Courseiva

MD-102 · topic practice

Prepare infrastructure for devices practice questions

Practise Microsoft 365 Endpoint Administrator MD-102 Prepare infrastructure for devices practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security
20 questionsDomain: Prepare infrastructure for devices
Practice 10 questionsBrowse domain →

What the exam tests

What to know about Prepare infrastructure for devices

Prepare infrastructure for devices questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Prepare infrastructure for devices exam traps

  • ▸Answering from memory before reading the full scenario.
  • ▸Missing a constraint such as cost, availability, security, scope or command context.
  • ▸Choosing a broad answer when the question asks for the most specific fix.
  • ▸Ignoring why the wrong options are tempting.

Practice set

Prepare infrastructure for devices questions

20 questions · select your answer, then reveal the explanation

Question 1easymultiple choice
Read the full Prepare infrastructure for devices explanation →

Users have iOS/iPadOS devices enrolled in Intune. You need to ensure that corporate data in managed apps is encrypted at rest. What should you configure?

Question 2hardmultiple choice
Read the full Prepare infrastructure for devices explanation →

Refer to the exhibit. You are configuring a device compliance policy in Microsoft Intune for Windows devices. Based on the JSON configuration, what will happen if a device does not have a password set?

Exhibit

{
  "displayName": "Windows Device Compliance Policy",
  "scheduledActionsForRule": [
    {
      "ruleName": "Password",
      "scheduledActionConfigurations": [
        {
          "actionType": "block",
          "gracePeriodHours": 24
        },
        {
          "actionType": "retire",
          "gracePeriodHours": 72
        }
      ]
    }
  ],
  "passwordRequired": true,
  "passwordMinimumLength": 6
}
Question 3hardmultiple choice
Read the full Prepare infrastructure for devices explanation →

Refer to the exhibit. A PowerShell command is used to create a device category in Microsoft Intune. After running the command, you want to automatically assign devices to this category based on their Azure AD group membership. How should you configure this?

Exhibit

New-IntuneDeviceCategory -Name "Sales" -Description "Sales department devices"
Question 4mediummultiple choice
Read the full Prepare infrastructure for devices explanation →

You are planning the enrollment of 500 Android Enterprise personally-owned work profile devices. Management requires that users must not be able to remove the work profile from their device. Which enrollment method should you use?

Question 5mediummultiple choice
Read the full Prepare infrastructure for devices explanation →

You are troubleshooting a Windows 10 device that fails to install a required application from Microsoft Intune. The device shows the application as 'Enforced' but never installs. The application is a line-of-business (LOB) app. What should you check first?

Question 6hardmultiple choice
Read the full Prepare infrastructure for devices explanation →

You are troubleshooting an issue where users report that they cannot install required line-of-business (LOB) apps from Microsoft Intune Company Portal on their Windows 10 devices. The apps are assigned as 'Required' to a dynamic device group. You verify that the devices are enrolled and compliant. What is the most likely cause of the failure?

Question 7mediummulti select
Read the full Prepare infrastructure for devices explanation →

You need to configure device compliance policies in Microsoft Intune for Windows 10 devices. Which THREE settings can you include in a compliance policy? (Choose three.)

Question 8mediummultiple choice
Read the full Prepare infrastructure for devices explanation →

You have deployed the above compliance policy in Microsoft Intune. A Windows 10 device running version 10.0.19042.0 is marked as noncompliant. You verify that the device meets all password, encryption, firewall, and Defender requirements. What is the most likely reason for noncompliance?

Exhibit

Refer to the exhibit.
{
  "@odata.type": "#microsoft.graph.windows10CompliancePolicy",
  "description": "Compliance policy for Windows 10 devices",
  "passwordRequired": true,
  "passwordMinimumLength": 6,
  "passwordRequiredType": "deviceDefault",
  "osMinimumVersion": "10.0.19041.0",
  "osMaximumVersion": "10.0.22621.0",
  "storageRequireEncryption": true,
  "activeFirewallRequired": true,
  "defenderEnabled": true,
  "defenderVersion": "1.0.0.0"
}
Question 9mediummulti select
Read the full Prepare infrastructure for devices explanation →

Your organization is planning to use Microsoft Intune for Windows device management. Which TWO components are required for a successful Windows Autopilot deployment?

Question 10easymultiple choice
Read the full Prepare infrastructure for devices explanation →

You need to enroll macOS devices into Microsoft Intune. What is the required enrollment method?

Question 11hardmultiple choice
Read the full Prepare infrastructure for devices explanation →

You are the endpoint administrator for Contoso Ltd., a multinational company with 10,000 Windows 10 and 11 devices managed by Microsoft Intune. The company recently acquired a subsidiary that uses on-premises Active Directory and Configuration Manager. The subsidiary's devices are not joined to Microsoft Entra ID. Your goal is to migrate these devices to cloud management with Intune within six months. The subsidiary has 2,000 devices, all running Windows 10. The devices are currently domain-joined and managed by ConfigMgr. You need to choose the most efficient migration strategy that minimizes user disruption and leverages existing investments. The subsidiary has a high-speed WAN link to the corporate network. You have the following options: A) Use ConfigMgr to deploy a task sequence that performs a wipe-and-load with Windows Autopilot, then enroll in Intune. B) Use ConfigMgr co-management with Intune, then gradually transition workloads to Intune, and finally switch devices to Entra ID join. C) Use a provisioning package (PPKG) to join devices to Entra ID and enroll in Intune, while keeping ConfigMgr client for legacy apps. D) Use Windows Autopilot for existing devices by uploading hardware hashes, resetting devices, and re-provisioning. Which option should you choose?

Question 12mediummultiple choice
Read the full Prepare infrastructure for devices explanation →

You are the endpoint administrator for a healthcare organization that uses Intune to manage 500 iOS devices used by clinicians. The devices are enrolled as corporate-owned, user-approved devices via Apple Business Manager (ABM). You need to deploy a new custom electronic health record (EHR) app that is not in the App Store. The app is distributed as an .ipa file signed with an enterprise certificate. The app must be installed silently without user interaction. The devices are supervised and managed with iOS MDM. You have the following options: A) Deploy the app as an iOS LOB app in Intune and assign to device groups. B) Deploy the app as a Volume Purchase Program (VPP) app. C) Use Apple Configurator to sideload the app via USB. D) Distribute the app via a web link to the .ipa hosted on a public CDN. Which option should you choose?

Question 13easymultiple choice
Read the full Prepare infrastructure for devices explanation →

You need to prepare on-premises Windows devices for a migration to Microsoft Intune. Which tool should you use to generate a configuration package that can be deployed via Group Policy or manual installation?

Question 14mediummultiple choice
Read the full Prepare infrastructure for devices explanation →

Your organization plans to deploy Windows 11 devices using Windows Autopilot. You need to ensure that each device is automatically enrolled in Intune and receives a custom configuration profile during the out-of-box experience (OOBE). Which two components are required?

Question 15mediummulti select
Read the full Prepare infrastructure for devices explanation →

Which THREE are valid methods to prepare an existing Windows 10 device for Intune management? (Select THREE.)

Question 16mediummulti select
Read the full Prepare infrastructure for devices explanation →

Which TWO actions should you take to prepare a Windows 10 device for a deployment using Windows Autopilot?

Question 17mediummultiple choice
Read the full Prepare infrastructure for devices explanation →

Refer to the exhibit. A Microsoft Intune security baseline is configured for Windows 10 devices. What is the effect of this setting?

Exhibit

{
  "displayName": "Windows 10 Security Baseline",
  "settings": [
    {
      "settingInstance": {
        "@odata.type": "#microsoft.graph.deviceManagementConfigurationSettingInstance",
        "settingDefinitionId": "device_vendor_msft_policy_config_windowsdefender_scan_enablelowcpupriority",
        "settingInstanceTemplateReference": null,
        "choiceSettingInstance": {
          "choiceSettingValue": {
            "value": "device_vendor_msft_policy_config_windowsdefender_scan_enablelowcpupriority_1",
            "children": []
          }
        }
      }
    }
  ]
}
Question 18mediummultiple choice
Read the full Prepare infrastructure for devices explanation →

Your organization has Windows 11 devices used by remote employees. You need to ensure that only devices compliant with your security policies can access corporate email via Microsoft Outlook for Windows. What should you configure?

Question 19hardmultiple choice
Read the full Prepare infrastructure for devices explanation →

You are deploying Windows 10 to 500 new devices using a task sequence in Microsoft Configuration Manager. The devices need to be joined to Microsoft Entra ID and enrolled in Intune automatically during OSD. Which method should you use?

Question 20easymultiple choice
Read the full Prepare infrastructure for devices explanation →

Your company is deploying Windows 11 devices using Windows Autopilot. You need to ensure that during the first boot, the device automatically joins Microsoft Entra ID, enrolls in Intune, and installs required applications. What should you provide to the device?

Continue with 20-question session →

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Sign up freeLog in

Focused Prepare infrastructure for devices sessions

Start a Prepare infrastructure for devices only practice session

Every question in these sessions is drawn from the Prepare infrastructure for devices domain — nothing else.

10 questions20 questions30 questions50 questions
Browse all Prepare infrastructure for devices questions →Mixed MD-102 session

Related practice questions

Related MD-102 topic practice pages

Move into related areas when this topic feels solid.

Prepare infrastructure for devices practice questions

Sharpen your MD-102 knowledge of Prepare infrastructure for devices.

Manage and maintain devices practice questions

Sharpen your MD-102 knowledge of Manage and maintain devices.

Manage applications practice questions

Work through MD-102 questions on Manage applications.

Protect devices practice questions

Targeted MD-102 practice covering Protect devices.

MD-102 fundamentals practice questions

MD-102 fundamentals practice questions for MD-102.

MD-102 scenario practice questions

Work through MD-102 questions on MD-102 scenario.

MD-102 troubleshooting practice questions

Practise MD-102 questions linked to MD-102 troubleshooting.

Frequently asked questions

What does the MD-102 exam test about Prepare infrastructure for devices?
Prepare infrastructure for devices questions test whether you can apply the concept in context, not just recognise a definition.
How should I use these practice questions?
Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Prepare infrastructure for devices questions in a focused session?
Yes — the session launcher on this page draws every question from the Prepare infrastructure for devices domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other MD-102 topics?
Use the topic links above to move to related areas, or go back to the MD-102 question bank to see all topics.
Are these real exam questions or dumps?
These are original practice questions written to test the same concepts the MD-102 exam covers. They are not copied from any real exam or dump site.