MD-102 Prepare infrastructure for devices Practice Question
You are the Microsoft 365 Endpoint Administrator for Contoso, Ltd. The company has an on-premises Active Directory Domain Services (AD DS) environment and uses Microsoft Entra ID with Microsoft Intune. You need to prepare infrastructure to deploy Windows 11 devices that are Microsoft Entra hybrid joined. You must ensure that devices can enroll in Intune without requiring user interaction during the out-of-box experience (OOBE). What should you configure first?
⚠ Common exam trap
The trap here is assuming that Windows Autopilot alone handles Intune enrollment, when automatic enrollment must be configured separately.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure automatic enrollment in Intune for Windows devices in the Microsoft Entra admin center.
Automatic enrollment in Intune must be enabled in Microsoft Entra ID to allow Microsoft Entra hybrid joined devices to enroll automatically. This setting ensures that devices receive Intune policies without user interaction, which is essential for zero-touch provisioning during OOBE. Other options either require manual steps or do not directly enable automatic enrollment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a device enrollment manager (DEM) account in Intune and assign it to the deployment team.
Why it's wrong here
DEM accounts are used to enroll many devices with a single account, typically for scenarios like bulk enrollment or shared devices. They do not enable automatic enrollment during OOBE for Microsoft Entra hybrid joined devices. Using a DEM account would require manual steps and is not suitable for unattended provisioning of domain-joined devices.
- ✓
Configure automatic enrollment in Intune for Windows devices in the Microsoft Entra admin center.
Why this is correct
Automatic enrollment in Microsoft Entra ID ensures that when a device joins or registers, it is automatically enrolled in Intune. For Microsoft Entra hybrid joined devices, this setting must be enabled so that the device receives Intune policies without user action. This is a prerequisite for zero-touch provisioning scenarios and aligns with the requirement to avoid manual enrollment during OOBE.
- ✗
Configure Windows Autopilot deployment profile with the 'Convert all targeted devices to Autopilot' option.
Why it's wrong here
Autopilot deployment profiles are used for Microsoft Entra joined or hybrid joined devices, but they do not automatically enroll devices in Intune during OOBE. Autopilot relies on automatic enrollment being configured separately. Enabling the conversion option does not address the enrollment requirement and would not ensure zero-touch Intune enrollment.
- ✗
Deploy the Intune Company Portal app to devices via Group Policy.
Why it's wrong here
The Company Portal app is used for user-driven enrollment or accessing corporate resources, not for automatic enrollment during OOBE. Deploying it via Group Policy would not enable automatic Intune enrollment for hybrid joined devices. This approach is manual and does not meet the zero-touch requirement.
Go deeper
Related to this question
Learn chapter
Deploying Applications with Intune
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
About these practice questions
Courseiva writes every MD-102 question from scratch — 556 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.