MD-102 Prepare infrastructure for devices Practice Question
You are the endpoint administrator for Contoso, Ltd. The company uses Microsoft Intune and has a hybrid Microsoft Entra ID environment with an on-premises Active Directory Domain Services (AD DS) domain. You plan to deploy 200 new Windows 11 devices using Windows Autopilot. The devices must be joined to the on-premises AD DS domain and also registered in Microsoft Entra ID. You need to configure the Autopilot deployment profile to support this scenario. What should you do first?
⚠ Common exam trap
The trap here is assuming that assigning an Autopilot profile to a user group automatically configures hybrid join, when in fact the join type must be explicitly set in the deployment profile.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure the deployment profile to use Microsoft Entra hybrid join and ensure the device has a line of sight to a domain controller.
For Windows Autopilot hybrid Microsoft Entra join, the deployment profile must be configured to use Microsoft Entra hybrid join, and the device must have network connectivity to a domain controller during deployment. This allows the device to be joined to on-premises AD DS and registered in Microsoft Entra ID. Simply assigning the profile or using user-driven mode without the hybrid join setting does not meet the requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Assign the Autopilot deployment profile to a user group and configure the profile to use "User-driven" mode.
Why it's wrong here
Assigning to a user group and using user-driven mode are valid settings, but they do not address the hybrid join requirement. User-driven mode allows the end user to complete the out-of-box experience, but without specifying hybrid join, the device will not join on-premises AD DS. This option misses the core need to configure the join type, so it is incorrect.
- ✗
Create an Autopilot deployment profile with the "Convert all targeted devices to Autopilot" option enabled.
Why it's wrong here
The "Convert all targeted devices to Autopilot" option is used to automatically register existing devices with the Autopilot service, not to configure the join type for new devices. It does not control whether the device joins on-premises AD DS. Enabling this option would not satisfy the hybrid join requirement and could lead to unexpected registrations of existing devices, which is not the goal here.
- ✗
Configure the deployment profile to use Microsoft Entra join and assign the profile to a device group.
Why it's wrong here
Microsoft Entra join alone does not meet the requirement of joining the device to on-premises AD DS. It would register the device only in Microsoft Entra ID. While assigning a profile to a device group is necessary for deployment, it does not address the hybrid join requirement. The scenario explicitly requires both AD DS and Microsoft Entra ID registration, so this option is insufficient.
- ✓
Configure the deployment profile to use Microsoft Entra hybrid join and ensure the device has a line of sight to a domain controller.
Why this is correct
Microsoft Entra hybrid join requires the device to authenticate against an on-premises domain controller during the offline domain join process. A line of sight is essential. Configuring the profile for hybrid join is the correct first step because it enables the device to be joined to AD DS and registered in Microsoft Entra ID simultaneously. Without this setting, the device would only be Microsoft Entra joined, not hybrid joined.
Go deeper
Related to this question
Learn chapter
Managing Microsoft 365 Apps and Office Updates
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
About these practice questions
This MD-102 question is part of Courseiva's 556-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.