MD-102 Manage and maintain devices Practice Question
You manage Windows 10 devices with Microsoft Intune. Users report that after a recent Windows update, some devices fail to enroll in mobile device management (MDM). You verify that the devices are domain-joined and can reach the internet. Which configuration should you check first?
⚠ Common exam trap
A common mix-up: candidates assume a general internet connection means all services are reachable, but MDM enrollment requires specific URLs that may be blocked by a proxy or firewall even when general browsing works.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Check that the MDM enrollment URL (https://enrollment.manage.microsoft.com) is reachable and not blocked by a proxy.
The most common cause of MDM enrollment failure after a Windows update is a change in proxy or firewall settings that blocks the MDM enrollment URL. Since the devices can reach the internet generally but fail specifically during enrollment, verifying that `https://enrollment.manage.microsoft.com` is reachable and not blocked by a proxy is the logical first troubleshooting step. This URL is required for the device to communicate with the Intune MDM service during the enrollment process.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Confirm that the user is assigned a Microsoft Entra ID P1 license.
Why it's wrong here
Entra ID P1 licensing governs conditional access and autopilot-related features, not the MDM enrolment path itself; domain-joined devices enrolling after an update typically fail on automatic MDM enrolment configuration, such as the MDM user scope or GPO. P1 is tempting because licensing errors do block some Intune scenarios.
- ✗
Verify that the BitLocker recovery key is backed up to Microsoft Entra ID.
Why it's wrong here
BitLocker recovery key escrow is unrelated to MDM enrolment; it concerns disk-encryption key storage after a device is managed. It is tempting because it is an Entra ID device setting commonly configured alongside Intune, but the enrolment failure after a Windows update points to automatic MDM enrolment scope or policy configuration instead.
- ✗
Ensure the Windows Defender Firewall allows inbound RPC traffic.
Why it's wrong here
MDM enrolment uses outbound HTTPS to Intune, not inbound RPC, so firewall rules for RPC are irrelevant to this failure. RPC inbound rules matter for on-premises management or remote administration traffic, which is a different scenario entirely.
- ✓
Check that the MDM enrollment URL (https://enrollment.manage.microsoft.com) is reachable and not blocked by a proxy.
Why this is correct
Reaching the MDM enrolment URL is the prerequisite for MDM enrolment, but the stem already confirms internet connectivity, so a proxy blocking that specific endpoint remains the plausible cause. Domain-joined devices use the enrolment URL directly; verifying it is reachable isolates proxy or firewall filtering from the update's other effects.
Go deeper
Related to this question
Learn chapter
Updating Devices with Windows Update for Business
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
Mobile device management
Mobile device management (MDM) is a security solution that allows IT administrators to enroll, configure, monitor, and enforce policies on smartphones, tablets, and other mobile devices used in an organization.
About these practice questions
This MD-102 question is part of Courseiva's 556-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.