A malware outbreak is spreading, and you need to update Defender security intelligence and restart 300 Windows 11 devices immediately. The devices are online and enrolled in Intune. You need to perform both actions as quickly as possible. What should you do?

Collect diagnostics from all devices to assess the outbreak.

Sync all devices and then wait for the next policy cycle.

Use bulk device actions to update Defender intelligence and then restart all devices.

Run a KQL query to identify devices and then manually update each one.

A new zero-day malware signature was released by Microsoft Defender. Your organization has 500 Windows 11 devices enrolled in Intune, and you need to ensure all of them receive the updated security intelligence within the next hour. The devices are online and reachable. What should you do first?

Create a new antivirus policy and assign it to all devices.

Run a KQL query to identify devices with outdated intelligence and then sync each one.

Restart all devices to force a Defender update.

Run a bulk device action to update Defender security intelligence on all devices.

A Windows 10 device is experiencing frequent crashes. You need to collect detailed logs from the device to analyze the issue. The device is enrolled in Intune. What should you do?

Use the Collect diagnostics action on the device from the Intune portal.

Use the Sync action on the device to force a check-in and then review the event logs remotely.

Use the Restart action on the device and then ask the user to send logs manually.

Run a KQL query against the device data to retrieve crash logs.

A company has a fleet of 50 Windows 10 devices that are being decommissioned and will be reassigned to new users. The devices contain sensitive corporate data and must be completely reset to factory settings before reassignment. You need to perform this action on all devices with minimal administrative effort. What should you do?

Create a device group containing all 50 devices and use the Wipe bulk action.

Use the Wipe action on each device individually from the Intune portal.

Use the Retire action on each device individually from the Intune portal.

Use the Sync action on all devices and then manually reset each device.

Microsoft 365 Certified:Endpoint Administrator Associate

Domain 2Objective 4

Perform Remote Actions on Devices MD-102 Practice Questions (Page 3)

Part of the Manage and maintain devices domain, which accounts for 25–30% of the MD-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

11concepts

25–30%of the exam

Questions 11–15

11application · medium
A malware outbreak is spreading, and you need to update Defender security intelligence and restart 300 Windows 11 devices immediately. The devices are online and enrolled in Intune. You need to perform both actions as quickly as possible. What should you do?
Select an answer first
12application · medium
A new zero-day malware signature was released by Microsoft Defender. Your organization has 500 Windows 11 devices enrolled in Intune, and you need to ensure all of them receive the updated security intelligence within the next hour. The devices are online and reachable. What should you do first?
Select an answer first
13application · medium
A Windows 10 device is experiencing frequent crashes. You need to collect detailed logs from the device to analyze the issue. The device is enrolled in Intune. What should you do?
Select an answer first
14application · medium
A company has a fleet of 50 Windows 10 devices that are being decommissioned and will be reassigned to new users. The devices contain sensitive corporate data and must be completely reset to factory settings before reassignment. You need to perform this action on all devices with minimal administrative effort. What should you do?
Select an answer first
15foundation · easy
An employee is leaving the company, and their personally owned device must be removed from management while preserving personal data. Which Intune device action should the administrator use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MD-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MD-102” is a trademark of its owner, used for identification only.

Perform Remote Actions on Devices MD-102 Practice Questions (Page 3)

Questions 11–15

A malware outbreak is spreading, and you need to update Defender security intelligence and restart 300 Windows 11 devices immediately. The devices are online and enrolled in Intune. You need to perform both actions as quickly as possible. What should you do?

A new zero-day malware signature was released by Microsoft Defender. Your organization has 500 Windows 11 devices enrolled in Intune, and you need to ensure all of them receive the updated security intelligence within the next hour. The devices are online and reachable. What should you do first?

A Windows 10 device is experiencing frequent crashes. You need to collect detailed logs from the device to analyze the issue. The device is enrolled in Intune. What should you do?

An employee is leaving the company, and their personally owned device must be removed from management while preserving personal data. Which Intune device action should the administrator use?

Keep studying — Manage and maintain devices