In Endpoint Privilege Management settings, what does the 'Default elevation response' option control?

The behavior when an application requests elevation but no specific policy matches

The list of users who can request elevation

The maximum number of elevation requests per day

The time of day when elevation is allowed

An organization wants to use Intune Advanced Analytics to gain insights into device performance and identify potential issues before they impact users. What should they enable?

Deploy a configuration profile that enables verbose logging on all devices.

Configure Microsoft Tunnel to collect network data.

Use Endpoint Privilege Management to collect elevation data.

Enable Intune Advanced Analytics and ensure devices are enrolled and send diagnostic data.

A company is planning to use Intune Cloud PKI to issue certificates to their Windows devices for WiFi authentication. They want to minimize manual intervention and ensure certificates are automatically renewed. What should they do?

Create a Cloud PKI profile and configure a SCEP certificate profile that uses the Cloud PKI as the issuing CA.

Use a traditional on-premises CA and import the root certificate into Intune.

Configure a compliance policy that requires a certificate to be installed.

Deploy a PFX certificate profile with a static password for each device.

A company is planning to use Intune Cloud PKI to issue certificates to Windows devices for Wi-Fi authentication. They want to minimize the administrative overhead of managing certificate templates and CRLs. What should you do?

Use SCEP with an on-premises NDES server.

Use a third-party public CA and distribute certificates via Intune.

Use Intune Cloud PKI with a simple certificate profile and let Intune manage the CA and CRL.

Deploy a traditional on-premises PKI and use Intune as a connector.

Microsoft 365 Certified:Endpoint Administrator Associate

Domain 2Objective 3

Implement Intune Suite Add-On Capabilities MD-102 Practice Questions (Page 4)

Part of the Manage and maintain devices domain, which accounts for 25–30% of the MD-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 59 practice questions to prepare you well beyond it. (estimate)

59questions here

12free pages

15concepts

25–30%of the exam

Questions 16–20

16foundation · easy
In Endpoint Privilege Management settings, what does the 'Default elevation response' option control?
Select an answer first
17application · medium
An organization wants to use Intune Advanced Analytics to gain insights into device performance and identify potential issues before they impact users. What should they enable?
Select an answer first
18application · medium
A company is planning to use Intune Cloud PKI to issue certificates to their Windows devices for WiFi authentication. They want to minimize manual intervention and ensure certificates are automatically renewed. What should they do?
Select an answer first
19foundation · easy
Which Intune feature provides reports on Microsoft Tunnel connections?
Select an answer first
20application · medium
A company is planning to use Intune Cloud PKI to issue certificates to Windows devices for Wi-Fi authentication. They want to minimize the administrative overhead of managing certificate templates and CRLs. What should you do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MD-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MD-102” is a trademark of its owner, used for identification only.