MD-102 Prepare infrastructure for devices Practice Question
You are planning to deploy Microsoft Defender for Endpoint on Windows 10 devices managed by Intune. Which TWO prerequisites must be met before deploying?
⚠ Common exam trap
Many candidates confuse the prerequisites for Defender for Endpoint with those for other Microsoft 365 security services, mistakenly thinking Microsoft Entra ID join or Microsoft Entra ID Premium licenses are required, when in fact only an Intune enrollment and a Defender for Endpoint license are needed.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A Microsoft Defender for Endpoint license must be assigned.
Option B is correct because Microsoft Defender for Endpoint requires a valid license (e.g., Microsoft 365 E5 or a standalone Defender for Endpoint license) assigned to users before onboarding devices. Option C is correct because the scenario specifies deployment via Intune, so devices must be enrolled in Microsoft Intune to receive the onboarding configuration and policy. Option A is incorrect because Microsoft Entra ID join is not strictly required; devices can be domain-joined or workgroup-joined as long as they are Intune-enrolled and meet other requirements. Option D is incorrect because third-party antivirus does not need to be uninstalled; Defender for Endpoint can run in passive mode alongside it. Option E is incorrect because Microsoft Entra ID Premium is not a prerequisite for Defender for Endpoint deployment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Devices must be joined to Microsoft Entra ID.
Why it's wrong here
Devices can be domain-joined, workgroup, or Microsoft Entra ID-joined; Intune management is the actual requirement. Microsoft Entra ID join is needed for conditional access and co-management identity scenarios, which is why it is tempting here, but it is not a Defender for Endpoint prerequisite.
- ✓
A Microsoft Defender for Endpoint license must be assigned.
Why this is correct
Assigning a Microsoft Defender for Endpoint licence to users is mandatory, since the service activates per-user entitlement; without it, onboarding packages deploy but devices remain unlicensed and report no telemetry to the Microsoft 365 Defender portal. This satisfies the stem's prerequisite that licensing be in place before Intune deployment begins.
- ✓
Devices must be enrolled in Microsoft Intune.
Why this is correct
Devices must be enrolled in Microsoft Intune so the Defender for Endpoint onboarding configuration can be targeted and delivered. Without Intune enrolment, no management channel exists to push the onboarding package, making enrolment a prerequisite.
- ✗
Devices must have a third-party antivirus uninstalled.
Why it's wrong here
Defender for Endpoint runs alongside third-party antivirus in passive mode, so removal is unnecessary. Uninstalling competing antivirus is the correct step when enabling active real-time protection conflicts, not for onboarding, which is why this distractor appears plausible.
- ✗
An Microsoft Entra ID Premium license must be assigned.
Why it's wrong here
Defender for Endpoint onboarding requires an Intune or Configuration Manager licence and supported Windows build, not Microsoft Entra ID Premium. That licence tier governs conditional access and identity protection features, so it is the right prerequisite for those scenarios, not endpoint deployment.
Go deeper
Related to this question
Learn chapter
Implementing Windows Autopilot
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
About these practice questions
This MD-102 question is part of Courseiva's 556-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.