MD-102 Manage and maintain devices Practice Question
Which THREE conditions must be met for a Windows 10 device to be co-managed with Microsoft Intune and Microsoft Configuration Manager? (Choose three.)
⚠ Common exam trap
Test-takers frequently think hybrid Microsoft Entra ID join is mandatory (Option D), but Microsoft actually allows either Microsoft Entra ID join or hybrid Microsoft Entra ID join, and they confuse the Intune Management Extension (Option E) as a prerequisite when it is automatically installed post-enrollment for specific app deployment scenarios.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The device must be enrolled in Microsoft Intune.
Option A is correct because co-management requires the device to be enrolled in Microsoft Intune, which provides the MDM channel and enables the Intune workload authority alongside Configuration Manager. Option B is correct because the Configuration Manager client must be installed on the device so that the Configuration Manager channel and its workloads can function. Option C is correct because the device must be Microsoft Entra ID joined or hybrid Microsoft Entra ID joined to establish the identity and authentication needed for Intune enrollment and co-management. Option D is not required because hybrid Microsoft Entra ID join is only one of the acceptable identity states; Microsoft Entra ID join alone also satisfies the requirement. Option E is not required because the Intune Management Extension is only needed for specific workloads such as PowerShell scripts and Win32 apps, not as a baseline condition for co-management.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The device must be enrolled in Microsoft Intune.
Why this is correct
Co-management requires the device to be enrolled in Microsoft Intune, establishing the MDM authority alongside Configuration Manager's client agent. Without Intune enrolment, workloads cannot be shifted between the two services, so this condition directly satisfies the stem's requirement for simultaneous management by both tools.
- ✓
The device must have the Configuration Manager client installed.
Why this is correct
Co-management requires the Configuration Manager client present on the device, since Configuration Manager cannot manage a Windows 10 device without it. This satisfies the stem's condition that both authorities manage the same device; Intune enrolment alone is insufficient without the client agent installed.
- ✓
The device must be Microsoft Entra ID joined or hybrid Microsoft Entra ID joined.
Why this is correct
Co-management demands a Microsoft Entra ID identity for the device, either Microsoft Entra joined or hybrid Microsoft Entra joined, so Intune can target and authenticate it. This satisfies the stem's identity condition; domain-only or workgroup devices cannot be co-managed.
- ✗
The device must be hybrid Microsoft Entra ID joined.
Why it's wrong here
Co-management requires only Microsoft Entra hybrid join or workplace join plus Intune enrolment; hybrid Microsoft Entra ID join is one valid path, not a mandatory condition. It is tempting because many co-management deployments do use hybrid join, but domain-joined devices enrolled directly also qualify.
- ✗
The device must have the Intune Management Extension installed.
Why it's wrong here
Co-management requires the Configuration Manager client and Intune enrolment; the Intune Management Extension is only needed for specific workloads such as PowerShell scripts and Win32 apps. It is tempting because it does appear on co-managed devices, but its presence is a consequence of workload configuration, not a prerequisite.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
MDM
MDM stands for Mobile Device Management, a technology that allows IT administrators to securely manage, monitor, and enforce policies on mobile devices like smartphones and tablets from a central console.
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
About these practice questions
This MD-102 question is part of Courseiva's 556-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.