MD-102 Prepare infrastructure for devices Practice Question
You are designing the Windows Autopilot deployment profile for a new subsidiary that has no on-premises infrastructure. All devices will be Microsoft Entra joined. The security team requires that during the out-of-box experience (OOBE), users authenticate with their Microsoft Entra credentials and that local administrator rights are not granted to the primary user. You also want to minimize the time spent at OOBE. Which deployment mode should you select in the Autopilot profile?
⚠ Common exam trap
The trap here is assuming that self-deploying mode authenticates users; it actually uses the device identity and is intended for shared or kiosk devices.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
User-driven mode with Microsoft Entra join
User-driven mode with Microsoft Entra join allows the user to sign in with their Microsoft Entra credentials during OOBE, satisfying the authentication requirement. It does not grant local administrator rights by default, aligning with the security policy. The absence of on-premises infrastructure rules out hybrid join, and self-deploying mode skips user authentication, while pre-provisioning is unnecessary for the stated goals.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra hybrid join with user-driven mode
Why it's wrong here
Microsoft Entra hybrid join requires an on-premises Active Directory domain and a connector, which the subsidiary does not have. The scenario explicitly states there is no on-premises infrastructure, so hybrid join is not possible. User-driven mode with Microsoft Entra join is the appropriate choice.
- ✓
User-driven mode with Microsoft Entra join
Why this is correct
User-driven mode with Microsoft Entra join prompts the user to sign in with their Microsoft Entra credentials during OOBE, which meets the requirement for authentication. It does not automatically grant local administrator rights unless you explicitly configure the user as a local admin in the profile, so the security requirement is satisfied. This mode also streamlines OOBE by applying device settings and apps automatically after sign-in.
- ✗
Pre-provisioning with white glove
Why it's wrong here
Pre-provisioning (white glove) is intended to reduce the time users spend at OOBE by allowing an IT administrator to perform the initial device setup ahead of time. However, the user still authenticates at first sign-in, but the scenario does not require the pre-provisioning step, and it adds complexity. The primary requirement is user authentication at OOBE without local admin rights, which is already met by user-driven mode.
- ✗
Self-deploying mode
Why it's wrong here
Self-deploying mode is designed for devices without a primary user, such as kiosks or shared devices. It does not prompt for user authentication during OOBE; instead, it joins the device to Microsoft Entra ID using the device identity. Because the scenario requires users to authenticate with their Microsoft Entra credentials, this mode does not meet the requirement.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Autopilot
Autopilot is a Microsoft cloud-based deployment technology that automates the setup and configuration of new Windows devices, reducing manual IT effort and enabling users to be productive from the first boot.
Key term
Deployment profile
A deployment profile is a set of configuration settings and policies that IT administrators apply to enroll and configure devices in an organization, automating the setup process.
About these practice questions
Courseiva writes every MD-102 question from scratch — 556 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.