MD-102 Prepare infrastructure for devices Practice Question
You administer Microsoft Intune for a company with 2,000 Windows 11 devices. The security team requires that all devices automatically receive an Intune enrollment record when they are first powered on by end users, without requiring users to manually enroll. You have already configured a Windows Autopilot deployment profile and assigned it to a device group. Which additional configuration is required to meet the requirement?
⚠ Common exam trap
The trap here is assuming that an Autopilot deployment profile alone triggers Intune enrollment, when actually automatic enrollment in Microsoft Entra ID must be configured separately.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure automatic enrollment in Microsoft Entra ID for Windows devices.
Automatic enrollment in Microsoft Entra ID is the tenant-level setting that allows Windows devices to enroll in Intune automatically when they join or register in Microsoft Entra ID. For Autopilot, this must be enabled so that devices create an Intune record without user intervention. The other options do not enable automatic enrollment; they are either unrelated features or incorrect assignment methods.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable the Enrollment Status Page (ESP) in the Autopilot profile.
Why it's wrong here
The Enrollment Status Page provides progress feedback during enrollment and can block device use until required apps and policies are applied, but it does not trigger automatic Intune enrollment. It is a user experience feature, not an enrollment mechanism.
- ✗
Assign the Autopilot deployment profile to a user group instead of a device group.
Why it's wrong here
Autopilot deployment profiles are assigned to device groups, not user groups. Assigning to a user group would not apply the profile correctly. The requirement is about automatic enrollment, which is controlled by tenant-level automatic enrollment settings, not by profile assignment scope.
- ✗
Create a device configuration profile that enables the Intune Management Extension.
Why it's wrong here
The Intune Management Extension is used for PowerShell scripts and Win32 apps, not for automatic enrollment. Enabling it does not cause devices to enroll in Intune; it only extends management capabilities after enrollment. This setting is irrelevant to the requirement of automatic enrollment during Autopilot.
- ✓
Configure automatic enrollment in Microsoft Entra ID for Windows devices.
Why this is correct
Automatic enrollment in Microsoft Entra ID ensures that when an Autopilot device joins or registers in Microsoft Entra ID, it is automatically enrolled in Intune without user action. This setting is found in the Microsoft Intune admin center under Devices > Enroll devices > Automatic enrollment, or in Microsoft Entra ID. Without it, even with an Autopilot profile, devices may not create an Intune enrollment record automatically.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
Windows Autopilot
Windows Autopilot is a cloud-based deployment technology that automates the setup and configuration of new Windows devices, reducing the need for IT staff to manually image or touch each machine.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.