MD-102 Exam Domains 2026: Complete Guide to All 5 Content Areas

MD-102 Domain Overview: What Changed for 2026

Every candidate preparing for Exam MD-102 needs to work from the current skills-measured outline, and the version effective July 24, 2026 is meaningfully different from earlier iterations. Microsoft restructured the blueprint into five domains instead of four, folding automation and monitoring topics into a standalone area rather than scattering them across device management content. If you're using older notes, videos, or practice questions, you may be studying an outdated map of the exam.

This guide breaks down all five domains exactly as Microsoft weights them, with the specific technologies, tools, and scenarios you're expected to know for the Microsoft 365 Certified: Endpoint Administrator Associate credential. For a broader walkthrough of how to structure your entire prep plan around these domains, pair this with the MD-102 Study Guide 2026, and if you're still deciding whether the certification fits your role, check Is the MD-102 Certification Worth It?

Domain 1: Prepare Infrastructure for Devices (20-25%)

This domain sets the foundation before any device gets touched. It covers the identity and management infrastructure that everything else in the exam depends on, including Microsoft Entra ID configuration, Intune tenant setup, and enrollment infrastructure planning.

Expect scenario-based questions here rather than pure definitions - you'll be given a business requirement (for example, "restrict personal devices from enrolling but allow corporate devices automatically") and asked to pick the configuration path that satisfies it.

Domain 2: Manage and Maintain Devices (25-30%)

This is the largest domain on MD-102, and it remains the backbone of the entire exam. It covers the day-to-day lifecycle of devices once they're enrolled: configuration profiles, compliance policies, update management, and monitoring device health.

Domain 3: Protect Devices (15-20%)

Security is woven throughout MD-102, but this domain isolates the endpoint protection stack specifically - primarily Microsoft Defender for Endpoint, along with device-level security baselines and encryption.

Questions in this domain often present a security alert or vulnerability scenario and ask which policy or Defender configuration addresses it - expect to reason about cause and remediation, not just recall settings names.

Domain 4: Manage and Secure Applications (15-20%)

This domain shifts focus from the device itself to what runs on it. You're expected to know how applications get packaged, deployed, protected, and updated across the managed device fleet.

Domain 5: Optimize Endpoint Operations by Using Automation, Monitoring, and Reporting (10-15%)

This is the newest addition to the MD-102 blueprint, and it reflects how endpoint administration has shifted toward proactive operations rather than reactive fixes. It's the smallest domain by weight, but it's entirely new territory if you learned from older materials.

Because this domain is new, there's less legacy material available for it. Practice questions and hands-on labs in Intune's automation and reporting blades will matter more here than passive reading. This is exactly the kind of gap the MD-102 Cheat Sheet 2026 is designed to close quickly before exam day.

Weighting Strategy: Where to Spend Your Study Hours

With five domains carrying different weights, not all study hours are equal. A practical approach is to let domain weight roughly guide time allocation, then adjust based on your existing hands-on experience with each tool.

Notice that domains 1 and 2 together account for close to half of the exam. If your time is limited, mastering Intune-based device configuration, compliance, and enrollment infrastructure will move your score more than any other single area. For a deeper look at how difficulty is distributed across these domains in practice, see How Hard Is the MD-102 Exam?

Exam Format, Registration, and Retake Mechanics

Domain knowledge only matters if you understand the exam's mechanics. Exam MD-102 is delivered through Pearson VUE, either at a test center or via online proctoring, and the U.S. list price is $165 with regional pricing applied elsewhere. You get 100 minutes to complete the exam, and the proctored session may include interactive question types beyond standard multiple choice - not just recall-based questions. A scaled score of 700 or greater is required to pass; for the exact scoring mechanics, read MD-102 Passing Score 2026.

If your first attempt doesn't succeed, Microsoft requires a 24-hour wait before retaking. After that, subsequent retakes require a 14-day gap, and you're limited to five attempts within a rolling 12-month period. Once earned, the associate certification renews every 12 months at no cost through a Microsoft Learn renewal assessment - no repeat exam fee required. For a full cost breakdown including renewal and retake economics, see MD-102 Certification Cost 2026, and for scheduling logistics visit MD-102 Exam Dates 2026.

Mapping Domains to a Study Timeline

Rather than a generic study calendar, it makes more sense to sequence your prep around the domain weights and dependencies described above - infrastructure concepts in Domain 1 underpin almost everything in Domains 2 and 3, so tackling them out of order tends to create confusion later.

This sequencing front-loads the highest-weight material while leaving the newest, smallest domain for last review - by then you'll already understand the Intune console well enough that the automation and reporting layer clicks faster. For a complete methodology beyond just domain order, the MD-102 Study Guide 2026 covers resource selection and practice-test strategy in depth.

Who Actually Uses These Domains on the Job

The five domains map closely to real endpoint administrator responsibilities: infrastructure prep mirrors onboarding a new device fleet, device management mirrors daily helpdesk-to-admin escalations, protection mirrors security operations collaboration, application management mirrors software packaging teams, and the new optimization domain mirrors the shift toward IT operations automation. Organizations hiring for endpoint administrator, device engineer, or Intune administrator roles are effectively hiring for these exact five skill areas. If you're evaluating how this credential translates to job titles and compensation expectations, MD-102 Salary Guide 2026 and MD-102 Jobs go into more detail, and MD-102 Pass Rate 2026 discusses what the available data shows about candidate outcomes.

You can build familiarity with the question style for each of these domains using realistic scenario-based questions on our MD-102 practice test platform, which mirrors the domain weighting described above rather than treating every topic as equally likely to appear.

Frequently Asked Questions