CertBlaze

Microsoft Exam Syllabus

MD-102 syllabus, skills measured, and exam topics

The MD-102 exam measures Prepare infrastructure for devices, Manage and maintain devices, and Protect devices. Use this page to review the current official syllabus, major domains, and source links before exam day.

Open the practice page

Skills measured by domain

Use the weighting table to decide where to spend the most study time.

Domain Weight
Prepare infrastructure for devices 20–25%
Manage and maintain devices 25–30%
Protect devices 15–20%
Manage and secure applications 15–20%
Optimize endpoint operations by using automation, monitoring, and reporting 10–15%

Detailed outline

Scan each section as a working study checklist instead of one long wall of text.

Prepare infrastructure for devices (20–25%)

  • Choose an appropriate device join type, including considerations such as device registration and Microsoft Entra join
  • Join devices to Microsoft Entra ID
  • Register devices to Microsoft Entra ID
  • Plan and implement groups for devices in Microsoft Entra ID, including dynamic group membership rules
  • Configure enrollment settings in Microsoft Intune
  • Configure automatic enrollment for Windows
  • Configure personal enrollment for macOS, iOS, iPadOS
  • Configure enrollment profiles for Android devices, including fully managed, dedicated, corporate owned, work profile, enrollment restrictions and troubleshooting enrollment failures
  • Configure corporate enrollment for macOS and iOS devices by integrating Intune with Apple Business Manager
  • Configure enrollment for Android devices by integrating Intune with Samsung Knox Mobile Enrollment or Google Zero Touch
  • Manage built-in and custom roles for Intune and Windows 365, including role assignments
  • Configure scope tags and scoped administration for multi-admin environments

Manage and maintain devices (25–30%)

  • Choose between Windows Autopilot deployment profiles and device preparation policies
  • Choose between Windows Autopilot deployment modes, including user-driven, pre-provisioning, and self-deploying
  • Apply a device name template by using Windows Autopilot
  • Implement Windows client deployment by using Windows Autopilot
  • Create an Enrollment Status Page (ESP)
  • Plan and implement device upgrades for Windows 11 by using Intune
  • Provision and configure Windows 365 Cloud PCs by using Intune, including provisioning policies, network connections, and image management
  • Implement Windows Backup and Restore by using Intune
  • Create device configuration profiles for Windows devices, including importing ADMX files and using Group Policy analytics
  • Create device configuration profiles for Android devices
  • Create device configuration profiles for iOS/iPadOS devices
  • Create device configuration profiles for macOS devices

Protect devices (15–20%)

  • Create antivirus policies by using Microsoft Intune
  • Create and manage disk encryption policies by using Microsoft Intune, including managing BitLocker recovery keys, configuring user self-service recovery, and monitoring encryption compliance status
  • Create firewall policies by using Microsoft Intune
  • Configure Attack surface reduction policies by using Microsoft Intune, including applying Zero Trust principles for endpoint protection
  • Plan and implement security baselines by using Microsoft Intune
  • Integrate Intune with Microsoft Defender for Endpoint, including configuring Endpoint Detection and Response (EDR) policies, investigating endpoint threats, and triaging incidents
  • Onboard devices into Microsoft Defender for Endpoint
  • Configure App Control for Business policies by using Microsoft Intune
  • Plan for device updates by using Intune
  • Create and manage update rings, feature updates, and quality updates for Windows devices by using Intune
  • Implement Windows Autopatch and configure Hotpatch policies
  • Create and manage update policies for iOS/iPadOS and macOS devices by using the Settings Catalog in Microsoft Intune

Manage and secure applications (15–20%)

  • Prepare applications for deployment by using Intune
  • Deploy apps by using Intune, including Win32 apps, line-of-business (LOB) apps, and Microsoft Store apps
  • Configure Quiet Time policies for Android and iOS apps
  • Deploy Microsoft 365 Apps by using Intune
  • Configure policies for Office apps by using Microsoft Intune or the Microsoft 365 Apps admin center
  • Deploy Microsoft 365 Apps as part of a Windows Autopilot deployment, including using the Office Deployment Tool (ODT) or Microsoft Intune
  • Manage Microsoft 365 Apps by using the Microsoft 365 Apps admin center
  • Deploy apps from platform-specific app stores by using Intune, including Apple Volume Purchase Program and Google Play
  • Monitor app deployment status and troubleshoot installation failures by using Microsoft Intune
  • Plan and implement app protection policies for managed and unmanaged (BYOD) devices by using Microsoft Intune
  • Implement Microsoft Entra Conditional Access policies for app protection policies
  • Plan and implement app configuration policies for managed apps and managed devices

Optimize endpoint operations by using automation, monitoring, and reporting (10–15%)

  • Automate Intune management tasks by using PowerShell and Microsoft Graph
  • Investigate threats identified by Security Copilot agents in Intune
  • Analyze device performance by using Security Copilot agents in Intune
  • Review and respond to Security Copilot agent recommendations to make management decisions
  • Extend device compliance by using PowerShell
  • Implement reporting and data visibility in Microsoft Intune, including customizing reports and filters, using workbooks and dashboards, and exporting reporting data
  • Monitor endpoint performance by using Endpoint Analytics, including proactive remediations, device health scores, and app startup performance
  • Configure and manage proactive remediation scripts, including detecting and fixing common device issues, and scheduling remediation runs
  • Analyze endpoint reliability and user experience scores, including startup performance, restart frequency, and application reliability metrics
  • Monitor tenant health and Intune service communications, including reviewing service health dashboards, message center notifications, and establishing operational baselines
  • Configure alerts and notifications for policy and compliance changes, including setting up alert rules for compliance drift, enrollment failures, and configuration conflicts

Purpose of this document

  • This study guide should help you understand what to expect on the exam and includes a summary of the topics the exam might cover and links to additional resources. The information and materials in this document should help you focus your studies as you prepare for the exam.
  • Useful links: Description
  • Certification renewal: Microsoft associate, expert, and specialty certifications expire annually. You can renew by passing a free online assessment on Microsoft Learn.
  • Your Microsoft Learn profile: Connecting your certification profile to Microsoft Learn allows you to schedule and renew exams and share and print certificates.
  • Exam scoring and score reports: A score of 700 or greater is required to pass.
  • Exam sandbox: You can explore the exam environment by visiting our exam sandbox.
  • Request accommodations: If you use assistive devices, require extra time, or need modification to any part of the exam experience, you can request an accommodation.
  • Take a free Practice Assessment: Test your skills with practice questions to help you prepare for the exam.

Updates to the exam

  • Our exams are updated periodically to reflect skills that are required to perform a role. We have included two versions of the Skills Measured objectives depending on when you are taking the exam.
  • We always update the English language version of the exam first. Some exams are localized into other languages, and those are updated approximately eight weeks after the English version is updated. While Microsoft makes every effort to update localized versions as noted, there may be times when the localized versions of an exam are not updated on this schedule. Other available languages are listed in the Schedule Exam section of the Exam Details webpage. If the exam isn't available in your preferred language, you can request an additional 30 minutes to complete the exam.
  • The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. Related topics may be covered in the exam.
  • Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.

Audience profile

  • As a candidate for this exam, you have subject matter expertise managing devices and client applications in a Microsoft 365 tenant by using Microsoft Intune and agentic tools and workflows. You’re responsible for:
  • Implementing solutions for efficient deployment and management of endpoints on various platforms and device types
  • Implementing and managing endpoints at scale by using Microsoft Intune, Microsoft Intune Suite, Windows Autopilot, Microsoft Defender for Endpoint, Microsoft Entra ID, PowerShell, Microsoft Graph, and Windows 365
  • Implementing identity, security, access, policies, updates, and apps for endpoints
  • Optimizing endpoint operations through automation, monitoring, and reporting
  • As an endpoint administrator, you collaborate with architects, Microsoft 365 administrators, security administrators, and other workload administrators to plan and implement a modern workplace strategy that meets the business needs of an organization.
  • You must have experience with Microsoft Entra ID and Microsoft 365 technologies, including Intune, as well as strong skills and experience in deploying, configuring, and maintaining Windows client and non-Windows devices. You should also have an understanding of Microsoft Security Copilot, Intune agents, and Microsoft Defender XDR.