MD-102 study guide · 2026

The 5 MD-102 domains, explained

5 domains and 13 official functional groups. Manage and maintain devices carries the most weight at 25–30%. Each guide explains what the domain covers, how its questions are framed and where candidates lose marks.

Start with Domain 2 See all domains
Questions
Not published (Microsoft exams typically 40–60, varies)
Time
100 minutes
Passing score
700 / 1000
Outline
MD-102 study guide, skills measured as of 27 October 2026 (current)

Exam blueprint

Bar widths follow the official weights, scaled to fit the bar. Weight ranges are drawn at their midpoint.

  1. 1 20–25%
  2. 2 25–30%
  3. 3 15–20%
  4. 4 15–20%
  5. 5 10–15%
  1. 1 Prepare infrastructure for devices
  2. 2 Manage and maintain devices
  3. 3 Protect devices
  4. 4 Manage and secure applications
  5. 5 Optimize endpoint operations by using automation, monitoring, and reporting

All 5 domains

13 official functional groups 76–102 hrs suggested study

  1. Domain 01 20–25%

    Prepare infrastructure for devices

    Get devices into Microsoft Entra ID and Intune the right way, then control who administers them and what makes a device trusted: join types, enrollment methods per platform, RBAC with scope tags, compliance, Windows Hello for Business and Windows LAPS.

    Inside this domain

    • Add devices to Microsoft Entra ID
    • Enroll devices to Microsoft Intune
    • Implement identity and compliance

    Watch for Registration for corporate devices

    Functional groups
    3
    Questions est.
    10–13
    Study time est.
    16–22 hrs
  2. Domain 02 25–30%

    Manage and maintain devices

    The heaviest MD-102 section: deploy Windows with Autopilot and Windows 365, build configuration profiles for every platform, use Intune Suite add-ons such as EPM, Cloud PKI and Remote Help, and run remote actions from wipe to KQL device query.

    Inside this domain

    • Deploy and upgrade Windows clients by using cloud-based tools
    • Plan and implement device configuration profiles
    • Implement Intune Suite add-on capabilities
    • Perform remote actions on devices

    Watch for User-driven for kiosks

    Functional groups
    4
    Questions est.
    12–15
    Study time est.
    22–30 hrs
  3. Domain 03 15–20%

    Protect devices

    Harden and patch managed devices: antivirus, disk encryption, firewall, attack surface reduction, security baselines, Defender for Endpoint and App Control for Business, plus Windows, Apple and Android update management with Autopatch, Hotpatch and Delivery Optimization.

    Inside this domain

    • Configure endpoint security
    • Manage device updates

    Watch for Configuration profile for BitLocker

    Functional groups
    2
    Questions est.
    7–10
    Study time est.
    14–18 hrs
  4. Domain 04 15–20%

    Manage and secure applications

    Package and deploy Win32, line-of-business and store apps, deliver Microsoft 365 Apps during Autopilot, troubleshoot installs, and protect corporate data inside apps on managed and personal devices with app protection, configuration and Conditional Access.

    Inside this domain

    • Deploy and update apps
    • Plan and implement app protection and app configuration policies

    Watch for LOB for EXE

    Functional groups
    2
    Questions est.
    7–10
    Study time est.
    14–18 hrs
  5. Domain 05 10–15%

    Optimize endpoint operations by using automation, monitoring, and reporting

    Automate Intune with PowerShell and Microsoft Graph, work with Security Copilot agents that surface threats and recommendations, extend compliance with scripts, and keep the estate healthy with reports, Endpoint Analytics, Remediations and alerting.

    Inside this domain

    • Automate management tasks
    • Monitor and optimize health

    Watch for Agent already fixed it

    Functional groups
    2
    Questions est.
    5–8
    Study time est.
    10–14 hrs

Study the heaviest domains first

Marks follow weight. This order puts the most marks behind you first, across about 76–102 hrs of study.

  1. 2 Manage and maintain devices 25–30% · 22–30 hrs
  2. 1 Prepare infrastructure for devices 20–25% · 16–22 hrs
  3. 3 Protect devices 15–20% · 14–18 hrs
  4. 4 Manage and secure applications 15–20% · 14–18 hrs
  5. 5 Optimize endpoint operations by using automation, monitoring, and reporting 10–15% · 10–14 hrs

Try one

Practice questionDomain 2: Manage and maintain devices

Developers are standard users on Intune-managed Windows 11 devices. They occasionally need to run one signed installer elevated, and the security team wants each elevation reviewed by IT before it runs. The company owns Intune Suite licenses. What should you configure?

One trap from every domain

The answer that looks right, and the clue that gives it away.

  • Domain 1

    Registration for corporate devices

    Clue The scenario says the organization owns the devices and users sign in with work accounts.

  • Domain 2

    User-driven for kiosks

    Clue No user, kiosk, shared device or digital sign.

  • Domain 3

    Configuration profile for BitLocker

    Clue The question names encryption, recovery keys or encryption reports.

  • Domain 4

    LOB for EXE

    Clue An EXE, a script installer or dependencies.

  • Domain 5

    Agent already fixed it

    Clue Words such as recommendation, suggested action or review.

Other Cloud Computing certifications

Study guides for exams that overlap with MD-102.

Practise what you read

MD-102 domains: common questions

How many domains are in the MD-102 exam?

MD-102 has 5 domains with 13 official functional groups between them: Prepare infrastructure for devices, Manage and maintain devices, Protect devices, Manage and secure applications and Optimize endpoint operations by using automation, monitoring, and reporting.

Which MD-102 domain carries the most weight?

Manage and maintain devices is the heaviest at 25–30%, followed by Prepare infrastructure for devices (20–25%). The lightest is Optimize endpoint operations by using automation, monitoring, and reporting (10–15%). Weights come from Microsoft's official outline.

What is the MD-102 exam format?

Questions: Not published (Microsoft exams typically 40–60, varies). Time allowed: 100 minutes. Passing score: 700 / 1000.

How long should I study for MD-102?

Our planning estimate is 76–102 hrs across all domains, split by weight. It is an editorial estimate, not an official figure, so adjust it to your experience and to how you score on practice questions.

Where should I start?

Start with Manage and maintain devices, because it carries the most marks, then work down by weight. Use the checklist on each domain page to confirm you can do what the domain asks before moving on.

Which outline is this guide based on?

This guide follows MD-102 study guide, skills measured as of 27 October 2026 (current), published by Microsoft. It was last reviewed in October 2026.

Domain names, weights and functional groups come from Microsoft's official outline (MD-102 study guide, skills measured as of 27 October 2026 (current)). Question counts and study hours are editorial planning estimates, not official figures. Last reviewed October 2026.