice questions

MD-102 fundamentals practice questions

MD-102 scenario practice questions

MD-102 troubleshooting practice questions

Practice scenarios

You are troubleshooting a Windows 10 device that is enrolled in Microsoft Intune. The device shows as 'Pending' in the Intune console. The user confirms that the device was enrolled using a provisioning package. Which log file should you review to diagnose the enrollment failure?

You have created the above custom policy but it fails to apply on Windows 10 devices. What is the most likely reason?

Exhibit

Arrange the steps to troubleshoot a Windows 10 device failing to enroll in Microsoft Intune.

Arrange the steps to troubleshoot a BitLocker recovery key prompt on a Windows 10 device.

A user reports that their Windows 11 device fails to enroll in Microsoft Intune. The device is Microsoft Entra joined and the user has a valid Intune license. What should you check first?

You are troubleshooting an iPhone that cannot enroll in Microsoft Intune. The user receives an error stating 'This device is already enrolled in another MDM.' What is the most likely cause?

A company uses Microsoft Intune to manage Windows 10 devices. Users report that after a recent update, some devices are unable to connect to the corporate Wi-Fi network. The Wi-Fi profile is deployed via Intune. Which troubleshooting step should you take first?

You are troubleshooting an Intune enrollment issue on a Windows 10 device. The device is Microsoft Entra joined, but the enrollment status shows 'Pending'. What is the most likely cause?

Which TWO troubleshooting steps should you take when a Windows 11 device fails to enroll in Intune with error code 0x80180014?

You are troubleshooting a Windows 11 device that fails to receive a PowerShell script deployed via Intune. The script is assigned to a group containing the device. Other policies on the device apply successfully. What should you check first?

You are troubleshooting an Intune-managed Windows 10 device that is not receiving a required application. Which THREE steps should you take to diagnose the issue? (Choose three.)

You are troubleshooting a Windows 11 device that fails to install a required Win32 app deployed via Intune. Which THREE logs or locations should you review?