CertBlaze

Microsoft Exam Syllabus

MD-102 syllabus, skills measured, and exam topics

The MD-102 exam measures Prepare infrastructure for devices, Manage and maintain devices, and Manage applications. Use this page to review the current official syllabus, major domains, and source links before exam day.

Open the practice page

Skills measured by domain

Use the weighting table to decide where to spend the most study time.

Domain Weight
Prepare infrastructure for devices 25–30%
Manage and maintain devices 30–35%
Manage applications 15–20%
Protect devices 15–20%

What to know before you study

These sections explain the role, audience, and exam framing behind the outline.

Purpose of this document

  • This study guide should help you understand what to expect on the exam and includes a summary of the topics the exam might cover and links to additional resources. The information and materials in this document should help you focus your studies as you prepare for the exam.
  • Useful links: Description
  • How to earn the certification: Some certifications only require passing one exam, while others require passing multiple exams.
  • Certification renewal: Microsoft associate, expert, and specialty certifications expire annually. You can renew by passing a free online assessment on Microsoft Learn.
  • Your Microsoft Learn profile: Connecting your certification profile to Microsoft Learn allows you to schedule and renew exams and share and print certificates.
  • Exam scoring and score reports: A score of 700 or greater is required to pass.
  • Exam sandbox: You can explore the exam environment by visiting our exam sandbox.
  • Request accommodations: If you use assistive devices, require extra time, or need modification to any part of the exam experience, you can request an accommodation.
  • Take a free Practice Assessment: Test your skills with practice questions to help you prepare for the exam.

Updates to the exam

  • Our exams are updated periodically to reflect skills that are required to perform a role. We have included two versions of the Skills Measured objectives depending on when you are taking the exam.
  • We always update the English language version of the exam first. Some exams are localized into other languages, and those are updated approximately eight weeks after the English version is updated. While Microsoft makes every effort to update localized versions as noted, there may be times when the localized versions of an exam are not updated on this schedule. Other available languages are listed in the Schedule Exam section of the Exam Details webpage. If the exam isn't available in your preferred language, you can request an additional 30 minutes to complete the exam.
  • The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. Related topics may be covered in the exam.
  • Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.

Audience profile

  • As a candidate for this exam, you have subject matter expertise managing devices and client applications in a Microsoft 365 tenant by using Microsoft Intune. You’re responsible for:
  • Implementing solutions for efficient deployment and management of endpoints on various operating systems, platforms, and device types.
  • Implementing and managing endpoints at scale by using Microsoft Intune, Microsoft Intune Suite, Windows Autopilot, Microsoft Security Copilot, Microsoft Defender for Endpoint, Microsoft Entra ID, Azure Virtual Desktop, and Windows 365.
  • Implementing identity, security, access, policies, updates, and apps for endpoints.
  • As an endpoint administrator, you collaborate with architects, Microsoft 365 administrators, security administrators, and other workload administrators to plan and implement a modern workplace strategy that meets the business needs of an organization.
  • You must have experience with Microsoft Entra ID and Microsoft 365 technologies, including Intune, as well as strong skills and experience in deploying, configuring, and maintaining Windows client and non-Windows devices.

Detailed outline

Scan each section as a working study checklist instead of one long wall of text.

Prepare infrastructure for devices (25–30%)

  • Choose an appropriate device join type
  • Join devices to Microsoft Entra ID
  • Register devices to Microsoft Entra ID
  • Plan and implement groups for devices in Microsoft Entra ID
  • Configure enrollment settings
  • Configure automatic enrollment for Windows and bulk enrollment for iOS/iPadOS and Android
  • Configure enrollment profiles for Android devices, including fully managed, dedicated, corporate owned, and work profile
  • Manage roles in Intune
  • Implement compliance policies for all supported device platforms by using Intune
  • Implement Microsoft Entra Conditional Access policies that require a compliance status
  • Configure Windows Hello for Business
  • Implement and manage Windows Local Administrator Password Solution (Windows LAPS)

Manage and maintain devices (30–35%)

  • Choose between Windows Autopilot and provisioning packages
  • Choose a Windows Autopilot deployment mode
  • Apply a device name template
  • Implement Windows client deployment by using Windows Autopilot
  • Create an Enrollment Status Page (ESP)
  • Plan and implement provisioning packages
  • Plan and implement device upgrades for Windows 11
  • Implement a Windows 365 Cloud PC deployment
  • Create device configuration profiles for Windows devices, including importing ADMX files
  • Create device configuration profiles for Android devices
  • Create device configuration profiles for iOS/iPadOS devices
  • Create device configuration profiles for macOS devices

Manage applications (15–20%)

  • Prepare applications for deployment by using Intune
  • Deploy apps by using Intune
  • Deploy Microsoft 365 Apps by using Intune
  • Configure policies for Office apps
  • Deploy Microsoft 365 Apps as part of a Windows Autopilot deployment by using the Office Deployment Tool (ODT) or Office Customization Tool (OCT)
  • Manage Microsoft 365 Apps by using the Microsoft 365 Apps admin center
  • Deploy apps from platform-specific app stores by using Intune
  • Plan and implement app protection policies
  • Implement Microsoft Entra Conditional Access policies for app protection policies
  • Plan and implement app configuration policies for managed apps and managed devices

Protect devices (15–20%)

  • Create antivirus policies
  • Create disk encryption policies
  • Create firewall policies
  • Configure Attack surface reduction policies
  • Plan and implement security baselines
  • Integrate Intune with Microsoft Defender for Endpoint
  • Onboard devices into Microsoft Defender for Endpoint
  • Plan for device updates
  • Create and manage update rings by using Intune
  • Create and manage update policies by using Intune, including iOS/iPadOS and macOS
  • Manage Android updates by using configuration profiles or firmware-over-the-air (FOTA) deployments
  • Configure Windows client Delivery Optimization by using Intune