MD-101 Study Guide 2026

Everything you need to pass the MD-101 exam in one place: the exam format, every topic to study, real practice questions with explanations, flashcards, and full-length practice tests. Free, no sign-up needed.

📋 MD-101 Exam Format at a Glance

60
Questions
100 min
Time Limit
70.00%
Passing Score

📚 MD-101 Topics to Study (23)

✍️ Sample MD-101 Questions & Answers

1. Which Azure AD feature integrates with Intune compliance status to block non-compliant devices from accessing corporate resources?
Conditional Access requiring a compliant device

Conditional Access can require 'device marked as compliant' as a grant control, blocking access to apps until the device meets Intune compliance requirements.

2. What is the difference between 'Mark device non-compliant' immediately vs. with a delay in compliance policy actions?
Immediate marking blocks access right away; delayed marking uses the grace period before CA enforcement

Marking non-compliant immediately triggers Conditional Access enforcement at once, while scheduling it with a delay creates a grace period before access is blocked.

3. Which Intune integration enables security administrators to manage Microsoft Defender for Endpoint settings directly from the Intune admin center?
Microsoft Defender for Endpoint — Intune connector via security settings management

The Microsoft Defender for Endpoint connector in Intune enables MDE security settings management, allowing Intune to push Defender configurations to onboarded devices.

4. What is the primary difference between Mobile Device Management (MDM) and Mobile Application Management (MAM) in Intune?
MDM enrolls and manages the entire device; MAM protects corporate data within apps without full device enrollment

MDM requires device enrollment for full device management, while MAM uses App Protection Policies to protect corporate data in apps on unenrolled personal devices.

5. What happens to a device's compliance status if it has been offline and has not checked in with Intune beyond the configured inactivity period?
It is marked Not compliant

Intune marks devices as Not compliant if they exceed the configured 'Days without checking in' threshold, which administrators set in compliance policy settings.

6. What Intune app type should be used to deploy a 32-bit Win32 application (.exe or .msi) to Windows 10 devices?
Win32 app (.intunewin package)

Win32 apps in Intune use the .intunewin package format and the Intune Management Extension to deploy complex Windows applications including .exe and .msi files.

🎯 Free MD-101 Practice Tests

📖 MD-101 Guides & Articles

Your MD-101 Study Path
1. Learn with Flashcards → 2. Drill Practice Tests → 3. Take the Full Exam Simulation