- Exam MD-102 costs $165 in the U.S., runs 100 minutes, and requires a score of 700 or higher.
- Manage and maintain devices is the largest domain at 25-30% - build your study plan around it.
- A new domain, Optimize endpoint operations by using automation, monitoring, and reporting, takes effect July 24, 2026.
- After a first fail you wait 24 hours to retry; later attempts require a 14-day gap, capped at five tries per year.
What MD-102 Actually Tests
Microsoft 365 Certified: Endpoint Administrator Associate is earned by passing Exam MD-102, administered by Microsoft through Pearson VUE at test centers and via online proctoring. This is not a general IT-support badge - it's a focused validation that you can plan, deploy, manage, and secure Windows and mobile endpoints inside a Microsoft 365 environment using Intune, Entra ID, and related tooling. If you're still mapping out what the credential covers before committing time and money, the MD-102 Exam Domains 2026: Complete Guide to All 5 Content Areas breaks each area down in more depth than we have room for here.
There are no formal prerequisites to sit the exam, but Microsoft's audience profile assumes hands-on familiarity with device management tooling before you walk in. That distinction matters: you can register without a single prior certification, yet the questions themselves assume real operational exposure, not textbook memorization. If you want a full breakdown of who's actually eligible and what "hands-on experience" means in practice, see MD-102 Requirements 2026: Eligibility, Prerequisites & How to Qualify.
Exam Format, Fees, and Scoring
Exam MD-102 gives you 100 minutes to complete a proctored assessment that can include interactive question components in addition to standard multiple-choice and scenario items. A passing result requires a score of 700 or greater. The U.S. list price is $165, with Microsoft adjusting pricing by region - if budgeting matters to your decision, the MD-102 Certification Cost 2026: Complete Pricing Breakdown article walks through the full fee picture.
Retake rules are strict but not punishing: fail once and you wait 24 hours before trying again; every subsequent attempt after that requires a 14-day gap, and Microsoft caps you at five attempts within any 12-month period. That policy alone is a reason to treat your first sitting seriously rather than as a "test the waters" run. For a deeper look at how the 700-point threshold is calculated and what it means practically, read MD-102 Passing Score 2026: Exactly What You Need to Pass.
Once earned, the associate title isn't a one-time badge - it renews every 12 months, and Microsoft doesn't charge for that renewal. You complete a short assessment on Microsoft Learn before the expiration window closes to keep the credential active.
Key Takeaway
Book your exam date only after you've run through practice scenarios covering all five domains - the 14-day wait after a second failure can stall a job application or promotion timeline.
The Five Skills Domains, Section by Section
Every question on Exam MD-102 maps to one of five domains, and the weighting tells you exactly where to spend your study hours. Treat the percentages below as a budget, not a suggestion.
Domain 1: Prepare infrastructure for devices (20-25%)
Covers tenant configuration, Entra ID join types, enrollment profiles, and the groundwork needed before a device ever reaches an end user.
- Configuring Microsoft Entra ID and hybrid join scenarios
- Setting up Windows Autopilot deployment profiles
- Managing device enrollment restrictions and policies
Domain 2: Manage and maintain devices (25-30%)
The largest domain by far, and the one most candidates underestimate. Expect deep coverage of Intune configuration profiles, update rings, and device compliance.
- Configuring and monitoring compliance policies
- Managing Windows update rings and feature update deployment
- Remote actions, monitoring device health, and troubleshooting enrollment failures
Domain 3: Protect devices (15-20%)
Focuses on endpoint security posture using Defender for Endpoint and related security baselines.
- Implementing security baselines and endpoint security policies
- Configuring Microsoft Defender for Endpoint onboarding and rules
- Managing device encryption and threat/vulnerability responses
Domain 4: Manage and secure applications (15-20%)
Application lifecycle inside Intune - deployment, protection policies, and app configuration for both managed and unmanaged devices.
- Deploying and assigning apps through Intune
- Configuring app protection and app configuration policies
- Managing Microsoft 365 Apps deployment and updates
Domain 5: Optimize endpoint operations by using automation, monitoring, and reporting (10-15%)
The newest domain, effective July 24, 2026. It formalizes skills around scripting, reporting, and proactive monitoring that experienced administrators already use daily.
- Automating repetitive tasks with PowerShell and Microsoft Graph
- Building and interpreting Intune reports and dashboards
- Using monitoring data to drive proactive remediation
Notice how Domain 2 alone can represent nearly a third of the exam. If you only have time to deeply master one area, make it device management - but don't neglect the smaller domains, since a weak showing in any single area can sink your composite score. For a domain-by-domain difficulty ranking based on question style and depth, check How Hard Is the MD-102 Exam? Complete Difficulty Guide 2026.
Who Hires for This Credential
Roles tied to this certification tend to cluster around device and endpoint management functions: desktop support engineers moving into cloud-managed environments, IT administrators responsible for Intune tenants, and infrastructure teams standardizing on Windows Autopilot and Entra ID for provisioning. Organizations running hybrid or fully cloud-managed device fleets look for this credential as evidence that a candidate can operate Intune policies, Defender for Endpoint protections, and Windows 365 Cloud PCs without hand-holding.
If you're weighing whether the time and $165 exam fee translate into better job prospects, two companion articles are worth reading before you commit: MD-102 Jobs covers the roles that reference this credential directly, and MD-102 Salary Guide 2026: Complete Earnings Analysis looks at how compensation is discussed for endpoint administration roles. For the broader value question, Is the MD-102 Certification Worth It? Complete ROI Analysis 2026 weighs the investment against career outcomes.
A Domain-Weighted Study Timeline
Generic study advice - spaced repetition, timed drills, flashcards - only helps if it's mapped to where the exam actually puts its weight. Below is a four-week structure that allocates time proportionally to domain percentage rather than treating every topic equally.
Infrastructure Foundations
- Configure a test tenant in Entra ID and practice hybrid join scenarios
- Build and test Windows Autopilot deployment profiles end to end
- Review enrollment restriction policies (Domain 1 focus)
Device Management Depth
- Spend the most hours here - Domain 2 carries the highest weight
- Practice configuration profiles, compliance policies, and update rings
- Simulate troubleshooting a failed enrollment from start to resolution
Protection and Applications
- Configure security baselines and onboard a device to Defender for Endpoint
- Deploy and assign apps through Intune, including app protection policies
- Cross-reference Domains 3 and 4 against real deployment scenarios
Automation, Review, and Practice Exams
- Practice PowerShell and Microsoft Graph scripts against a test tenant
- Run full-length timed practice exams to simulate the 100-minute window
- Revisit weak domains identified through score breakdowns
Run at least two full practice sessions under exam-length time pressure before your scheduled date - the practice test platform is built specifically to mirror that 100-minute, scenario-heavy format so surprises on test day are minimized.
Tools and Workflows You Must Be Able to Operate
Reading about Intune isn't the same as operating it. Microsoft's audience profile for this exam explicitly expects hands-on comfort with the following, and questions are written assuming you've clicked through these workflows yourself:
- Microsoft Intune - configuration profiles, compliance policies, app deployment, and remote device actions
- Microsoft Entra ID - device join types, conditional access interplay, and group-based assignment
- Windows Autopilot - deployment profiles, white-glove provisioning, and enrollment status page behavior
- Defender for Endpoint - onboarding, security baselines, and threat response workflows
- Windows 365 - Cloud PC provisioning policies and licensing considerations
- PowerShell and Microsoft Graph - scripting device actions and pulling reporting data programmatically
- Agentic tools and workflows - increasingly relevant as automation and AI-assisted administration become part of daily endpoint operations
Notice that this list spans all five domains - that overlap is intentional. Microsoft designed the exam so that a candidate who's genuinely operated a tenant end to end will see the same tools resurface across Domains 1 through 5, just from different angles (provisioning vs. protecting vs. reporting on the same device).
The July 2026 Skills Update, Explained
Effective July 24, 2026, the skills measured on Exam MD-102 shift to five domains, with the addition of Domain 5: Optimize endpoint operations by using automation, monitoring, and reporting. This isn't a cosmetic rename - it formally tests automation and reporting skills that were previously assumed but not directly weighted. If your target test date is close to or after that changeover, confirm which version of the skills outline you're studying against before finalizing a study plan. The MD-102 Exam Dates 2026: Testing Windows, Deadlines & Scheduling guide covers scheduling considerations around this kind of skills-outline transition, and MD-102 Study Guide 2026: How to Pass on Your First Attempt keeps a running reference of the current domain weights.
Where First-Attempt Candidates Lose Points
Most failed first attempts trace back to a handful of avoidable patterns rather than gaps in raw intelligence:
- Underweighting Domain 2. Candidates study evenly across all domains instead of allocating a quarter to a third of their time to device management, where the exam actually concentrates its questions.
- Treating PowerShell and Graph as optional. With automation now its own domain, skipping scripting practice leaves an entire section under-prepared.
- Never simulating the 100-minute clock. Interactive, scenario-based items take longer to parse than simple multiple choice - pacing matters as much as knowledge.
- Ignoring the retake math. A second failure locks you out for 14 days; plan your original exam date with enough buffer that a retake doesn't derail a job deadline.
If you want a numbers-first look at how difficulty and outcomes are typically discussed for this exam, MD-102 Pass Rate 2026: What the Data Shows is a useful companion read, and for a one-page condensed review before test day, bookmark the MD-102 Cheat Sheet 2026: One-Page Review of Must-Know Facts.
Before you schedule anything, it also helps to be crystal clear on what this credential is and isn't - start with What Is MD-102? if you're still confirming this is the right certification path for your role, and once you're ready to convert reading into practice, the question bank at the main practice test platform is the fastest way to see where your real gaps are.
FAQ
There are five domains. Manage and maintain devices is the largest at 25-30%, followed by Prepare infrastructure for devices at 20-25%.
You need a score of 700 or greater, and you have 100 minutes to complete the proctored exam, which may include interactive components.
The U.S. price is $165, with regional pricing elsewhere. Pearson VUE delivers the exam through test centers or online proctoring.
You wait 24 hours before retrying. Any attempt after that requires a 14-day gap, and Microsoft allows a maximum of five attempts within a 12-month period.
Yes, it renews every 12 months through a Microsoft Learn renewal assessment, and there is no cost to complete it.